last executing test programs: 5m45.06820162s ago: executing program 1 (id=184): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x3e8, 0x5ee, 0x0, &(0x7f0000000400)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) 5m44.688963119s ago: executing program 1 (id=192): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newchain={0x24, 0x64, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x14}, {0xe, 0xd}, {0x10, 0xfff2}}}, 0x24}}, 0x40810) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) unshare(0x22020600) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f00000007c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000800)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="02017d29012918050e3580009f000114000000040600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400) 5m43.346564817s ago: executing program 1 (id=196): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8240, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x20}, @nested_vmlaunch={0x12f, 0x18}], 0x68}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000440)=[@wrmsr={0x65, 0x20, {0xa17, 0x9}}], 0x20}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@wr_crn={0x67, 0x20, {0x8, 0xc}}], 0x20}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m43.132477939s ago: executing program 1 (id=202): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') read$ublk_bdev(r0, &(0x7f0000000080)=""/28, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000d00)="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", 0x71c3b3be05b20631}, {0x0}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x80000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[{@i_version}, {@nolazytime}, {@errors_remount}, {@grpjquota}, {@acl}]}, 0xfe, 0x28f, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000800)=""/174, 0xff56) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@private0}, 0x14) tee(r2, r3, 0x8, 0xf) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01072bbd7000ffdb131b03cea7200b", @ANYRES32=r8, @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r9) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x34, r11, 0x800, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x34}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000c80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080129bd7000ffdbdf25240000000a0001007770616e3100000008000200", @ANYRES32=r8, @ANYBLOB="0a0001f77670616e30001a0008000200", @ANYRES32=r12, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES32=r13, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r14, 0x29, 0x11, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000100)='veth1_to_team\x00') 5m40.661887952s ago: executing program 1 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'macvlan1\x00', {0x2, 0x0, @multicast2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socket(0x10, 0x802, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) 5m38.568074807s ago: executing program 1 (id=209): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x200008, &(0x7f0000000bc0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000c00)="$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") getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000009c0)=0x400) 5m38.44446302s ago: executing program 32 (id=209): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x200008, &(0x7f0000000bc0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000c00)="$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") getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000009c0)=0x400) 1m29.745140748s ago: executing program 3 (id=868): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002f40)={0x0, 0x49}) sendmmsg$unix(r2, &(0x7f0000000680), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) r3 = socket$inet6(0xa, 0x80000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000bc0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000002e00)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) connect$inet6(r3, 0x0, 0x0) open(&(0x7f0000000680)='./file0\x00', 0x1, 0x158) timer_create(0x3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, &(0x7f0000001e00)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd003f0000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc18143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33365160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f189b8f6e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4f32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009d5e50d48500000015000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@euid_lt}, {@euid_eq}]}}, 0x0, 0x0, &(0x7f0000000e00)="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") r7 = openat(r6, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstatfs(r7, &(0x7f0000000280)=""/167) 1m28.870809917s ago: executing program 3 (id=872): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)) syz_mount_image$ext4(&(0x7f0000001400)='ext4\x00', &(0x7f0000001440)='./file0\x00', 0xa00008, &(0x7f0000001480), 0x3, 0x7c2, &(0x7f00000014c0)="$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") mount(0x0, 0x0, &(0x7f0000001d80)='nfsd\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000033c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x100) 1m28.823479882s ago: executing program 3 (id=873): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8f0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x2, 0x0, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x8000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1, 0x9, 0x10, {0xa, 0x25, 0x25, 0x5, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0xe3, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0xffff}}}}}}}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b0000000001000000010000090000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000640), 0x8, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x3, r2}, 0x38) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x1123102, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880), 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000a00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000a80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000b00), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x7, 0x1c, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x1000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m25.755216487s ago: executing program 3 (id=886): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1808014, &(0x7f0000000080)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846c35f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x5592, &(0x7f0000001b40)="$eJzs3M2LG/UbAPBnst2+//pbxIO3DhRhF5rQbF/Qk1VbfMGW4svBk2aTNKRNMssmTdde7MGjePA/EQVPHv0bPOhRb+JB8SZUMjMLTdtt1zab1fbzgckz88w3z3y/Q1h4ZkMCeGYtpX/+nsSxOBQRCxFxNIl8Pym3iNsR54uxL0TE8Yio3LUlZT6OlYn9EXG4PF4qaiblqS9Pjk+c/e3tP7774cC+I199++OeLhzYUy9GRH+92L/ZL2LWycOdhTLfGHfz2D8zLuP6VI1+VuRvttfyCjcbW+MaeTzdKcZn6zeGk3i112hOYqd7Nc+vD4oLDsedrTqTN6TXGhv5cau9lsfuMMtj51Zx3c1bxd+2W8NRUadV1vskLx+j0VYs8u3NdrGe9et5bA5GZb6om7Xam5M4LmN5uWhmvVY+j7XHvcv/fu90Bzc203F7Y9jNBunZWv2lWv1ctb6Rtdqj9plqo986dyZd7vQmw6qjdqN/vpNlnV671sz6K+lyp9ms1uvp8oX2WrcxSOv12unaqerZlXLvZPrG5Q/SXitdnsTXuoMbo25vmF7NNtLiHSvpau30yyvpiXr63qUr6ZV3L168dOX9jy58ePnVS2+9Xg66b1rp8uqp1dVq/VR1tb7yDK3/s3LS/2D9yYPTP//0ZLcNCtt8wADY3n39f9zb/8fO+v+K/h/YuYf0/3HtEf1//3p5vDv9fzyw/69M9/8xy/5/0lLp/x/d/1b2oP9dDP3/Lq4fnsjj9f/7Zz4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADm7pfFr9/Md5aK4yNl/n9l6rnyOImISkTceYCF2D9Vc6Gss7jN+MV75vB9EnmFyTUOlNvhiDhfbn/9f7fvAgAAADy9vrl9/IuiWy9elvZ6QsxT8dCmcvTjGdVLImJx6dcZVatMXp6fUbH8870vNmdULX+AdXBGxYpHbvtmVW1HFqbCwbtCUoTKXKcDAADMxXQnMN8uBAAAgHn6/KFnX5nbPJizJOLTrf3yC/wHilD+Q/DQ1DkAAADgPyjZ6wkAAAAAuy7v//3+HwAAADzdit//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPibnfvJTRuI4gD8bDD0r4qq7nuV7uAYPUKXXRYO0EtwBHqCSr0AZ6BSFjlCEiLsCZITkCIxxgn6Psl2Zhz9PANs3lgaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC69L9azf78+vr7xJi/t9vTZJoOAAAAcMCmWs3qPyZN+33q/5i6Pqd2ERFlRByq3QcxamUOUk515P+rR2P4F1En7PrH6XgXEd/ScfOp608BAAAALtd6sZw21XpzSksAV/2OijNpFm3KD98z5RURUU2uM6WVu9OXTGH173sYPzOl1QtYbzKFNUtuw8P3Rrke0jZoXR5mMq+/xLpVdvNcAACgT+1K4EgVAgAAwAX40fcAOIenpX2xP+3fM46bS3oh+LbVAgAAAF6hou8BAAAAAJ2r6/+XtP9fYf8/AAAAyK7Z/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubarVbL1YTo/dnz8z5257mnwzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO7Zn3cUCIEwCIO96zuTuf9hpUFDY5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/XlIgBIIgCuaM/530/Q8rCXoGESKg4VFFLRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLfjn3bqMIAgH/2xU5TQISAIhFAReoAC03d0tIVIVDEwJ+AFKVOCbgU2gy0iihZ2FDmLghGhJBAYcv/0LmRupStQ4YgMTEE3fkuPSeGRiW9c5vfT3p+n8/X9753tqp8fmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDC1rvxajOPk/Rhsh8Xx+5sryyk/eaePrWxdncmbWncqDjvJ8Br5ScnputLBAAAgKMjKer7iLjXWp9L++ZkVv+3inPSmv+H5/pxUc/vrfs3t1eO5S/NFPX/77/df2l3oskkmycddHGp1z29P5Wxx7TEkff8Q88Yy6589t1Lkr0hzQ9XX9xqZdez8d3t2++3s3C8imwBgEdxqujzoPh7KO07dSYGwJExViq8i/o/maw3JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAqbK3GM0XciIiZsQdxanN7ZWFY/83a3ZmNvJ2/dWutPGY6RCsiFpd63dMVrmV0FVfzxmfzvV736rXrVQcnImLISzcP9s+TPP1/PacdEQNHTr48ZJyPDzDXnnH2BfnHM6q9hhPp+h56cmPgSGPfBX9vp6+OD8DhB+Mx7KVm/v6MQoaHHRSfvcMfueL/jgAAeOq18pZWovda63PpscZUxM6Pg/X/G6U4Bur+nZv9I/3nG6X6//4n5++U5yrX/52K1vckmF2+/MXstes33lq6PH+pe6n7+dtnOu90zl44d+7CbPZdyexiNH1jAgAAwP/Qzlu5/m9O7d//P16K4z/2/8v1/5ffd74uz5Wo/4d6sOlXdyYAAABHUXs3euH1v/5sDDmj0W7HV/PLy1c7/cfd52f6j5Wm+4jG81au/5OpurMCAAAAqrC12hjY/79YiuOA+//P/vTKL+Uxk4iYiLgSEd1TC1d6F6tbzkir4ofK2UTtulcKAABAXSbyVt7/b2X3/zd3b3loRsSbJyP+zn/DHwes/5MPvv25PFf5/v+zla5y9DSn+9cj66cjxqbrzggAAICn2bG8pcX+H631uU9/Pf5R2/3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFX7JwAA///2BDI8") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000007100)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000900)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x20220000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000580)={0x2, &(0x7f00000005c0)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) sendmsg(r1, &(0x7f0000000600)={0x0, 