last executing test programs: 28.903920735s ago: executing program 3 (id=649): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfe13, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000008c0)=ANY=[], 0x8) 27.655459374s ago: executing program 3 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x103a42, 0x32) removexattr(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)=@known='system.posix_acl_access\x00') 27.305947853s ago: executing program 3 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r1, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000380)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000700)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x103a42, 0x32) removexattr(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)=@known='system.posix_acl_access\x00') getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = creat(0x0, 0x100) openat$incfs(r4, &(0x7f0000000440)='.log\x00', 0x600000, 0x109) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000001000084f7ffffff0400000002000000566700000800000000000008000000000030615f612000305f"], &(0x7f0000000540)=""/138, 0x46, 0x8a, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 27.251557144s ago: executing program 0 (id=657): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x80, &(0x7f0000000700)={[{@block_validity}, {}, {@sysvgroups}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nombcache}]}, 0x3, 0x577, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1/file0\x00', 0x400, &(0x7f0000000200)={[], [{@smackfshat={'smackfshat', 0x3d, 'nogrpid'}}, {@context={'context', 0x3d, 'user_u'}}]}, 0x2, 0x79d, &(0x7f0000001040)="$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") setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001800)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') lseek(r0, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r1, &(0x7f0000000180)='3', 0x4e) futex(0x0, 0x1, 0x400000, 0x0, 0x0, 0xffffffec) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001880)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000018c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r1, 0x817) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000019c0), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x4e, 0x101240) fadvise64(r4, 0x7ffffffffffffffd, 0x1, 0x4) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x9, 0x9, 0x2}) 25.495162946s ago: executing program 3 (id=661): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@sysvgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@barrier}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@errors_remount}], [], 0x2c}, 0x81, 0x475, &(0x7f0000000600)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x148, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe01}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0xf8, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x91) mount$incfs(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x220a00, 0x8c) r2 = openat$incfs(r1, &(0x7f0000000c00)='.pending_reads\x00', 0x22100, 0x22) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f0000000c40)) 25.067680746s ago: executing program 0 (id=662): syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x80481c, &(0x7f0000000480)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f", @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="a24155a23c4b24d80083c9989b88be945b91b2d81a47aff3f3cc35323f2522bd1aa072d6d66db5021c884f253af0c07ab793712242375d4ff266fe967b2283b394"], 0xfd, 0x5532, &(0x7f0000008f40)="$eJzs3M1rI2UYAPA3/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6bJNGQ3yZQmTWtPHjyKB/8TUfDk0b/Bg2dv4kHxJiiZd6pbXUFomtjN7weTZ95n3jzzTg6BZyYkAFNrMfn151K4Ea6EEGZDCNdDyPdLxZbbjOGFEMLNEMLMY1upyP+ZuBRCuBpCuDEsHmuWikOf3x7c2vjprV+++e7y3LUvvv6+SANTaPi10tmL+4edGLNmjA+LfG3QymNnfVDEeKC9EI93spg/THfyCoe1k3m1PK414/xs76A3jLvtWn0Ym63dPL/XjSfsDZondfI3PKzt5+NGupPHVi/LY/M4nvfoOH63Hff6sU6jqPdRXj70+ycx5tOjNF7P3qM81rv9Ih/rZo30aBgHRSxOF+pZu5GvY+cMH/T/3Nut7sFRMkj3e62sm2xUqi9VqnfK1f2skfbT9XKt07izniw128Np5X5a62w2s6zZTiv1rLOcLDXr9XK1mizdTXdatW5SrVbWKivljeVi73by+v33knYjWRrGV1vdg36r3Ut2s/0kvmM5Wa2svbyc3Kom72xtJ9sP7t3b2n73g7vv339l683Xikn/WFaytLqyulqurpRXq8tTdP2fFIse4fXDmZQmvQCAi2fC/T8wpV48Q//feVSMn9j/7z8I4fz7/6D/H4kL1f9Oe/9/DtcPZ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYWj/Mf/lGvrMYx9eK/DNF6rliXAohzIQQfn+C2XDpVM3Zos78v8yf/9savi2FvMLwHJeL7WoIYbPYfnv2vD8FAAAAeHp99fHNz2K3Hl8WJ70gxinetJm5/uGI6i2EEOYXfxxRtZnhy/MjKhbm8u1oRNXyG1gLIyoWb7nNjarafzJ7Kiw8FkoxzIx1OQAAwFic7gTG24UAAAAwTp9OegFMRimcPMo8eRac//L+rweCV06NAAAAgAuoNOkFAAAAAOcu7//9/x8AAAA83eL//wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wcz83agNRHICfbRzIPwVFuaeV3KCMlJBjjhEFpAkKyIEa0gA1kFtKiHCEx8vCisNKHtta9H2SGWyZH28sOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkP/Wujh+ff/bNOTb95OkNAAAAcMuh3q3bN8t0/ra7/r679LE7LyKijIhbY/cqXl1lVl1O/Xj/r8v76yc1/I5oE07fMe+ONxHxpTv+fRj6KQAAAMD92m+2qzRaTy/LqQtiTGnSpnz3NVNeERH18m+mtPKU9ylTWPv7nsX3TGntBNYiU1iacpvlSnuW9u9+nrVbXDRFasqbHzsXma3vAADAiKqrZtxRCAAAAGP6NnUBTKOIh6XM81LgPDXd8t7rqzMAAADgBSqmLgAAAAAYXDv+H2n/v2ag/f+aKtvjAAAAgPuU9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSId6t95vtqu+Ocemnzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4z/68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczO1lbFGCWHiCh4sBebbmtrD4J4UIIH/wQhpNsau/VHm4MtRczFm+Tci6g3EUGJt578B3puoZd66yGHCuJxZGZndqdtsNtgZ6bJ5wNv33eG4b3vm4WQ77xJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK9rvTOMk/5sZxXJ67cffKat7fvK/PXdu8tZi3PI6aTPrJ8HL9IFpoLxEAAAD2j6Sq70MIt9Ot5byP54r6P62uyWv+758dx1U9f3/dX/VV7Z+333+78+JkornxPPmgZ9ZGw6MPptJ7fKvstuceekWvuPPFs5ek+ELiDzZe2E6L+xl9e/36e/0iPNBEtgDAbhyp+jKofh/K+0GbiQGwb/RqhXdV/ydz7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITtjfB0FUchhMXeNM7dvHtldaf+2uatxaqdvHp1M3w9HTMfIg0hnFkbDY82uppuu3jp8rmV0Wh4YYbg7cN//JhlWTbTxQ8PXgkh/B/j7CZ4p1z+uY9muDiEFjLcTfBPN9LoWhCXX3ZX8nkyghZ/KAEAsCelZcvr+tvp1nJ+LpoPIfvh3vr/9VocZqz/73x88kZ9rnr9P2hshd23tH7+86WLly6/sXZ+5ezw7PDTN48N3hocP3XixKml4lnJkicmAAAAPLIsy7LJQb9s9fo/nn9w//9QLQ4z1v9ffDf4qj5xov7f0XTTr+1MAAAA9rfnX/37r2iH81G/H75cWV+/MBh/To6PjT9bSPWRHShbvf5P5tvOCgAAAGjC9kZ0z/7/6VocZtz/f+anl36pj5mEEA6W+/9HVj8bnW5uOZ3WxJ8Tt71GAAAA2nWwbPX9/7R4/z+evPIQhxAOvzaOy38D+J/1f1rW/8n73/xcn6v+/v/x5pbYSfHC+H4U/UIIvYW2MwIAAGAve6psebH/Z7q1/Mmvhz7se/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGn/BgAA//9kDEPy") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 24.04378833s ago: executing program 3 (id=666): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) syz_pidfd_open(r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, 0x0, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x9}]}, {0x0, [0x61, 0x0, 0x61, 0x30]}}, 0x0, 0x2e, 0x0, 0x0, 0x60, 0x10000, @value=r4}, 0x28) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000900), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000940)='FROZEN\x00', 0x7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f00000001c0)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) ioctl$int_in(r8, 0x5421, &(0x7f0000000200)=0x4) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0xa, 0x400000000008d}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c40)=0x2) sched_setscheduler(r9, 0x1, &(0x7f0000000c80)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000d00)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80), 0x651, 0x0) 23.558928012s ago: executing program 3 (id=668): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./trace\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000480), 0x1000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000600)={0x1f, 0x8001}, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f0000000840)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 23.531683782s ago: executing program 0 (id=669): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001680)={0x0, &(0x7f00000016c0)}) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001740)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001780)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000017c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000018c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001900)=0x2) recvmmsg(r1, &(0x7f0000001940), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000001980)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000019c0)="b6", 0x1, 0x200080c1, &(0x7f0000001a00)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) 23.484359453s ago: executing program 32 (id=668): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./trace\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000480), 0x1000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000600)={0x1f, 0x8001}, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f0000000840)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 22.38623926s ago: executing program 0 (id=676): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@sysvgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@barrier}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@errors_remount}], [], 0x2c}, 0x81, 0x475, &(0x7f0000000600)="$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") mount$incfs(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x220a00, 0x8c) r1 = openat$incfs(r0, &(0x7f0000000c00)='.pending_reads\x00', 0x22100, 0x22) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f0000000c40)) 22.192568354s ago: executing program 0 (id=679): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000200)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg") prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000a40)=@file={0x0, './file1\x00'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x800, 0x1f5) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x82) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0xca, &(0x7f0000000400)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000000480), 0x40000000000017d, 0x888) fchown(r1, 0x0, 0xee01) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40a, 0x103) 21.871588262s ago: executing program 0 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r1, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000380)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x103a42, 0x32) removexattr(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)=@known='system.posix_acl_access\x00') getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = creat(0x0, 0x100) openat$incfs(r4, &(0x7f0000000440)='.log\x00', 0x600000, 0x109) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000001000084f7ffffff0400000002000000566700000800000000000008000000000030615f612000305f"], &(0x7f0000000540)=""/138, 0x46, 0x8a, 0x1}, 0x28) 21.839963352s ago: executing program 33 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r1, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000380)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x103a42, 0x32) removexattr(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)=@known='system.posix_acl_access\x00') getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = creat(0x0, 0x100) openat$incfs(r4, &(0x7f0000000440)='.log\x00', 0x600000, 0x109) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000001000084f7ffffff0400000002000000566700000800000000000008000000000030615f612000305f"], &(0x7f0000000540)=""/138, 0x46, 0x8a, 0x1}, 0x28) 13.167691068s ago: executing program 5 (id=712): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./trace\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000480), 0x1000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e22}, 0x1c) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000600)={0x1f, 0x8001}, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20048054}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f0000000840)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r7, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4603100702810000000000000003003e"], 0xb0) close(r7) execve(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 12.030936675s ago: executing program 5 (id=716): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000200)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg") prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000a40)=@file={0x0, './file1\x00'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x800, 0x1f5) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x82) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0xca, &(0x7f0000000400)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0xffffffd3) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40a, 0x103) 11.059801308s ago: executing program 5 (id=718): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x80, &(0x7f0000000700)={[{@block_validity}, {}, {@sysvgroups}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nombcache}]}, 0x3, 0x577, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1/file0\x00', 0x400, &(0x7f0000000200)={[], [{@smackfshat={'smackfshat', 0x3d, 'nogrpid'}}, {@context={'context', 0x3d, 'user_u'}}]}, 0x2, 0x79d, &(0x7f0000001040)="$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") setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001800)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') lseek(r0, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r1, &(0x7f0000000180)='3', 0x4e) sched_setscheduler(0x0, 0x6, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001880)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000018c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r1, 0x817) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000019c0), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x4e, 0x101240) fadvise64(r4, 0x7ffffffffffffffd, 0x1, 0x4) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x9, 0x9, 0x2}) 9.811515088s ago: executing program 5 (id=724): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@sysvgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@barrier}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@errors_remount}], [], 0x2c}, 0x81, 0x475, &(0x7f0000000600)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x148, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe01}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0xf8, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x91) mount$incfs(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x220a00, 0x8c) r2 = openat$incfs(r1, &(0x7f0000000c00)='.pending_reads\x00', 0x22100, 0x22) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f0000000c40)) 8.407237391s ago: executing program 5 (id=730): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000300)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x5) sched_setscheduler(r3, 0x1, &(0x7f0000000b80)=0x7) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/self/make-it-fail\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000cc0)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000d40), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000d80), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x39}, 0x28) socket$xdp(0x2c, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000e80)='E', 0x1, 0x4fed3) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000ec0)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x100000001, 0x3}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000002480)=0x1, 0x4) connect$inet6(r7, &(0x7f00000024c0)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0x1c) vmsplice(r1, &(0x7f0000002500)=[{&(0x7f0000002540)="e6", 0xfffffeff}], 0x1, 0x300000000000000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000002580)={0x0, 0xcbf, 0x10efe}, 0x14) splice(r0, 0x0, r7, 0x0, 0x20000000cc0, 0x3) 8.326016313s ago: executing program 1 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000002c0), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r0, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000380)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000700)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x103a42, 0x32) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = creat(0x0, 0x100) openat$incfs(r3, &(0x7f0000000440)='.log\x00', 0x600000, 0x109) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000001000084f7ffffff0400000002000000566700000800000000000008000000000030615f612000305f"], &(0x7f0000000540)=""/138, 0x46, 0x8a, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') 8.0130623s ago: executing program 5 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000200)=ANY=[], 0xff, 0x26e, &(0x7f00000005c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000840)='./file0\x00', 0xa1010, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000080)={0x2710, 0x80, 0xc0, &(0x7f0000005ec0)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x4, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e6, 0x9880, 0x4000000000080, 0x2, 0x8, 0x0, 0x3, 0x20000000009, 0x2, 0x1fb, 0x80007, 0x0, 0x9, 0x5, 0x5, 0x97d, 0x501, 0x4, 0xdec1, 0x4, 0x155b, 0x7d, 0x0, 0x6, 0x7ff, 0x8, 0x101, 0x80, 0x8000000000000001, 0xffffff7ffffffff9, 0x4100000002, 0xfffffffffffffffd, 0xa, 0x7, 0x7fff, 0x1000ec, 0x8000000000000000, 0x4, 0x80000001, 0x7, 0x7ffffffffffffffc, 0x0, 0x8001, 0x5, 0x11, 0xa, 0x5, 0x1b602c81, 0x1, 0xd, 0x7fffffffffffffff, 0x38c, 0x8, 0x8, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xed6, 0x7, 0xfffffffffffffffc, 0xa5, 0x80000001, 0x0, 0x9, 0xfffffffffffffffc, 0x4007, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x7, 0x5, 0x21, 0xfffffffffffbfc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x75, 0x10, 0x4, 0xe, 0x3, 0x3, 0x4, 0xfffffffffffffff9, 0x0, 0x4, 0x6, 0x10, 0x9, 0x8fc3, 0xfff, 0x20000080, 0xfffffffffffffff9, 0x3, 0x4, 0x9, 0xfffd, 0x40000000000001, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1e17]}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000062c0)={0x28}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x200001, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000040)={0x115, 0xb943, 0x4924924}) 8.00033981s ago: executing program 34 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000200)=ANY=[], 0xff, 0x26e, &(0x7f00000005c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000840)='./file0\x00', 0xa1010, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000080)={0x2710, 0x80, 0xc0, &(0x7f0000005ec0)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x4, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e6, 0x9880, 0x4000000000080, 0x2, 0x8, 0x0, 0x3, 0x20000000009, 0x2, 0x1fb, 0x80007, 0x0, 0x9, 0x5, 0x5, 0x97d, 0x501, 0x4, 0xdec1, 0x4, 0x155b, 0x7d, 0x0, 0x6, 0x7ff, 0x8, 0x101, 0x80, 0x8000000000000001, 0xffffff7ffffffff9, 0x4100000002, 0xfffffffffffffffd, 0xa, 0x7, 0x7fff, 0x1000ec, 0x8000000000000000, 0x4, 0x80000001, 0x7, 0x7ffffffffffffffc, 0x0, 0x8001, 0x5, 0x11, 0xa, 0x5, 0x1b602c81, 0x1, 0xd, 0x7fffffffffffffff, 0x38c, 0x8, 0x8, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xed6, 0x7, 0xfffffffffffffffc, 0xa5, 0x80000001, 0x0, 0x9, 0xfffffffffffffffc, 0x4007, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x7, 0x5, 0x21, 0xfffffffffffbfc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x75, 0x10, 0x4, 0xe, 0x3, 0x3, 0x4, 0xfffffffffffffff9, 0x0, 0x4, 0x6, 0x10, 0x9, 0x8fc3, 0xfff, 0x20000080, 0xfffffffffffffff9, 0x3, 0x4, 