last executing test programs: 12.952677391s ago: executing program 4 (id=272): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fdatasync(r0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000840)={0x7, 0x7, 0x3}, &(0x7f0000000880)=0x28) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000010c0)) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="41760100", @ANYRES16=r3, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a000000ac1414250000000000000000120002000a0000000000df64ff01000000000000000000000000000100000000"], 0x60}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0xfffffffffffffffc, 0x1, 0x0, 0xfffffffffffe, 0x5, 0xfffffffffffffffa}, {0x0, 0x6, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@empty, 0x3505, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) 11.713150287s ago: executing program 3 (id=276): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fdatasync(r0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000840)={0x7, 0x7, 0x3}, &(0x7f0000000880)=0x28) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000010c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11.620189537s ago: executing program 2 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000ff10"], 0x48) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002000000020009a848164dc2962f2bcd5034c9d25e2000003000000000000000000000d000000000000000001030006040000000100000000000000005f00"], &(0x7f00000005c0)=""/148, 0x3b, 0x94, 0x1}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, 0x0, 0x610001d4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r5, 0x111, 0x2, 0x0, &(0x7f0000000080)) r6 = fsopen(&(0x7f0000000200)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000500)='\x00\x00\x97\x00\xfb\xe9\x00%\xf4c\xeenq71\x8a\xd4V\xcf\xfd%G\xbb#_\b\x80{7\x03\n\xa83T#<\xf5\xa6l,\xac\xf9\xef\xf4S\x8dgx+\xcb\xb6\xcf\xd4I7>\xf5h\x97T\xbbd\x948\x9a\x88_S\xe9\x98G\xc3\x10K\xdd\x90\xb8\xdeg\xb1\xb4\xda\xda\x02\x98\xccV\x01\xb1\x94\xc6\x17r\'\xe3\x1d\xc6\xc9{\x87\xb6\\\x81\x9f\xc5\xd8G\x83\xec\xd3\xc4\x16\xef\xc5\x99\xfe\xb0_N\'\xd6\x87\xd0\xca+MC\x7f\xe0\xcd\xc4!\xc1\x91v\x14Y\x03S\x94\x88~\a\xc2\x8fe\x8c\a\xa3\x1b\xc6R/d\xef\xdc\x94\xc4Qj\x00h\x90\x93?\xc0\xd1\xef\xe9\x9e\xbd\xa20\xdel\xd1\n\xdb\xc6G\xf5\xf9\x93\x17\xb29f\x9c\xb0\xd8n\xe7c\x18F\xee\x8d\xd6V\xe5\xd0\xf0\x04\xc3\xd4\rI\xed2\x10\x19\xe2\x14\x17\xce\t@\xce\xc0\xa5\x81R\x88\xa3o\xaf\xd290\"\xa79L\xf0\xd0\xe6\xb3D\xb0\v;8\xde\xdei\xd1\b\xdf\x16\xbe\xa6?\xe1UY\x18QJU\x80\xd0|\x11\xd2\xb0Ia\xb6e\xc3o\xd0\xe0\x1aL\xae\x1bG\xb2\r\xeb\x9c\xe0\xa0\x84Q\xf9-\xfb\x18\x88$\xb1]A\xf5\xee\xe9\xb3\xf7Fw\xcc!', &(0x7f0000000100)='pipefs\x00Q\x8cr\x0e\xbd\xe3>\x00zi>\xa7Oc\xa4Wo\x16\x93\xe8\xb1]\x8b\x02d*\xc1\xf3\x9d\xb4X\xf9\x94\xc2\xc2c\xa4v>N\xf67l\xc9\xbckQYK\xb8', 0x0) readv(r6, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2) ioctl$FICLONE(r0, 0x40049409, r5) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="200000001100010000000000fedbdf251e0000001300000008000002", @ANYRES32, @ANYBLOB], 0x20}], 0x1}, 0x0) 10.61248945s ago: executing program 2 (id=281): r0 = io_uring_setup(0x48f3, &(0x7f0000000240)={0x0, 0x6503, 0x2, 0x0, 0x14f}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x440000, 0x30) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) unshare(0x22020600) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r1) close_range(r0, r0, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x2080, 0x44) creat(&(0x7f0000000100)='./file0\x00', 0x7a) r2 = socket(0x10, 0x1, 0x200) recvmsg(r2, 0x0, 0x10022) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000951baa05c7c45be6f6542b73030000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x7fff, 0x2, 0xe, 0x3ff}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 10.281086844s ago: executing program 4 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, 0x0, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 10.181520135s ago: executing program 2 (id=283): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r6) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x882010}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) writev(r6, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r6) chdir(&(0x7f0000000100)='./file0\x00') pwritev2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 5.832297479s ago: executing program 4 (id=285): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.831489249s ago: executing program 0 (id=286): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x400002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x42) readv(r1, &(0x7f0000000540)=[{0x0}], 0x1) ioctl(r0, 0x541b, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r5 = dup3(r3, r2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) memfd_create(0x0, 0x2) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f00000002c0)={'NETMAP\x00'}, 0x0) r7 = eventfd(0x0) fcntl$lock(r7, 0x7, &(0x7f00000006c0)={0x1, 0x1, 0xffffffff, 0xfffffffffffffeff}) r8 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x94) unshare(0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) unlink(&(0x7f0000000240)='./file0\x00') ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x4008630a, 0x800}], 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x2000001, 0x2010, r5, 0x0) 5.830928879s ago: executing program 3 (id=287): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@code={0xa, 0x54, {"670f01c84d0fc72a0f20e035400000000f22e066b827018ed06766410f388191b910720b650f01bce3815ffd620fda7c8000f30f1608400f0966ba420066b8050066ef"}}], 0x54}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.678290281s ago: executing program 2 (id=288): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fdatasync(r0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000840)={0x7, 0x7, 0x3}, &(0x7f0000000880)=0x28) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000010c0)) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 5.630515971s ago: executing program 0 (id=290): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183b41, 0x51) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 5.413143994s ago: executing program 0 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000ff10"], 0x48) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002000000020009a848164dc2962f2bcd5034c9d25e2000003000000000000000000000d000000000000000001030006040000000100000000000000005f00"], &(0x7f00000005c0)=""/148, 0x3b, 0x94, 0x1}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, 0x0, 0x610001d4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r5, 0x111, 0x2, 0x0, &(0x7f0000000080)) r6 = fsopen(&(0x7f0000000200)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000500)='\x00\x00\x97\x00\xfb\xe9\x00%\xf4c\xeenq71\x8a\xd4V\xcf\xfd%G\xbb#_\b\x80{7\x03\n\xa83T#<\xf5\xa6l,\xac\xf9\xef\xf4S\x8dgx+\xcb\xb6\xcf\xd4I7>\xf5h\x97T\xbbd\x948\x9a\x88_S\xe9\x98G\xc3\x10K\xdd\x90\xb8\xdeg\xb1\xb4\xda\xda\x02\x98\xccV\x01\xb1\x94\xc6\x17r\'\xe3\x1d\xc6\xc9{\x87\xb6\\\x81\x9f\xc5\xd8G\x83\xec\xd3\xc4\x16\xef\xc5\x99\xfe\xb0_N\'\xd6\x87\xd0\xca+MC\x7f\xe0\xcd\xc4!\xc1\x91v\x14Y\x03S\x94\x88~\a\xc2\x8fe\x8c\a\xa3\x1b\xc6R/d\xef\xdc\x94\xc4Qj\x00h\x90\x93?\xc0\xd1\xef\xe9\x9e\xbd\xa20\xdel\xd1\n\xdb\xc6G\xf5\xf9\x93\x17\xb29f\x9c\xb0\xd8n\xe7c\x18F\xee\x8d\xd6V\xe5\xd0\xf0\x04\xc3\xd4\rI\xed2\x10\x19\xe2\x14\x17\xce\t@\xce\xc0\xa5\x81R\x88\xa3o\xaf\xd290\"\xa79L\xf0\xd0\xe6\xb3D\xb0\v;8\xde\xdei\xd1\b\xdf\x16\xbe\xa6?\xe1UY\x18QJU\x80\xd0|\x11\xd2\xb0Ia\xb6e\xc3o\xd0\xe0\x1aL\xae\x1bG\xb2\r\xeb\x9c\xe0\xa0\x84Q\xf9-\xfb\x18\x88$\xb1]A\xf5\xee\xe9\xb3\xf7Fw\xcc!', &(0x7f0000000100)='pipefs\x00Q\x8cr\x0e\xbd\xe3>\x00zi>\xa7Oc\xa4Wo\x16\x93\xe8\xb1]\x8b\x02d*\xc1\xf3\x9d\xb4X\xf9\x94\xc2\xc2c\xa4v>N\xf67l\xc9\xbckQYK\xb8', 0x0) readv(r6, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2) ioctl$FICLONE(r0, 0x40049409, r5) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="200000001100010000000000fedbdf251e0000001300000008000002", @ANYRES32, @ANYBLOB], 0x20}], 0x1}, 0x0) 5.397711484s ago: executing program 4 (id=292): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fdatasync(r0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000840)={0x7, 0x7, 0x3}, &(0x7f0000000880)=0x28) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000010c0)) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="41760100", @ANYRES16=r3, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a000000ac1414250000000000000000120002000a0000000000df64ff01000000000000000000000000000100000000"], 0x60}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0xfffffffffffffffc, 0x1, 0x0, 0xfffffffffffe, 0x5, 0xfffffffffffffffa}, {0x0, 0x6, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@empty, 0x3505, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) 5.346492674s ago: executing program 3 (id=293): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r4}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x4) socket$key(0xf, 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r8, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 4.448238676s ago: executing program 3 (id=295): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=01777777777777777777771,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x1f5, &(0x7f0000000600)="$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") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000480)=""/177, 0xb1, 0xe0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x80432) syz_mount_image$fuse(0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) 4.446279066s ago: executing program 0 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000ff10"], 0x48) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002000000020009a848164dc2962f2bcd5034c9d25e2000003000000000000000000000d000000000000000001030006040000000100000000000000005f00"], &(0x7f00000005c0)=""/148, 0x3b, 0x94, 0x1}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x610001d4) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r5, 0x111, 0x2, 0x0, &(0x7f0000000080)) r6 = fsopen(&(0x7f0000000200)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000500)='\x00\x00\x97\x00\xfb\xe9\x00%\xf4c\xeenq71\x8a\xd4V\xcf\xfd%G\xbb#_\b\x80{7\x03\n\xa83T#<\xf5\xa6l,\xac\xf9\xef\xf4S\x8dgx+\xcb\xb6\xcf\xd4I7>\xf5h\x97T\xbbd\x948\x9a\x88_S\xe9\x98G\xc3\x10K\xdd\x90\xb8\xdeg\xb1\xb4\xda\xda\x02\x98\xccV\x01\xb1\x94\xc6\x17r\'\xe3\x1d\xc6\xc9{\x87\xb6\\\x81\x9f\xc5\xd8G\x83\xec\xd3\xc4\x16\xef\xc5\x99\xfe\xb0_N\'\xd6\x87\xd0\xca+MC\x7f\xe0\xcd\xc4!\xc1\x91v\x14Y\x03S\x94\x88~\a\xc2\x8fe\x8c\a\xa3\x1b\xc6R/d\xef\xdc\x94\xc4Qj\x00h\x90\x93?\xc0\xd1\xef\xe9\x9e\xbd\xa20\xdel\xd1\n\xdb\xc6G\xf5\xf9\x93\x17\xb29f\x9c\xb0\xd8n\xe7c\x18F\xee\x8d\xd6V\xe5\xd0\xf0\x04\xc3\xd4\rI\xed2\x10\x19\xe2\x14\x17\xce\t@\xce\xc0\xa5\x81R\x88\xa3o\xaf\xd290\"\xa79L\xf0\xd0\xe6\xb3D\xb0\v;8\xde\xdei\xd1\b\xdf\x16\xbe\xa6?