0x9588, &(0x7f0000000640)=[{&(0x7f0000000680)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000007140)={0x0, 0xffffffffffffffff, 0x0, 0xa4af, 0x2, 0x100}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000007180)='memory.events.local\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0x8, '\x00', 0x0, r3, 0x5, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000480)="319a7388d0155342f04a0bd70633fcd9fe57e925608db30affe99ee0d5e0982b8f58f5b1", &(0x7f00000004c0)=@udp=r0}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x4}, @nested={0x5, 0x0, 0x0, 0x1, [@generic='%']}]}, 0x1c}], 0x1}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/key-users\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000006c0), 0x0) close(r7) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES64=r1, @ANYRES32=r8, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r9, &(0x7f0000000900), 0x0}, 0x20) write$nbd(r3, &(0x7f0000000380)={0x67446698, 0x0, 0x1, 0x2, 0x4, "2c712437e0b23b273635f59a3f28f7c61c1346c0499547ea1714cb14492758a0a8dba74056d200334b5c0f8a2fc09fd8e5e13cd40e62f6"}, 0x47) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r10, r6, 0x0, 0x1) 1m25.304160383s ago: executing program 3 (id=889): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file2\x00', 0x81c0, 0xffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000700)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000740)={0x1, 0x0, 0x29, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000780)={0x1, 0x1, 0x25, 0x5}) getdents64(r0, &(0x7f00000007c0)=""/72, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000f09981cc52bb5e9f519500000000000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file2\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0xe020600) 1m25.206514623s ago: executing program 3 (id=890): r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x2000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x90], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb51f210cf1b400b85780000000109021200010100c00009042100000e01"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.170920047s ago: executing program 33 (id=890): r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x2000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x90], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb51f210cf1b400b85780000000109021200010100c00009042100000e01"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.226639258s ago: executing program 0 (id=1157): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@auto_da_alloc}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@abort}]}, 0x3, 0x572, &(0x7f0000000340)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900), &(0x7f0000000180)=ANY=[@ANYBLOB="5a3f031a5f0fd8aad2312f773d6a32b87bbbfb78cd07a53070b9e020fe26f4b7ab238093c64ef9245f5d5170fc205388087ae7ed9d98051ec02736ba3bfcb95bc9d8ece4"], 0x835, 0x2) creat(&(0x7f0000000080)='./file0/file0\x00', 0x6c) sync() setxattr$trusted_overlay_upper(&(0x7f0000000b00)='./file0/file0\x00', &(0x7f0000000b40), &(0x7f0000000b80)=ANY=[], 0x835, 0x2) 7.1116396s ago: executing program 0 (id=1161): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file2\x00', 0x81c0, 0xffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000700)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000740)={0x1, 0x0, 0x29, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000780)={0x1, 0x1, 0x25, 0x5}) getdents64(r0, &(0x7f00000007c0)=""/72, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xd, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file2\x00', 0x0) 7.10844742s ago: executing program 2 (id=1162): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)=ANY=[@ANYBLOB="5c000000026701020000000000000000050000040c00034000000000f3316707de6a7f145f03951e29fb2d000000060c00064000000000000000070900010073797a315020c8fcee92b9860800024000000006080001400000800108"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x91) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setrlimit(0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x4, 0x3, 0x2004, 0x8, 0x11, "03f37fe99f4da28a"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@orlov}, {@nodioread_nolock}, {@nodiscard}, {@quota}, {@stripe}, {@minixdf}, {@orlov}]}, 0x7, 0xbaf, &(0x7f0000000540)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) unshare(0x22020600) fdatasync(r1) socket$xdp(0x2c, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001280)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x93e, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x764, 0x0, 0x7, 0x2, 0xfffffffc, 0x7, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x8000, 0x6, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xae81, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x10000, 0x80000, 0x0, 0xfffffffd, 0x5, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1001, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xeffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x4, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x40000000, 0x0, 0xbda6, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x3, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 5.590362966s ago: executing program 6 (id=1166): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002f40)={0x0, 0x49}) sendmmsg$unix(r2, &(0x7f0000000680), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) r3 = socket$inet6(0xa, 0x80000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000bc0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000002e00)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) connect$inet6(r3, 0x0, 0x0) open(&(0x7f0000000680)='./file0\x00', 0x1, 0x158) timer_create(0x3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, &(0x7f0000001e00)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd003f0000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009d5e50d48500000015000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstatfs(r6, &(0x7f0000000280)=""/167) 5.200294956s ago: executing program 0 (id=1167): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002f40)={0x0, 0x49}) sendmmsg$unix(r2, &(0x7f0000000680), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) r3 = socket$inet6(0xa, 0x80000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000bc0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000002e00)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) connect$inet6(r3, 0x0, 0x0) open(&(0x7f0000000680)='./file0\x00', 0x1, 0x158) timer_create(0x3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, &(0x7f0000001e00)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd003f0000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc18143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33365160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f189b8f6e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4f32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009d5e50d48500000015000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@euid_lt}, {@euid_eq}]}}, 0x0, 