0x9, 0xfffd, 0x40000000000001, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1e17]}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000062c0)={0x28}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x200001, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000040)={0x115, 0xb943, 0x4924924}) 7.464281633s ago: executing program 7 (id=733): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002204"], 0x0}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/neigh/default/app_solicit\x00', 0x2, 0x0) write$FUSE_STATX(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f00000003c0)={0x0, 0xb, &(0x7f0000000500)={&(0x7f0000000540)={0x14, r5, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x94, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_REVISION={0x0, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0xfffffe7c, 0x3, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x0, 0x7, 0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008012}, 0x4840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4c040) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, 0x0, 0xffef, 0x20000000, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 7.386564245s ago: executing program 4 (id=735): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x80, &(0x7f0000000700)={[{@block_validity}, {}, {@sysvgroups}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nombcache}]}, 0x3, 0x577, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1/file0\x00', 0x400, &(0x7f0000000200)={[], [{@smackfshat={'smackfshat', 0x3d, 'nogrpid'}}, {@context={'context', 0x3d, 'user_u'}}]}, 0x2, 0x79d, &(0x7f0000001040)="$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") setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001800)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') lseek(r0, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) futex(0x0, 0x1, 0x400000, 0x0, 0x0, 0xffffffec) sched_setscheduler(0x0, 0x6, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001880)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000018c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r1, 0x817) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000019c0), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x4e, 0x101240) fadvise64(r4, 0x7ffffffffffffffd, 0x1, 0x4) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x9, 0x9, 0x2}) 6.101761645s ago: executing program 4 (id=738): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x8, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002bc0)={r0, r1, 0x1}, 0x14) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000bc0)='bpf_lsm_xfrm_decode_session\x00') bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0xa, 0x1c, &(0x7f0000002cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe344}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0x5, 0xf, 0xe, 0x8, 0x8001}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @generic={0x48, 0x4, 0x4, 0x1, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() rt_tgsigqueueinfo(r3, r3, 0xb, &(0x7f00000000c0)={0xfffff0f2, 0x0, 0x4}) r4 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYBLOB="0000005d9e00d3ec66ecc06bc5fcda2e2e"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', 0x208800, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYBLOB="2229e4daa91ec6fa6fd7ca657a9d9f0446f4bbdff89e6765851a5d70b519b302033dd5cbb4d27206c473f94fae84697ab284df33b0630899a5df9e5ce7324342fc20de8fb31fb199caf1595de9aa6509e782ac930a0d5c829089bd4da31bc036392c3206cf9cc114d440114fc43209674f8b4364791569a55b9974f251f78edc4a6b911bde5ace78f844e62ce270ec0a8149fae1d7d9485b87d35518691b74d1ca2256b2827dd43da0b0b69c8b3dc3caf243fb571c3a2f82ad6c3a570eb32d8862a3e399", @ANYBLOB="261fb61f7fa8df3110a5f5c53ddf67660b95dbe2472304e2600fa2d6d38759bcd4adaf188f447131ef2ae4263d98018a2c9f2a0836f14ea40e6648d4bce2126080bf4d4c5b45349e571b194c576f0db70d9b3e0425fb17e2c629fe29efbec3f3a7bfeb6d616b59eff7b9ecc54b0bb5d30cb3ac2c057047b150f136cb18768f635a51fe722baf217d296dfe54b41b4f5d025f3f5796e0392cb908c463f461f45e1712c7ea1ac353262114a1283f57a0711bbe4adb71661ab755623d4b93d8f65da63171ff38f1ffd18c149ff0", @ANYRES64, @ANYRES8=0x0], 0x4, 0x301, &(0x7f00000006c0)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000a40)={@remote, r8}, 0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0xc, &(0x7f0000000f40)=ANY=[], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000001040)="df33c9f7b9a60000000200200000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r8, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newqdisc={0x50, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}]}, 0x50}}, 0x0) write(r4, &(0x7f0000001180)='0', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x0, &(0x7f0000000300), 0x1, 0x560, &(0x7f0000001240)="$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") bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$TIOCPKT(r11, 0x5420, 0xffffffffffffffff) ioctl$BTRFS_IOC_ENCODED_READ(r5, 0x80809440, &(0x7f0000002b00)={&(0x7f0000002a40)=[{&(0x7f0000000140)="ea535a84ced27c313656ff34c18b9c6013ba4538e061915b6ea155bddd4b1def86626057710e35a9d432438cccdc8651b05fd3531aa112df4b981e8f8cd183ed34fe0e2123054d76", 0x48}, {&(0x7f00000001c0)="f4d616", 0x3}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="32d8fcb6f34add55f6dbfc9571c61e5cfddf479b55e5862144adda7d8f905f6fdc1ef9364a019af372b117", 0x2b}, {&(0x7f0000002800)="7a0d86e0150176f9fab9c08b4e5e8f01fef667ffb15f019120706464bb01e0cc6f271215d1ccee58fbb7121e71ad4511b7f23357651cfc60b97929531d372208f75387c617bd042ae1f4aeff17fbc01c3b5b34757d8b8dc720b880be6abdcc5fbaa4e8a8daac3fe619c073cbcd8a56536cf13b616070439e5afcb4f5924e0b887ee2966eea6964", 0x87}, {&(0x7f00000028c0)="f51def813ceeaaef05e215de0d8b8fc7ad822829992d7b788b38d25f0f879a19432ee56827c48325c5dc9fccbaf491888ec52bbf8c7b9faf1715adfe84af2147e0820a20985d1b2eb44c61e474b340fe4de19344cdc30824fdfcc97c12ebbcc0ddb350d72440ddff33ced15f553f3c7cdef6f20bf9335d5016f76c1baa228f4e819846eca250ec38c0c060530b609d7ed01b728c5abc6a00aa938690320110fc423baec5aab9c2ad392ae62f4b10b516", 0xb0}, {&(0x7f0000002980)="8ab6d373093ea1878067b8a7e66429", 0xf}, {&(0x7f00000029c0)="d936996c2d4e43135a835a1223449a6a700f5652343c98", 0x17}, {&(0x7f0000002a00)="a3188414242fa931602ea3e376b44576e63a0a80342b958ddb4dc2ca5c8825b9f984e662f96bcf45d5e22edaee73154beaa1d32d48a092a6add50c63", 0x3c}], 0x9, 0x0, 0x0, 0x100000000008, 0x1, 0x658, 0x5}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000240)) 6.094431676s ago: executing program 2 (id=739): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001680)={0x0, &(0x7f00000016c0)}) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001740)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001780)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000017c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000018c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001900)=0x2) recvmmsg(r1, &(0x7f0000001940), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000001980)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000019c0)="b6", 0x1, 0x200080c1, &(0x7f0000001a00)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) 5.87594567s ago: executing program 1 (id=740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x0, 0x184, 0x671, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x7, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x0, 0x8000000009, 0x803, 0x26c00, 0x9, 0x2], 0xeeee8000, 0x102280}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4, 0x50000, 0xc, 0x8, 0x3, 0xe6, 0x41, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x9, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeef0000, 0x4, 0x6, 0x4, 0x7e, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x7, 0x5a, 0x9, 0xf8, 0x97}, {0x8080000, 0x200000, 0xe, 0xa1, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xb, 0x5, 0x8, 0x5, 0x7, 0x43, 0x7, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x4, 0x9, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x2e}, {0xeeef0000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.624290017s ago: executing program 1 (id=743): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000b40)="$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") r0 = syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x4000010, r0, 0xb8eee000) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) socket$unix(0x1, 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xffffff70) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022220055c6960100060100030000edfceb124682cae89a30a50000002a90a0753883c83e25031b"], 0x0}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888, 0x0, 0x600}, 0x20000880) recvmmsg(r1, &(0x7f0000000ac0), 0x3db66e6159adff3, 0x10100, 0x0) 4.941120393s ago: executing program 2 (id=744): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001680)={0x0, &(0x7f00000016c0)}) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001740)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000017c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000018c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001900)=0x2) recvmmsg(r1, &(0x7f0000001940), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000001980)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000019c0)="b6", 0x1, 0x200080c1, &(0x7f0000001a00)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) 4.867147535s ago: executing program 7 (id=745): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x2, 0x21c, &(0x7f00000001c0)="$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") ppoll(&(0x7f0000000100)=[{r0, 0x221a}], 0x1, 0x0, 0x0, 0x0) 4.427684005s ago: executing program 6 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r1, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000380)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x103a42, 0x32) removexattr(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)=@known='system.posix_acl_access\x00') getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = creat(0x0, 0x100) openat$incfs(r4, &(0x7f0000000440)='.log\x00', 0x600000, 0x109) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000001000084f7ffffff0400000002000000566700000800000000000008000000000030615f612000305f"], &(0x7f0000000540)=""/138, 0x46, 0x8a, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.834002019s ago: executing program 6 (id=747): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000200)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg") prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000a40)=@file={0x0, './file1\x00'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x800, 0x1f5) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x82) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0xca, &(0x7f0000000400)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r5, &(0x7f0000000480), 0x40000000000017d, 0x888) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0xffffffd3) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40a, 0x103) 3.80264841s ago: executing program 1 (id=748): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x80, &(0x7f0000000700)={[{@block_validity}, {}, {@sysvgroups}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nombcache}]}, 0x3, 0x577, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1/file0\x00', 0x400, &(0x7f0000000200)={[], [{@smackfshat={'smackfshat', 0x3d, 'nogrpid'}}, {@context={'context', 0x3d, 'user_u'}}]}, 0x2, 0x79d, &(0x7f0000001040)="$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") setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001800)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') lseek(r0, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) futex(0x0, 0x1, 0x400000, 0x0, 0x0, 0xffffffec) sched_setscheduler(0x0, 0x6, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001880)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000018c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r1, 0x817) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000019c0), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x4e, 0x101240) fadvise64(r4, 0x7ffffffffffffffd, 0x1, 0x4) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x9, 0x9, 0x2}) 3.752788201s ago: executing program 2 (id=749): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000200)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg") prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000a40)=@file={0x0, './file1\x00'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x800, 0x1f5) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x82) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0xca, &(0x7f0000000400)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000000480), 0x40000000000017d, 0x888) fchmodat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0xffffffd3) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40a, 0x103) 3.657830173s ago: executing program 4 (id=750): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000300)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x5) sched_setscheduler(r3, 0x1, &(0x7f0000000b80)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000c00)={0xffffffffffffffff, &(0x7f00000001c0)='ext4\x00', 0x400840, &(0x7f0000000200)={@align, {0x8f61, 0x101, 0x7, 0x101}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r4) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/self/make-it-fail\x00', 0x1, 0x0) mmap(&(0x7f0000603000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xc3816000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000cc0)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000d40), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000d80), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x39}, 0x28) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000e80)='E', 0x1, 0x4fed3) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000ec0)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x100000001, 0x3}) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000002480)=0x1, 0x4) connect$inet6(r8, &(0x7f00000024c0)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0x1c) vmsplice(r1, &(0x7f0000002500)=[{&(0x7f0000002540)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000002580)={0x0, 0xcbf, 0x10efe}, 0x14) splice(r0, 0x0, r8, 0x0, 0x20000000cc0, 0x3) 3.424828919s ago: executing program 7 (id=751): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0xf, {"a2e3ad214fc752f91b29090942f70e0dd038e7ff7fc6e5539b3267078b089b34083b681a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910de85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520008008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600071a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45fdcfe6180a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c1173ea68e93b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20870800000000000000939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a520f9506711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8393c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227fff687e39e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f", 0x1000}}, 0x1006) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket(0x1, 0x5, 0x0) close(r3) epoll_create1(0x80000) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000001080)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000032424c44a32282700000000009e3ed627d7dcc371d07ec9cebd4e09a9760000000000000000"], 0x48) accept4$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c, 0x80000) 1.901956855s ago: executing program 1 (id=752): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x0, 0x184, 0x671, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x7, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x0, 0x8000000009, 0x803, 0x26c00, 0x9, 0x2], 0xeeee8000, 0x102280}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4, 0x50000, 0xc, 0x8, 0x3, 0xe6, 0x41, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x9, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeef0000, 0x4, 0x6, 0x4, 0x7e, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x7, 0x5a, 0x9, 0xf8, 0x97}, {0x8080000, 0x200000, 0xe, 0xa1, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xb, 0x5, 0x8, 0x5, 0x7, 0x43, 0x7, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x4, 0x9, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x2e}, {0xeeef0000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.553529913s ago: executing program 6 (id=753): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1, 0xba, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000010000000000000000000000711815000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x160) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1700000006000000080000000900000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000050000000000000000100efdf90b05d5e90af414925c0998f772811af6d86400"/50], 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000007c0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0x4d5d, 0x8, 0x4], [0x401, 0x103, 0x6, 0x9, 0x4, 0x8000c66, 0x3f, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x9, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0x6, 0x18e, 0x1000, 0x5, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000003, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xf03, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x1000002, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x3, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x6, 0x8, 0x9]}, 0x45c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/251, 0xfb}], 0x1, 0x800, 0x0) 1.552502643s ago: executing program 2 (id=754): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001680)={0x0, &(0x7f00000016c0)}) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001740)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001780)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000017c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000018c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001900)=0x2) recvmmsg(r1, &(0x7f0000001940), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000001980)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000019c0)="b6", 0x1, 0x200080c1, &(0x7f0000001a00)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) 1.29518321s ago: executing program 1 (id=755): unshare(0x24020400) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./lower2\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./upper\x00', 0x1ff) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async) connect$inet(r0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000000640), 0x800001d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./work\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./lower1/dir1\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000340)='./mnt\x00', &(0x7f0000000380)='overlay\x00', 0x0, &(0x7f00000004c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir2\x00', 0x0) (async, rerun: 64) r1 = socket(0x840000000002, 0x3, 0xff) (rerun: 64) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3540}}], 0x18}, 0xc884) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async, rerun: 32) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f67635f6d657267652c696f5f626974733d30303030303030303030303030303030303231302c6e6f61636c2c6d656d6f72793d6e6f726d616c2c72657365727665725f726f6f743d30303030303030303030303030303030303030352c7768696e745f6d6f64653d6f66662c6e6f626172726965722c6261636b6772b4c6fa8aac98b795196f756e645f67633d6f66662c6673796e635f6d6f64653d706f7369782c6a71666d743d76667376302c646174615f666c7573682c666c7573685f6d657267652c6e6f6c617a7974696d652c6e6f696e6c696e65"], 0xfd, 0x5508, &(0x7f0000002480)="$eJzs3E1rY+UXAPCTdDrv//kXceFuLgxCC5Mw6bygu6oz+IIdyqgLV5omachMkluaNK1duXApLvwmouDKpZ/BhWt34kJxJyi590ZbX0Bomtjp7wc35z5Pn5x7nlAK596SAM6speTnH0txLS5FxEJEXI3IzkvFkVnLw3MRcT0iyoeOUjH/+8T5iLgcEdfGyfOck1yf3hzduPvDGz999c2Fc1c++/Lb+e0amLfnI6K3nZ/v9fKYtvP4uJivjzpZ7N0ZFTH/Qe9JMU7zuNfazDLs1Sfr6lm83c7Xp9u7g3Hc6tYb49jubGXz2/38goNRe5Ine8Pj+k42brY2s9gZpFlsH+R17R/kf9sOBsM8T7PI90GWPobDScznW/utfD/bT7LY6A+L+Txv2mztj+OoiMXlopF2m1kdm8f5pP/b3uz0d/eTUWtn0En7yd1q7YVq7V6ltpM2W8PWnUq917x3J1lud8fLKsNWvbfWTtN2t1VtpL2VZLndaFRqtWT5fmuzU+8ntVr1dvVW5e5KcXYzefXhO0m3mSyP48ud/u6w0x0kW+lOkr9jJVmt3n5xJblRS95a30g2Hj14sL7x9nv333340vrrrxSL/lJWsrx6a3W1UrtVWa2tnKH9f1QUPcX9w7GU5l0AwOkzq/6/rP8HDjm5/n/nUcTJ9/+h/5+KU9X/nvX+/wT2D8ei/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLO+W/z8texkKR9fKeb/V0w9U4xLEVGOiF//xkKcP5Jzociz+A/rF/9Uw9elyDKMr3GhOC5HxFpx/PL/k/4UAAAA4On1xYfXP8m79fxlad4FMUv5TZvy1fenlK8UEYtL308pW3n88uyUkmW/3+dif0rZshtYF6eULL/ldm5a2f6VhSPh4qFQykN5puUAAAAzcbQTmG0XAgAAwCx9PO8CmI9STB5lTp4FZ/95/8cDwUtHRgAAAMApVJp3AQAAAMCJy/p/3/8HAAAAT7f8+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4jZ37uU0ciOIA/Gzwwv7TotXet5W9QRlbwh73GFFAmqCAHEgLaYAayC0lRBDhcQhEHCJ5bCvR90nOZCzz4w2Cw8xIAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4In9eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu5zWOKg4A+JuZna2timuUPUREwYNe7HZbW3sTD0rw4J8ghHRbY7f+aHOwpYi5eJOcexE9ighKvPV/yDmBXOIthz1E8KzM7Ex28gNcf81sks8H3rzvDsO875uFkO+8lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//+UzT6R") 1.292450899s ago: executing program 4 (id=756): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000c80)=0xb, 0x4) sendmsg$netlink(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x9, 0x4, 0x0, 0x0, @binary="42f7fb405c"}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20040080, &(0x7f00000004c0)={0xa, 0x4e20, 0x8000, @mcast1}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x104, 0x1a, 0x7, 0x74bd2a, 0x0, {{@in6=@empty, @in6=@empty, 0x3, 0x0, 0x4e22, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@multicast2, {0x5a, 0x6b8f, 0x1ff, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000180)=0x6, 0x4) r7 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0xc, &(0x7f0000000c80)=ANY=[], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d00)={r8}, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) timerfd_settime(r9, 0x3, &(0x7f0000000e40)={{0x0, 0x3938700}, {r10, r11+10000000}}, 0x0) read(r9, &(0x7f0000000e80)=""/123, 0x7b) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10c52, &(0x7f0000000600)=ANY=[@ANYBLOB='rodir,nonumtail=0,iocharset=cp1255,utf8=1,errors=continue,shortname=winnt,nonumtail=0,rodir,shortname=win95,uid=', @ANYRESHEX, @ANYBLOB="2c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c757466383d302c73686f72746e616d653d6d697865642c6e6f03006d746169683d302c00"], 0x3, 0x27b, &(0x7f0000000700)="$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") r12 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r12}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x0, 0x0, @val=@netkit}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 262.275274ms ago: executing program 6 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000380)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x103a42, 0x32) removexattr(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)=@known='system.posix_acl_access\x00') getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = creat(0x0, 0x100) openat$incfs(r2, &(0x7f0000000440)='.log\x00', 0x600000, 0x109) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000001000084f7ffffff0400000002000000566700000800000000000008000000000030615f612000305f"], &(0x7f0000000540)=""/138, 0x46, 0x8a, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 252.691144ms ago: executing program 7 (id=758): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000b40)="$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") r0 = syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x4000010, r0, 0xb8eee000) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) socket$unix(0x1, 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xffffff70) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022220055c6960100060100030000edfceb124682cae89a30a50000002a90a0753883c83e25031b"], 0x0}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888, 0x0, 0x600}, 0x20000880) recvmmsg(r1, &(0x7f0000000ac0), 0x3db66e6159adff3, 0x10100, 0x0) 221.037495ms ago: executing program 2 (id=759): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x0, 0x184, 0x671, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x7, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x0, 0x8000000009, 0x803, 0x26c00, 0x9, 0x2], 0xeeee8000, 0x102280}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4, 0x50000, 0xc, 0x8, 0x3, 0xe6, 0x41, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x9, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeef0000, 0x4, 0x6, 0x4, 0x7e, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x7, 0x5a, 0x9, 0xf8, 0x97}, {0x8080000, 0x200000, 0xe, 0xa1, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xb, 0x5, 0x8, 0x5, 0x7, 0x43, 0x7, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x4, 0x9, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x2e}, {0xeeef0000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 167.712536ms ago: executing program 2 (id=760): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./trace\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000480), 0x1000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e22}, 0x1c) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000600)={0x1f, 0x8001}, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20048054}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f0000000840)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r7, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4603100702810000000000000003003e"], 0xb0) close(r7) execve(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 154.683816ms ago: executing program 6 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x0, 0x184, 0x671, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x7, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x0, 0x8000000009, 0x803, 0x26c00, 0x9, 0x2], 0xeeee8000, 0x102280}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4, 0x50000, 0xc, 0x8, 0x3, 0xe6, 0x41, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x9, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeef0000, 0x4, 0x6, 0x4, 0x7e, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x7, 0x5a, 0x9, 0xf8, 0x97}, {0x8080000, 0x200000, 0xe, 0xa1, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xb, 0x5, 0x8, 0x5, 0x7, 0x43, 0x7, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x4, 0x9, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x2e}, {0xeeef0000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 126.376837ms ago: executing program 4 (id=762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="440f20c0663501000000440f22c00f20e06635000004000f22e00f011d0f0139660f3835d2bad004ec0f20d86635200000000f22d80f31ba210066ed0f0ff294", 0x40}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', r5, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, 0x20, 0x8, 0x100, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', r5, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, 0x20, 0x8, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', r6, 0x29, 0x84, 0x84, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 75.690108ms ago: executing program 6 (id=763): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x80, &(0x7f0000000700)={[{@block_validity}, {}, {@sysvgroups}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nombcache}]}, 0x3, 0x577, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1/file0\x00', 0x400, &(0x7f0000000200)={[], [{@smackfshat={'smackfshat', 0x3d, 'nogrpid'}}, {@context={'context', 0x3d, 'user_u'}}]}, 0x2, 0x79d, &(0x7f0000001040)="$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") setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001800)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') lseek(r0, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) futex(0x0, 0x1, 0x400000, 0x0, 0x0, 0xffffffec) sched_setscheduler(0x0, 0x6, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001880)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000018c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r1, 0x817) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000019c0), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x4e, 0x101240) fadvise64(r4, 0x7ffffffffffffffd, 0x1, 0x4) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x9, 0x9, 0x2}) 0s ago: executing program 4 (id=764): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000200)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg") prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000a40)=@file={0x0, './file1\x00'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x800, 0x1f5) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x82) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0xca, &(0x7f0000000400)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r5, &(0x7f0000000480), 0x40000000000017d, 0x888) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0xffffffd3) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40a, 0x103) kernel console output (not intermixed with test programs): lid wMaxPacketSize 0 [ 150.423762][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.436615][ T6] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.445864][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.457870][ T6] usb 3-1: config 0 descriptor?? [ 150.473026][ T1994] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.480302][ T1994] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.505741][ T1177] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.517388][ T1177] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.528562][ T1177] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 150.541824][ T1177] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.608589][ T30] audit: type=1400 audit(1792119433.748:246): avc: denied { create } for pid=2000 comm="syz.1.473" name="#11" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.653178][ T2007] device veth0_vlan left promiscuous mode [ 150.664421][ T30] audit: type=1400 audit(1792119433.748:247): avc: denied { link } for pid=2000 comm="syz.1.473" name="#11" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.677857][ T1177] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 150.695597][ T1177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.706003][ T1177] usb 5-1: config 0 descriptor?? [ 150.711404][ T2007] device veth0_vlan entered promiscuous mode [ 150.719974][ T30] audit: type=1400 audit(1792119433.748:248): avc: denied { rename } for pid=2000 comm="syz.1.473" name="#12" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.720195][ T2007] device veth1_macvtap left promiscuous mode [ 150.748757][ T2007] device veth1_macvtap entered promiscuous mode [ 150.756038][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.763561][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.771330][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.784299][ T2010] loop0: detected capacity change from 0 to 1024 [ 150.784843][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.797945][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.802014][ T2010] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 150.802014][ T2010] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 150.802014][ T2010] [ 150.807343][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.823871][ T2010] EXT4-fs (loop0): Ignoring removed orlov option [ 150.831950][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.846471][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.847436][ T2010] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,nouser_xattr,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 150.853554][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.880314][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.889545][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 150.897904][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.906276][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 150.914748][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.923196][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.931329][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.939582][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.948451][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.956807][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.965404][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.974135][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.983296][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.991852][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.000340][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.008640][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.016819][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.024930][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.033695][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.042160][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.050432][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.058513][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.066360][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.073902][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.082365][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.090847][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.098941][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.165891][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 151.172051][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 151.179673][ T6] usb 3-1: USB disconnect, device number 9 [ 151.195833][ T2023] loop3: detected capacity change from 0 to 512 [ 151.265999][ T2025] loop0: detected capacity change from 0 to 512 [ 151.287752][ T1177] usbhid 5-1:0.0: can't add hid device: -71 [ 151.315508][ T1177] usbhid: probe of 5-1:0.0 failed with error -71 [ 151.328486][ T2023] EXT4-fs (loop3): Mount option "dioread_nolock" incompatible with ext3 [ 151.339287][ T2025] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.484034][ T1177] usb 5-1: USB disconnect, device number 12 [ 151.541229][ T2025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 151.549468][ T2025] System zones: 1-12 [ 151.557792][ T2025] EXT4-fs (loop0): 1 truncate cleaned up [ 151.563464][ T2025] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 151.898522][ T30] audit: type=1400 audit(1792119435.038:249): avc: denied { ioctl } for pid=2029 comm="syz.1.482" path="socket:[24837]" dev="sockfs" ino=24837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.997180][ T2032] loop2: detected capacity change from 0 to 128 [ 152.022438][ T2030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 152.046702][ T2032] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 152.067847][ T30] audit: type=1400 audit(1792119435.208:250): avc: denied { read write } for pid=2037 comm="syz.0.485" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.090640][ T2038] binder: 2037:2038 ioctl c018620c 200000000280 returned -22 [ 152.094698][ T30] audit: type=1400 audit(1792119435.218:251): avc: denied { open } for pid=2037 comm="syz.0.485" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.122811][ T30] audit: type=1400 audit(1792119435.218:252): avc: denied { write } for pid=2029 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.143417][ T30] audit: type=1400 audit(1792119435.218:253): avc: denied { connect } for pid=2029 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.172615][ T2036] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.179938][ T2036] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.228156][ T2049] loop2: detected capacity change from 0 to 1024 [ 152.254071][ T30] audit: type=1400 audit(1792119435.228:254): avc: denied { ioctl } for pid=2037 comm="syz.0.485" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.254343][ T2049] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 152.254343][ T2049] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 152.254343][ T2049] [ 152.613745][ T2049] EXT4-fs (loop2): Ignoring removed orlov option [ 152.661693][ T2054] loop4: detected capacity change from 0 to 256 [ 152.862335][ T2049] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,nouser_xattr,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 153.343543][ T2068] xt_TCPMSS: Only works on TCP SYN packets [ 153.405714][ C0] ip6_tunnel: ; xmit: Local address not yet configured! [ 155.067881][ T2074] loop0: detected capacity change from 0 to 512 [ 155.096188][ T2076] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 155.110490][ T2074] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.121122][ T2074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 155.129421][ T2074] System zones: 1-12 [ 155.134161][ T2074] EXT4-fs (loop0): 1 truncate cleaned up [ 155.139868][ T2074] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 155.169580][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 155.180797][ T2082] EXT4-fs (loop4): Mount option "dioread_nolock" incompatible with ext3 [ 155.514046][ T2093] set_capacity_and_notify: 2 callbacks suppressed [ 155.514062][ T2093] loop1: detected capacity change from 0 to 1024 [ 155.630573][ T2093] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 155.630573][ T2093] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 155.630573][ T2093] [ 155.649871][ T2093] EXT4-fs (loop1): Ignoring removed orlov option [ 155.674702][ T2093] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,nouser_xattr,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 155.696199][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 155.753713][ T30] audit: type=1400 audit(1792119438.888:255): avc: denied { listen } for pid=2105 comm="nombcache" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.773271][ T30] audit: type=1400 audit(1792119438.888:256): avc: denied { accept } for pid=2105 comm="nombcache" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.804012][ T30] audit: type=1400 audit(1792119438.938:257): avc: denied { shutdown } for pid=2105 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.835735][ T6] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.846817][ T6] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.856683][ T6] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 155.869678][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.876317][ T6] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 155.885397][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.894414][ T6] usb 3-1: config 0 descriptor?? [ 155.972286][ T2110] loop3: detected capacity change from 0 to 256 [ 156.081818][ T2112] loop3: detected capacity change from 0 to 128 [ 156.136117][ T2112] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 156.183397][ T2114] loop3: detected capacity change from 0 to 1024 [ 156.236966][ T2114] EXT4-fs (loop3): Ignoring removed orlov option [ 156.246986][ T2114] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 156.282360][ T2114] FAULT_INJECTION: forcing a failure. [ 156.282360][ T2114] name fail_futex, interval 1, probability 0, space 0, times 0 [ 156.295197][ T2114] CPU: 0 PID: 2114 Comm: syz.3.510 Not tainted syzkaller #0 [ 156.302465][ T2114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.312524][ T2114] Call Trace: [ 156.315805][ T2114] [ 156.318750][ T2114] __dump_stack+0x21/0x30 [ 156.323168][ T2114] dump_stack_lvl+0x110/0x170 [ 156.327836][ T2114] ? show_regs_print_info+0x20/0x20 [ 156.333045][ T2114] dump_stack+0x15/0x20 [ 156.337217][ T2114] should_fail+0x3ab/0x500 [ 156.341871][ T2114] get_futex_key+0x143/0xb60 [ 156.346462][ T2114] ? futex_wait_restart+0x250/0x250 [ 156.351658][ T2114] futex_wake+0x133/0x8f0 [ 156.355984][ T2114] ? futex_wait+0x8f0/0x8f0 [ 156.360475][ T2114] ? __stack_depot_save+0x34/0x480 [ 156.365569][ T2114] ? path_openat+0x284f/0x2f80 [ 156.370312][ T2114] do_futex+0xd8d/0x2800 [ 156.374538][ T2114] ? kasan_set_track+0x4a/0x70 [ 156.379324][ T2114] ? kmem_cache_free+0x100/0x320 [ 156.384351][ T2114] ? do_sys_openat2+0x6df/0x7f0 [ 156.389184][ T2114] ? x64_sys_call+0x219/0x9a0 [ 156.393841][ T2114] ? do_syscall_64+0x4c/0xa0 [ 156.398413][ T2114] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.404461][ T2114] ? _kstrtoull+0x3bb/0x4c0 [ 156.408960][ T2114] ? futex_exit_release+0x1e0/0x1e0 [ 156.414143][ T2114] ? kstrtouint_from_user+0x1c4/0x220 [ 156.419502][ T2114] ? kstrtol_from_user+0x2a0/0x2a0 [ 156.424596][ T2114] ? __kasan_check_write+0x14/0x20 [ 156.429691][ T2114] ? proc_fail_nth_write+0x180/0x200 [ 156.434969][ T2114] ? proc_fail_nth_read+0x220/0x220 [ 156.440154][ T2114] ? security_file_permission+0x79/0xa0 [ 156.445705][ T2114] ? vfs_write+0xc72/0xfd0 [ 156.450111][ T2114] ? file_end_write+0x1b0/0x1b0 [ 156.454946][ T2114] ? __kasan_check_write+0x14/0x20 [ 156.460048][ T2114] ? mutex_unlock+0x8f/0x230 [ 156.464742][ T2114] __se_sys_futex+0x135/0x330 [ 156.469427][ T2114] ? __kasan_check_write+0x14/0x20 [ 156.474542][ T2114] ? __x64_sys_futex+0x100/0x100 [ 156.479465][ T2114] ? ksys_write+0x1fa/0x260 [ 156.483954][ T2114] ? __kasan_check_write+0x14/0x20 [ 156.489057][ T2114] __x64_sys_futex+0xe5/0x100 [ 156.493716][ T2114] x64_sys_call+0x251/0x9a0 [ 156.498202][ T2114] do_syscall_64+0x4c/0xa0 [ 156.502603][ T2114] ? clear_bhb_loop+0x50/0xa0 [ 156.507263][ T2114] ? clear_bhb_loop+0x50/0xa0 [ 156.511920][ T2114] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.517801][ T2114] RIP: 0033:0x7f2db99cd559 [ 156.522199][ T2114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.541980][ T2114] RSP: 002b:00007f2db8426028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 156.550392][ T2114] RAX: ffffffffffffffda RBX: 00007f2db9c54fa0 RCX: 00007f2db99cd559 [ 156.558351][ T2114] RDX: 0000000000400000 RSI: 0000000000000001 RDI: 0000000000000000 [ 156.566456][ T2114] RBP: 00007f2db9a648b0 R08: 0000000000000000 R09: 00000000ffffffec [ 156.574434][ T2114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.582390][ T2114] R13: 00007f2db9c55038 R14: 00007f2db9c54fa0 R15: 00007ffdbbd9a7f8 [ 156.590352][ T2114] [ 156.695700][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 156.701713][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 156.724102][ T6] usb 3-1: USB disconnect, device number 10 [ 156.855959][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.863202][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.219929][ T2133] loop2: detected capacity change from 0 to 1024 [ 158.280267][ T2133] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 158.280267][ T2133] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 158.280267][ T2133] [ 158.298815][ T2133] EXT4-fs (loop2): Ignoring removed orlov option [ 158.340223][ T2143] loop0: detected capacity change from 0 to 128 [ 158.352638][ T2143] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 158.365088][ T2144] loop3: detected capacity change from 0 to 512 [ 158.383019][ T2148] loop1: detected capacity change from 0 to 256 [ 158.411796][ T2150] loop4: detected capacity change from 0 to 128 [ 158.418903][ T2133] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,nouser_xattr,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 158.447683][ T2144] EXT4-fs (loop3): Mount option "dioread_nolock" incompatible with ext3 [ 158.476774][ T2150] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 158.839013][ T2162] loop4: detected capacity change from 0 to 128 [ 158.852570][ T2162] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 159.618805][ T2166] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.689843][ T2170] xt_TCPMSS: Only works on TCP SYN packets [ 159.703923][ T2166] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 159.712171][ T2166] System zones: 1-12 [ 159.789770][ T2166] EXT4-fs (loop2): 1 truncate cleaned up [ 159.795471][ T2166] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 159.925644][ T2171] EXT4-fs (loop0): Ignoring removed orlov option [ 160.075958][ T2171] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 160.114049][ T2171] FAULT_INJECTION: forcing a failure. [ 160.114049][ T2171] name fail_futex, interval 1, probability 0, space 0, times 0 [ 160.127557][ T2171] CPU: 1 PID: 2171 Comm: syz.0.525 Not tainted syzkaller #0 [ 160.134865][ T2171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.145012][ T2171] Call Trace: [ 160.148325][ T2171] [ 160.151257][ T2171] __dump_stack+0x21/0x30 [ 160.155592][ T2171] dump_stack_lvl+0x110/0x170 [ 160.160278][ T2171] ? show_regs_print_info+0x20/0x20 [ 160.165482][ T2171] dump_stack+0x15/0x20 [ 160.169645][ T2171] should_fail+0x3ab/0x500 [ 160.174082][ T2171] get_futex_key+0x170/0xb60 [ 160.178681][ T2171] ? try_to_wake_up+0x632/0x1150 [ 160.183629][ T2171] ? futex_wait_restart+0x250/0x250 [ 160.188949][ T2171] ? __kasan_check_write+0x14/0x20 [ 160.194075][ T2171] futex_wake+0x133/0x8f0 [ 160.198419][ T2171] ? arch_stack_walk+0xee/0x140 [ 160.203298][ T2171] ? futex_wait+0x8f0/0x8f0 [ 160.207897][ T2171] ? __stack_depot_save+0x34/0x480 [ 160.213016][ T2171] ? path_openat+0x284f/0x2f80 [ 160.217887][ T2171] do_futex+0xd8d/0x2800 [ 160.222146][ T2171] ? kasan_set_track+0x4a/0x70 [ 160.226914][ T2171] ? kmem_cache_free+0x100/0x320 [ 160.231938][ T2171] ? do_sys_openat2+0x6df/0x7f0 [ 160.236794][ T2171] ? x64_sys_call+0x219/0x9a0 [ 160.241474][ T2171] ? do_syscall_64+0x4c/0xa0 [ 160.246086][ T2171] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.252160][ T2171] ? _kstrtoull+0x3bb/0x4c0 [ 160.256672][ T2171] ? futex_exit_release+0x1e0/0x1e0 [ 160.262068][ T2171] ? kstrtouint_from_user+0x1c4/0x220 [ 160.267502][ T2171] ? kstrtol_from_user+0x2a0/0x2a0 [ 160.272632][ T2171] ? __kasan_check_write+0x14/0x20 [ 160.277843][ T2171] ? proc_fail_nth_write+0x180/0x200 [ 160.283187][ T2171] ? proc_fail_nth_read+0x220/0x220 [ 160.288392][ T2171] ? security_file_permission+0x79/0xa0 [ 160.293944][ T2171] ? vfs_write+0xc72/0xfd0 [ 160.298362][ T2171] ? file_end_write+0x1b0/0x1b0 [ 160.303209][ T2171] ? __kasan_check_write+0x14/0x20 [ 160.308322][ T2171] ? mutex_unlock+0x8f/0x230 [ 160.312914][ T2171] __se_sys_futex+0x135/0x330 [ 160.317590][ T2171] ? __kasan_check_write+0x14/0x20 [ 160.322702][ T2171] ? __x64_sys_futex+0x100/0x100 [ 160.327639][ T2171] ? ksys_write+0x1fa/0x260 [ 160.332143][ T2171] ? __kasan_check_write+0x14/0x20 [ 160.337290][ T2171] __x64_sys_futex+0xe5/0x100 [ 160.341970][ T2171] x64_sys_call+0x251/0x9a0 [ 160.346473][ T2171] do_syscall_64+0x4c/0xa0 [ 160.350892][ T2171] ? clear_bhb_loop+0x50/0xa0 [ 160.355574][ T2171] ? clear_bhb_loop+0x50/0xa0 [ 160.360250][ T2171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.366144][ T2171] RIP: 0033:0x7fd640449559 [ 160.370559][ T2171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.390168][ T2171] RSP: 002b:00007fd63eea2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 160.398587][ T2171] RAX: ffffffffffffffda RBX: 00007fd6406d0fa0 RCX: 00007fd640449559 [ 160.406654][ T2171] RDX: 0000000000400000 RSI: 0000000000000001 RDI: 0000000000000000 [ 160.414627][ T2171] RBP: 00007fd6404e08b0 R08: 0000000000000000 R09: 00000000ffffffec [ 160.422597][ T2171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.430575][ T2171] R13: 00007fd6406d1038 R14: 00007fd6406d0fa0 R15: 00007ffdd4e48c68 [ 160.438658][ T2171] [ 160.575812][ T1177] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.644640][ T2184] set_capacity_and_notify: 2 callbacks suppressed [ 160.644781][ T2184] loop2: detected capacity change from 0 to 256 [ 160.835670][ T1177] usb 4-1: Using ep0 maxpacket: 16 [ 160.867274][ T2197] loop2: detected capacity change from 0 to 512 [ 160.879751][ T2197] EXT4-fs (loop2): Mount option "dioread_nolock" incompatible with ext3 [ 160.969046][ T2203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.535'. [ 161.279601][ T1177] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.324081][ T1177] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.334947][ T1177] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 161.348563][ T1177] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.355324][ T1177] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 161.364693][ T1177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.373974][ T1177] usb 4-1: config 0 descriptor?? [ 161.885700][ C0] ip6_tunnel: ; xmit: Local address not yet configured! [ 162.015830][ T1177] usbhid 4-1:0.0: can't add hid device: -71 [ 162.411158][ T2220] loop4: detected capacity change from 0 to 512 [ 162.420488][ T1177] usbhid: probe of 4-1:0.0 failed with error -71 [ 162.430029][ T1177] usb 4-1: USB disconnect, device number 7 [ 162.458816][ T2220] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.612111][ T2220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 162.620314][ T2220] System zones: 1-12 [ 162.640176][ T2224] loop0: detected capacity change from 0 to 256 [ 162.670483][ T2220] EXT4-fs (loop4): 1 truncate cleaned up [ 162.676237][ T2220] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 164.608522][ T2247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.550'. [ 166.605653][ T499] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 166.743143][ T2256] device veth0_vlan left promiscuous mode [ 166.757381][ T2256] device veth0_vlan entered promiscuous mode [ 166.770456][ T2256] device veth1_macvtap left promiscuous mode [ 167.016040][ T2271] xt_TCPMSS: Only works on TCP SYN packets [ 167.235521][ T2256] device veth1_macvtap entered promiscuous mode [ 167.628503][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.636963][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.644629][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.653144][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.660226][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.685762][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.717324][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.763917][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.771027][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.820732][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.830377][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 167.838619][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.846860][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 167.855069][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.863664][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.872037][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.880248][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.889275][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.929971][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.938544][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.947198][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.956180][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.964678][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.972915][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.981089][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.989128][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.997249][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.005521][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.013879][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.159533][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.190181][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.227167][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.263590][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.310421][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.354883][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.430931][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.092374][ T2306] loop2: detected capacity change from 0 to 512 [ 169.627793][ T2299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.564'. [ 170.405454][ T2306] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.608408][ T499] usb 5-1: device not accepting address 13, error -71 [ 170.664054][ T2306] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 170.672502][ T2306] System zones: 1-12 [ 170.979209][ T2306] EXT4-fs (loop2): 1 truncate cleaned up [ 170.985049][ T2306] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 172.625091][ T2330] xt_TCPMSS: Only works on TCP SYN packets [ 172.816330][ T2336] loop0: detected capacity change from 0 to 512 [ 172.842596][ T2338] loop2: detected capacity change from 0 to 256 [ 172.849348][ T2336] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.869993][ T2336] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 172.877989][ T2336] System zones: 1-12 [ 172.880286][ T2341] loop4: detected capacity change from 0 to 256 [ 172.888771][ T2336] EXT4-fs (loop0): 1 truncate cleaned up [ 172.894533][ T2336] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 172.930467][ T2335] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.937838][ T2335] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.296395][ T2349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 174.307021][ T2349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.579'. [ 174.512724][ T2360] loop3: detected capacity change from 0 to 512 [ 175.270107][ T2360] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.610895][ T2360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 175.646668][ T2360] System zones: 1-12 [ 175.665462][ T2366] device veth0_vlan left promiscuous mode [ 175.671679][ T2366] device veth0_vlan entered promiscuous mode [ 175.679655][ T2366] device veth1_macvtap left promiscuous mode [ 175.686356][ T2366] device veth1_macvtap entered promiscuous mode [ 175.694839][ T2360] EXT4-fs (loop3): 1 truncate cleaned up [ 175.701085][ T2360] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 175.813711][ T2374] loop2: detected capacity change from 0 to 512 [ 175.923409][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 175.933994][ T2378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.587'. [ 175.942515][ T2374] EXT4-fs (loop2): Mount option "dioread_nolock" incompatible with ext3 [ 175.972031][ T2384] loop1: detected capacity change from 0 to 256 [ 176.042789][ T2382] loop4: detected capacity change from 0 to 512 [ 176.251922][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.261663][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.270105][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.279907][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.286959][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.296946][ T2382] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.403872][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.486338][ T2382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 176.494475][ T2382] System zones: 1-12 [ 176.500284][ T2382] EXT4-fs (loop4): 1 truncate cleaned up [ 176.506472][ T2382] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 176.827118][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.835333][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.842409][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.854590][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.863166][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 176.871400][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.890027][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 177.049715][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.635986][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.644126][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.606789][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.614941][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.623287][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.631483][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.639822][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.810123][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.818785][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.827495][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.835778][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.885592][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.937674][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.946604][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.955030][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.963433][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.971611][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.911307][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4: link becomes ready [ 180.067340][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.086852][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.158943][ T2426] loop3: detected capacity change from 0 to 512 [ 180.208482][ T2426] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.303806][ T2426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 180.312081][ T2426] System zones: 1-12 [ 180.325931][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.381555][ T2426] EXT4-fs (loop3): 1 truncate cleaned up [ 180.387293][ T2426] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 180.575142][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.616038][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.052880][ T2441] loop1: detected capacity change from 0 to 512 [ 181.862139][ T2443] loop0: detected capacity change from 0 to 512 [ 181.908871][ T2443] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 181.919699][ T2441] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.125350][ T2441] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 182.133763][ T2441] System zones: 1-12 [ 182.142370][ T2441] EXT4-fs (loop1): 1 truncate cleaned up [ 182.148059][ T2441] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 182.427673][ T2443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 182.435893][ T2443] System zones: 1-12 [ 182.443278][ T2443] EXT4-fs (loop0): 1 truncate cleaned up [ 182.449004][ T2443] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 182.797438][ T2449] loop2: detected capacity change from 0 to 512 [ 182.811824][ T2449] EXT4-fs (loop2): Mount option "dioread_nolock" incompatible with ext3 [ 182.855268][ T2452] loop4: detected capacity change from 0 to 512 [ 182.889549][ T2452] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.988147][ T2462] loop1: detected capacity change from 0 to 512 [ 183.981286][ T2465] loop3: detected capacity change from 0 to 512 [ 184.605770][ T30] audit: type=1400 audit(1792119467.098:258): avc: denied { create } for pid=2453 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 184.763918][ T2452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 184.772241][ T2452] System zones: 1-12 [ 184.776794][ T2452] EXT4-fs: error -4 creating inode table initialization thread [ 184.784442][ T2452] EXT4-fs (loop4): mount failed [ 184.791275][ T2462] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.803163][ T2462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 184.811596][ T2462] System zones: 1-12 [ 184.971188][ T2462] EXT4-fs (loop1): 1 truncate cleaned up [ 184.976945][ T2462] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 185.222559][ T2465] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.608: inode has both inline data and extents flags [ 185.236939][ T2465] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.608: couldn't read orphan inode 15 (err -117) [ 185.250607][ T2465] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.604246][ T2461] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #2: comm syz.3.608: Directory hole found for htree leaf block 0 [ 185.610412][ T2476] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 185.632520][ T2479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.611'. [ 185.771186][ T2485] xt_TCPMSS: Only works on TCP SYN packets [ 185.782445][ T2487] loop0: detected capacity change from 0 to 512 [ 185.816297][ T2487] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 185.844056][ T2487] EXT4-fs (loop0): Ignoring removed oldalloc option [ 185.910282][ T2487] EXT4-fs (loop0): orphan cleanup on readonly fs [ 185.919018][ T2487] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.616: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 185.939477][ T2487] EXT4-fs error (device loop0): ext4_quota_enable:6438: comm syz.0.616: Bad quota inode: 4, type: 1 [ 185.952338][ T2487] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 185.970287][ T2487] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 185.989260][ T2487] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,noblock_validity,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 186.014592][ T2494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 186.071618][ T2494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.615'. [ 186.338715][ T30] audit: type=1400 audit(1792119469.478:259): avc: denied { mounton } for pid=2495 comm="syz.0.617" path="/128/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 186.660835][ T2500] loop4: detected capacity change from 0 to 1024 [ 186.734533][ T2503] loop2: detected capacity change from 0 to 512 [ 186.742804][ T2500] EXT4-fs (loop4): Ignoring removed orlov option [ 186.795553][ T2500] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 186.817909][ T6] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 188.199096][ T2500] FAULT_INJECTION: forcing a failure. [ 188.199096][ T2500] name fail_futex, interval 1, probability 0, space 0, times 0 [ 188.610811][ T2500] CPU: 1 PID: 2500 Comm: syz.4.619 Not tainted syzkaller #0 [ 188.618142][ T2500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.628182][ T2500] Call Trace: [ 188.631450][ T2500] [ 188.634387][ T2500] __dump_stack+0x21/0x30 [ 188.638723][ T2500] dump_stack_lvl+0x110/0x170 [ 188.643388][ T2500] ? show_regs_print_info+0x20/0x20 [ 188.648573][ T2500] ? preempt_schedule_common+0xbe/0xf0 [ 188.654043][ T2500] dump_stack+0x15/0x20 [ 188.658194][ T2500] should_fail+0x3ab/0x500 [ 188.662604][ T2500] get_futex_key+0x170/0xb60 [ 188.667191][ T2500] ? try_to_wake_up+0x632/0x1150 [ 188.672208][ T2500] ? futex_wait_restart+0x250/0x250 [ 188.677400][ T2500] ? __kasan_check_write+0x14/0x20 [ 188.682595][ T2500] futex_wake+0x133/0x8f0 [ 188.686917][ T2500] ? arch_stack_walk+0xee/0x140 [ 188.691773][ T2500] ? futex_wait+0x8f0/0x8f0 [ 188.696273][ T2500] ? __stack_depot_save+0x34/0x480 [ 188.701385][ T2500] ? path_openat+0x284f/0x2f80 [ 188.706163][ T2500] do_futex+0xd8d/0x2800 [ 188.710397][ T2500] ? kasan_set_track+0x4a/0x70 [ 188.715156][ T2500] ? kmem_cache_free+0x100/0x320 [ 188.720084][ T2500] ? do_sys_openat2+0x6df/0x7f0 [ 188.724931][ T2500] ? x64_sys_call+0x219/0x9a0 [ 188.729603][ T2500] ? do_syscall_64+0x4c/0xa0 [ 188.734197][ T2500] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.740259][ T2500] ? _kstrtoull+0x3bb/0x4c0 [ 188.744773][ T2500] ? futex_exit_release+0x1e0/0x1e0 [ 188.749963][ T2500] ? kstrtouint_from_user+0x1c4/0x220 [ 188.755332][ T2500] ? kstrtol_from_user+0x2a0/0x2a0 [ 188.760440][ T2500] ? __kasan_check_write+0x14/0x20 [ 188.765563][ T2500] ? proc_fail_nth_write+0x180/0x200 [ 188.770868][ T2500] ? proc_fail_nth_read+0x220/0x220 [ 188.776060][ T2500] ? security_file_permission+0x79/0xa0 [ 188.781694][ T2500] ? vfs_write+0xc72/0xfd0 [ 188.786107][ T2500] ? file_end_write+0x1b0/0x1b0 [ 188.790954][ T2500] ? __kasan_check_write+0x14/0x20 [ 188.796064][ T2500] ? mutex_unlock+0x8f/0x230 [ 188.800654][ T2500] __se_sys_futex+0x135/0x330 [ 188.805410][ T2500] ? __kasan_check_write+0x14/0x20 [ 188.810526][ T2500] ? __x64_sys_futex+0x100/0x100 [ 188.815468][ T2500] ? ksys_write+0x1fa/0x260 [ 188.819972][ T2500] ? __kasan_check_write+0x14/0x20 [ 188.825077][ T2500] __x64_sys_futex+0xe5/0x100 [ 188.829745][ T2500] x64_sys_call+0x251/0x9a0 [ 188.834327][ T2500] do_syscall_64+0x4c/0xa0 [ 188.838741][ T2500] ? clear_bhb_loop+0x50/0xa0 [ 188.843421][ T2500] ? clear_bhb_loop+0x50/0xa0 [ 188.848093][ T2500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.854326][ T2500] RIP: 0033:0x7f68bfc2f559 [ 188.858734][ T2500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.878424][ T2500] RSP: 002b:00007f68be688028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 188.887272][ T2500] RAX: ffffffffffffffda RBX: 00007f68bfeb6fa0 RCX: 00007f68bfc2f559 [ 188.895243][ T2500] RDX: 0000000000400000 RSI: 0000000000000001 RDI: 0000000000000000 [ 188.903214][ T2500] RBP: 00007f68bfcc68b0 R08: 0000000000000000 R09: 00000000ffffffec [ 188.911194][ T2500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.920148][ T2500] R13: 00007f68bfeb7038 R14: 00007f68bfeb6fa0 R15: 00007ffe919037c8 [ 188.928396][ T2500] [ 189.601069][ T2510] loop1: detected capacity change from 0 to 128 [ 189.611497][ T2510] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 190.660927][ T2513] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.668117][ T2513] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.802756][ T2533] loop2: detected capacity change from 0 to 512 [ 192.560707][ T2534] loop1: detected capacity change from 0 to 512 [ 192.585284][ T2535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.627'. [ 192.616863][ T2533] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.676346][ T2533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 192.684361][ T2533] System zones: 1-12 [ 192.693016][ T2531] loop4: detected capacity change from 0 to 512 [ 192.700415][ T2533] EXT4-fs (loop2): 1 truncate cleaned up [ 192.706105][ T2533] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 192.753368][ T2527] loop3: detected capacity change from 0 to 40427 [ 192.766051][ T2534] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.626: inode has both inline data and extents flags [ 192.780086][ T2534] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.626: couldn't read orphan inode 15 (err -117) [ 192.789563][ T2527] F2FS-fs (loop3): LFS not compatible with checkpoint=disable [ 192.792309][ T2534] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.806533][ T2531] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.863144][ T2532] EXT4-fs error (device loop1): ext4_add_entry:2488: inode #2: comm syz.1.626: Directory hole found for htree leaf block 0 [ 192.902671][ T2531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 192.911090][ T2531] System zones: 1-12 [ 192.921161][ T2531] EXT4-fs (loop4): 1 truncate cleaned up [ 192.927180][ T2531] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 193.356637][ T2552] loop1: detected capacity change from 0 to 256 [ 194.378330][ T2569] loop1: detected capacity change from 0 to 256 [ 194.615645][ T2574] loop3: detected capacity change from 0 to 512 [ 194.768309][ T2574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.836476][ T2574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 195.022177][ T2574] System zones: 1-12 [ 195.033581][ T2574] EXT4-fs (loop3): 1 truncate cleaned up [ 195.104493][ T2574] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 195.430306][ T30] audit: type=1400 audit(1792119478.568:260): avc: denied { write } for pid=2577 comm="syz.1.638" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 195.456535][ T2580] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 195.509830][ T30] audit: type=1400 audit(1792119478.648:261): avc: denied { ioctl } for pid=2577 comm="syz.1.638" path="socket:[26497]" dev="sockfs" ino=26497 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.574061][ T2585] loop1: detected capacity change from 0 to 1024 [ 195.615548][ T2585] EXT4-fs (loop1): Ignoring removed orlov option [ 195.677177][ T2585] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 195.873460][ T2585] FAULT_INJECTION: forcing a failure. [ 195.873460][ T2585] name fail_futex, interval 1, probability 0, space 0, times 0 [ 195.906561][ T2585] CPU: 0 PID: 2585 Comm: syz.1.640 Not tainted syzkaller #0 [ 195.913887][ T2585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.923943][ T2585] Call Trace: [ 195.927240][ T2585] [ 195.930173][ T2585] __dump_stack+0x21/0x30 [ 195.934510][ T2585] dump_stack_lvl+0x110/0x170 [ 195.939194][ T2585] ? show_regs_print_info+0x20/0x20 [ 195.944393][ T2585] ? preempt_schedule_common+0xbe/0xf0 [ 195.949944][ T2585] dump_stack+0x15/0x20 [ 195.954102][ T2585] should_fail+0x3ab/0x500 [ 195.958519][ T2585] get_futex_key+0x170/0xb60 [ 195.963120][ T2585] ? try_to_wake_up+0x632/0x1150 [ 195.968063][ T2585] ? futex_wait_restart+0x250/0x250 [ 195.973395][ T2585] ? __kasan_check_write+0x14/0x20 [ 195.978508][ T2585] futex_wake+0x133/0x8f0 [ 195.982843][ T2585] ? arch_stack_walk+0xee/0x140 [ 195.987778][ T2585] ? futex_wait+0x8f0/0x8f0 [ 195.992286][ T2585] ? __stack_depot_save+0x34/0x480 [ 195.997406][ T2585] ? path_openat+0x284f/0x2f80 [ 196.002174][ T2585] do_futex+0xd8d/0x2800 [ 196.006416][ T2585] ? kasan_set_track+0x4a/0x70 [ 196.011193][ T2585] ? kmem_cache_free+0x100/0x320 [ 196.016167][ T2585] ? do_sys_openat2+0x6df/0x7f0 [ 196.021012][ T2585] ? x64_sys_call+0x219/0x9a0 [ 196.025688][ T2585] ? do_syscall_64+0x4c/0xa0 [ 196.030278][ T2585] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.036347][ T2585] ? _kstrtoull+0x3bb/0x4c0 [ 196.040855][ T2585] ? futex_exit_release+0x1e0/0x1e0 [ 196.046057][ T2585] ? kstrtouint_from_user+0x1c4/0x220 [ 196.051431][ T2585] ? kstrtol_from_user+0x2a0/0x2a0 [ 196.056547][ T2585] ? __kasan_check_write+0x14/0x20 [ 196.061661][ T2585] ? proc_fail_nth_write+0x180/0x200 [ 196.066957][ T2585] ? proc_fail_nth_read+0x220/0x220 [ 196.072245][ T2585] ? security_file_permission+0x79/0xa0 [ 196.077800][ T2585] ? vfs_write+0xc72/0xfd0 [ 196.082214][ T2585] ? file_end_write+0x1b0/0x1b0 [ 196.087062][ T2585] ? __kasan_check_write+0x14/0x20 [ 196.092173][ T2585] ? mutex_unlock+0x8f/0x230 [ 196.096941][ T2585] __se_sys_futex+0x135/0x330 [ 196.101622][ T2585] ? __kasan_check_write+0x14/0x20 [ 196.106734][ T2585] ? __x64_sys_futex+0x100/0x100 [ 196.111681][ T2585] ? ksys_write+0x1fa/0x260 [ 196.116184][ T2585] ? __kasan_check_write+0x14/0x20 [ 196.121295][ T2585] __x64_sys_futex+0xe5/0x100 [ 196.125985][ T2585] x64_sys_call+0x251/0x9a0 [ 196.130486][ T2585] do_syscall_64+0x4c/0xa0 [ 196.134908][ T2585] ? clear_bhb_loop+0x50/0xa0 [ 196.139585][ T2585] ? clear_bhb_loop+0x50/0xa0 [ 196.144267][ T2585] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.150159][ T2585] RIP: 0033:0x7f99b515e559 [ 196.154582][ T2585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.174371][ T2585] RSP: 002b:00007f99b3bb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 196.182826][ T2585] RAX: ffffffffffffffda RBX: 00007f99b53e5fa0 RCX: 00007f99b515e559 [ 196.190808][ T2585] RDX: 0000000000400000 RSI: 0000000000000001 RDI: 0000000000000000 [ 196.199310][ T2585] RBP: 00007f99b51f58b0 R08: 0000000000000000 R09: 00000000ffffffec [ 196.207284][ T2585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.215266][ T2585] R13: 00007f99b53e6038 R14: 00007f99b53e5fa0 R15: 00007ffd3f9a9df8 [ 196.223243][ T2585] [ 196.272444][ T30] audit: type=1400 audit(1792119479.408:262): avc: denied { ioctl } for pid=2592 comm="syz.4.642" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 196.573564][ T2609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 196.618195][ T2621] loop2: detected capacity change from 0 to 256 [ 196.701418][ T2625] device veth0_vlan left promiscuous mode [ 196.733120][ T2625] device veth0_vlan entered promiscuous mode [ 196.776551][ T2625] device veth1_macvtap left promiscuous mode [ 196.793701][ T2625] device veth1_macvtap entered promiscuous mode [ 196.835555][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.853656][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.873039][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.893128][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.900242][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.930274][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.947280][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.965078][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.972359][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.994833][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.033736][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 197.048888][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.065933][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 197.084222][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.102719][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.115788][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.134186][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.152770][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.171271][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.200141][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.218903][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.245959][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.266009][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.284210][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.305944][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.314078][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.322979][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.332070][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.342090][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.352091][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.362788][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.371622][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.381481][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.403450][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.440360][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.482323][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.623379][ T2629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 198.026199][ T2639] loop3: detected capacity change from 0 to 512 [ 198.118670][ T2639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.150657][ T2639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 198.158685][ T2639] System zones: 1-12 [ 198.173567][ T2639] EXT4-fs (loop3): 1 truncate cleaned up [ 198.179273][ T2639] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 198.207657][ T2644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.654'. [ 198.262488][ T2626] loop1: detected capacity change from 0 to 131072 [ 198.293923][ T2649] loop0: detected capacity change from 0 to 1024 [ 198.324146][ T2626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 199.612806][ T2626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 199.612841][ T2649] EXT4-fs (loop0): Ignoring removed orlov option [ 199.637048][ T2649] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 199.646728][ T2626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 200.050775][ T2672] loop3: detected capacity change from 0 to 512 [ 200.091029][ T2649] FAULT_INJECTION: forcing a failure. [ 200.091029][ T2649] name fail_futex, interval 1, probability 0, space 0, times 0 [ 200.105707][ T2649] CPU: 1 PID: 2649 Comm: syz.0.657 Not tainted syzkaller #0 [ 200.113021][ T2649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.123403][ T2649] Call Trace: [ 200.126687][ T2649] [ 200.129619][ T2649] __dump_stack+0x21/0x30 [ 200.133963][ T2649] dump_stack_lvl+0x110/0x170 [ 200.138638][ T2649] ? show_regs_print_info+0x20/0x20 [ 200.143844][ T2649] ? preempt_schedule_common+0xbe/0xf0 [ 200.149315][ T2649] dump_stack+0x15/0x20 [ 200.153478][ T2649] should_fail+0x3ab/0x500 [ 200.157947][ T2649] get_futex_key+0x170/0xb60 [ 200.162545][ T2649] ? try_to_wake_up+0x632/0x1150 [ 200.167483][ T2649] ? futex_wait_restart+0x250/0x250 [ 200.172691][ T2649] ? __kasan_check_write+0x14/0x20 [ 200.177803][ T2649] futex_wake+0x133/0x8f0 [ 200.182132][ T2649] ? arch_stack_walk+0xee/0x140 [ 200.186990][ T2649] ? futex_wait+0x8f0/0x8f0 [ 200.191537][ T2649] ? __stack_depot_save+0x34/0x480 [ 200.196658][ T2649] ? path_openat+0x284f/0x2f80 [ 200.201773][ T2649] do_futex+0xd8d/0x2800 [ 200.206013][ T2649] ? kasan_set_track+0x4a/0x70 [ 200.210778][ T2649] ? kmem_cache_free+0x100/0x320 [ 200.215711][ T2649] ? do_sys_openat2+0x6df/0x7f0 [ 200.220555][ T2649] ? x64_sys_call+0x219/0x9a0 [ 200.225225][ T2649] ? do_syscall_64+0x4c/0xa0 [ 200.229809][ T2649] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.235874][ T2649] ? _kstrtoull+0x3bb/0x4c0 [ 200.240375][ T2649] ? futex_exit_release+0x1e0/0x1e0 [ 200.245575][ T2649] ? kstrtouint_from_user+0x1c4/0x220 [ 200.250950][ T2649] ? kstrtol_from_user+0x2a0/0x2a0 [ 200.256172][ T2649] ? __kasan_check_write+0x14/0x20 [ 200.261301][ T2649] ? proc_fail_nth_write+0x180/0x200 [ 200.266592][ T2649] ? proc_fail_nth_read+0x220/0x220 [ 200.271813][ T2649] ? security_file_permission+0x79/0xa0 [ 200.277373][ T2649] ? vfs_write+0xc72/0xfd0 [ 200.281799][ T2649] ? file_end_write+0x1b0/0x1b0 [ 200.286650][ T2649] ? __kasan_check_write+0x14/0x20 [ 200.291862][ T2649] ? mutex_unlock+0x8f/0x230 [ 200.296457][ T2649] __se_sys_futex+0x135/0x330 [ 200.301138][ T2649] ? __kasan_check_write+0x14/0x20 [ 200.306262][ T2649] ? __x64_sys_futex+0x100/0x100 [ 200.311214][ T2649] ? ksys_write+0x1fa/0x260 [ 200.315726][ T2649] ? __kasan_check_write+0x14/0x20 [ 200.320847][ T2649] __x64_sys_futex+0xe5/0x100 [ 200.325559][ T2649] x64_sys_call+0x251/0x9a0 [ 200.330064][ T2649] do_syscall_64+0x4c/0xa0 [ 200.334486][ T2649] ? clear_bhb_loop+0x50/0xa0 [ 200.339165][ T2649] ? clear_bhb_loop+0x50/0xa0 [ 200.343840][ T2649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.349728][ T2649] RIP: 0033:0x7fd640449559 [ 200.354143][ T2649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.373745][ T2649] RSP: 002b:00007fd63eea2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 200.382169][ T2649] RAX: ffffffffffffffda RBX: 00007fd6406d0fa0 RCX: 00007fd640449559 [ 200.390153][ T2649] RDX: 0000000000400000 RSI: 0000000000000001 RDI: 0000000000000000 [ 200.398136][ T2649] RBP: 00007fd6404e08b0 R08: 0000000000000000 R09: 00000000ffffffec [ 200.406209][ T2649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.414188][ T2649] R13: 00007fd6406d1038 R14: 00007fd6406d0fa0 R15: 00007ffdd4e48c68 [ 200.422179][ T2649] [ 200.473461][ T2672] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.523770][ T2672] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 200.535950][ T2672] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.661: invalid indirect mapped block 2683928664 (level 1) [ 200.608851][ T2672] EXT4-fs (loop3): Remounting filesystem read-only [ 200.631456][ T2672] EXT4-fs (loop3): 1 truncate cleaned up [ 200.681687][ T2672] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,sysvgroups,inlinecrypt,usrjquota=.barrier,jqfmt=vfsold,jqfmt=vfsv0,acl,debug_want_extra_isize=0x0000000000000008,errors=remount-ro,,. Quota mode: writeback. [ 201.250076][ T30] audit: type=1400 audit(1792119484.388:263): avc: denied { read } for pid=2671 comm="syz.3.661" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.457472][ T285] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 201.507892][ T30] audit: type=1400 audit(1792119484.418:264): avc: denied { ioctl } for pid=2671 comm="syz.3.661" path="/147/file0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.536977][ T285] EXT4-fs (loop3): Remounting filesystem read-only [ 201.602580][ T285] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 201.627172][ T2686] loop0: detected capacity change from 0 to 40427 [ 201.631909][ T285] EXT4-fs (loop3): Remounting filesystem read-only [ 201.643009][ T2686] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 201.660558][ T285] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 201.667817][ T2686] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 201.692698][ T285] EXT4-fs (loop3): Remounting filesystem read-only [ 201.696656][ T2686] F2FS-fs (loop0): invalid crc value [ 201.714276][ T285] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 201.726410][ T2686] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 201.767464][ T2686] F2FS-fs (loop0): Start checkpoint disabled! [ 201.775647][ T285] EXT4-fs (loop3): Remounting filesystem read-only [ 201.783644][ T2686] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 201.795745][ T285] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 201.798268][ T2686] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 201.828429][ T285] EXT4-fs (loop3): Remounting filesystem read-only [ 201.908273][ T30] audit: type=1400 audit(1792119485.048:265): avc: denied { remount } for pid=2685 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 201.928388][ T45] attempt to access beyond end of device [ 201.928388][ T45] loop0: rw=2049, want=45104, limit=40427 [ 202.168971][ T2703] loop2: detected capacity change from 0 to 1024 [ 202.170375][ T30] audit: type=1400 audit(1792119485.308:266): avc: denied { mounton } for pid=2704 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 202.211764][ T30] audit: type=1400 audit(1792119485.338:267): avc: denied { create } for pid=2704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 202.239829][ T2703] EXT4-fs (loop2): Ignoring removed orlov option [ 202.258355][ T2708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 202.556405][ T2703] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 202.601200][ T2704] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.608436][ T2704] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.626032][ T2704] device bridge_slave_0 entered promiscuous mode [ 202.645026][ T2703] FAULT_INJECTION: forcing a failure. [ 202.645026][ T2703] name fail_futex, interval 1, probability 0, space 0, times 0 [ 202.660192][ T2704] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.665060][ T2703] CPU: 0 PID: 2703 Comm: syz.2.672 Not tainted syzkaller #0 [ 202.667334][ T30] audit: type=1400 audit(1792119485.798:268): avc: denied { mount } for pid=2717 comm="syz.1.673" name="/" dev="configfs" ino=13202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 202.674499][ T2703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.674512][ T2703] Call Trace: [ 202.674518][ T2703] [ 202.674525][ T2703] __dump_stack+0x21/0x30 [ 202.701439][ T2704] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.707123][ T2703] dump_stack_lvl+0x110/0x170 [ 202.707150][ T2703] ? show_regs_print_info+0x20/0x20 [ 202.707163][ T2703] ? preempt_schedule_common+0xbe/0xf0 [ 202.707180][ T2703] dump_stack+0x15/0x20 [ 202.707192][ T2703] should_fail+0x3ab/0x500 [ 202.707208][ T2703] get_futex_key+0x170/0xb60 [ 202.707226][ T2703] ? try_to_wake_up+0x632/0x1150 [ 202.707242][ T2703] ? futex_wait_restart+0x250/0x250 [ 202.707262][ T2703] ? __kasan_check_write+0x14/0x20 [ 202.707280][ T2703] futex_wake+0x133/0x8f0 [ 202.707294][ T2703] ? arch_stack_walk+0xee/0x140 [ 202.707314][ T2703] ? futex_wait+0x8f0/0x8f0 [ 202.707329][ T2703] ? __stack_depot_save+0x34/0x480 [ 202.707345][ T2703] ? path_openat+0x284f/0x2f80 [ 202.707361][ T2703] do_futex+0xd8d/0x2800 [ 202.707376][ T2703] ? kasan_set_track+0x4a/0x70 [ 202.707390][ T2703] ? kmem_cache_free+0x100/0x320 [ 202.707406][ T2703] ? do_sys_openat2+0x6df/0x7f0 [ 202.707419][ T2703] ? x64_sys_call+0x219/0x9a0 [ 202.707442][ T2703] ? do_syscall_64+0x4c/0xa0 [ 202.720361][ T2704] device bridge_slave_1 entered promiscuous mode [ 202.724959][ T2703] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.724986][ T2703] ? _kstrtoull+0x3bb/0x4c0 [ 202.778055][ T2704] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.782297][ T2703] ? futex_exit_release+0x1e0/0x1e0 [ 202.782323][ T2703] ? kstrtouint_from_user+0x1c4/0x220 [ 202.787440][ T2704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.792172][ T2703] ? kstrtol_from_user+0x2a0/0x2a0 [ 202.796592][ T2704] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.801425][ T2703] ? __kasan_check_write+0x14/0x20 [ 202.806361][ T2704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.811186][ T2703] ? proc_fail_nth_write+0x180/0x200 [ 202.833730][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.837285][ T2703] ? proc_fail_nth_read+0x220/0x220 [ 202.837310][ T2703] ? security_file_permission+0x79/0xa0 [ 202.837331][ T2703] ? vfs_write+0xc72/0xfd0 [ 202.914016][ T2703] ? file_end_write+0x1b0/0x1b0 [ 202.918879][ T2703] ? __kasan_check_write+0x14/0x20 [ 202.924007][ T2703] ? mutex_unlock+0x8f/0x230 [ 202.928615][ T2703] __se_sys_futex+0x135/0x330 [ 202.933302][ T2703] ? __kasan_check_write+0x14/0x20 [ 202.938421][ T2703] ? __x64_sys_futex+0x100/0x100 [ 202.943367][ T2703] ? ksys_write+0x1fa/0x260 [ 202.947878][ T2703] ? __kasan_check_write+0x14/0x20 [ 202.953005][ T2703] __x64_sys_futex+0xe5/0x100 [ 202.957687][ T2703] x64_sys_call+0x251/0x9a0 [ 202.962193][ T2703] do_syscall_64+0x4c/0xa0 [ 202.966609][ T2703] ? clear_bhb_loop+0x50/0xa0 [ 202.971291][ T2703] ? clear_bhb_loop+0x50/0xa0 [ 202.975983][ T2703] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.981876][ T2703] RIP: 0033:0x7f85fa174559 [ 202.986288][ T2703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.005892][ T2703] RSP: 002b:00007f85f8bcd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 203.014331][ T2703] RAX: ffffffffffffffda RBX: 00007f85fa3fbfa0 RCX: 00007f85fa174559 [ 203.022293][ T2703] RDX: 0000000000400000 RSI: 0000000000000001 RDI: 0000000000000000 [ 203.030248][ T2703] RBP: 00007f85fa20b8b0 R08: 0000000000000000 R09: 00000000ffffffec [ 203.038205][ T2703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.046173][ T2703] R13: 00007f85fa3fc038 R14: 00007f85fa3fbfa0 R15: 00007ffc599cfad8 [ 203.054132][ T2703] [ 203.086253][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.097512][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.133689][ T306] device bridge_slave_1 left promiscuous mode [ 203.140039][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.159804][ T2727] loop0: detected capacity change from 0 to 512 [ 203.179456][ T306] device bridge_slave_0 left promiscuous mode [ 203.185750][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.190574][ T2727] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.193123][ T30] audit: type=1400 audit(1792119486.328:269): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 203.206908][ T2727] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 203.234003][ T306] device veth1_macvtap left promiscuous mode [ 203.240079][ T306] device veth0_vlan left promiscuous mode [ 203.241360][ T2727] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.676: invalid indirect mapped block 2683928664 (level 1) [ 203.260314][ T2727] EXT4-fs (loop0): Remounting filesystem read-only [ 203.269551][ T2727] EXT4-fs (loop0): 1 truncate cleaned up [ 203.282590][ T2727] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,sysvgroups,inlinecrypt,usrjquota=.barrier,jqfmt=vfsold,jqfmt=vfsv0,acl,debug_want_extra_isize=0x0000000000000008,errors=remount-ro,,. Quota mode: writeback. [ 203.348504][ T287] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 203.369125][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 203.408583][ T287] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 203.423090][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 203.433592][ T287] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 203.443774][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 203.452559][ T287] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 203.466149][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 203.473458][ T287] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 203.486540][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 203.528212][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.536906][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.548783][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.555855][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.576586][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.589141][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.606482][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.613700][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.638646][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.655047][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.672038][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.680705][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.717544][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.731163][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.763772][ T2740] device veth0_vlan left promiscuous mode [ 203.770002][ T2740] device veth0_vlan entered promiscuous mode [ 203.776802][ T2740] device veth1_macvtap left promiscuous mode [ 203.783918][ T2740] device veth1_macvtap entered promiscuous mode [ 203.786600][ T2736] loop4: detected capacity change from 0 to 40427 [ 203.798221][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.806326][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.813810][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.821998][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.829045][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.836513][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.844888][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.853038][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.860126][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.867643][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.871330][ T2736] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64) [ 203.876215][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 203.891194][ T2736] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 203.891623][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.907942][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 203.909071][ T2736] F2FS-fs (loop4): fault_injection options not supported [ 203.916398][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.923492][ T2736] F2FS-fs (loop4): invalid crc value [ 203.931406][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.938011][ T2736] F2FS-fs (loop4): invalid journal entries nats 0 sits 64 [ 203.944320][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.951271][ T2736] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-22) [ 203.960123][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.975349][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.983555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.991831][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.000253][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.008828][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.017348][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.025276][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.033609][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.041640][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.049705][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.058136][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.066670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.102339][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.110653][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.118455][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.128193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.136737][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.145149][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.154317][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.184469][ T499] ip6_tunnel: ; xmit: Local address not yet configured! [ 204.194499][ T499] ip6_tunnel: ; xmit: Local address not yet configured! [ 204.204459][ T2704] device veth0_vlan entered promiscuous mode [ 204.213211][ T6] ip6_tunnel: ; xmit: Local address not yet configured! [ 204.221045][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.229536][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.326997][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.335124][ T6] ip6_tunnel: ; xmit: Local address not yet configured! [ 204.343108][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.100044][ T2759] loop4: detected capacity change from 0 to 512 [ 205.331166][ T2762] loop1: detected capacity change from 0 to 256 [ 205.348588][ T2759] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 205.434408][ T2759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 205.442541][ T2759] System zones: 1-12 [ 205.498282][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.530048][ T2759] EXT4-fs (loop4): 1 truncate cleaned up [ 205.535761][ T2759] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 205.604593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.612823][ T499] ip6_tunnel: ; xmit: Local address not yet configured! [ 205.622606][ T2704] device veth1_macvtap entered promiscuous mode [ 205.634082][ T2741] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.643947][ T2760] Zero length message leads to an empty skb [ 205.695799][ T2741] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.846513][ T2741] device bridge_slave_0 entered promiscuous mode [ 205.901378][ T2741] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.911215][ T2741] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.925368][ T2741] device bridge_slave_1 entered promiscuous mode [ 205.954171][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.965345][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.966474][ T2771] loop4: detected capacity change from 0 to 1024 [ 205.977374][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.989392][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.999080][ T2771] EXT4-fs (loop4): Ignoring removed orlov option [ 206.003327][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.031302][ T30] audit: type=1400 audit(1792119489.168:270): avc: denied { mounton } for pid=2704 comm="syz-executor" path="/root/syzkaller.Mv3Ymc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 206.069759][ T2771] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 206.094592][ T2777] loop5: detected capacity change from 0 to 128 [ 206.143177][ T1177] ip6_tunnel: ; xmit: Local address not yet configured! [ 206.188905][ T2777] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 206.204630][ T30] audit: type=1400 audit(1792119489.338:271): avc: denied { read write } for pid=2779 comm="syz.1.690" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.233851][ T2781] loop1: detected capacity change from 0 to 1024 [ 206.265557][ T2780] tipc: Invalid UDP bearer configuration [ 206.265578][ T2780] tipc: Enabling of bearer rejected, failed to enable media [ 206.335675][ T2771] FAULT_INJECTION: forcing a failure. [ 206.335675][ T2771] name fail_futex, interval 1, probability 0, space 0, times 0 [ 206.353795][ T2741] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.360882][ T2741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.369362][ T30] audit: type=1400 audit(1792119489.368:272): avc: denied { open } for pid=2779 comm="syz.1.690" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.411963][ T30] audit: type=1400 audit(1792119489.368:273): avc: denied { ioctl } for pid=2779 comm="syz.1.690" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.455379][ T2771] CPU: 1 PID: 2771 Comm: syz.4.688 Not tainted syzkaller #0 [ 206.462704][ T2771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.472764][ T2771] Call Trace: [ 206.476083][ T2771] [ 206.479281][ T2771] __dump_stack+0x21/0x30 [ 206.483624][ T2771] dump_stack_lvl+0x110/0x170 [ 206.488304][ T2771] ? show_regs_print_info+0x20/0x20 [ 206.493592][ T2771] dump_stack+0x15/0x20 [ 206.497746][ T2771] should_fail+0x3ab/0x500 [ 206.502172][ T2771] get_futex_key+0x143/0xb60 [ 206.506865][ T2771] ? futex_wait_restart+0x250/0x250 [ 206.512077][ T2771] futex_wake+0x133/0x8f0 [ 206.516412][ T2771] ? futex_wait+0x8f0/0x8f0 [ 206.520946][ T2771] ? __stack_depot_save+0x34/0x480 [ 206.526069][ T2771] ? path_openat+0x284f/0x2f80 [ 206.530858][ T2771] do_futex+0xd8d/0x2800 [ 206.535101][ T2771] ? kasan_set_track+0x4a/0x70 [ 206.539981][ T2771] ? kmem_cache_free+0x100/0x320 [ 206.544922][ T2771] ? do_sys_openat2+0x6df/0x7f0 [ 206.550117][ T2771] ? x64_sys_call+0x219/0x9a0 [ 206.554791][ T2771] ? do_syscall_64+0x4c/0xa0 [ 206.559396][ T2771] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.565491][ T2771] ? _kstrtoull+0x3bb/0x4c0 [ 206.570107][ T2771] ? futex_exit_release+0x1e0/0x1e0 [ 206.575322][ T2771] ? kstrtouint_from_user+0x1c4/0x220 [ 206.580711][ T2771] ? kstrtol_from_user+0x2a0/0x2a0 [ 206.585839][ T2771] ? __kasan_check_write+0x14/0x20 [ 206.590964][ T2771] ? proc_fail_nth_write+0x180/0x200 [ 206.596271][ T2771] ? proc_fail_nth_read+0x220/0x220 [ 206.601496][ T2771] ? security_file_permission+0x79/0xa0 [ 206.604113][ T30] audit: type=1400 audit(1792119489.368:274): avc: denied { setopt } for pid=2779 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.607161][ T2771] ? vfs_write+0xc72/0xfd0 [ 206.607190][ T2771] ? file_end_write+0x1b0/0x1b0 [ 206.607208][ T2771] ? __kasan_check_write+0x14/0x20 [ 206.607226][ T2771] ? mutex_unlock+0x8f/0x230 [ 206.646155][ T2771] __se_sys_futex+0x135/0x330 [ 206.650913][ T2771] ? __kasan_check_write+0x14/0x20 [ 206.656009][ T2771] ? __x64_sys_futex+0x100/0x100 [ 206.660947][ T2771] ? ksys_write+0x1fa/0x260 [ 206.665437][ T2771] __x64_sys_futex+0xe5/0x100 [ 206.670135][ T2771] x64_sys_call+0x251/0x9a0 [ 206.674661][ T2771] do_syscall_64+0x4c/0xa0 [ 206.679077][ T2771] ? clear_bhb_loop+0x50/0xa0 [ 206.683771][ T2771] ? clear_bhb_loop+0x50/0xa0 [ 206.688435][ T2771] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.694411][ T2771] RIP: 0033:0x7f68bfc2f559 [ 206.698899][ T2771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.718489][ T2771] RSP: 002b:00007f68be6880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.726890][ T2771] RAX: ffffffffffffffda RBX: 00007f68bfeb6fa8 RCX: 00007f68bfc2f559 [ 206.735126][ T2771] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f68bfeb6fac [ 206.743085][ T2771] RBP: 00007f68bfeb6fa0 R08: 0012c2b25fd8dc14 R09: 0000000000000000 [ 206.751038][ T2771] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 206.758991][ T2771] R13: 00007f68bfeb7038 R14: 00007ffe919036e0 R15: 00007ffe919037c8 [ 206.766949][ T2771] [ 207.002736][ T1995] ip6_tunnel: ; xmit: Local address not yet configured! [ 207.027770][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.080246][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.088411][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.105803][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.114231][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.125821][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.132952][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.198704][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.208151][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.230705][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.237884][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.255840][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.275407][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.045695][ C0] ip6_tunnel: ; xmit: Local address not yet configured! [ 208.569138][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.577598][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.585954][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.594291][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.612678][ T30] audit: type=1400 audit(1792119491.748:275): avc: denied { create } for pid=2809 comm="syz.4.697" dev="anon_inodefs" ino=28390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 208.841600][ T2812] loop2: detected capacity change from 0 to 512 [ 208.863461][ T30] audit: type=1400 audit(1792119491.758:276): avc: denied { getopt } for pid=2809 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 208.884802][ T306] device bridge_slave_1 left promiscuous mode [ 208.897386][ T2812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.000350][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.031496][ T2812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 209.039803][ T2812] System zones: 1-12 [ 209.075853][ T2812] EXT4-fs (loop2): 1 truncate cleaned up [ 209.081540][ T2812] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 209.204615][ T306] device bridge_slave_0 left promiscuous mode [ 209.244702][ T2816] loop1: detected capacity change from 0 to 2048 [ 209.545957][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.584449][ T2819] loop4: detected capacity change from 0 to 256 [ 209.592724][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.608223][ T2816] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none. [ 209.702183][ T2741] device veth0_vlan entered promiscuous mode [ 209.715215][ T2741] device veth1_macvtap entered promiscuous mode [ 209.749713][ T2824] loop6: detected capacity change from 0 to 256 [ 209.903366][ T1177] ip6_tunnel: ; xmit: Local address not yet configured! [ 210.068437][ T2830] loop2: detected capacity change from 0 to 40427 [ 210.092775][ T2830] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 210.110534][ T2832] loop5: detected capacity change from 0 to 1024 [ 210.117188][ T2830] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 210.147425][ T2832] EXT4-fs (loop5): Ignoring removed orlov option [ 210.157287][ T2830] F2FS-fs (loop2): invalid crc value [ 210.165265][ T2830] F2FS-fs (loop2): Found nat_bits in checkpoint [ 210.177436][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.187794][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.203238][ T2832] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 210.204128][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.234950][ T2830] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 210.234956][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.235166][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.256064][ T2832] FAULT_INJECTION: forcing a failure. [ 210.256064][ T2832] name fail_futex, interval 1, probability 0, space 0, times 0 [ 210.258067][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.270870][ T2830] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 210.278718][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.286088][ T2832] CPU: 1 PID: 2832 Comm: syz.5.703 Not tainted syzkaller #0 [ 210.294285][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.300968][ T2832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.300981][ T2832] Call Trace: [ 210.300985][ T2832] [ 210.300993][ T2832] __dump_stack+0x21/0x30 [ 210.309462][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.319145][ T2832] dump_stack_lvl+0x110/0x170 [ 210.319171][ T2832] ? show_regs_print_info+0x20/0x20 [ 210.322745][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.325354][ T2832] ? preempt_schedule_common+0xbe/0xf0 [ 210.329928][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.337775][ T2832] dump_stack+0x15/0x20 [ 210.337795][ T2832] should_fail+0x3ab/0x500 [ 210.337811][ T2832] get_futex_key+0x143/0xb60 [ 210.378130][ T30] audit: type=1400 audit(1792119493.508:277): avc: denied { write } for pid=2829 comm="syz.2.702" path="/125/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 210.380791][ T2832] ? try_to_wake_up+0x632/0x1150 [ 210.408433][ T2832] ? futex_wait_restart+0x250/0x250 [ 210.413619][ T2832] ? __kasan_check_write+0x14/0x20 [ 210.418902][ T2832] futex_wake+0x133/0x8f0 [ 210.423221][ T2832] ? arch_stack_walk+0xee/0x140 [ 210.428144][ T2832] ? futex_wait+0x8f0/0x8f0 [ 210.432834][ T2832] ? __stack_depot_save+0x34/0x480 [ 210.437958][ T2832] ? path_openat+0x284f/0x2f80 [ 210.442840][ T2832] do_futex+0xd8d/0x2800 [ 210.447097][ T2832] ? kasan_set_track+0x4a/0x70 [ 210.451867][ T2832] ? kmem_cache_free+0x100/0x320 [ 210.456931][ T2832] ? do_sys_openat2+0x6df/0x7f0 [ 210.461786][ T2832] ? x64_sys_call+0x219/0x9a0 [ 210.466467][ T2832] ? do_syscall_64+0x4c/0xa0 [ 210.471063][ T2832] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.477137][ T2832] ? _kstrtoull+0x3bb/0x4c0 [ 210.481655][ T2832] ? futex_exit_release+0x1e0/0x1e0 [ 210.486864][ T2832] ? kstrtouint_from_user+0x1c4/0x220 [ 210.492258][ T2832] ? kstrtol_from_user+0x2a0/0x2a0 [ 210.497385][ T2832] ? __kasan_check_write+0x14/0x20 [ 210.502514][ T2832] ? proc_fail_nth_write+0x180/0x200 [ 210.507813][ T2832] ? proc_fail_nth_read+0x220/0x220 [ 210.513181][ T2832] ? security_file_permission+0x79/0xa0 [ 210.518819][ T2832] ? vfs_write+0xc72/0xfd0 [ 210.523229][ T2832] ? file_end_write+0x1b0/0x1b0 [ 210.528102][ T2832] ? __kasan_check_write+0x14/0x20 [ 210.533305][ T2832] ? mutex_unlock+0x8f/0x230 [ 210.537883][ T2832] __se_sys_futex+0x135/0x330 [ 210.542543][ T2832] ? __kasan_check_write+0x14/0x20 [ 210.547635][ T2832] ? __x64_sys_futex+0x100/0x100 [ 210.552553][ T2832] ? ksys_write+0x1fa/0x260 [ 210.557043][ T2832] __x64_sys_futex+0xe5/0x100 [ 210.561710][ T2832] x64_sys_call+0x251/0x9a0 [ 210.566219][ T2832] do_syscall_64+0x4c/0xa0 [ 210.570644][ T2832] ? clear_bhb_loop+0x50/0xa0 [ 210.575325][ T2832] ? clear_bhb_loop+0x50/0xa0 [ 210.580010][ T2832] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.585928][ T2832] RIP: 0033:0x7fd868180559 [ 210.590339][ T2832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.609939][ T2832] RSP: 002b:00007fd866bd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.618356][ T2832] RAX: ffffffffffffffda RBX: 00007fd868407fa8 RCX: 00007fd868180559 [ 210.626329][ T2832] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd868407fac [ 210.634299][ T2832] RBP: 00007fd868407fa0 R08: 000d6568283a3f7e R09: 0000000000000000 [ 210.642312][ T2832] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 210.650280][ T2832] R13: 00007fd868408038 R14: 00007ffec39bc930 R15: 00007ffec39bca18 [ 210.658337][ T2832] [ 210.664526][ T2839] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 210.679650][ T2839] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 210.692248][ T2839] EXT4-fs (loop1): This should not happen!! Data will be lost [ 210.692248][ T2839] [ 210.701928][ T2839] EXT4-fs (loop1): Total free blocks count 0 [ 210.708063][ T2839] EXT4-fs (loop1): Free/Dirty block details [ 210.714130][ T2839] EXT4-fs (loop1): free_blocks=2415919504 [ 210.719932][ T2839] EXT4-fs (loop1): dirty_blocks=32 [ 210.725038][ T2839] EXT4-fs (loop1): Block reservation details [ 210.731140][ T2839] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 210.749663][ T1995] ip6_tunnel: ; xmit: Local address not yet configured! [ 210.792843][ T2843] loop4: detected capacity change from 0 to 256 [ 210.805802][ T30] audit: type=1400 audit(1792119493.878:278): avc: denied { getopt } for pid=2829 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.911655][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 210.970263][ T10] EXT4-fs (loop1): This should not happen!! Data will be lost [ 210.970263][ T10] [ 211.036538][ T30] audit: type=1400 audit(1792119493.878:279): avc: denied { ioctl } for pid=2815 comm="syz.1.698" path="/131/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.159211][ T30] audit: type=1400 audit(1792119494.298:280): avc: denied { read } for pid=2851 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.298860][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 212.329861][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.342119][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 212.350501][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.359054][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.367724][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.376922][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.383704][ T2861] loop2: detected capacity change from 0 to 40427 [ 212.391743][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.456574][ T2861] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 212.478631][ T2874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.712'. [ 212.488954][ T2874] netlink: 28 bytes leftover after parsing attributes in process `syz.5.712'. [ 212.505750][ T2861] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 212.525374][ T2861] F2FS-fs (loop2): fault_type options not supported [ 212.532716][ T2861] F2FS-fs (loop2): fault_injection options not supported [ 212.542413][ T2861] F2FS-fs (loop2): invalid crc value [ 212.661744][ T2861] F2FS-fs (loop2): Found nat_bits in checkpoint [ 212.775888][ T2881] loop4: detected capacity change from 0 to 512 [ 213.486286][ T2881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 213.504929][ T20] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 213.515691][ T2861] F2FS-fs (loop2): Start checkpoint disabled! [ 213.519266][ T2885] loop5: detected capacity change from 0 to 128 [ 213.529366][ T2881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 213.537557][ T2881] System zones: 1-12 [ 213.552940][ T2861] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 213.560833][ T2881] EXT4-fs (loop4): 1 truncate cleaned up [ 213.565987][ T2861] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 213.566615][ T2881] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 213.607206][ T2857] overlayfs: missing 'workdir' [ 213.658763][ T2885] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 213.905682][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.920948][ T2892] loop4: detected capacity change from 0 to 256 [ 213.935490][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.971017][ T20] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 213.997551][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.027073][ T20] usb 2-1: config 0 descriptor?? [ 214.454834][ T2894] loop5: detected capacity change from 0 to 1024 [ 214.491919][ T2894] EXT4-fs (loop5): Ignoring removed orlov option [ 214.516987][ T20] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0 [ 214.533238][ T20] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0 [ 214.541076][ T2894] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 214.550687][ T20] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0 [ 214.586613][ T2898] loop4: detected capacity change from 0 to 128 [ 214.637483][ T10] attempt to access beyond end of device [ 214.637483][ T10] loop2: rw=2049, want=40992, limit=40427 [ 214.676511][ T2898] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 214.697364][ T2894] FAULT_INJECTION: forcing a failure. [ 214.697364][ T2894] name fail_futex, interval 1, probability 0, space 0, times 0 [ 214.725715][ T20] hid-led: probe of 0003:1D34:000A.0004 failed with error -71 [ 214.745716][ T20] usb 2-1: USB disconnect, device number 13 [ 214.761731][ T2894] CPU: 1 PID: 2894 Comm: syz.5.718 Not tainted syzkaller #0 [ 214.769052][ T2894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.779118][ T2894] Call Trace: [ 214.782399][ T2894] [ 214.785333][ T2894] __dump_stack+0x21/0x30 [ 214.789667][ T2894] dump_stack_lvl+0x110/0x170 [ 214.794346][ T2894] ? show_regs_print_info+0x20/0x20 [ 214.799555][ T2894] dump_stack+0x15/0x20 [ 214.803724][ T2894] should_fail+0x3ab/0x500 [ 214.808306][ T2894] get_futex_key+0x143/0xb60 [ 214.812915][ T2894] ? futex_wait_restart+0x250/0x250 [ 214.818125][ T2894] futex_wake+0x133/0x8f0 [ 214.822544][ T2894] ? futex_wait+0x8f0/0x8f0 [ 214.827104][ T2894] ? __stack_depot_save+0x34/0x480 [ 214.832229][ T2894] ? path_openat+0x284f/0x2f80 [ 214.837005][ T2894] do_futex+0xd8d/0x2800 [ 214.841270][ T2894] ? kasan_set_track+0x4a/0x70 [ 214.846050][ T2894] ? kmem_cache_free+0x100/0x320 [ 214.851013][ T2894] ? do_sys_openat2+0x6df/0x7f0 [ 214.855960][ T2894] ? x64_sys_call+0x219/0x9a0 [ 214.860648][ T2894] ? do_syscall_64+0x4c/0xa0 [ 214.865248][ T2894] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.871332][ T2894] ? _kstrtoull+0x3bb/0x4c0 [ 214.875847][ T2894] ? futex_exit_release+0x1e0/0x1e0 [ 214.881048][ T2894] ? kstrtouint_from_user+0x1c4/0x220 [ 214.886444][ T2894] ? kstrtol_from_user+0x2a0/0x2a0 [ 214.891563][ T2894] ? __kasan_check_write+0x14/0x20 [ 214.896683][ T2894] ? proc_fail_nth_write+0x180/0x200 [ 214.901971][ T2894] ? proc_fail_nth_read+0x220/0x220 [ 214.907165][ T2894] ? security_file_permission+0x79/0xa0 [ 214.912743][ T2894] ? vfs_write+0xc72/0xfd0 [ 214.917146][ T2894] ? file_end_write+0x1b0/0x1b0 [ 214.922006][ T2894] ? __kasan_check_write+0x14/0x20 [ 214.927106][ T2894] ? mutex_unlock+0x8f/0x230 [ 214.931690][ T2894] __se_sys_futex+0x135/0x330 [ 214.936351][ T2894] ? __kasan_check_write+0x14/0x20 [ 214.941446][ T2894] ? __x64_sys_futex+0x100/0x100 [ 214.946366][ T2894] ? ksys_write+0x1fa/0x260 [ 214.950854][ T2894] __x64_sys_futex+0xe5/0x100 [ 214.955603][ T2894] x64_sys_call+0x251/0x9a0 [ 214.960110][ T2894] do_syscall_64+0x4c/0xa0 [ 214.964515][ T2894] ? clear_bhb_loop+0x50/0xa0 [ 214.969193][ T2894] ? clear_bhb_loop+0x50/0xa0 [ 214.973855][ T2894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.979734][ T2894] RIP: 0033:0x7fd868180559 [ 214.984133][ T2894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.003719][ T2894] RSP: 002b:00007fd866bd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 215.012129][ T2894] RAX: ffffffffffffffda RBX: 00007fd868407fa8 RCX: 00007fd868180559 [ 215.020088][ T2894] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd868407fac [ 215.028040][ T2894] RBP: 00007fd868407fa0 R08: 002837dcfa9aaeac R09: 0000000000000000 [ 215.035993][ T2894] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 215.043951][ T2894] R13: 00007fd868408038 R14: 00007ffec39bc930 R15: 00007ffec39bca18 [ 215.051998][ T2894] [ 215.635555][ T2910] device veth0_vlan left promiscuous mode [ 215.641647][ T2910] device veth0_vlan entered promiscuous mode [ 215.649108][ T2910] device veth1_macvtap left promiscuous mode [ 215.656652][ T2910] device veth1_macvtap entered promiscuous mode [ 215.664322][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.673629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.719047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.727813][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.734970][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.743379][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.752880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.776667][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.783814][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.791748][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.821319][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 215.829830][ T2919] loop5: detected capacity change from 0 to 512 [ 215.836552][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.851344][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 215.860441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.869252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.877841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.879617][ T2919] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.285656][ C0] ip6_tunnel: ; xmit: Local address not yet configured! [ 216.835421][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.846453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.849283][ T2929] loop4: detected capacity change from 0 to 256 [ 216.855023][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.871108][ T2919] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 216.872059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.887972][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.896956][ T2931] xt_TCPMSS: Only works on TCP SYN packets [ 216.904811][ T2932] loop2: detected capacity change from 0 to 128 [ 216.913231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.921866][ T2919] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.724: invalid indirect mapped block 2683928664 (level 1) [ 216.938157][ T2932] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 216.958228][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.963337][ T2919] EXT4-fs (loop5): Remounting filesystem read-only [ 216.967179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.980712][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.988850][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.997072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.005402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.013767][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.021783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.029827][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.036174][ T2919] EXT4-fs (loop5): 1 truncate cleaned up [ 217.037354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.043266][ T2919] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,sysvgroups,inlinecrypt,usrjquota=.barrier,jqfmt=vfsold,jqfmt=vfsv0,acl,debug_want_extra_isize=0x0000000000000008,errors=remount-ro,,. Quota mode: writeback. [ 217.050425][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.084766][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.093133][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.101086][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.110734][ T2704] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 217.131153][ T2925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 217.136126][ T2704] EXT4-fs (loop5): Remounting filesystem read-only [ 217.153609][ T2704] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 217.205848][ T1913] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 217.366303][ T2704] EXT4-fs (loop5): Remounting filesystem read-only [ 217.372989][ T2704] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 217.382458][ T2704] EXT4-fs (loop5): Remounting filesystem read-only [ 217.389599][ T2704] EXT4-fs error (device loop5): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 217.402161][ T2704] EXT4-fs (loop5): Remounting filesystem read-only [ 217.408980][ T2704] EXT4-fs error (device loop5): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 217.421407][ T2704] EXT4-fs (loop5): Remounting filesystem read-only [ 217.513703][ T2939] loop1: detected capacity change from 0 to 512 [ 217.556729][ T2939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.575684][ T1913] usb 7-1: Using ep0 maxpacket: 16 [ 217.590545][ T2939] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 217.607331][ T2939] System zones: 1-12 [ 217.617027][ T2939] EXT4-fs (loop1): 1 truncate cleaned up [ 217.636489][ T2939] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 217.691302][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.699094][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.712972][ T2942] device bridge_slave_0 entered promiscuous mode [ 217.722462][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.729860][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.737682][ T2942] device bridge_slave_1 entered promiscuous mode [ 217.794734][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.801836][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.809154][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.816278][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.841763][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.850184][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.858235][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.879700][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.888436][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.895497][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.903404][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.912523][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.919601][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.927401][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.935426][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.955500][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.968586][ T2942] device veth0_vlan entered promiscuous mode [ 217.975055][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.983559][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.991479][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.005469][ T2942] device veth1_macvtap entered promiscuous mode [ 218.015260][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.028687][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.048733][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.118704][ T10] device bridge_slave_1 left promiscuous mode [ 218.126082][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.143942][ T10] device bridge_slave_0 left promiscuous mode [ 218.158880][ T2951] loop4: detected capacity change from 0 to 1024 [ 218.175454][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.179428][ T1913] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.206049][ T1913] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.213072][ T2951] EXT4-fs (loop4): Ignoring removed orlov option [ 218.218230][ T1913] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 218.235734][ T10] device veth1_macvtap left promiscuous mode [ 218.242226][ T10] device veth0_vlan left promiscuous mode [ 218.245639][ T1913] usb 7-1: config 0 interface 0 has no altsetting 0 [ 218.249571][ T2951] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 218.254575][ T1913] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 218.317682][ T1913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.356327][ T1913] usb 7-1: config 0 descriptor?? [ 218.375720][ T2005] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 218.409487][ T2959] loop2: detected capacity change from 0 to 2048 [ 218.425879][ T20] ip6_tunnel: ; xmit: Local address not yet configured! [ 218.438622][ T2959] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 218.454139][ T30] audit: type=1326 audit(1792119501.588:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.2.737" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fa174559 code=0x7ffc0000 [ 218.481465][ T30] audit: type=1326 audit(1792119501.588:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.2.737" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fa174559 code=0x7ffc0000 [ 218.507046][ T30] audit: type=1326 audit(1792119501.588:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.2.737" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fa174559 code=0x7ffc0000 [ 218.532869][ T30] audit: type=1326 audit(1792119501.588:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.2.737" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fa174559 code=0x7ffc0000 [ 218.559218][ T30] audit: type=1326 audit(1792119501.618:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.2.737" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85fa174559 code=0x7ffc0000 [ 218.586216][ T30] audit: type=1326 audit(1792119501.618:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.2.737" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fa174559 code=0x7ffc0000 [ 218.627097][ T30] audit: type=1326 audit(1792119501.618:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.2.737" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fa174559 code=0x7ffc0000 [ 218.657444][ T30] audit: type=1326 audit(1792119501.618:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.2.737" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fa174559 code=0x7ffc0000 [ 218.683928][ T30] audit: type=1326 audit(1792119501.618:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.2.737" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fa174559 code=0x7ffc0000 [ 218.736725][ T30] audit: type=1326 audit(1792119501.618:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.2.737" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85fa174559 code=0x7ffc0000 [ 218.809422][ T2963] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 218.824310][ T2963] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 218.836717][ T2963] EXT4-fs (loop2): This should not happen!! Data will be lost [ 218.836717][ T2963] [ 218.846706][ T2963] EXT4-fs (loop2): Total free blocks count 0 [ 218.852722][ T2963] EXT4-fs (loop2): Free/Dirty block details [ 218.858656][ T2963] EXT4-fs (loop2): free_blocks=2415919504 [ 218.864429][ T2963] EXT4-fs (loop2): dirty_blocks=32 [ 218.869606][ T2963] EXT4-fs (loop2): Block reservation details [ 218.875706][ T2963] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 218.938145][ T2005] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.983747][ T2005] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.009723][ T2005] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 219.020501][ T2005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.056626][ T2005] usb 8-1: config 0 descriptor?? [ 219.424714][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 219.435673][ T1913] usbhid 7-1:0.0: can't add hid device: -71 [ 219.439186][ T20] ip6_tunnel: ; xmit: Local address not yet configured! [ 219.451723][ T1913] usbhid: probe of 7-1:0.0 failed with error -71 [ 219.458776][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 219.458776][ T10] [ 219.472820][ T1913] usb 7-1: USB disconnect, device number 2 [ 219.598848][ T2965] loop4: detected capacity change from 0 to 128 [ 219.647095][ T2005] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 219.654925][ T2005] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 219.850501][ T2965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 219.894367][ T2005] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 219.915704][ T2005] hid-led: probe of 0003:1D34:000A.0005 failed with error -71 [ 219.949900][ T2005] usb 8-1: USB disconnect, device number 2 [ 219.977817][ T2979] loop4: detected capacity change from 0 to 512 [ 219.999033][ T2981] loop1: detected capacity change from 0 to 256 [ 220.036586][ T2979] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.118876][ T2985] loop6: detected capacity change from 0 to 512 [ 220.168390][ T2985] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 220.225069][ T2979] ext4 filesystem being mounted at /syzcgroup/cpu/syz4/memory.force_empty supports timestamps until 2038-01-19 (0x7fffffff) [ 220.270322][ T2985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 220.278545][ T2985] System zones: 1-12 [ 220.287044][ T2985] EXT4-fs (loop6): 1 truncate cleaned up [ 220.292743][ T2985] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 221.076718][ T2992] loop7: detected capacity change from 0 to 16 [ 221.105429][ T2992] erofs: (device loop7): mounted with root inode @ nid 36. [ 221.711389][ T2996] loop6: detected capacity change from 0 to 128 [ 221.738044][ T2996] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 221.794913][ T2999] loop2: detected capacity change from 0 to 128 [ 221.809609][ T3000] loop1: detected capacity change from 0 to 1024 [ 221.846211][ T3000] EXT4-fs (loop1): Ignoring removed orlov option [ 221.848785][ T3002] loop4: detected capacity change from 0 to 2048 [ 221.857581][ T3000] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 221.977086][ T2999] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 222.121926][ T3002] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 222.162456][ T3010] xt_TCPMSS: Only works on TCP SYN packets [ 222.292988][ T3013] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 222.307773][ T3013] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 222.320147][ T3013] EXT4-fs (loop4): This should not happen!! Data will be lost [ 222.320147][ T3013] [ 222.329803][ T3013] EXT4-fs (loop4): Total free blocks count 0 [ 222.335834][ T3013] EXT4-fs (loop4): Free/Dirty block details [ 222.341813][ T3013] EXT4-fs (loop4): free_blocks=2415919504 [ 222.347579][ T3013] EXT4-fs (loop4): dirty_blocks=32 [ 222.352736][ T3013] EXT4-fs (loop4): Block reservation details [ 222.358754][ T3013] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 223.602572][ T30] kauditd_printk_skb: 327 callbacks suppressed [ 223.602587][ T30] audit: type=1326 audit(1792119505.388:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.750" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bfc2f559 code=0x7ffc0000 [ 223.634477][ T30] audit: type=1326 audit(1792119505.388:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.750" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bfc2f559 code=0x7ffc0000 [ 223.916385][ T30] audit: type=1326 audit(1792119505.388:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.750" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bfc2f559 code=0x7ffc0000 [ 223.941560][ T30] audit: type=1326 audit(1792119505.388:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.750" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68bfc2f2c2 code=0x7ffc0000 [ 223.972080][ T30] audit: type=1326 audit(1792119505.388:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.750" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f68bfc2f357 code=0x7ffc0000 [ 223.996841][ T30] audit: type=1326 audit(1792119505.398:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.750" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f68bfbec251 code=0x7ffc0000 [ 223.996944][ T2005] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 224.021526][ T30] audit: type=1326 audit(1792119505.398:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.750" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f68bfc30349 code=0x7ffc0000 [ 224.053716][ T30] audit: type=1326 audit(1792119505.398:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.750" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f68bfbec2bb code=0x7ffc0000 [ 224.079003][ T30] audit: type=1326 audit(1792119505.398:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.750" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bfc2f559 code=0x7ffc0000 [ 224.103760][ T30] audit: type=1326 audit(1792119505.398:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.4.750" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bfc2f559 code=0x7ffc0000 [ 224.223678][ T905] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 224.236011][ T905] EXT4-fs (loop4): This should not happen!! Data will be lost [ 224.236011][ T905] [ 225.349606][ T3033] loop7: detected capacity change from 0 to 256 [ 225.374274][ T3039] loop4: detected capacity change from 0 to 256 [ 225.480499][ T3049] loop6: detected capacity change from 0 to 1024 [ 225.488472][ T3050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 225.499574][ T3050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.760'. [ 225.541411][ T3049] EXT4-fs (loop6): Ignoring removed orlov option [ 225.555056][ T3052] loop4: detected capacity change from 0 to 128 [ 225.566440][ T3027] loop1: detected capacity change from 0 to 40427 [ 225.577278][ T3049] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,,errors=continue. Quota mode: none. [ 225.602273][ T3027] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 225.610234][ T3027] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 225.618721][ T3027] ================================================================================ [ 225.628080][ T3027] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:934:5 [ 225.634959][ T3027] shift exponent 136 is too large for 32-bit type 'int' [ 225.642051][ T3027] CPU: 1 PID: 3027 Comm: syz.1.755 Not tainted syzkaller #0 [ 225.649348][ T3027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.659402][ T3027] Call Trace: [ 225.662709][ T3027] [ 225.665624][ T3027] __dump_stack+0x21/0x30 [ 225.669942][ T3027] dump_stack_lvl+0x110/0x170 [ 225.674595][ T3027] ? show_regs_print_info+0x20/0x20 [ 225.679804][ T3027] ? slab_free_freelist_hook+0xc2/0x190 [ 225.685332][ T3027] dump_stack+0x15/0x20 [ 225.689486][ T3027] ubsan_epilogue+0xe/0x40 [ 225.693895][ T3027] __ubsan_handle_shift_out_of_bounds+0x364/0x3f0 [ 225.700307][ T3027] ? match_int+0x142/0x1a0 [ 225.704718][ T3027] ? __kmalloc_track_caller+0x13c/0x2c0 [ 225.710249][ T3027] parse_options+0x476a/0x4790 [ 225.715005][ T3027] ? default_options+0xb40/0xb40 [ 225.719927][ T3027] ? kstrdup+0x51/0x70 [ 225.723977][ T3027] ? memcpy+0x56/0x70 [ 225.727952][ T3027] f2fs_fill_super+0x1f09/0x6dd0 [ 225.732882][ T3027] ? vsnprintf+0x189d/0x1990 [ 225.737484][ T3027] ? kill_f2fs_super+0x3d0/0x3d0 [ 225.742419][ T3027] ? vscnprintf+0x80/0x80 [ 225.746826][ T3027] ? mutex_unlock+0x8f/0x230 [ 225.751395][ T3027] ? set_blocksize+0x1e9/0x360 [ 225.756140][ T3027] ? sb_set_blocksize+0xaa/0xf0 [ 225.760969][ T3027] ? kill_f2fs_super+0x3d0/0x3d0 [ 225.765886][ T3027] mount_bdev+0x28d/0x3c0 [ 225.770195][ T3027] ? kill_f2fs_super+0x3d0/0x3d0 [ 225.775110][ T3027] f2fs_mount+0x34/0x40 [ 225.779249][ T3027] legacy_get_tree+0xed/0x190 [ 225.783907][ T3027] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 225.790041][ T3027] vfs_get_tree+0x89/0x260 [ 225.794443][ T3027] do_new_mount+0x251/0xb40 [ 225.798928][ T3027] ? security_capable+0x87/0xb0 [ 225.803769][ T3027] path_mount+0x640/0xff0 [ 225.808081][ T3027] __se_sys_mount+0x320/0x390 [ 225.812747][ T3027] ? __x64_sys_mount+0xd0/0xd0 [ 225.817515][ T3027] __x64_sys_mount+0xbf/0xd0 [ 225.822099][ T3027] x64_sys_call+0x6bf/0x9a0 [ 225.826593][ T3027] do_syscall_64+0x4c/0xa0 [ 225.831003][ T3027] ? clear_bhb_loop+0x50/0xa0 [ 225.835683][ T3027] ? clear_bhb_loop+0x50/0xa0 [ 225.840346][ T3027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.846247][ T3027] RIP: 0033:0x7f99b515f7ca [ 225.850645][ T3027] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.870233][ T3027] RSP: 002b:00007f99b3b74e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.878715][ T3027] RAX: ffffffffffffffda RBX: 00007f99b3b74ee0 RCX: 00007f99b515f7ca [ 225.886847][ T3027] RDX: 0000200000000200 RSI: 0000200000000040 RDI: 00007f99b3b74ea0 [ 225.894801][ T3027] RBP: 0000200000000200 R08: 00007f99b3b74ee0 R09: 0000000000000000 [ 225.902756][ T3027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 225.910714][ T3027] R13: 00007f99b3b74ea0 R14: 0000000000005508 R15: 00002000000003c0 [ 225.918676][ T3027] [ 225.921786][ T2005] usb 8-1: device not accepting address 3, error -71 [ 225.929177][ T3027] ================================================================================ [ 225.929330][ T3052] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 225.938559][ T3027] F2FS-fs (loop1): Not support 256, larger than 256 [ 232.286231][ C0] ip6_tunnel: ; xmit: Local address not yet configured!