\xe1UY\x18QJU\x80\xd0|\x11\xd2\xb0Ia\xb6e\xc3o\xd0\xe0\x1aL\xae\x1bG\xb2\r\xeb\x9c\xe0\xa0\x84Q\xf9-\xfb\x18\x88$\xb1]A\xf5\xee\xe9\xb3\xf7Fw\xcc!', &(0x7f0000000100)='pipefs\x00Q\x8cr\x0e\xbd\xe3>\x00zi>\xa7Oc\xa4Wo\x16\x93\xe8\xb1]\x8b\x02d*\xc1\xf3\x9d\xb4X\xf9\x94\xc2\xc2c\xa4v>N\xf67l\xc9\xbckQYK\xb8', 0x0) readv(r6, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2) ioctl$FICLONE(r0, 0x40049409, r5) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="200000001100010000000000fedbdf251e0000001300000008000002", @ANYRES32, @ANYBLOB], 0x20}], 0x1}, 0x0) 4.382269187s ago: executing program 1 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.334238218s ago: executing program 1 (id=297): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x15) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3.201996301s ago: executing program 0 (id=298): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.769626906s ago: executing program 4 (id=299): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r6) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x882010}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) writev(r6, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r8, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 2.742533397s ago: executing program 2 (id=300): r0 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000800, &(0x7f0000000000)={[{@usrquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1}}]}, 0x1, 0x781, &(0x7f0000000800)="$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") 2.738647047s ago: executing program 3 (id=301): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183b41, 0x51) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 517.946194ms ago: executing program 4 (id=302): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000006c0), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) syz_open_procfs$pagemap(r4, &(0x7f0000000500)) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="2b63707520b7b5b5b787da75971822b3053cf984212c75300eb32231072028dc3c1db4022586aba387c1c4c0b7f84a5e7d1b8dbea50f1153eeb62b1924d12c745b2385ea2d439d1bf67bc89ed76a6581c06978034b956689f013f22d"], 0x5) setreuid(0xee00, 0x0) 301.726357ms ago: executing program 1 (id=303): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 301.347977ms ago: executing program 3 (id=304): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=01777777777777777777771,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c636865636b3d7374726963742c6e66732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c64656275672c64656275672c6e6f646f74732c6e6f646f74732c646f74732c666c7573682c646f74732c64757461626c652c646f74732c6e6f646f74732c636865630010000000000000642c646d61736b3d30303030303030303030303030103030303030303030312c000000000000000000000000000000000016144942e6a085c346bdd29bfbd723fb323fbc4c40c0c655f43fdfc40ff26269669d3cd18bda29b9222c25beb349e1469064c8fd0b912fcec57218ccfe9bca0ad00e24c023f65880aae70aab031a5c3b18f4087c3695b29bb5b6b8084c658af38cdbcd7da0f0aa8c7201775ff1fd3afcf56713a1fbdbde2fe5020c5193cea9a903b40e75769cbe096d4e3abc255e7749f95c3550ef15c6dbfb292d9f90ce4b299e"], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000480)=""/177, 0xb1, 0xe0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$fuse(0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) 267.579097ms ago: executing program 0 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0xa0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, r2, 0x0) fdatasync(r1) close(0x3) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x33) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(r5, 0x0, 0xee01) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x28, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r6, 0x0, 0x0, 0x40002000, 0x0, 0xfffffffffffffdfd) 196.498238ms ago: executing program 2 (id=307): r0 = io_uring_setup(0x48f3, &(0x7f0000000240)={0x0, 0x6503, 0x2, 0x0, 0x14f}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x440000, 0x30) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) unshare(0x22020600) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r1) close_range(r0, r0, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x2080, 0x44) creat(&(0x7f0000000100)='./file0\x00', 0x7a) r2 = socket(0x10, 0x1, 0x200) recvmsg(r2, 0x0, 0x10022) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000951baa05c7c45be6f6542b73030000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x7fff, 0x2, 0xe, 0x3ff}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 94.367619ms ago: executing program 1 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.857811ms ago: executing program 1 (id=309): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$incfs(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f00000000c0)='./file1\x00', 0x80, 0x1c8) symlinkat(&(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') 0s ago: executing program 1 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbdd, &(0x7f0000019200)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 23.960743][ T28] audit: type=1400 audit(1778118154.992:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.961831][ T278] cgroup: Unknown subsys name 'net' [ 23.983629][ T28] audit: type=1400 audit(1778118154.992:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.011309][ T28] audit: type=1400 audit(1778118155.022:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.011476][ T278] cgroup: Unknown subsys name 'devices' [ 24.153760][ T278] cgroup: Unknown subsys name 'hugetlb' [ 24.159538][ T278] cgroup: Unknown subsys name 'rlimit' [ 24.291536][ T28] audit: type=1400 audit(1778118155.322:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.314826][ T28] audit: type=1400 audit(1778118155.322:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.340293][ T28] audit: type=1400 audit(1778118155.322:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.348862][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.372602][ T28] audit: type=1400 audit(1778118155.412:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.398288][ T28] audit: type=1400 audit(1778118155.412:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.408062][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.424901][ T28] audit: type=1400 audit(1778118155.442:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.459684][ T28] audit: type=1400 audit(1778118155.442:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.646807][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.654543][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.662602][ T286] device bridge_slave_0 entered promiscuous mode [ 25.690558][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.697664][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.705241][ T286] device bridge_slave_1 entered promiscuous mode [ 25.721284][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.728859][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.736335][ T287] device bridge_slave_0 entered promiscuous mode [ 25.759240][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.766595][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.774153][ T287] device bridge_slave_1 entered promiscuous mode [ 25.784444][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.791522][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.799123][ T290] device bridge_slave_0 entered promiscuous mode [ 25.809160][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.816445][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.823873][ T290] device bridge_slave_1 entered promiscuous mode [ 25.852418][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.859576][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.867483][ T289] device bridge_slave_0 entered promiscuous mode [ 25.877481][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.884808][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.892489][ T289] device bridge_slave_1 entered promiscuous mode [ 25.960632][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.968094][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.975876][ T288] device bridge_slave_0 entered promiscuous mode [ 25.983249][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.990389][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.998011][ T288] device bridge_slave_1 entered promiscuous mode [ 26.154631][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.161823][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.169189][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.176249][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.190309][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.197524][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.204834][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.212262][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.225095][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.232640][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.239931][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.247083][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.257500][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.264580][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.271990][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.279173][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.298345][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.305978][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.313713][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.321057][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.328638][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.335929][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.343604][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.350822][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.359223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.366670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.388051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.396266][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.403399][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.435083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.443514][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.450747][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.469196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.483908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.492766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.500203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.509349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.517716][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.524905][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.542772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.551318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.559794][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.566869][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.574373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.582816][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.590352][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.627651][ T286] device veth0_vlan entered promiscuous mode [ 26.635556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.644056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.651474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.659749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.668206][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.675385][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.682846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.691023][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.698179][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.705689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.714298][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.721405][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.728995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.737367][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.745281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.753413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.761433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.769562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.777056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.784986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.793410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.801560][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.809317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.830121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.838691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.847098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.855880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.864375][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.871421][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.878927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.887474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.895826][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.903061][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.910508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.919102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.940449][ T290] device veth0_vlan entered promiscuous mode [ 26.947278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.955762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.964655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.972998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.981183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.004616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.014782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.023190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.031238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.039791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.047602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.058579][ T286] device veth1_macvtap entered promiscuous mode [ 27.067243][ T289] device veth0_vlan entered promiscuous mode [ 27.077831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.086310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.094829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.103055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.111146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.118899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.129651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.138340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.155336][ T290] device veth1_macvtap entered promiscuous mode [ 27.164790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.173788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.182951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.194329][ T289] device veth1_macvtap entered promiscuous mode [ 27.210229][ T287] device veth0_vlan entered promiscuous mode [ 27.217309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.225791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.234411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.243294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.252311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.260654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.269522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.278176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.286513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.294700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.302337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.324854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.325537][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 27.334362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.350566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.359176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.367875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.376477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.384775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.400329][ T288] device veth0_vlan entered promiscuous mode [ 27.407259][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.416510][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.424726][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.444449][ T313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.449419][ T288] device veth1_macvtap entered promiscuous mode [ 27.474275][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.523800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.534249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.561935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.591004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.605163][ T287] device veth1_macvtap entered promiscuous mode [ 27.616473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.729637][ T326] loop2: detected capacity change from 0 to 2048 [ 27.856215][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.903452][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.931172][ T326] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.941271][ T326] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.254927][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.297461][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.462364][ T290] EXT4-fs (loop2): unmounting filesystem. [ 29.102147][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 29.102225][ T28] audit: type=1400 audit(1778118159.592:107): avc: denied { create } for pid=333 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.928640][ T354] Zero length message leads to an empty skb [ 30.011772][ C0] sched: RT throttling activated [ 31.371320][ T28] audit: type=1400 audit(1778118159.692:108): avc: denied { create } for pid=333 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.456037][ T28] audit: type=1400 audit(1778118160.672:109): avc: denied { write } for pid=346 comm="syz.0.9" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.480646][ T28] audit: type=1400 audit(1778118160.962:110): avc: denied { create } for pid=348 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.502687][ T366] loop1: detected capacity change from 0 to 512 [ 31.521095][ T28] audit: type=1400 audit(1778118160.962:111): avc: denied { write } for pid=348 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.796098][ T366] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.12: iget: bad i_size value: 38620345925642 [ 31.835252][ T366] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.12: couldn't read orphan inode 15 (err -117) [ 31.846201][ T28] audit: type=1400 audit(1778118160.972:112): avc: denied { read } for pid=348 comm="syz.2.8" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.870017][ T28] audit: type=1400 audit(1778118160.972:113): avc: denied { open } for pid=348 comm="syz.2.8" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.894122][ T366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.897364][ T28] audit: type=1400 audit(1778118161.332:114): avc: denied { read } for pid=357 comm="syz.1.10" name="usbmon6" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 31.927749][ T28] audit: type=1400 audit(1778118161.332:115): avc: denied { open } for pid=357 comm="syz.1.10" path="/dev/usbmon6" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 31.952268][ T28] audit: type=1400 audit(1778118162.642:116): avc: denied { create } for pid=362 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.137253][ T377] 9pnet_virtio: no channels available for device syz [ 33.242012][ T375] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.12: bg 0: block 5: invalid block bitmap [ 33.272008][ T375] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 33.311649][ T375] EXT4-fs (loop1): This should not happen!! Data will be lost [ 33.311649][ T375] [ 33.342401][ T366] EXT4-fs (loop1): shut down requested (1) [ 33.360604][ T375] EXT4-fs (loop1): Total free blocks count 0 [ 33.366785][ T375] EXT4-fs (loop1): Free/Dirty block details [ 33.372775][ T375] EXT4-fs (loop1): free_blocks=0 [ 33.377804][ T375] EXT4-fs (loop1): dirty_blocks=2980 [ 33.383487][ T375] EXT4-fs (loop1): Block reservation details [ 33.389491][ T375] EXT4-fs (loop1): i_reserved_data_blocks=2980 [ 33.885966][ T382] loop4: detected capacity change from 0 to 40427 [ 33.925425][ T382] F2FS-fs (loop4): invalid crc value [ 33.969708][ T382] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.043776][ T382] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 34.357257][ T416] loop1: detected capacity change from 0 to 512 [ 34.450145][ T382] syz.4.16: attempt to access beyond end of device [ 34.450145][ T382] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 34.537786][ T420] loop0: detected capacity change from 0 to 512 [ 34.683063][ T416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2803c1ac, mo2=0003] [ 34.701470][ T420] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.28: iget: bad i_size value: 38620345925642 [ 34.750027][ T416] System zones: 1-12 [ 34.766692][ T420] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.28: couldn't read orphan inode 15 (err -117) [ 34.779231][ T416] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.27: inode #1: comm syz.1.27: iget: illegal inode # [ 34.799427][ T416] EXT4-fs (loop1): Remounting filesystem read-only [ 34.812614][ T416] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.27: error while reading EA inode 1 err=-117 [ 34.824962][ T420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.838436][ T416] EXT4-fs (loop1): Remounting filesystem read-only [ 34.852755][ T416] EXT4-fs (loop1): 1 orphan inode deleted [ 34.866188][ T416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 34.924161][ T416] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.27: deleted inode referenced: 15 [ 34.979074][ T425] loop4: detected capacity change from 0 to 512 [ 34.985236][ T416] EXT4-fs (loop1): Remounting filesystem read-only [ 35.006572][ T424] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.28: bg 0: block 5: invalid block bitmap [ 35.026840][ T425] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.29: iget: bad i_size value: 38620345925642 [ 35.047835][ T425] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.29: couldn't read orphan inode 15 (err -117) [ 35.049888][ T424] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1792 with error 28 [ 35.072289][ T425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.164624][ T424] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.164624][ T424] [ 35.197657][ T381] loop2: detected capacity change from 0 to 131072 [ 35.241955][ T424] EXT4-fs (loop0): Total free blocks count 0 [ 35.262206][ T424] EXT4-fs (loop0): Free/Dirty block details [ 35.289349][ T381] F2FS-fs (loop2): invalid crc value [ 35.289473][ T424] EXT4-fs (loop0): free_blocks=0 [ 35.344240][ T424] EXT4-fs (loop0): dirty_blocks=1792 [ 35.374526][ T420] EXT4-fs (loop0): shut down requested (1) [ 35.406443][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 35.406468][ T28] audit: type=1400 audit(1778118166.422:140): avc: denied { watch watch_reads } for pid=432 comm="syz.3.31" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.488529][ T381] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 35.571884][ T369] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 35.583459][ T424] EXT4-fs (loop0): Block reservation details [ 35.598301][ T424] EXT4-fs (loop0): i_reserved_data_blocks=1792 [ 35.615475][ T28] audit: type=1400 audit(1778118166.432:141): avc: denied { unlink } for pid=432 comm="syz.3.31" name="#1" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.636206][ T425] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 35.637755][ T28] audit: type=1400 audit(1778118166.432:142): avc: denied { create } for pid=432 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.671087][ T28] audit: type=1400 audit(1778118166.442:143): avc: denied { connect } for pid=432 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.690780][ T28] audit: type=1400 audit(1778118166.442:144): avc: denied { getopt } for pid=432 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.710477][ T425] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.710477][ T425] [ 35.720342][ T425] EXT4-fs (loop4): Total free blocks count 0 [ 35.726631][ T425] EXT4-fs (loop4): Free/Dirty block details [ 35.732768][ T425] EXT4-fs (loop4): free_blocks=0 [ 35.737857][ T425] EXT4-fs (loop4): dirty_blocks=2604 [ 35.743438][ T425] EXT4-fs (loop4): Block reservation details [ 35.749532][ T425] EXT4-fs (loop4): i_reserved_data_blocks=2604 [ 35.770457][ T308] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 548 with error 28 [ 36.516216][ T28] audit: type=1400 audit(1778118167.552:145): avc: denied { create } for pid=447 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.551823][ T28] audit: type=1400 audit(1778118167.572:146): avc: denied { setopt } for pid=447 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.876619][ T28] audit: type=1400 audit(1778118169.912:147): avc: denied { read } for pid=476 comm="syz.0.44" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 39.240216][ T289] EXT4-fs (loop1): unmounting filesystem. [ 39.293364][ T28] audit: type=1400 audit(1778118169.912:148): avc: denied { open } for pid=476 comm="syz.0.44" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 39.522877][ T28] audit: type=1400 audit(1778118170.552:149): avc: denied { create } for pid=487 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.536157][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.553237][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.117615][ T470] loop4: detected capacity change from 0 to 131072 [ 40.203155][ T470] F2FS-fs (loop4): Test dummy encryption mode enabled [ 40.222386][ T470] F2FS-fs (loop4): invalid crc value [ 41.433445][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 41.433462][ T28] audit: type=1400 audit(1778118172.472:151): avc: denied { setopt } for pid=505 comm="syz.1.53" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.442964][ T490] loop2: detected capacity change from 0 to 40427 [ 41.470339][ T470] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-4) [ 41.479277][ T490] F2FS-fs (loop2): invalid crc value [ 41.507533][ T490] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.537004][ T495] loop3: detected capacity change from 0 to 40427 [ 41.557144][ T514] ======================================================= [ 41.557144][ T514] WARNING: The mand mount option has been deprecated and [ 41.557144][ T514] and is ignored by this kernel. Remove the mand [ 41.557144][ T514] option from the mount to silence this warning. [ 41.557144][ T514] ======================================================= [ 41.599731][ T495] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 41.613428][ T28] audit: type=1400 audit(1778118172.652:152): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.621909][ T495] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 41.661860][ T490] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.682211][ T495] F2FS-fs (loop3): invalid crc value [ 41.713656][ T495] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 41.750526][ T517] 9pnet_virtio: no channels available for device syz [ 41.778632][ T495] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 41.788540][ T495] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.872575][ T286] syz-executor: attempt to access beyond end of device [ 41.872575][ T286] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.919897][ T528] loop1: detected capacity change from 0 to 512 [ 41.977658][ T528] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.58: iget: bad i_size value: 38620345925642 [ 42.038779][ T528] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.58: couldn't read orphan inode 15 (err -117) [ 42.059993][ T528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.069458][ T290] syz-executor: attempt to access beyond end of device [ 42.069458][ T290] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 42.226604][ T528] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.58: bg 0: block 5: invalid block bitmap [ 42.239468][ T528] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 42.271828][ T528] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.271828][ T528] [ 42.284909][ T533] EXT4-fs (loop1): shut down requested (1) [ 42.378920][ T528] EXT4-fs (loop1): Total free blocks count 0 [ 42.580186][ T544] loop0: detected capacity change from 0 to 512 [ 42.604099][ T528] EXT4-fs (loop1): Free/Dirty block details [ 42.699421][ T544] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.61: iget: bad i_size value: 38620345925642 [ 42.754349][ T528] EXT4-fs (loop1): free_blocks=0 [ 42.799843][ T544] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.61: couldn't read orphan inode 15 (err -117) [ 42.820349][ T528] EXT4-fs (loop1): dirty_blocks=3120 [ 42.849251][ T528] EXT4-fs (loop1): Block reservation details [ 42.883593][ T544] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.895239][ T528] EXT4-fs (loop1): i_reserved_data_blocks=3120 [ 43.381846][ T28] audit: type=1400 audit(1778118174.412:153): avc: denied { create } for pid=527 comm="syz.1.58" name=2321200A scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.436022][ T546] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.61: bg 0: block 5: invalid block bitmap [ 43.472184][ T546] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 748 with error 28 [ 43.497764][ T546] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.497764][ T546] [ 43.507567][ T546] EXT4-fs (loop0): Total free blocks count 0 [ 43.518341][ T546] EXT4-fs (loop0): Free/Dirty block details [ 43.521386][ T544] EXT4-fs (loop0): shut down requested (1) [ 43.524540][ T546] EXT4-fs (loop0): free_blocks=0 [ 43.535731][ T546] EXT4-fs (loop0): dirty_blocks=752 [ 43.540986][ T546] EXT4-fs (loop0): Block reservation details [ 43.547082][ T546] EXT4-fs (loop0): i_reserved_data_blocks=752 [ 43.578888][ T28] audit: type=1400 audit(1778118174.612:154): avc: denied { read } for pid=553 comm="syz.4.63" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.602752][ T28] audit: type=1400 audit(1778118174.632:155): avc: denied { open } for pid=553 comm="syz.4.63" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.950310][ T28] audit: type=1400 audit(1778118174.972:156): avc: denied { map } for pid=553 comm="syz.4.63" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.267324][ T563] loop1: detected capacity change from 0 to 512 [ 44.298243][ T563] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.65: iget: bad i_size value: 38620345925642 [ 44.311312][ T563] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.65: couldn't read orphan inode 15 (err -117) [ 44.371849][ T563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.687125][ T572] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.65: bg 0: block 5: invalid block bitmap [ 45.702977][ T572] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1160 with error 28 [ 45.721859][ T572] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.721859][ T572] [ 45.740581][ T572] EXT4-fs (loop1): Total free blocks count 0 [ 45.746792][ T572] EXT4-fs (loop1): Free/Dirty block details [ 45.752944][ T572] EXT4-fs (loop1): free_blocks=0 [ 45.758056][ T572] EXT4-fs (loop1): dirty_blocks=1160 [ 45.763498][ T572] EXT4-fs (loop1): Block reservation details [ 45.769838][ T572] EXT4-fs (loop1): i_reserved_data_blocks=1160 [ 45.823109][ T563] EXT4-fs (loop1): shut down requested (0) [ 45.877644][ T28] audit: type=1400 audit(1778118176.912:157): avc: denied { read } for pid=560 comm="syz.1.65" dev="nsfs" ino=4026532358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.901493][ T28] audit: type=1400 audit(1778118176.932:158): avc: denied { open } for pid=560 comm="syz.1.65" path="net:[4026532358]" dev="nsfs" ino=4026532358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.087789][ T588] 9pnet_virtio: no channels available for device syz [ 46.417358][ T591] loop1: detected capacity change from 0 to 512 [ 46.426376][ T591] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.75: iget: bad i_size value: 38620345925642 [ 46.439295][ T591] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.75: couldn't read orphan inode 15 (err -117) [ 46.451376][ T591] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.560210][ T591] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.75: bg 0: block 5: invalid block bitmap [ 46.573019][ T591] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 46.585916][ T591] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.585916][ T591] [ 46.596256][ T591] EXT4-fs (loop1): Total free blocks count 0 [ 46.602343][ T591] EXT4-fs (loop1): Free/Dirty block details [ 46.608386][ T591] EXT4-fs (loop1): free_blocks=0 [ 46.613410][ T591] EXT4-fs (loop1): dirty_blocks=5580 [ 46.613650][ T593] EXT4-fs (loop1): shut down requested (1) [ 46.618768][ T591] EXT4-fs (loop1): Block reservation details [ 46.630701][ T591] EXT4-fs (loop1): i_reserved_data_blocks=5580 [ 46.712601][ T28] audit: type=1400 audit(1778118177.752:159): avc: denied { create } for pid=594 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.732758][ T28] audit: type=1400 audit(1778118177.752:160): avc: denied { read } for pid=594 comm="syz.4.76" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 46.757611][ T28] audit: type=1400 audit(1778118177.752:161): avc: denied { open } for pid=594 comm="syz.4.76" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 46.760851][ T595] loop4: detected capacity change from 0 to 256 [ 46.782485][ T28] audit: type=1400 audit(1778118177.752:162): avc: denied { ioctl } for pid=594 comm="syz.4.76" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 46.889318][ T28] audit: type=1400 audit(1778118177.922:163): avc: denied { write } for pid=594 comm="syz.4.76" name="unix" dev="proc" ino=4026532489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 46.912451][ T599] loop3: detected capacity change from 0 to 512 [ 47.018395][ T599] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.78: iget: bad i_size value: 38620345925642 [ 47.032184][ T599] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.78: couldn't read orphan inode 15 (err -117) [ 47.044597][ T599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.143107][ T28] audit: type=1400 audit(1778118178.162:164): avc: denied { mounton } for pid=594 comm="syz.4.76" path="/9/file0" dev="incremental-fs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.175554][ T28] audit: type=1400 audit(1778118178.162:165): avc: denied { getattr } for pid=594 comm="syz.4.76" name="/" dev="incremental-fs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.183414][ T599] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.78: bg 0: block 5: invalid block bitmap [ 47.215291][ T599] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1404 with error 28 [ 47.229339][ T599] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.229339][ T599] [ 47.240804][ T605] EXT4-fs (loop3): shut down requested (1) [ 47.249272][ T599] EXT4-fs (loop3): Total free blocks count 0 [ 47.256503][ T599] EXT4-fs (loop3): Free/Dirty block details [ 47.263740][ T599] EXT4-fs (loop3): free_blocks=0 [ 47.340048][ T28] audit: type=1400 audit(1778118178.372:166): avc: denied { name_bind } for pid=606 comm="syz.2.80" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.369269][ T599] EXT4-fs (loop3): dirty_blocks=1408 [ 47.387111][ T599] EXT4-fs (loop3): Block reservation details [ 47.420975][ T28] audit: type=1400 audit(1778118178.402:167): avc: denied { node_bind } for pid=606 comm="syz.2.80" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 47.443355][ T599] EXT4-fs (loop3): i_reserved_data_blocks=1408 [ 47.616400][ T28] audit: type=1400 audit(1778118178.652:168): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.651056][ T617] loop4: detected capacity change from 0 to 512 [ 47.871854][ T617] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.83: iget: bad i_size value: 38620345925642 [ 47.974681][ T617] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.83: couldn't read orphan inode 15 (err -117) [ 48.044974][ T617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.045413][ T612] loop1: detected capacity change from 0 to 40427 [ 48.060622][ T610] loop2: detected capacity change from 0 to 40427 [ 48.072757][ T610] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 48.073699][ T612] F2FS-fs (loop1): invalid crc value [ 48.079239][ T610] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 48.094098][ T610] F2FS-fs (loop2): invalid crc value [ 48.111273][ T610] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 48.123641][ T612] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.190291][ T612] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 48.206674][ T610] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 48.216278][ T610] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.295096][ T617] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.83: bg 0: block 5: invalid block bitmap [ 48.326053][ T617] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 48.339595][ T617] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.339595][ T617] [ 48.369498][ T617] EXT4-fs (loop4): Total free blocks count 0 [ 48.382937][ T617] EXT4-fs (loop4): Free/Dirty block details [ 48.387016][ T626] EXT4-fs (loop4): shut down requested (1) [ 48.397832][ T617] EXT4-fs (loop4): free_blocks=0 [ 48.410973][ T617] EXT4-fs (loop4): dirty_blocks=2288 [ 48.421171][ T290] syz-executor: attempt to access beyond end of device [ 48.421171][ T290] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.427383][ T617] EXT4-fs (loop4): Block reservation details [ 48.464941][ T617] EXT4-fs (loop4): i_reserved_data_blocks=2288 [ 49.301671][ T648] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 49.867453][ T658] 9pnet_virtio: no channels available for device syz [ 50.130476][ T638] syz.0.88 (638) used greatest stack depth: 21728 bytes left [ 51.331808][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.403410][ T661] syz.0.92 (661) used greatest stack depth: 20640 bytes left [ 52.045649][ T674] loop2: detected capacity change from 0 to 40427 [ 52.053209][ T674] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 52.059784][ T674] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 52.068854][ T674] F2FS-fs (loop2): invalid crc value [ 52.125101][ T674] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 52.159576][ T674] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 52.168123][ T674] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 52.205429][ T290] syz-executor: attempt to access beyond end of device [ 52.205429][ T290] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.527658][ T693] 9pnet_virtio: no channels available for device syz [ 53.983079][ T695] overlayfs: failed to resolve './file2': -2 [ 54.455348][ T705] 9pnet_virtio: no channels available for device syz [ 54.671940][ T707] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 55.280185][ T713] loop3: detected capacity change from 0 to 4096 [ 55.286976][ T713] EXT4-fs: Ignoring removed bh option [ 55.371938][ T713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.431613][ T286] EXT4-fs (loop3): unmounting filesystem. [ 55.561562][ T726] device syzkaller0 entered promiscuous mode [ 55.583037][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 55.583054][ T28] audit: type=1400 audit(1778118186.622:170): avc: denied { write } for pid=725 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.710473][ T28] audit: type=1400 audit(1778118186.772:171): avc: denied { unlink } for pid=718 comm="syz.1.110" name="#15" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.935993][ T28] audit: type=1400 audit(1778118186.782:172): avc: denied { mount } for pid=718 comm="syz.1.110" name="/" dev="overlay" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.990767][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.998788][ T28] audit: type=1400 audit(1778118188.022:173): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.257288][ T747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=747 comm=syz.4.115 [ 57.283398][ T747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=747 comm=syz.4.115 [ 57.402784][ T748] loop3: detected capacity change from 0 to 512 [ 57.578273][ T748] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.117: iget: bad i_size value: 38620345925642 [ 57.747637][ T748] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.117: couldn't read orphan inode 15 (err -117) [ 58.292165][ T748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.452336][ T748] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.117: bg 0: block 5: invalid block bitmap [ 58.471834][ T748] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 964 with error 28 [ 58.491868][ T748] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.491868][ T748] [ 58.585506][ T758] loop4: detected capacity change from 0 to 2048 [ 58.730338][ T758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.739640][ T758] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.794512][ T754] EXT4-fs (loop3): shut down requested (1) [ 58.843916][ T748] EXT4-fs (loop3): Total free blocks count 0 [ 58.850105][ T748] EXT4-fs (loop3): Free/Dirty block details [ 58.856187][ T748] EXT4-fs (loop3): free_blocks=0 [ 58.861261][ T748] EXT4-fs (loop3): dirty_blocks=968 [ 58.866524][ T748] EXT4-fs (loop3): Block reservation details [ 58.888739][ T748] EXT4-fs (loop3): i_reserved_data_blocks=968 [ 58.916265][ T743] loop2: detected capacity change from 0 to 40427 [ 58.934642][ T743] F2FS-fs (loop2): invalid crc value [ 58.966788][ T743] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.053336][ T764] loop1: detected capacity change from 0 to 4096 [ 59.060105][ T764] EXT4-fs: Ignoring removed bh option [ 59.075443][ T743] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.083911][ T764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.127808][ T289] EXT4-fs (loop1): unmounting filesystem. [ 59.284268][ T288] EXT4-fs (loop4): unmounting filesystem. [ 59.314241][ T775] overlayfs: failed to resolve './file1/file0': -2 [ 59.486045][ T290] syz-executor: attempt to access beyond end of device [ 59.486045][ T290] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.812343][ T735] syz.0.114 (735) used greatest stack depth: 20496 bytes left [ 60.203123][ T794] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.211034][ T794] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.457729][ T797] 9pnet_virtio: no channels available for device syz [ 60.540081][ T804] loop1: detected capacity change from 0 to 4096 [ 60.546859][ T804] EXT4-fs: Ignoring removed bh option [ 60.556181][ T804] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 60.578917][ T812] overlayfs: failed to resolve './file1/file0': -2 [ 60.598656][ T289] EXT4-fs (loop1): unmounting filesystem. [ 61.149793][ T825] loop1: detected capacity change from 0 to 2048 [ 61.910611][ T825] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 61.919764][ T825] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.330864][ T289] EXT4-fs (loop1): unmounting filesystem. [ 64.363090][ T840] loop3: detected capacity change from 0 to 512 [ 64.396662][ T840] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.139: inode has both inline data and extents flags [ 64.412590][ T840] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.139: couldn't read orphan inode 15 (err -117) [ 64.462227][ T840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 64.481875][ T28] audit: type=1400 audit(1778118195.512:174): avc: denied { read write } for pid=839 comm="syz.3.139" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.514699][ T28] audit: type=1400 audit(1778118195.512:175): avc: denied { open } for pid=839 comm="syz.3.139" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.752937][ T28] audit: type=1400 audit(1778118195.512:176): avc: denied { ioctl } for pid=839 comm="syz.3.139" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.796613][ T850] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.804829][ T850] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.943059][ T39] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 65.031889][ T310] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 65.133877][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 65.142624][ T39] usb 4-1: not running at top speed; connect to a high speed hub [ 65.153090][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.164027][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 65.176556][ T39] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 65.190931][ T39] usb 4-1: string descriptor 0 read error: -22 [ 65.198908][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.209039][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.220225][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 65.232391][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.251839][ T310] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 65.269189][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.281418][ T310] usb 3-1: config 0 descriptor?? [ 65.282347][ T861] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 65.299434][ T571] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.308115][ T28] audit: type=1400 audit(1778118196.342:177): avc: denied { write } for pid=860 comm="syz.4.147" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.489851][ T39] usb 4-1: USB disconnect, device number 2 [ 66.624978][ T874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=874 comm=syz.1.151 [ 66.923728][ T873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=873 comm=syz.0.148 [ 67.402764][ T874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=874 comm=syz.1.151 [ 67.682227][ T873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=873 comm=syz.0.148 [ 68.613169][ T650] Bluetooth: hci0: command 0x1003 tx timeout [ 68.636658][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.688350][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 69.382611][ T310] usbhid: probe of 3-1:0.0 failed with error -71 [ 69.393008][ T310] usb 3-1: USB disconnect, device number 2 [ 69.415975][ T286] EXT4-fs (loop3): unmounting filesystem. [ 69.554656][ T881] loop4: detected capacity change from 0 to 512 [ 69.579750][ T881] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.154: iget: bad i_size value: 38620345925642 [ 69.850412][ T881] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.154: couldn't read orphan inode 15 (err -117) [ 69.933917][ T881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.019366][ T894] device syzkaller0 entered promiscuous mode [ 70.046010][ T895] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.154: bg 0: block 5: invalid block bitmap [ 70.070934][ T895] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1404 with error 28 [ 70.088923][ T895] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.088923][ T895] [ 70.105864][ T895] EXT4-fs (loop4): Total free blocks count 0 [ 70.124372][ T895] EXT4-fs (loop4): Free/Dirty block details [ 70.133594][ T895] EXT4-fs (loop4): free_blocks=0 [ 70.140181][ T895] EXT4-fs (loop4): dirty_blocks=1404 [ 70.140811][ T886] loop3: detected capacity change from 0 to 40427 [ 70.152209][ T895] EXT4-fs (loop4): Block reservation details [ 70.156170][ T886] F2FS-fs (loop3): invalid crc value [ 70.159463][ T895] EXT4-fs (loop4): i_reserved_data_blocks=1404 [ 70.174671][ T881] EXT4-fs (loop4): shut down requested (0) [ 70.185741][ T886] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.522161][ T886] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.565165][ T917] device syzkaller0 entered promiscuous mode [ 72.083688][ T915] loop1: detected capacity change from 0 to 40427 [ 72.085095][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.099605][ T920] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 72.110644][ T915] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 72.121490][ T922] loop4: detected capacity change from 0 to 512 [ 72.131603][ T915] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 72.140836][ T915] F2FS-fs (loop1): invalid crc value [ 72.145187][ T922] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.166: iget: bad i_size value: 38620345925642 [ 72.192178][ T915] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 72.200587][ T922] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.166: couldn't read orphan inode 15 (err -117) [ 72.235373][ T922] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.247712][ T915] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 72.260144][ T915] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.302322][ T286] syz-executor: attempt to access beyond end of device [ 72.302322][ T286] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.321131][ T289] syz-executor: attempt to access beyond end of device [ 72.321131][ T289] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.383173][ T922] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.166: bg 0: block 5: invalid block bitmap [ 72.395819][ T922] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1912 with error 28 [ 72.409199][ T922] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.409199][ T922] [ 72.419211][ T922] EXT4-fs (loop4): Total free blocks count 0 [ 72.602258][ T922] EXT4-fs (loop4): Free/Dirty block details [ 72.610302][ T933] EXT4-fs (loop4): shut down requested (1) [ 72.680507][ T922] EXT4-fs (loop4): free_blocks=0 [ 72.724700][ T922] EXT4-fs (loop4): dirty_blocks=1916 [ 72.763111][ T922] EXT4-fs (loop4): Block reservation details [ 72.769160][ T922] EXT4-fs (loop4): i_reserved_data_blocks=1916 [ 74.775830][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.782671][ T649] Bluetooth: hci0: command 0x1003 tx timeout [ 74.789059][ T28] audit: type=1400 audit(1778118204.352:178): avc: denied { ioctl } for pid=936 comm="syz.3.167" path="socket:[19389]" dev="sockfs" ino=19389 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.817042][ T28] audit: type=1400 audit(1778118204.512:179): avc: denied { mounton } for pid=936 comm="syz.3.167" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 79.423335][ T288] EXT4-fs: 1 callbacks suppressed [ 79.423354][ T288] EXT4-fs (loop4): unmounting filesystem. [ 80.447009][ T962] syz.0.170 (962) used greatest stack depth: 19904 bytes left [ 80.813363][ T977] overlayfs: failed to resolve './file1': -2 [ 80.841041][ T983] loop2: detected capacity change from 0 to 512 [ 80.874006][ T983] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.180: iget: bad i_size value: 38620345925642 [ 80.887239][ T983] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.180: couldn't read orphan inode 15 (err -117) [ 80.912111][ T983] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.127686][ T986] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 83.146805][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.159582][ T990] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 83.167431][ T998] loop3: detected capacity change from 0 to 512 [ 83.179106][ T330] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 83.192096][ T330] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.192096][ T330] [ 83.201848][ T330] EXT4-fs (loop2): Total free blocks count 0 [ 83.207964][ T330] EXT4-fs (loop2): Free/Dirty block details [ 83.214183][ T330] EXT4-fs (loop2): free_blocks=0 [ 83.214897][ T998] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.219274][ T330] EXT4-fs (loop2): dirty_blocks=3096 [ 83.231155][ T330] EXT4-fs (loop2): Block reservation details [ 83.237390][ T330] EXT4-fs (loop2): i_reserved_data_blocks=3096 [ 83.256592][ T330] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1044 with error 28 [ 83.287412][ T998] EXT4-fs error (device loop3): ext4_find_extent:909: inode #4: comm syz.3.187: inode has invalid extent depth: 7 [ 83.300001][ T998] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 83.312516][ T998] EXT4-fs warning (device loop3): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.327438][ T998] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 83.334847][ T998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.639125][ T286] EXT4-fs (loop3): unmounting filesystem. [ 84.759878][ T1025] overlayfs: missing 'lowerdir' [ 85.171775][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.171789][ T649] Bluetooth: hci0: command 0x1003 tx timeout [ 85.371313][ T1034] 9pnet_virtio: no channels available for device syz [ 85.790990][ T1043] loop2: detected capacity change from 0 to 4096 [ 85.799236][ T1043] EXT4-fs: Ignoring removed bh option [ 85.992735][ T1043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.356949][ T290] EXT4-fs (loop2): unmounting filesystem. [ 92.471693][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.478767][ T1076] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 93.090663][ T1094] loop3: detected capacity change from 0 to 4096 [ 93.097616][ T1094] EXT4-fs: Ignoring removed bh option [ 93.144187][ T1095] loop1: detected capacity change from 0 to 2048 [ 93.379411][ T1094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.450282][ T1095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.459518][ T1095] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.585656][ T1105] 9pnet_virtio: no channels available for device syz [ 93.836714][ T286] EXT4-fs (loop3): unmounting filesystem. [ 93.853384][ T289] EXT4-fs (loop1): unmounting filesystem. [ 93.884999][ T1111] loop1: detected capacity change from 0 to 512 [ 93.896348][ T1111] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.218: inode has both inline data and extents flags [ 93.910125][ T1111] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.218: couldn't read orphan inode 15 (err -117) [ 93.922603][ T1111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.221934][ T732] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.365427][ T1120] loop4: detected capacity change from 0 to 512 [ 94.411954][ T875] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 94.441156][ T732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.454135][ T1120] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.221: iget: bad i_size value: 38620345925642 [ 94.468644][ T732] usb 2-1: not running at top speed; connect to a high speed hub [ 94.479535][ T732] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 94.491657][ T1120] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.221: couldn't read orphan inode 15 (err -117) [ 94.504210][ T732] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 94.517112][ T1120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.527135][ T732] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 4 [ 94.538430][ T1032] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.538462][ T650] Bluetooth: hci0: command 0x1003 tx timeout [ 94.625002][ T732] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1023 [ 94.643052][ T732] usb 2-1: string descriptor 0 read error: -22 [ 94.651482][ T732] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.662839][ T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.675789][ T732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.684274][ T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.695086][ T875] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 94.700273][ T1128] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.221: bg 0: block 5: invalid block bitmap [ 94.704666][ T875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.705487][ T732] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 94.732460][ T875] usb 4-1: config 0 descriptor?? [ 94.739742][ T1128] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1832 with error 28 [ 94.752591][ T1128] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.752591][ T1128] [ 94.762721][ T1128] EXT4-fs (loop4): Total free blocks count 0 [ 94.768847][ T1128] EXT4-fs (loop4): Free/Dirty block details [ 94.775181][ T1128] EXT4-fs (loop4): free_blocks=0 [ 94.780403][ T1128] EXT4-fs (loop4): dirty_blocks=1836 [ 94.786008][ T1120] EXT4-fs (loop4): shut down requested (1) [ 94.786161][ T1128] EXT4-fs (loop4): Block reservation details [ 94.798526][ T1128] EXT4-fs (loop4): i_reserved_data_blocks=1836 [ 94.850093][ T28] audit: type=1400 audit(1778118225.882:180): avc: denied { create } for pid=1130 comm="syz.4.224" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.872183][ T28] audit: type=1400 audit(1778118225.882:181): avc: denied { ioctl } for pid=1130 comm="syz.4.224" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21009 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.913916][ T732] usb 2-1: USB disconnect, device number 2 [ 94.953527][ T28] audit: type=1400 audit(1778118225.992:182): avc: denied { read } for pid=1130 comm="syz.4.224" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.147078][ T1136] loop4: detected capacity change from 0 to 40427 [ 95.152828][ T1066] udevd[1066]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.184738][ T1136] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 95.191342][ T1136] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 95.200425][ T1136] F2FS-fs (loop4): invalid crc value [ 95.214990][ T1136] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 95.346441][ T1136] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 95.354175][ T1136] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 95.411371][ T288] syz-executor: attempt to access beyond end of device [ 95.411371][ T288] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.442067][ T289] EXT4-fs (loop1): unmounting filesystem. [ 95.991393][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.998143][ T1158] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 96.044560][ T1159] 9pnet_virtio: no channels available for device syz [ 96.474512][ T1174] loop2: detected capacity change from 0 to 512 [ 96.508528][ T1174] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.238: iget: bad i_size value: 38620345925642 [ 96.529725][ T1174] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.238: couldn't read orphan inode 15 (err -117) [ 96.552106][ T1174] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.636844][ T1178] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.238: bg 0: block 5: invalid block bitmap [ 