0x0, &(0x7f0000000e00)="44f1ea45f9dc78562aaaf190b00f214a2e12dccd20a457ca0f33cd0ac2695d68609f7c18c86e9d718511f01ecc738f6663f26fbfdbce032be2ad48ab451cc021b68cfe4e16660893f2daf74a6748a927d795da368b84bff77603ecdbca186df015acd7d2492c117d8e8fd99f897109060c0babe64dcd6e5ace39411c5060d5359c35adc38dfb171db80f6b7df88c06327d6a9fbbf152ea90858096bb6010935fd99160b0a162d5e89e34e1df7eec594d07b82f7000cea2b034e9305e688f9954f3a0f2b38407d8693c3b43dc58bbbf1bb50a4eddd1eb66a9fedce7c7ff61004a1dcccfe3d3e34ad76eeaf40cf4e71d4e68c960588128514fa2180343b3d4c90a8650eaf25ecc343f1682fe1f996f197adf0a7bdd0556a6bb628aa984b01a434c2d3d14b4bd734d42bfc39e532e0d74c21699861d02c509b8875bfec6ecd6e2e534a94fa121d20f0f57cab08a8c9d6622716c0cc7563df0c18d09348c50fa634b90e32737747b1dda4e1ecf69b8e9a14b51028b478494f3fd500064d1154cc27bf32555544cb16f3beeecaf10afb6fe536851f1c269ca26d75a5a17174c363736cc156d2495a41684a131cce25ffdf9bf5fc578e0bdbe87a1fe3392d2e908612f9cc9d07b7bae59e24e950006eec642a3ebc22e6456cd587e14a2655a148cd24b44a4d8fc48c4ee672bc5f04722ca281f133a9f4eae3e97b7f9414faa894adbf750380619ca584a023c33d123f30e6596a1cc79ed7d9a8675330ea45e55bd0b3fd393568173c026d519500889b52c03b478c92bfcebb8641a887564a8abfc589fa46806a409c5b6de8e7aa7a9874225279b90a15cf5d61f7165f27b8ec151a5aa135bb205a3cf941b6b7f99e59c7244915e6db148dbcc452d0e1b2992d2165201eace1b54b62205790f411e3144a5b2256d62e4302250dd51e93797f52d6fd8b4df679f0728715d19b151a57e5ff55e0fcba64cf8a8549b8d888e0c96faccee0e6c3798c20dce3c1531d8d21b44f20e6e3a48af1e48ea08271b90b25067c3fcdfd99985bc606eea118d80205de61abf4fb6e35fc94f325574e8c2805158b52902b073eb41b0842735ebda20cd96e297e2af80a806e86c097feb6d9139b38d635936947ffdf45503c2b076ebfc1a15d8c14a2270276dd96925b2001708ebb677208047adffdf3590d3057c815890c94ac16805c187cd5a1459f691be5a7e504dab788582ff292a1635f4631214fedacb84b58f38b75c4a8af6a615034affe0bf72cf72226fbc280e05f0ad6f589f47d8689b71eb1e19c0da8dd40d070a08278ae7cfbd0406033260341c99c1249293914921ec2ef6451932ea22e6def679c341eef2f3ddc073c62fe9ac58f7c5809b184011f87f1d5701cc8c1696a9e868076e02938f9cfccfb825f713caa0610765176430cb5bee868746446ca4986c941e518b652308f56e66b7f6a5b4a4e04e517589c72954a8ff382525697ead09d5f81134ab80fb24b5424e5715eb748000f6304f1b65f8d6cb4dd4186516d1ff89ed611d65221fb8ec5c4194eba2483ad213d58a5b20965c3d77ed891454270aa26bc19bfa6f1f8be0175d518cc7b5b269e3e7ef77f1720099af9f4a4498c268d2091a9f170b10ab778220a347af9eb9760294373cfb6e0d272143977a55561b54f8e77dd1a115f5e3d09e68087bb78e4d2d4f25787019f9dc22a4c52797278375373ea5a4d3f2d2c5da349e69bccc7b68be559f5ca43cb98db9f43e05d6eacadbd29d020e2d4c363f5c7adbcd34c8ed8e1b2ddc6478c0bf4cad090e2eabbfcdd1df1af7cbcfd28360e3a0f8961123f862f22d1c32b11bb1490af33f85b24b9ead3c5fe1c060ec62773c4d57fe3c9af1fce4664c7d5b9f440ebd696ae8c73cdc44fcd509e8a0225944b55f61998573b71a483c1701c4ec6eeb41d029576cf3a0effc1586fe466146e064acd9633422beed3a4d711ba37607f8e99748be1e01693fcd3d1d83f7ef67569d7250c02f94dc7eabca64c187337d85e1a8d2a45eb7896fee23147ee9fa4e42b7f44814fcade6e49fba50839229e350f82995fac6d635df9bd9c7abfb704323f35898293aac255d40bcf334dd8a4e1c50d0dbb36d06cb5b273025127e13f8e19bbee5ec752e8912b33b3873f94c66f619ea4fe9d53fd0141802fc99687ec4f1ace126a8f0cf526162293be3fac6189c92cec3df74089dbba3e1201010718f7779f4a0977c77cb3ac57c71da3f7e436344c964eda72402f86ae6fadc1a576ffc33b47d35882943425b6105d5448fa8e08bfacb0631f107d56bd3a23a0ab95ad4a23875defb4c41f16585ddaf53ef617f068a1657103ef8b6ff6ff9f117c72b494741ac34339e015f701c58837bcdbab52ab5d766912f1dcadfc83086e1401fdac6769374ec988a9d44787e34144538c53040089c3b075051a53ab4bfa21e09fbad49b65caf794019c68a51b91efb0af2c33d9c30eba27e2f78e0d3ff458802d13df3188a51267dceef5f6d20808b3a192433393a42908382f9300dda89ee30369482f3cba1638dfd633e7a6db3625ae6957208bdcf73448a9f08ce0ed5cc8bf2d130377fabf0705b11433dc44cc9fe496cb7f9768246529ed7c78b9f2675bda0de1f9798b595b21d26474b729cd9a31c0642e329f456fb235c532cd5a7c7ef8c808390dd2a2954fa0288065356bb0364c7e2be27299af97e5147463e9cb5679dcd5d8852f1023adc1d4bec54915cd5e8b3b12974710fe2fd347a05f9a5d51270148c4e5cda494a6607f7caf4734f2c61aaf0cdff678d8887b2ca77c4965b269c7209a43dbff9f48b9f16565735aa17f392f608d55e18b80d56e40d48a98652a76414fdccc5c82129fadca25b32c30ee4790f977742db966bf104dd561acfcef20d6c4735e82875223c4ab4a0036d3e2860297db9a2d64328d62be975def6864e3f2e9b4269f5d18546933cab9923e9dbc3ace4a586764b988b3655bbd844aa9a0851a36fa40c5905da103b84ec8c6cd78b2e096cd886aacb2022e0b3f060cb50fd2cebd3f947b75e4d9836279bc064815a436205e5c7e5f8dc239816c4e6337d58687a3a9ef4d5befbc32186bce019ab67314b3077f4fba5c3172706ab0158099d31e6b29eb5513e5e3a4f49884eb59d6adf937f4ee21fb639a932d5aecd23cf9a1fcec94ba97fee0d8f7acbb4f7da2c278861b47bb7b0f3fb99086e1f61f35e343e2b3b735f77292aaf678916643b7d5d3b7b8ffbe39201f22a63839c529dd45a0d848410cc78dae46f38f29c5294fe321609833d387a1a5df00956bf0d68eb7216862c33e2ef0ab227e50871e8e8498bdb5e87e5e82449661a9282349cf426cfdb3636cb03443af7f856d647125dcfcd418be600278e5236e7eac5721cc3015a7ef9aad065830e099b9093154b4760c306eabb463ed157661ba70cf327b335b292c30df55622f63b1ae7e4dfc32f9f3452defd81f193ad86866347fc7981f7cbfeca01c52a1221ec0e8ac4e04f1e5f4c805adb0899d9ae918b0ff71178da3620fbbdbda9a3dd213e40fc8890b232ebb15847f7644528d03553cd17801b94a78ab0da53b6b694cd3fe8ee9acaf54aa7105eb39c4b565daca330a90d5e29d44f0aab9856d946499af9bd1fd6d2c8b448c4280cec1198532ba55c34ce4dc2ef0607d653c97c31c41a31b4483f00d601fae27aece545ebef46eebf708e8ec4904d5e89a7245007111e250876c44642816e3667527911616f363ed54f70a515046b3c1577730e754aca9dea87ee32b144232bd7389c81148d5a39f3116e899b99868f5e4853b017c418eaa3c6402fdd0376e29637498440efae2d91d6bf288a5e37f1d8c28309daf76dbdc20a4fd468510c25d46ba2876ff53244ccc27b25aba01c8c37545323bff72646c8b2abb776fa35798301a2858e9bb945d756c16fc42f8a532c93e6ec3903239456da8af79ac6fcd9d5e05247b25b57e566ef9a9b23fee7d8f71051529d95bce6f279325b14c73f2f9e2be738f8fc83432b92cda3f6974f6892f15896908660ba1f27e8c628ef168f698bcf802d25bfb4392267a0f43536390db65f44bd151af6564987f2c942ed89da19a307e3080448888c1217e316db7bbbeb62458a3c53a577c7ecc3391337824598b5ac898fa8bba64146fc9b9db73ab2036b7e711e3f821efb835672e52562eee62e3bd5602a327c25fadd2404d25219cc034dc97be6a783671dd286592b797cbec2ab972d2d54a7887d6b986aab8a1f7f3c070b7dffced460d7c66d0c632276f29a92f4165d41edd4a6d36aabacc83d91f6f9a885d6d32cbb36849e6464dd322915d77fe68aaaf79ed603789191fba3d7a57c59d34766702bcfe9ba834b6833d319ea2b4b2648f6e98baa354ae83bec5bd48a161a3ac33fb32380d5e249a8af89559dbe61bcb48836a8035bd079c76abc428514fb64a8a2d3ed5deb9b4694ecaa02b6a269b84a9f63a7b0c7184d982130f2ea507d01c1685f5edbcb2bdb0388a7fdfb99b5e2afda4615afb2401b0dd60e15e771a4c05c04e6411dfd957f32269749576eb70dfff2ac8a48e7bf44ae0a1237354df38633a9416b3d5e933b39a592de65bcffbabcf7f40c32d7f29541f1f0cd37f562ca18dc96bb2fb0bb9582c2bb01509465b7f3df43ea7360f39bc26bcaa3b2560d0100082e0483d6e18e4300871537e857b267a9ece4c0e3d6553c9fb532efceeca44cb546733f5484b76666455e15718c171428eb507b89d60f82bd87f6d8e25192effba1a101a46bc46b3c8fe16225d05f11190022e8b06036763b96768fa1e2f5128e122e42ca57a94fa7bc04f4e16ce1cb973c6f105bd2743da53dfc9f4b5f50abc4d1bebb770648ebc30869eae6d3c02c54360355721b936df5e13d8e82fa7001d7c20c3d9ec9cf8499a58f420c3158fa7f6c87365233ce8de986db066c88ae6348799f538bd4481ec8ae191a3e523c0fbfbb594f543a0ff62508d868a210a43283e4b746460e74dbd9a69c57c69d1e715a239256cc67f547862e39726ed4e7d6ef639a5d59865689a89906781380407d26030c2988a934a71003d4deb3cfff35cec7be6b1a0f4fd2fa6160ca1dfc414cd532b10ba9000fd7e6a24c6993715aec7500b2bd87ecf885755819ebef3f9380c3a1750cad513301fc328889e8fca48ccd4f85c14c143e689f506df5762b8cedb06516a6d45b524c264d385dc729d351f667252993a63ba711be2828ea72a746944f7bf4065f42344798927f052197ffe077b6d937bcc343f74a7ffbef3eaff8387fc6670d18903a41db2ba43e71d9face6cc972d198c8bb37eb3c7e7024d24dc7f02a666cd86c6a4eba986a973f13a46e1e96247b2f3e989d2204721d84c07e7898936a86611c4aeaee8d0dfb87fa22589b408feb4c991cdecf85a72a7bd3d98379ab811c9e35609cdfcf536c99b3e9bf91406bbcc3e3da39ee6991dd6d8bf62adbf9965db05041c2c898562de8151ee2906262c63e82d292e7f3e1cf4a643a2f607413b123ae644f180a6ff8f1409baec7254bee3b943488126a70e19a634d78b2106897a251dd1ed2403ce21a78413323a46b2b8bc2b9918562aaeadf3efb3d47e2afffa329f92e07970a7a7d61a2e836511f60caca7ec328fab84f6433b000035f66396d32ffd96dda20dde5513d0b67c190bfb76838f645cf0c111f3d71373d7d244545d66ef8348a88ddc0d0961e86aca16db4c33072b8a57f3e586c68db7173093f0f9c3379dbb0876c8d86974185d6323456e6b5ef7a319a3e5382798ee0") fstatfs(0xffffffffffffffff, &(0x7f0000000280)=""/167) 4.565860261s ago: executing program 2 (id=1169): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) brk(0x400000ffc000) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000080)='system_u:object_r:ptchown_exec_t:s0\x00', 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000000000800120000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000079611e099708b13c0000000000000000"], 0x50) r5 = gettid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f00000006c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000700)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000114000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf23fc068cba19d0a, 0x401d031, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000000780)='.\x00', 0x101000, 0x190) fchmod(r7, 0x20) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDISABIO(r8, 0x4b37) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x1, 0x0, @pic={0x84, 0x4, 0xe1, 0x7, 0x9, 0x8, 0x2, 0x7, 0xfb, 0x7, 0xc, 0x2, 0x2, 0x41, 0x0, 0xf0}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x900, 0xbf, 0x28, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001040000000000000300000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000004850000001b000000b700000000000000850000000500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r10}, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 4.564184501s ago: executing program 5 (id=1170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x20802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x40003) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open(0x0, 0x8000, 0x50) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000009c0), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000a40)='wg1\x00', 0x4) r4 = open(&(0x7f0000000a80)='.\x00', 0x8000, 0x50) getdents(r4, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$evdev(&(0x7f0000000580), 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x5, &(0x7f0000000300)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000340)='GPL\x00'}, 0x80) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f0000000080)='key_or_keyring\x00Z\t\xd10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000a00), 0x4000087, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000a40)='wg1\x00', 0x4) r5 = open(&(0x7f0000000a80)='.\x00', 0x8000, 0x50) getdents(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$evdev(&(0x7f0000000580), 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='.\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x1d, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x5, &(0x7f0000000300)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000340)='GPL\x00'}, 0x80) keyctl$restrict_keyring(0x1d, r6, 0x0, &(0x7f0000000080)='key_or_keyring\x00Z\t\xd10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000f09981cc52bb5e9f519500000000000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file2\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0xe020600) 4.19150387s ago: executing program 0 (id=1177): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x1a0808, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8402, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000180)) syz_emit_ethernet(0x16a, &(0x7f0000002c80)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x134, 0x2f, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0xa6, 0x892b, [], "392f927e4f261a1ab20947c64d6af4f73e1541eaf50b2eabaac5b496dc0f131f8ffad71a457a064e0b62d1ccfa35d71d2022978ca0783a8c39e93d6e82e6b43a85b8ed95f4281521bda4676ff1a782dbc9e730597d3dc1fc1c0069d68a7f93027e655f842a1e4e1e071e2f91b9ac7b90a5676bad1ebfc558fd5541567d48a4a6c7b1c6de963fc14f8122d6c658df60e0390b387d0d431ed595aafd3c882b1fa3866eaeb80faf"}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "829fde223d91cfcf8d3bbb8388b058c3289d1813c550c3918d8145ca09cc7e67282c5df7390f230ffa7303bd192ae29c95417aa71e1443e592af18e08fa1997d0e6fe60515530091c85b"}, {0xa888, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x4}}}}}}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x47d, 0x80000000000000, 0x7, 0x9, 0x1000, 0x2, 0x1002, 0xfbfffffffffffffb, 0x8, 0x100000000080, 0x2, 0x6, 0x8bda, 0xfffffffffffffeff, 0x3fb, 0xfbd3], 0x25000, 0x216156}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.072850922s ago: executing program 2 (id=1178): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file2\x00', 0x81c0, 0xffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000700)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000740)={0x1, 0x0, 0x29, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000780)={0x1, 0x1, 0x25, 0x5}) getdents64(r0, &(0x7f00000007c0)=""/72, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xd, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file2\x00', 0x0) 3.458704605s ago: executing program 0 (id=1179): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file2\x00', 0x81c0, 0xffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000700)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000740)={0x1, 0x0, 0x29, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000780)={0x1, 0x1, 0x25, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file2\x00', 0x0) 3.095346282s ago: executing program 4 (id=1180): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8f0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x2, 0x0, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x8000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1, 0x9, 0x10, {0xa, 0x25, 0x25, 0x5, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0xe3, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0xffff}}}}}}}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b0000000001000000010000090000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000640), 0x8, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x3, r2}, 0x38) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x1123102, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880), 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000a80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x7, 0x1c, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x1000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.926303742s ago: executing program 6 (id=1181): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)=0x4}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x8e9, 0xed, 0x400}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x2000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x200000000000005, 0x90], 0xeeee8000, 0x2010d3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000002c0)={0x7fff, 0x10000, 0xb3d, 0xfffffffe, 0xff, "ad6e4a08000461939244e185de86000100", 0x8, 0xdb}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000280)) 1.821361682s ago: executing program 0 (id=1182): syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0xa3d008fa0c356072, 0x0) prlimit64(0x0, 0x5, &(0x7f00000000c0)={0xa, 0x3}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x3, 0x490, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000b80)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000380)={@desc={0x1, 0x0, @desc1}}) listxattr(&(0x7f0000000c00)='./file1\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xe0b, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x38}}, 0x0) sendto$packet(r1, &(0x7f0000000500)="44c33b69eb0e000000dec0c288a8", 0xe, 0x830, &(0x7f00000003c0)={0x11, 0xf8, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmmsg$unix(r3, &(0x7f0000000280), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x191402, 0x0) fsopen(&(0x7f0000000f00)='pstore\x00', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, &(0x7f00000004c0), 0x1, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000600)=0xfff, 0x4) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000005c0)={0x1ffc}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/fscaps', 0x16ba82, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) 1.811153934s ago: executing program 5 (id=1183): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') pread64(r0, &(0x7f0000000280)=""/102400, 0x19000, 0xffffffff8) 1.762556988s ago: executing program 5 (id=1184): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)=ANY=[@ANYBLOB="5c000000026701020000000000000000050000040c00034000000000f3316707de6a7f145f03951e29fb2d000000060c00064000000000000000070900010073797a315020c8fcee92b9860800024000000006080001400000800108"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x91) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setrlimit(0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x4, 0x3, 0x2004, 0x8, 0x11, "03f37fe99f4da28a"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@orlov}, {@nodioread_nolock}, {@nodiscard}, {@quota}, {@stripe}, {@minixdf}, {@orlov}]}, 0x7, 0xbaf, &(0x7f0000000540)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) unshare(0x22020600) fdatasync(r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000001280)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x93e, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x764, 0x0, 0x7, 0x2, 0xfffffffc, 0x7, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x8000, 0x6, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xae81, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x10000, 0x80000, 0x0, 0xfffffffd, 0x5, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1001, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xeffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x4, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x40000000, 0x0, 0xbda6, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x3, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 1.670553128s ago: executing program 6 (id=1185): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x10, &(0x7f00000002c0)={0x11, 0x7, 0x0, 0x1, 0x38, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x24004010) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f00000001c0)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000240)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x20000080) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000380)=@generic={0x1, 0x3ff, 0x101}) socket$netlink(0x10, 0x3, 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) truncate(&(0x7f0000000640)='./cgroup.cpu/cpuset.cpus\x00', 0x80000000000000) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) clock_gettime(0x0, &(0x7f0000006980)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000400)=""/194, 0xc2}, {&(0x7f0000000500)=""/33, 0x21}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)}, {&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000880)=""/197, 0xc5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/99, 0x63}], 0x9, &(0x7f0000000c40)=""/178, 0xb2}, 0x33}, {{&(0x7f0000000d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000d80)=""/175, 