96.650102][ T1178] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 96.664030][ T1178] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.664030][ T1178] [ 96.674278][ T1178] EXT4-fs (loop2): Total free blocks count 0 [ 96.776853][ T1178] EXT4-fs (loop2): Free/Dirty block details [ 96.801936][ T1178] EXT4-fs (loop2): free_blocks=0 [ 96.807374][ T1178] EXT4-fs (loop2): dirty_blocks=2800 [ 96.813698][ T1178] EXT4-fs (loop2): Block reservation details [ 96.821041][ T1181] EXT4-fs (loop2): shut down requested (1) [ 96.829295][ T1178] EXT4-fs (loop2): i_reserved_data_blocks=2800 [ 97.023967][ T875] usbhid 4-1:0.0: can't add hid device: -71 [ 97.032771][ T875] usbhid: probe of 4-1:0.0 failed with error -71 [ 97.040293][ T875] usb 4-1: USB disconnect, device number 3 [ 97.223598][ T1167] loop1: detected capacity change from 0 to 131072 [ 97.240430][ T1167] F2FS-fs (loop1): invalid crc value [ 97.261288][ T1167] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.300747][ T1167] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 98.276782][ T1209] loop1: detected capacity change from 0 to 4096 [ 98.279217][ T1210] loop3: detected capacity change from 0 to 2048 [ 98.283536][ T1209] EXT4-fs: Ignoring removed bh option [ 98.292112][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.620624][ T1032] Bluetooth: hci0: command 0x1003 tx timeout [ 98.984822][ T1209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.984826][ T1210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.006059][ T1210] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.156847][ T1221] 9pnet_virtio: no channels available for device syz [ 99.176220][ T286] EXT4-fs (loop3): unmounting filesystem. [ 99.178628][ T289] EXT4-fs (loop1): unmounting filesystem. [ 99.241810][ T6] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 99.963445][ T6] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.972079][ T6] usb 5-1: not running at top speed; connect to a high speed hub [ 99.980685][ T6] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 99.991457][ T6] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 100.002883][ T6] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 4 [ 100.014614][ T6] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1023 [ 100.028675][ T6] usb 5-1: string descriptor 0 read error: -22 [ 100.035109][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.054401][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.071631][ T6] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 100.121515][ T1235] device syzkaller0 entered promiscuous mode [ 100.211810][ T309] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 100.276353][ T6] usb 5-1: USB disconnect, device number 2 [ 100.393173][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.404356][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.414584][ T309] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 100.423908][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.433718][ T309] usb 4-1: config 0 descriptor?? [ 100.847772][ T28] audit: type=1400 audit(1778118231.882:183): avc: denied { ioctl } for pid=1253 comm="syz.0.262" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.849562][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.874105][ T1254] binder: BC_ATTEMPT_ACQUIRE not supported [ 100.886901][ T1254] binder: 1253:1254 ioctl c0306201 200000000640 returned -22 [ 100.896316][ T1252] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 101.326444][ T1250] loop2: detected capacity change from 0 to 131072 [ 101.602184][ T1250] F2FS-fs (loop2): Test dummy encryption mode enabled [ 101.655273][ T1250] F2FS-fs (loop2): invalid crc value [ 101.704746][ T1250] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.747649][ T1250] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.795305][ T1250] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 102.474897][ T28] audit: type=1400 audit(1778118233.512:184): avc: denied { sqpoll } for pid=1282 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.502184][ T309] usbhid 4-1:0.0: can't add hid device: -71 [ 102.508354][ T309] usbhid: probe of 4-1:0.0 failed with error -71 [ 102.515771][ T309] usb 4-1: USB disconnect, device number 4 [ 102.533742][ T1287] overlayfs: './file0' not a directory [ 102.538196][ T28] audit: type=1400 audit(1778118233.572:185): avc: denied { mounton } for pid=1282 comm="syz.3.270" path="/54/file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 102.566884][ T1283] kvm [1279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 102.579049][ T1283] kvm [1279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b [ 102.588660][ T1283] kvm [1279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956 [ 102.598066][ T1283] kvm [1279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5 [ 102.609877][ T1283] kvm [1279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x61ea [ 102.619718][ T28] audit: type=1400 audit(1778118233.652:186): avc: denied { setopt } for pid=1282 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.620667][ T1283] kvm [1279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4939 [ 102.648032][ T1283] kvm [1279]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 102.657225][ T1283] kvm [1279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4a56 [ 102.671853][ T1283] kvm [1279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10c8 [ 102.690489][ T1283] kvm [1279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2262 [ 102.698840][ T1283] kvm [1279]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 102.717177][ T1283] kvm [1279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x19c2 [ 102.851799][ T1032] Bluetooth: hci0: command 0x1003 tx timeout [ 102.851799][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.883233][ T1295] loop4: detected capacity change from 0 to 512 [ 102.947828][ T1296] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1296 comm=syz.3.271 [ 102.979153][ T1296] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1296 comm=syz.3.271 [ 102.998322][ T1296] 9pnet_virtio: no channels available for device syz [ 103.287723][ T1295] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.272: iget: bad i_size value: 38620345925642 [ 103.341053][ T1299] binder: BC_ATTEMPT_ACQUIRE not supported [ 103.419610][ T1295] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.272: couldn't read orphan inode 15 (err -117) [ 103.452772][ T1299] binder: 1298:1299 ioctl c0306201 200000000640 returned -22 [ 103.983582][ T1295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.110000][ T1308] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.272: bg 0: block 5: invalid block bitmap [ 104.124685][ T1310] loop3: detected capacity change from 0 to 512 [ 104.131406][ T1308] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1152 with error 28 [ 104.144376][ T1308] EXT4-fs (loop4): This should not happen!! Data will be lost [ 104.144376][ T1308] [ 104.154563][ T1308] EXT4-fs (loop4): Total free blocks count 0 [ 104.162513][ T1308] EXT4-fs (loop4): Free/Dirty block details [ 104.171688][ T1308] EXT4-fs (loop4): free_blocks=0 [ 104.199749][ T1308] EXT4-fs (loop4): dirty_blocks=1152 [ 104.280615][ T1308] EXT4-fs (loop4): Block reservation details [ 104.286861][ T1308] EXT4-fs (loop4): i_reserved_data_blocks=1152 [ 104.705598][ T1310] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.276: iget: bad i_size value: 38620345925642 [ 104.758073][ T1310] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.276: couldn't read orphan inode 15 (err -117) [ 104.771898][ T1295] EXT4-fs (loop4): shut down requested (0) [ 104.772000][ T1310] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.297800][ T1330] overlayfs: './file0' not a directory [ 105.578217][ T1310] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.276: bg 0: block 5: invalid block bitmap [ 105.592535][ T1310] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 105.605229][ T1310] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.605229][ T1310] [ 105.617454][ T1310] EXT4-fs (loop3): Total free blocks count 0 [ 105.623711][ T1310] EXT4-fs (loop3): Free/Dirty block details [ 105.629774][ T1310] EXT4-fs (loop3): free_blocks=0 [ 105.634981][ T1310] EXT4-fs (loop3): dirty_blocks=11024 [ 105.640432][ T1310] EXT4-fs (loop3): Block reservation details [ 105.660058][ T1310] EXT4-fs (loop3): i_reserved_data_blocks=11024 [ 105.674735][ T1325] EXT4-fs (loop3): shut down requested (1) [ 107.635541][ T1344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1344 comm=syz.2.283 [ 108.912253][ T1344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1344 comm=syz.2.283 [ 110.010714][ T1349] binder: BC_ATTEMPT_ACQUIRE not supported [ 110.123249][ T1349] binder: 1348:1349 ioctl c0306201 200000000640 returned -22 [ 110.171085][ T1355] loop2: detected capacity change from 0 to 512 [ 110.181399][ T1354] loop1: detected capacity change from 0 to 2048 [ 110.242566][ T1355] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.288: iget: bad i_size value: 38620345925642 [ 110.243747][ T286] EXT4-fs (loop3): unmounting filesystem. [ 110.263932][ T1354] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.286910][ T1355] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.288: couldn't read orphan inode 15 (err -117) [ 110.315680][ T1355] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.465174][ T1355] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.288: bg 0: block 5: invalid block bitmap [ 110.475679][ T1371] loop4: detected capacity change from 0 to 512 [ 110.790731][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.799897][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.980125][ T1368] EXT4-fs (loop2): shut down requested (1) [ 110.998906][ T1371] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.292: iget: bad i_size value: 38620345925642 [ 111.047775][ T1355] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 111.100826][ T1355] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.100826][ T1355] [ 111.110811][ T1355] EXT4-fs (loop2): Total free blocks count 0 [ 111.117937][ T1355] EXT4-fs (loop2): Free/Dirty block details [ 111.130884][ T289] EXT4-fs (loop1): unmounting filesystem. [ 111.134994][ T1355] EXT4-fs (loop2): free_blocks=0 [ 111.136971][ T1371] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.292: couldn't read orphan inode 15 (err -117) [ 111.145145][ T1355] EXT4-fs (loop2): dirty_blocks=2200 [ 111.153928][ T1371] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.168540][ T1355] EXT4-fs (loop2): Block reservation details [ 111.182989][ T1355] EXT4-fs (loop2): i_reserved_data_blocks=2200 [ 111.192432][ T1379] overlayfs: './file0' not a directory [ 111.264463][ T1371] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.292: bg 0: block 5: invalid block bitmap [ 111.277230][ T1371] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 111.290189][ T1371] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.290189][ T1371] [ 111.300276][ T1371] EXT4-fs (loop4): Total free blocks count 0 [ 111.306380][ T1371] EXT4-fs (loop4): Free/Dirty block details [ 111.312546][ T1371] EXT4-fs (loop4): free_blocks=0 [ 111.314851][ T1381] EXT4-fs (loop4): shut down requested (1) [ 111.317691][ T1371] EXT4-fs (loop4): dirty_blocks=2196 [ 111.317712][ T1371] EXT4-fs (loop4): Block reservation details [ 111.335593][ T1371] EXT4-fs (loop4): i_reserved_data_blocks=2196 [ 111.385629][ T1386] loop3: detected capacity change from 0 to 256 [ 111.444647][ T1066] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.123251][ T1393] loop1: detected capacity change from 0 to 40427 [ 113.132903][ T1393] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 113.141397][ T1393] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 113.539240][ T1410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1410 comm=syz.4.299 [ 113.696008][ T1410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1410 comm=syz.4.299 [ 114.875150][ T1409] loop2: detected capacity change from 0 to 2048 [ 115.340161][ T1393] F2FS-fs (loop1): invalid crc value [ 115.458209][ T1393] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 115.475462][ T1409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.484856][ T1409] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.622016][ T1427] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 115.642945][ T290] EXT4-fs (loop2): unmounting filesystem. [ 115.648559][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.649339][ T1425] loop3: detected capacity change from 0 to 256 [ 115.693582][ T1429] overlayfs: './file0' not a directory [ 115.780157][ T1435] incfs: Backing dir is not set, filesystem can't be mounted. [ 115.788150][ T1435] incfs: mount failed -2 [ 115.798821][ T28] audit: type=1400 audit(1778118246.832:187): avc: denied { write } for pid=1434 comm="syz.1.309" name="bus" dev="incremental-fs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.826693][ T289] ------------[ cut here ]------------ [ 115.832690][ T289] WARNING: CPU: 0 PID: 289 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 115.840671][ T289] Modules linked in: [ 115.844889][ T289] CPU: 0 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 115.852792][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.863059][ T289] RIP: 0010:drop_nlink+0xc5/0x110 [ 115.868312][ T289] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 ab f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0b 0e ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 115.888568][ T289] RSP: 0018:ffffc9000ceefc38 EFLAGS: 00010293 [ 115.894793][ T289] RAX: ffffffff81c66845 RBX: ffff88813232c810 RCX: ffff88810e34bcc0 [ 115.903234][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.911419][ T289] RBP: ffffc9000ceefc60 R08: 0000000000000003 R09: 0000000000000004 [ 115.919521][ T289] R10: dffffc0000000000 R11: fffff520019ddf78 R12: dffffc0000000000 [ 115.927836][ T289] R13: 1ffff1102646590b R14: ffff88813232c858 R15: 0000000000000000 [ 115.935903][ T289] FS: 000055557229a500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 115.945086][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.952089][ T289] CR2: 00005555722bd948 CR3: 000000012e4b8000 CR4: 00000000003526b0 [ 115.960442][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.968869][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.977166][ T289] Call Trace: [ 115.980502][ T289] [ 115.983672][ T289] shmem_rmdir+0x5b/0x90 [ 115.988414][ T289] vfs_rmdir+0x393/0x500 [ 115.993879][ T289] incfs_kill_sb+0x105/0x220 [ 115.998531][ T289] deactivate_locked_super+0xb5/0x120 [ 116.004142][ T289] deactivate_super+0xaf/0xe0 [ 116.008957][ T289] cleanup_mnt+0x474/0x500 [ 116.013596][ T289] __cleanup_mnt+0x19/0x20 [ 116.018100][ T289] task_work_run+0x1e1/0x250 [ 116.022814][ T289] ? __cfi_task_work_run+0x10/0x10 [ 116.027990][ T289] ? __x64_sys_umount+0x12d/0x170 [ 116.033293][ T289] ? __cfi___x64_sys_umount+0x10/0x10 [ 116.038702][ T289] exit_to_user_mode_loop+0x9b/0xb0 [ 116.044051][ T289] exit_to_user_mode_prepare+0x87/0xd0 [ 116.049662][ T289] syscall_exit_to_user_mode+0x1a/0x30 [ 116.055346][ T289] do_syscall_64+0x58/0xa0 [ 116.060015][ T289] ? clear_bhb_loop+0x30/0x80 [ 116.064790][ T289] ? clear_bhb_loop+0x30/0x80 [ 116.069509][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.075852][ T289] RIP: 0033:0x7fd71579e017 [ 116.080414][ T289] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 116.100487][ T289] RSP: 002b:00007ffddbde39b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 116.108973][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd71579e017 [ 116.117105][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddbde3a70 [ 116.125164][ T289] RBP: 00007ffddbde3a70 R08: 00007ffddbde4a70 R09: 00000000ffffffff [ 116.133395][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddbde4b00 [ 116.141477][ T289] R13: 00007fd715832120 R14: 000000000001c44e R15: 00007ffddbde4b40 [ 116.149538][ T289] [ 116.152621][ T289] ---[ end trace 0000000000000000 ]--- [ 116.158327][ T289] ================================================================== [ 116.166518][ T289] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 116.172801][ T289] Write of size 4 at addr 0000000000000170 by task syz-executor/289 [ 116.180815][ T289] [ 116.183244][ T289] CPU: 1 PID: 289 Comm: syz-executor Tainted: G W syzkaller #0 [ 116.192372][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.202447][ T289] Call Trace: [ 116.205742][ T289] [ 116.208774][ T289] __dump_stack+0x21/0x24 [ 116.213217][ T289] dump_stack_lvl+0x110/0x170 [ 116.217914][ T289] ? __cfi_dump_stack_lvl+0x8/0x8 [ 116.222967][ T289] ? __cfi_call_rcu+0x10/0x10 [ 116.227666][ T289] ? ihold+0x20/0x60 [ 116.231587][ T289] ? ihold+0x20/0x60 [ 116.235678][ T289] print_report+0x3d/0x60 [ 116.240729][ T289] kasan_report+0x122/0x150 [ 116.245457][ T289] ? ihold+0x20/0x60 [ 116.249574][ T289] kasan_check_range+0x249/0x2a0 [ 116.254808][ T289] __kasan_check_write+0x14/0x20 [ 116.259869][ T289] ihold+0x20/0x60 [ 116.263814][ T289] vfs_rmdir+0x25f/0x500 [ 116.268139][ T289] incfs_kill_sb+0x105/0x220 [ 116.272757][ T289] deactivate_locked_super+0xb5/0x120 [ 116.278154][ T289] deactivate_super+0xaf/0xe0 [ 116.282880][ T289] cleanup_mnt+0x474/0x500 [ 116.287425][ T289] __cleanup_mnt+0x19/0x20 [ 116.291952][ T289] task_work_run+0x1e1/0x250 [ 116.296587][ T289] ? __cfi_task_work_run+0x10/0x10 [ 116.301822][ T289] ? __x64_sys_umount+0x12d/0x170 [ 116.306884][ T289] ? __cfi___x64_sys_umount+0x10/0x10 [ 116.312294][ T289] exit_to_user_mode_loop+0x9b/0xb0 [ 116.317799][ T289] exit_to_user_mode_prepare+0x87/0xd0 [ 116.323443][ T289] syscall_exit_to_user_mode+0x1a/0x30 [ 116.328955][ T289] do_syscall_64+0x58/0xa0 [ 116.333395][ T289] ? clear_bhb_loop+0x30/0x80 [ 116.338091][ T289] ? clear_bhb_loop+0x30/0x80 [ 116.342807][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.348740][ T289] RIP: 0033:0x7fd71579e017 [ 116.353160][ T289] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 116.372779][ T289] RSP: 002b:00007ffddbde39b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 116.381295][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd71579e017 [ 116.389365][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddbde3a70 [ 116.397446][ T289] RBP: 00007ffddbde3a70 R08: 00007ffddbde4a70 R09: 00000000ffffffff [ 116.405419][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddbde4b00 [ 116.413567][ T289] R13: 00007fd715832120 R14: 000000000001c44e R15: 00007ffddbde4b40 [ 116.421668][ T289] [ 116.424788][ T289] ================================================================== [ 116.434927][ T289] Disabling lock debugging due to kernel taint [ 116.441123][ T289] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 116.449103][ T289] #PF: supervisor write access in kernel mode [ 116.455444][ T289] #PF: error_code(0x0002) - not-present page [ 116.461517][ T289] PGD 132300067 P4D 132300067 PUD 0 [ 116.466834][ T289] Oops: 0002 [#1] PREEMPT SMP KASAN [ 116.472088][ T289] CPU: 0 PID: 289 Comm: syz-executor Tainted: G B W syzkaller #0 [ 116.481248][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.491320][ T289] RIP: 0010:ihold+0x26/0x60 [ 116.495834][ T289] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 71 05 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 a3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 61 [ 116.515645][ T289] RSP: 0018:ffffc9000ceefc78 EFLAGS: 00010246 [ 116.521816][ T289] RAX: ffff88810e34bc00 RBX: 0000000000000000 RCX: ffff88810e34bcc0 [ 116.529807][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.538150][ T289] RBP: ffffc9000ceefc88 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 116.546311][ T289] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff88813232c81c [ 116.554302][ T289] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 116.562451][ T289] FS: 000055557229a500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 116.571811][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.578659][ T289] CR2: 0000000000000170 CR3: 000000012e4b8000 CR4: 00000000003526b0 [ 116.586890][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.595110][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.603087][ T289] Call Trace: [ 116.606374][ T289] [ 116.609305][ T289] vfs_rmdir+0x25f/0x500 [ 116.613551][ T289] incfs_kill_sb+0x105/0x220 [ 116.618146][ T289] deactivate_locked_super+0xb5/0x120 [ 116.623601][ T289] deactivate_super+0xaf/0xe0 [ 116.628270][ T289] cleanup_mnt+0x474/0x500 [ 116.632681][ T289] __cleanup_mnt+0x19/0x20 [ 116.637106][ T289] task_work_run+0x1e1/0x250 [ 116.641867][ T289] ? __cfi_task_work_run+0x10/0x10 [ 116.647062][ T289] ? __x64_sys_umount+0x12d/0x170 [ 116.652171][ T289] ? __cfi___x64_sys_umount+0x10/0x10 [ 116.657556][ T289] exit_to_user_mode_loop+0x9b/0xb0 [ 116.662842][ T289] exit_to_user_mode_prepare+0x87/0xd0 [ 116.668315][ T289] syscall_exit_to_user_mode+0x1a/0x30 [ 116.673785][ T289] do_syscall_64+0x58/0xa0 [ 116.678219][ T289] ? clear_bhb_loop+0x30/0x80 [ 116.682901][ T289] ? clear_bhb_loop+0x30/0x80 [ 116.687770][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.693769][ T289] RIP: 0033:0x7fd71579e017 [ 116.698191][ T289] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 116.717885][ T289] RSP: 002b:00007ffddbde39b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 116.726353][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd71579e017 [ 116.734518][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddbde3a70 [ 116.742486][ T289] RBP: 00007ffddbde3a70 R08: 00007ffddbde4a70 R09: 00000000ffffffff [ 116.750485][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddbde4b00 [ 116.759049][ T289] R13: 00007fd715832120 R14: 000000000001c44e R15: 00007ffddbde4b40 [ 116.767073][ T289] [ 116.770107][ T289] Modules linked in: [ 116.773998][ T289] CR2: 0000000000000170 [ 116.778142][ T289] ---[ end trace 0000000000000000 ]--- [ 116.783609][ T289] RIP: 0010:ihold+0x26/0x60 [ 116.788178][ T289] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 71 05 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 a3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 61 [ 116.807963][ T289] RSP: 0018:ffffc9000ceefc78 EFLAGS: 00010246 [ 116.814157][ T289] RAX: ffff88810e34bc00 RBX: 0000000000000000 RCX: ffff88810e34bcc0 [ 116.822512][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.831289][ T289] RBP: ffffc9000ceefc88 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 116.839462][ T289] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: ffff88813232c81c [ 116.847440][ T289] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 116.855512][ T289] FS: 000055557229a500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 116.864825][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.871622][ T289] CR2: 0000000000000170 CR3: 000000012e4b8000 CR4: 00000000003526b0 [ 116.879597][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.887676][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.895820][ T289] Kernel panic - not syncing: Fatal exception [ 116.902112][ T289] Kernel Offset: disabled [ 116.906454][ T289] Rebooting in 86400 seconds..