0xaf}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/91, 0x5b}, {&(0x7f0000001ec0)=""/219, 0xdb}, {&(0x7f0000001fc0)=""/122, 0x7a}], 0x5, &(0x7f00000020c0)=""/4096, 0x1000}, 0x2d}, {{&(0x7f00000030c0)=@pppol2tpin6, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003140)=""/97, 0x61}, {&(0x7f00000031c0)=""/79, 0x4f}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f00000032c0)=""/119, 0x77}, {&(0x7f0000003340)=""/205, 0xcd}, {&(0x7f0000003440)=""/21, 0x15}, {&(0x7f0000003480)=""/39, 0x27}], 0x7, &(0x7f0000003540)=""/192, 0xc0}, 0xd30}, {{&(0x7f0000003600)=@can, 0x80, &(0x7f0000003900)=[{&(0x7f0000003680)=""/147, 0x93}, {&(0x7f0000003740)=""/91, 0x5b}, {&(0x7f00000037c0)=""/108, 0x6c}, {&(0x7f0000003840)=""/145, 0x91}], 0x4, &(0x7f0000003940)=""/238, 0xee}, 0xa}, {{&(0x7f0000003a40)=@rc, 0x80, &(0x7f0000004080)=[{&(0x7f0000003ac0)=""/5, 0x5}, {&(0x7f0000003b00)=""/131, 0x83}, {&(0x7f0000003bc0)=""/44, 0x2c}, {&(0x7f0000003c00)=""/191, 0xbf}, {&(0x7f0000003cc0)=""/110, 0x6e}, {&(0x7f0000003d40)=""/242, 0xf2}, {&(0x7f0000003e40)=""/44, 0x2c}, {&(0x7f0000003e80)=""/82, 0x52}, {&(0x7f0000003f00)=""/221, 0xdd}, {&(0x7f0000004000)=""/106, 0x6a}], 0xa, &(0x7f0000004140)=""/150, 0x96}, 0xfffffff6}, {{&(0x7f0000004200)=@nfc, 0x80, &(0x7f0000004400)=[{&(0x7f0000004280)=""/10, 0xa}, {&(0x7f00000042c0)=""/107, 0x6b}, {&(0x7f0000004340)=""/155, 0x9b}], 0x3, &(0x7f0000004440)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000005440)=@x25={0x9, @remote}, 0x80, &(0x7f0000005600)=[{&(0x7f00000054c0)=""/26, 0x1a}, {&(0x7f0000005500)=""/133, 0x85}, {&(0x7f00000055c0)=""/15, 0xf}], 0x3}, 0x1}, {{&(0x7f0000005640)=@isdn, 0x80, &(0x7f0000006740)=[{&(0x7f00000056c0)=""/4096, 0x1000}, {&(0x7f00000066c0)=""/102, 0x66}], 0x2}, 0x7}], 0x8, 0x10001, &(0x7f00000069c0)={r5, r6+60000000}) 1.625807742s ago: executing program 5 (id=1186): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="0c81040080070000500012800e0001006970366772657461700000003c00028014000700"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x24008004) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x6, 0x2, 0x3, 0x2}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000003780), 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x83) read$FUSE(r2, &(0x7f00000037c0)={0x2020}, 0x2020) 1.389311397s ago: executing program 5 (id=1187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000280)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x97ff, &(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00'], 0x30}, 0x811) 1.339198122s ago: executing program 5 (id=1188): r0 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000003c0)=""/2) fchdir(r1) syz_usb_connect$midi(0x5, 0x3d, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x1, 0x8, 0xf0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x18, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x4, 0xfd}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xb4, 0xf}], [{{0x9, 0x5, 0xb, 0x787dc5e36457dab3, 0x200, 0x2, 0x1, 0x4, {0x4}}}]}}}}}]}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="015ee0"], 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000a40)) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000a00)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r5, 0x0, 0x5b) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x40, &(0x7f0000000480)={[{@nodioread_nolock}, {@grpjquota}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@sb={'sb', 0x3d, 0x1}}, {@noblock_validity}, {@grpquota}, {@nolazytime}, {@delalloc}]}, 0x1, 0x4bd, &(0x7f0000000540)="$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") sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="500000002700010000000000000000000a0001000000", @ANYBLOB="4fd4d6703f2630c07be79c24b409fee8ae0f8e6439d9b1783447ea2eb8934cc2596f1c22ee35d7c889f2ac4dbceacad1d3b076c3b4b1a75b87523910df65b7b6c7adfc4c6943e46ebff975777b1a53a0cc82183e493a6d74c0c81334560cb7d994acbac79e1c0120b640e7c7ab02fcdf06fd3af0236b427b5b5a282908a9036154a20022172e1b969a3790e411ba1ec302b42b692472abb1ef3c73b5b01434da08be1c7e27ecea42de3f0b75"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0xffffffe8, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xc}, 0x10}, 0x94) 1.336613022s ago: executing program 2 (id=1189): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x1a0808, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8402, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000180)) syz_emit_ethernet(0x16a, &(0x7f0000002c80)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x134, 0x2f, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0xa6, 0x892b, [], "392f927e4f261a1ab20947c64d6af4f73e1541eaf50b2eabaac5b496dc0f131f8ffad71a457a064e0b62d1ccfa35d71d2022978ca0783a8c39e93d6e82e6b43a85b8ed95f4281521bda4676ff1a782dbc9e730597d3dc1fc1c0069d68a7f93027e655f842a1e4e1e071e2f91b9ac7b90a5676bad1ebfc558fd5541567d48a4a6c7b1c6de963fc14f8122d6c658df60e0390b387d0d431ed595aafd3c882b1fa3866eaeb80faf"}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "829fde223d91cfcf8d3bbb8388b058c3289d1813c550c3918d8145ca09cc7e67282c5df7390f230ffa7303bd192ae29c95417aa71e1443e592af18e08fa1997d0e6fe60515530091c85b"}, {0xa888, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x4}}}}}}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x47d, 0x80000000000000, 0x7, 0x9, 0x1000, 0x2, 0x1002, 0xfbfffffffffffffb, 0x8, 0x100000000080, 0x2, 0x6, 0x8bda, 0xfffffffffffffeff, 0x3fb, 0xfbd3], 0x25000, 0x216156}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.222729224s ago: executing program 2 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file2\x00', 0x81c0, 0xffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000700)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000740)={0x1, 0x0, 0x29, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000780)={0x1, 0x1, 0x25, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file2\x00', 0x0) 562.609402ms ago: executing program 6 (id=1191): r0 = syz_open_dev$vcsn(&(0x7f0000000280), 0x9, 0x416140) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="83780b4aa2b156db0c1da2caaf6e73add612f95b57f62802397d2383d785ce8997c2717e0959caa4a9b73898e6fa93e50a738b18e37391640510d144044d153efa234ab0f97c50ec0a6cb55743b241cb676d9a61d5efa226054566874488676fc49ae49f5c0b67f2681149e4340e039d961aab4bd23d78e10d63c25cf6fe3dd8c93badba3491ab2a3460558b22533b1da55d1867724073c49e156b5f27a50060ef6dd7c7f00f4b86917eff05044e1ea764a5b972a28116bac02966e2cc99699839866bfa04878a1a53b9178f07c01376a1ef3492b16334b741b023a1402e14cd5ab959498918b23f11eb3a996a48c1ed", 0xf0}], 0x1) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001f00)='/sys/power/mem_sleep', 0x101a02, 0x0) write$cgroup_subtree(r1, &(0x7f0000001f40)={[{0x2b, 'net'}]}, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x6000, &(0x7f0000000200)=[{&(0x7f0000000240)='U', 0xa00120}], 0x1}, 0x3) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x1000040, &(0x7f0000000580), 0x11, 0x5ab, &(0x7f00000005c0)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x6, 0x13, &(0x7f0000001d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r4, 0x0, 0x10, 0x10, &(0x7f0000001e80)="0000ffffffffa000", &(0x7f0000001ec0)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000001c00)={0x0, 0x0, "dfecfdc2bd8698a4a73a17aa13e7feb6"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) write$UHID_INPUT(r5, &(0x7f0000000bc0)={0x8, {"715b1a6a9fca300288d0d6f164694e9be52056879d4f7f9e17a2f387a1e887ad9fea8a741f3a85292a8ca98e1512418fbd5b5beafe58966442a9c6d52bdef586966362501755a16514ded809c856f4e58261695dbfb4d87cd5d13b78c6cf696afecb55cca3e7607479bc2ceded20d446347481aa05e3083992814f23f6ba955daa8c5988fcc3e1f4a1657a94b74a6161fb233fa5146129889ae615315f974fd1e2c6db572e40a4ec1325c81eff25243f2fbe74fc9cc389297c04d98213ca54c33fe33622c7ebe8f6e9712c07be77c43bddb575411faf61123d450d3c608e581d9d1fd5562abd932bbdf70ff573330754d8f2a3c38906aefc04f438f74482b6e4ec9501b6b43d08d910bda4fc230cfbdc06b2447775f53c6aa87b73a284167aee5e05fc8d867afd4b6b8c3ec81a23be5df245d8e21aa8a630de4b680f34fee2af9de02aeaf31aa7d15edbee78a2a7a621305217678c619a19d41e927e798df495ff28a6485e978bb29cf5f82e31ee8e142134e0845f5c1eaa9664c7dbbfcfcd9dc0567fd447f25de86bea1c28e8a9973e3d5f00e74d022f2b9a97ff08f404af3911f7f086643bfd9004c2500b1684e73c885374cb382bcb37fc82a31c79991b2547fbbba3c005b4d88825488599a8cf0cdaebb4d137232516c9f897d72d034a5b69d03be18c0a0958495e3c0f9b7b31f7684236be8772de10aef1446909f13fb49b4516d00f889efe72769585f4e1ffaa5fc9c0dbfa7b05efbaa14a3e240cf7603c6a487f4155f92bc22c262f496e2f30eef1b95cf28235c0273f295a136f122539ceccb412f7c08a019efb4c270a417db7deb6973a6d0370df72d12456b2d2187c4abdb632bc6323eaaa10f6e8c829d9b556b04498de35a355907c9a17b99b2effaca8ffbfe486493740f3dded005e8bf91b417e2cde579f9232c04807dd2f2da29faf183dee67430972a0c85ee9e9319a7b55b03b3db7d2623f3b16da80eee507de1f18b298a045f32970903d4ee04f99c8a6c086c93f465ad8493f3f2e0579993374b1941818c67c448c4e218e64467ea9755042b593a33f5f909ba7eb4c14be439964ff2c5ff2367710438f2d306e721042b39499b21b034cf9a95048a43e8d96eb88c7e372ee61e7a909b6e947d416b2ac672fa3683771cf6986bda28ccd50c448e31985adf2b836349d8e1ac3ea17dd9256bac1f3c47f39953fceddef2e12b9956ad44347142d836ef531528fd9cbc0c132ac6e270c9f5e4d950d62b788dfb1e337be9629a02f945897bdd5168d73d78ec3a7651465949f5027dcd0affb6b24063499d4afb57b80aa62efaefe607fb9073c79d7083c629bf11a56527fe85a41c3b347c7ef54c85a6e6d046994101ae7627e74d14337a9bb042f5f0aeca0a6199dedb3e4b1aa30760131e8d76d43d9991ac1b3c443b25d7c4c8153d1c7763e6f2fda8c404697668f6aa61f8e28d568320ed190ca635c74d9948adcaa53776a2db303b848723b414bd192511f557f2a426822acecfa3ce6f9bfd60c0144b1a55294387238fbb196addf0502ee9af4108682d056f8965ce4fca03d8ecdcf5f302eaea2de59bf663b15bf8a20ce874ff7d3958fe6da3301b678c2930129b3cb4413400388a59ae939c58d96043d93a57a980ed6b9f35751e059ef6c06cffa4f5c3f8ba1ba67f0160390ec77311e4e67d921bb40a29d448f274da50115c2c67baa3d6f39f9ddfaf3e67392d9e3802c353f0b855c927d6a45e445f58526a09793bcc2e72163fb1b7a779d99f230bd95e5bce797cacb0b8343dcf1be080f18040fe288b157b01b074d25fe44ab6b3c0362f1931f6b174412a8d6a2a645270e7430b3884ac16930105786e469d1d8bcf9ed4010ee3accf78ecc138a8b11c15798eeb29ef4fc3bc5b376807348e1647148c35a1aa3d7ed05dc3a11274887f04f035837a9ea81fcb5eaccd4f43f2f6bbf3c426f72e1423c9175c2b234be0fd3c40c15e5e35c5c7359c894e95f82797c48fdca7ef07a6fa6f0dd0bb9a24c4aa9050000000000005c67e60f8814f67d86caba122def954662ae2c6f4f99cfbb55214c61216e8c8f84e9b172129642d754a49c923c6c6f1ba820e99a513308a03c9a080be7224244f2bc1d99d93ddcb25a3d2e0a6b4b868f877760b019c8c475c3e0b90109c21c309e7bc0ffc48753aeb70e7884c8eac52b2fb8576ae917199bfeea255da4b54667320798db03440fabaebb1e8e181506bf93ac67ba128a14c9dcc45d9f07ddfea21e7da2bf4215bc73e82e9a7187cd5fa7c17f7710f2cdf59bb22ce786328af52f17349c42ca7bce681619246b8b467b7b4c60125ea5687e1cd9bf36a67023759a8baeccb60e84c7102f284436584d0508486d96af8ea8358f7ac1f9a21c1229eda8a1a273b999a74f39d3851b6aec92d120f2c4ca0b2852844b5529eb40db91749f221568850f23f089dd704434b6fe736ab7eb67ebd52943000770e0a57c6ff7c1420a225fdeca0cddcf4083a3f5f9fb37490dfdf2c8aae282558c8a4af6ec41f7788d6340053ff69311489323c403becde20ae84c6a8968717e8923c13723be082aab3edd7cf0fd1b2a1f64692911d9e49c4d7d20f8c9364c454fdb51ff376abbae26df57ab7d458772a919879ea7caada2c17fb0011ecc8ced3d7dfa39250fc3c8cc9d0f377860d8b58fd81952f50d732adc73e470c1f5778a49d7f3d507e5ab5cb798420f3a56d9d3ad76b75e5d41921a7ae04099968867c816f6d44c4a41cefbe31623d6899a00c28454bdc0ea17f284dcb39a0221989e3c2bbcc5556e8f870bbf98be4b57be438797995d221ecd0515e4c89c431ff7b595f35527911371cc324cd4c76d4ea68cfdd1eed120ec16e89e4ec4c5ac28039de8b3aa451e1e55631d599612e94630ad3d67ba79e03c4ff023e8ddfd10c09517df736a01af5488a87f551c7e8e41dd0d0d10c58f3053cbdef2c4fd72e51c2d9724360687ab6d0395023626bbfcab24737a50bb27d78ebfe11b5e40a71b2141254074b3dca3cf45456ea1860704b0d5da04710667bf6454c81b33b5b429d2764afd13338d60b928140c05e0b7f41c6fb19b911216ca2357d8171b3673b454b5017bbf34dabdf5fd0d7fb602399ec434f40bc0450cd6e418713c68b349b7deb3ef014b8ec7a62f686b37b1c3a8b60340d0bbf09a6965013c68317d7a2e07bcd3bcaa7cd2cbf34d64534e1ff9cb4ba32d9a5cde63e2da7dfdfcc86886a0ee01fa0d95b78a12085d6dfb62d622041e97d8f03f4727e865be656d9286d628a8950b55dc71058b6dec200049738824a8200023be3f93e740f2a8d241e57deeb642ff28140ee91424db3cf2fafdd8a7d9fc80a7a54da30029ef65df2e7900059ab1141985376e7f9f46e712b4536ed49778e0629d284f56eef0906d21536427333d8a7d6d7e74591031a526eea16a627c5d9f399ec4628a26d9812b68b501716b602564504ab8f16e76a19c608ac550fa52fb80af1e81b48abf13c9996cf47f34d8e943b7d48de31c0d5d794af157c16209d3c0632c2801ab17f05de2c2fb9b9b8c0a257c18a832ac743c9341042af1e56619154fc4f7b20c8de3edbb1636f0a098ed6f6858c27905b00798fd8bedda5eaeeb12ff19943dad0a7f069a9e01dfc9730568784a07c0a6b01623b11a1e6f86cab4d95bf256cd28b00c17b5df66dd4c393471f0f18c68aeae404f5f3fb66bbfd62f1511b35caddad004408fe3b182edf81ad50ac3a639121236968c6be1ba7f7bee6409a91f4c7caf077c2a94c6d8d547cc680a1d7e6cd57c328f6e21312ab76491565c5f4271cbf64ed2be12d770e927cba3cfa0fb89452285a69fe205bc9943eee4466ca8f9998997e2c1a1fe782c9e2241c51dc008bb8f6fe9a49edefae6f43d3e0cd207439745dfd4c347058a4ec3c3bbd56f3108b9a034600f78dc5c889621a6b78e2f7256034d53ae7877de459b6895d5849eb4a8099a62a4bd50d5b4d48cf82fae64985e1e22435fe5d5a4b9119eed5d8ee03a6d1675b7b75d47b8e20a44c05812b36cc2e31947a02c48262c5a875e562dbd4a1a8d045a37afabb28079d3904f53d466e5abab09b8e5e0a56dbae4c4cd9bc6640b47cc6616b2e7cf19c6e9591d32ab0cf87880c81d63948a508ad0cbd50e348d399daf51efb2b96ef9d56a8ba89d04bf5e7d4f7353f71d1a6cb78da6644574664d08e848cf97bab16d6acf70f0e8a06dad5c741cb5eb483f809c4c35307595f00d00bf6a1474aef94cfc913d08c612387172aabc802c17753c6ccd752eaa81e7eefd61c037f958e23bcb9c1510ea47bcaefa72f070809de9f79faede74c87231411b17b353382974bcd334cf983c85ad9e1844cdbd9181a5bb976c35b6a638ae8dd20119858f8c525d735779b2f8e244ed2fc0d900445fe1fe775b4bcb1d2e8d456fd6234ddfcad7fe7abf716d9f4b4a6ee83be812cdda17ec43a895a5c03e5359cce3de61d9736f8a4d66051891b1431f2e61a324f252bd0e9b32e23bd31a5405642bbd2cdc5d3e45b56530568f05a72d475a7d3505b26d9fcdaeb30a62ddf09bcd9e59c1f34e375149782b8019a7a9883fd93397acb338af428f1e015a671b5c11651d3c0168f747fdc6e1fb084bdcbd760adce881492b2bbb76c0a1327e76c9c7ce0afff2f80ec30f2be04d9f93a9b291cc01bcc03f7b67e16a7f1bcc838aab9240df99691a2781da614fdcecf5115382e1357460f4b8e3a577d3ae922379eadc2416d40028c785905bb43a41f5fb7189a8704b8e492c86bd82d0560f81796693e74f08739b632e5226d3c3a963caf5db455ac20288d472611e7dc243531fd66718e94daa2bf93a30a38e6a497a50f2472a72bf9c4689e54105c44cd074bb87e087735791b436d6553c5f2b61ff75dc64ba597b77f7ea42a0ec14dc08107e7bbe97ae519beb5e18a8859493afd097d4609a3a2025fe9603b85f2b1350336d92e15d0bdea3a42bb8775ff2b38babf2ec27e77452c93a05a798ec789a6a012047481ea8e1a8dfc77a9f0f6ddebb9f3503702b147f663f01f70cdfc29afe0cfd7823823fa2e139ea7d1a010a67bb3a31e620aff5cbe1a99ac3cd0f91c472dd021213edf5a9225941b575e27f99c0cb94eb9598a443ec7665335305895ebc28e3f8d34adf6aa37084f823d293ba9dcb2f73d88457d0a55c9202dd309a9b36daa4e50c8f9c93ec7644a7a730b6b947f0f2381a34d67bce50e790a7655a34a2f70723f360af014befa4fd3dbbb8bc2f1461eb48b987a8b772b3ad31a1077c59ef45e4b2870739454ef56402115ab427527e67b6a6a97b2bb3d7a2c13d2a55d1032a64b83efc13939589e46abd78bcc493529cf38581fe3160b2c6eb5a9ac6cee0b05618e51450af077fba0dc943089f112e67a2c654ad94157e95295219d0bbab3a02a2c9ec08ce9d904a703760dc41a7943d52561aeb5519e82d0d390365cfd796434c3decf733d8f09789af0b990f4f9b791cf0d677f34d85fc2b3583b21737955cbaa098963bfa39755f335329f265db75c5d406a0a91ed76563a3ed5f3d2877c2b4b81dc1eaccde6d642c0d8791482e27c64103fc87a55ae91e7adf49ddc1dace5c3108d6a496d678ec5ba09b2a9e6990cb63ac3e4b787661800d11c73da87bf5d297c1fb531aa105d30464b0e023e4212a0d4a0ac119c1568280d49d084729e680a0f453a725ed08454fa874cf22f5718e2afd995a1d7acbe92e0a49307f1b322367dc12b3673708024a85fcc643bd00", 0x1000}}, 0x1006) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x2000090, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@dont_appraise}]}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="a80100001900010000000000fbdbdf251d010900500012804c00f88008003300", @ANYRES32=0x0, @ANYBLOB="3d00fbd0b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b720c00348000000000000000490000004401068040"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000004980), 0x4) 551.282253ms ago: executing program 4 (id=1192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x20802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x40003) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open(0x0, 0x8000, 0x50) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000a00), 0x4000087, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000a40)='wg1\x00', 0x4) r5 = open(&(0x7f0000000a80)='.\x00', 0x8000, 0x50) getdents(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$evdev(&(0x7f0000000580), 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='.\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x1d, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x5, &(0x7f0000000300)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000340)='GPL\x00'}, 0x80) keyctl$restrict_keyring(0x1d, r6, 0x0, &(0x7f0000000080)='key_or_keyring\x00Z\t\xd10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x4000087, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000800000085000000a800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6}, 0xc) io_submit(r5, 0x1, &(0x7f0000000640)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_mount_image$erofs(&(0x7f00000006c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x1f0, &(0x7f0000000780)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0x7}, {0x2, 0x3}]}, @ptr={0x200000f}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000a40)=""/4110, 0x45, 0x100e, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge0\x00'}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) kernel console output (not intermixed with test programs): -1: Found UVC 0.00 device (1bcf:0b40) [ 273.024921][ T308] usb 5-1: Forcing UVC version to 1.0a [ 273.031121][ T28] audit: type=1400 audit(1793646045.883:278): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 273.031542][ T308] usb 5-1: No valid video chain found. [ 273.139253][ T2956] user requested TSC rate below hardware speed [ 273.222464][ T301] usb 1-1: Can't get UAC3 power state for id 10 [ 273.302939][ T301] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 273.492709][ T301] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 273.685519][ T2247] udevd[2247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 273.711147][ T301] usb 1-1: USB disconnect, device number 17 [ 274.322734][ T308] usb 5-1: USB disconnect, device number 15 [ 274.431847][ T28] audit: type=1400 audit(1793646047.273:279): avc: denied { write } for pid=2972 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.539589][ T28] audit: type=1400 audit(1793646047.383:280): avc: denied { connect } for pid=2974 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.640128][ T2977] loop4: detected capacity change from 0 to 512 [ 274.692673][ T2977] EXT4-fs: Ignoring removed bh option [ 274.762588][ T2977] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.728: corrupted in-inode xattr [ 274.817219][ T2977] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.728: couldn't read orphan inode 15 (err -117) [ 274.863316][ T2977] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 275.040697][ T28] audit: type=1400 audit(1793646047.883:281): avc: denied { ioctl } for pid=2974 comm="syz.4.728" path="socket:[34518]" dev="sockfs" ino=34518 ioctlcmd=0x5865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.156676][ T2547] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 275.336726][ T308] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 275.369470][ T2547] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 275.386670][ T2547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.395851][ T2547] usb 6-1: Product: syz [ 275.416672][ T2547] usb 6-1: Manufacturer: syz [ 275.421733][ T2547] usb 6-1: SerialNumber: syz [ 275.489905][ T2973] loop2: detected capacity change from 0 to 131072 [ 275.506730][ T2973] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 275.515365][ T2973] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 275.517829][ T308] usb 5-1: config 1 has too many interfaces: 241, using maximum allowed: 32 [ 275.545977][ T308] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 241 [ 275.556298][ T2973] F2FS-fs (loop2): invalid crc value [ 275.566336][ T308] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 275.584016][ T2973] F2FS-fs (loop2): Found nat_bits in checkpoint [ 275.592908][ T308] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.607055][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.624260][ T308] usb 5-1: Product: syz [ 275.633204][ T308] usb 5-1: Manufacturer: syz [ 275.644956][ T2547] usb 6-1: Can't get UAC3 power state for id 10 [ 275.646171][ T308] usb 5-1: SerialNumber: syz [ 275.662598][ T2547] usb 6-1: BAAD MICROPHONE c_chmask mismatch [ 275.669090][ T2973] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 275.677559][ T2973] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 275.687769][ T2547] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 275.705879][ T2437] udevd[2437]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 275.726311][ T2547] usb 6-1: USB disconnect, device number 11 [ 275.870937][ T2976] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 276.406022][ T3002] user requested TSC rate below hardware speed [ 277.608839][ T3006] user requested TSC rate below hardware speed [ 277.685123][ T290] EXT4-fs (loop4): unmounting filesystem. [ 278.468453][ T308] cdc_ncm 5-1:1.0: bind() failure [ 278.481979][ T308] usb 5-1: USB disconnect, device number 16 [ 279.400888][ T3019] user requested TSC rate below hardware speed [ 279.500765][ T3033] loop2: detected capacity change from 0 to 1024 [ 279.559448][ T3036] loop0: detected capacity change from 0 to 2048 [ 279.573702][ T3033] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 279.595407][ T3033] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.637710][ T3036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 279.666767][ T3039] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 279.717757][ T3049] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.741: lblock 3 mapped to illegal pblock 3 (length 2) [ 279.736220][ T3049] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.741: lblock 0 mapped to illegal pblock 0 (length 1) [ 279.772115][ T3051] user requested TSC rate below hardware speed [ 279.851174][ T3049] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.741: lblock 0 mapped to illegal pblock 0 (length 1) [ 279.889113][ T3054] 9pnet_fd: Insufficient options for proto=fd [ 279.902091][ T3049] EXT4-fs error (device loop2): ext4_ext_remove_space:2945: inode #15: comm syz.2.741: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 280.029054][ T3056] user requested TSC rate below hardware speed [ 281.233235][ T3059] loop3: detected capacity change from 0 to 128 [ 281.262866][ T3059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.748'. [ 281.424605][ T287] EXT4-fs (loop0): unmounting filesystem. [ 281.433171][ T288] EXT4-fs (loop2): unmounting filesystem. [ 281.562771][ T28] audit: type=1400 audit(1793646054.403:282): avc: denied { read write } for pid=3078 comm="syz.2.756" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 281.600060][ T865] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.10 Device [syz0] on syz1 [ 281.616020][ T3080] loop2: detected capacity change from 0 to 512 [ 281.624332][ T3080] EXT4-fs: Ignoring removed nobh option [ 281.630074][ T3080] EXT4-fs: dax option not supported [ 281.640615][ T28] audit: type=1400 audit(1793646054.433:283): avc: denied { open } for pid=3078 comm="syz.2.756" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 281.710877][ T3080] loop2: detected capacity change from 0 to 512 [ 281.726146][ T3080] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 281.746731][ T1402] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 281.800257][ T3080] EXT4-fs (loop2): 1 truncate cleaned up [ 281.806228][ T3080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 281.848157][ T3080] Zero length message leads to an empty skb [ 281.949253][ T1402] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 281.973390][ T1402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.005389][ T1402] usb 4-1: Product: syz [ 282.021542][ T1402] usb 4-1: Manufacturer: syz [ 282.039159][ T1402] usb 4-1: SerialNumber: syz [ 282.096732][ T28] audit: type=1400 audit(1793646054.933:284): avc: denied { setattr } for pid=3078 comm="syz.2.756" path="/149/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.156840][ T28] audit: type=1400 audit(1793646054.993:285): avc: denied { map } for pid=3078 comm="syz.2.756" path="/149/file1/rdma.current" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 282.265893][ T1402] usb 4-1: Can't get UAC3 power state for id 10 [ 282.278689][ T1402] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 282.300055][ T288] EXT4-fs (loop2): unmounting filesystem. [ 282.303458][ T1402] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 282.381268][ T1402] usb 4-1: USB disconnect, device number 8 [ 282.553728][ T3095] user requested TSC rate below hardware speed [ 282.661975][ T2247] udevd[2247]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 283.704712][ T28] audit: type=1400 audit(1793646056.543:286): avc: denied { bind } for pid=3106 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.819844][ T3115] loop0: detected capacity change from 0 to 1024 [ 283.836774][ T308] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 283.858652][ T3115] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 283.868063][ T3115] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.935174][ T3119] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.766: lblock 3 mapped to illegal pblock 3 (length 2) [ 283.956698][ T1402] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 283.977529][ T3119] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.766: lblock 0 mapped to illegal pblock 0 (length 3) [ 284.016709][ T308] usb 5-1: Using ep0 maxpacket: 16 [ 284.023784][ T308] usb 5-1: config 1 has an invalid interface number: 33 but max is 0 [ 284.040273][ T3119] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 284.046914][ T3120] 9pnet_fd: Insufficient options for proto=fd [ 284.058335][ T308] usb 5-1: config 1 has no interface number 0 [ 284.076725][ T308] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 284.076758][ T3119] EXT4-fs (loop0): This should not happen!! Data will be lost [ 284.076758][ T3119] [ 284.090975][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.113510][ T308] usb 5-1: Found UVC 0.00 device (1bcf:0b40) [ 284.123760][ T308] usb 5-1: Forcing UVC version to 1.0a [ 284.131673][ T308] usb 5-1: No valid video chain found. [ 284.258988][ T1402] usb 3-1: not running at top speed; connect to a high speed hub [ 285.488204][ T1402] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.498819][ T1402] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.456843][ T1402] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 286.466031][ T1402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.486106][ T2547] usb 5-1: USB disconnect, device number 17 [ 286.493534][ T1402] usb 3-1: Found UVC 71.01 device (0000:0000) [ 286.501265][ T1402] usb 3-1: No streaming interface found for terminal 2. [ 286.510465][ T1402] usb 3-1: Failed to create links for entity 1 [ 286.517197][ T318] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:3: lblock 4 mapped to illegal pblock 4 (length 1) [ 286.517952][ T1402] usb 3-1: Failed to register entities (-22). [ 286.534206][ T318] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 286.551237][ T318] EXT4-fs (loop0): This should not happen!! Data will be lost [ 286.551237][ T318] [ 286.562391][ T287] EXT4-fs (loop0): unmounting filesystem. [ 286.678303][ T1402] usb 3-1: USB disconnect, device number 13 [ 286.856687][ T308] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 287.039224][ T308] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 287.056688][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.064989][ T308] usb 1-1: Product: syz [ 287.086674][ T308] usb 1-1: Manufacturer: syz [ 287.091332][ T308] usb 1-1: SerialNumber: syz [ 287.106694][ T1402] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 287.296684][ T1402] usb 3-1: Using ep0 maxpacket: 16 [ 287.303589][ T1402] usb 3-1: config 1 has an invalid interface number: 33 but max is 0 [ 287.314150][ T308] usb 1-1: Can't get UAC3 power state for id 10 [ 287.314437][ T1402] usb 3-1: config 1 has no interface number 0 [ 287.335012][ T308] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 287.340190][ T1402] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 287.351848][ T1402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.369352][ T308] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 287.376263][ T1402] usb 3-1: Found UVC 0.00 device (1bcf:0b40) [ 287.391325][ T1402] usb 3-1: Forcing UVC version to 1.0a [ 287.393021][ T2247] udevd[2247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 287.404414][ T1402] usb 3-1: No valid video chain found. [ 287.416295][ T308] usb 1-1: USB disconnect, device number 18 [ 287.596743][ T900] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 287.621331][ T337] usb 3-1: USB disconnect, device number 14 [ 287.671163][ T3162] ip_tables: iptables: counters copy to user failed while replacing table [ 287.735174][ T28] audit: type=1400 audit(1793646060.573:287): avc: denied { connect } for pid=3161 comm="syz.5.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.779304][ T900] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 287.788948][ T900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.797402][ T900] usb 5-1: Product: syz [ 287.801813][ T900] usb 5-1: Manufacturer: syz [ 287.807242][ T900] usb 5-1: SerialNumber: syz [ 288.320757][ T900] usb 5-1: Can't get UAC3 power state for id 10 [ 288.328234][ T900] usb 5-1: BAAD MICROPHONE c_chmask mismatch [ 288.338733][ T900] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 288.350086][ T900] usb 5-1: USB disconnect, device number 18 [ 288.578516][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 288.648494][ T3182] user requested TSC rate below hardware speed [ 289.704298][ T3193] user requested TSC rate below hardware speed [ 289.838863][ T28] audit: type=1400 audit(1793646062.683:288): avc: denied { read write } for pid=3198 comm="syz.5.794" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 289.862903][ T28] audit: type=1400 audit(1793646062.703:289): avc: denied { open } for pid=3198 comm="syz.5.794" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 289.967918][ T3202] user requested TSC rate below hardware speed [ 291.237589][ T3219] loop2: detected capacity change from 0 to 2048 [ 291.237816][ T3220] loop3: detected capacity change from 0 to 1024 [ 291.289546][ T3219] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 291.305089][ T3231] user requested TSC rate below hardware speed [ 291.314095][ T3220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 291.337049][ T3220] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.408917][ T3210] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 291.424149][ T3210] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 291.426719][ T291] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 291.436732][ T3210] EXT4-fs (loop2): This should not happen!! Data will be lost [ 291.436732][ T3210] [ 291.447127][ T3239] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.800: lblock 3 mapped to illegal pblock 3 (length 2) [ 291.453894][ T3210] EXT4-fs (loop2): Total free blocks count 0 [ 291.474226][ T3210] EXT4-fs (loop2): Free/Dirty block details [ 291.516708][ T3210] EXT4-fs (loop2): free_blocks=66060288 [ 291.522472][ T3210] EXT4-fs (loop2): dirty_blocks=32 [ 291.532810][ T3243] 9pnet_fd: Insufficient options for proto=fd [ 291.539796][ T3210] EXT4-fs (loop2): Block reservation details [ 291.555530][ T3210] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 291.562291][ T3216] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 291.666675][ T291] usb 5-1: Using ep0 maxpacket: 16 [ 291.673035][ T291] usb 5-1: config 1 has an invalid interface number: 33 but max is 0 [ 291.693189][ T291] usb 5-1: config 1 has no interface number 0 [ 291.746062][ T291] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 291.776353][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.802872][ T291] usb 5-1: Found UVC 0.00 device (1bcf:0b40) [ 291.820046][ T291] usb 5-1: Forcing UVC version to 1.0a [ 291.825656][ T291] usb 5-1: No valid video chain found. [ 292.006954][ T291] usb 5-1: USB disconnect, device number 19 [ 292.060261][ T286] EXT4-fs (loop3): unmounting filesystem. [ 292.320139][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 292.350839][ T3254] 9pnet_fd: Insufficient options for proto=fd [ 292.846707][ T322] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 293.046667][ T322] usb 5-1: Using ep0 maxpacket: 16 [ 293.052980][ T322] usb 5-1: config 1 has an invalid interface number: 33 but max is 0 [ 293.075955][ T322] usb 5-1: config 1 has no interface number 0 [ 293.096720][ T322] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 293.126241][ T322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.137443][ T322] usb 5-1: Found UVC 0.00 device (1bcf:0b40) [ 293.144445][ T322] usb 5-1: Forcing UVC version to 1.0a [ 293.180237][ T322] usb 5-1: No valid video chain found. [ 293.344540][ T337] usb 5-1: USB disconnect, device number 20 [ 294.491619][ T3274] FAULT_INJECTION: forcing a failure. [ 294.491619][ T3274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.566760][ T3274] CPU: 1 PID: 3274 Comm: syz.4.816 Not tainted syzkaller #0 [ 294.574115][ T3274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 294.584548][ T3274] Call Trace: [ 294.587931][ T3274] [ 294.590885][ T3274] __dump_stack+0x21/0x24 [ 294.595329][ T3274] dump_stack_lvl+0x110/0x170 [ 294.600027][ T3274] ? __cfi_dump_stack_lvl+0x8/0x8 [ 294.605076][ T3274] ? format_decode+0x1bb/0x1520 [ 294.610084][ T3274] dump_stack+0x15/0x24 [ 294.614395][ T3274] should_fail_ex+0x3bf/0x510 [ 294.619183][ T3274] should_fail+0xb/0x10 [ 294.623372][ T3274] should_fail_usercopy+0x1a/0x20 [ 294.628447][ T3274] _copy_from_user+0x1e/0xc0 [ 294.633138][ T3274] kstrtouint_from_user+0xda/0x170 [ 294.638283][ T3274] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 294.644047][ T3274] ? __kasan_check_read+0x11/0x20 [ 294.649159][ T3274] ? _copy_to_user+0x72/0x90 [ 294.653777][ T3274] ? simple_read_from_buffer+0x10f/0x160 [ 294.659531][ T3274] proc_fail_nth_write+0x8b/0x200 [ 294.664640][ T3274] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 294.670302][ T3274] ? security_file_permission+0x8a/0xb0 [ 294.675977][ T3274] ? security_file_permission+0x94/0xb0 [ 294.681606][ T3274] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 294.687301][ T3274] vfs_write+0x3fb/0xd00 [ 294.691666][ T3274] ? __kasan_check_read+0x11/0x20 [ 294.696721][ T3274] ? __cfi_vfs_write+0x10/0x10 [ 294.701525][ T3274] ? __kasan_check_write+0x14/0x20 [ 294.706663][ T3274] ? mutex_lock+0x93/0x1b0 [ 294.711262][ T3274] ? __cfi_mutex_lock+0x10/0x10 [ 294.716243][ T3274] ? __fdget_pos+0x2cd/0x380 [ 294.721179][ T3274] ? ksys_write+0x70/0x260 [ 294.725876][ T3274] ksys_write+0x14a/0x260 [ 294.730238][ T3274] ? __cfi_ksys_write+0x10/0x10 [ 294.735127][ T3274] ? debug_smp_processor_id+0x17/0x20 [ 294.740704][ T3274] __x64_sys_write+0x7b/0x90 [ 294.745348][ T3274] x64_sys_call+0x27b/0x9a0 [ 294.749881][ T3274] do_syscall_64+0x4c/0xa0 [ 294.754608][ T3274] ? clear_bhb_loop+0x30/0x80 [ 294.759870][ T3274] ? clear_bhb_loop+0x30/0x80 [ 294.764676][ T3274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.770622][ T3274] RIP: 0033:0x7f5a8c16034e [ 294.775231][ T3274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.795645][ T3274] RSP: 002b:00007f5a8d03afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.804487][ T3274] RAX: ffffffffffffffda RBX: 00007f5a8d03b6c0 RCX: 00007f5a8c16034e [ 294.812675][ T3274] RDX: 0000000000000001 RSI: 00007f5a8d03b0a0 RDI: 0000000000000004 [ 294.820662][ T3274] RBP: 00007f5a8d03b090 R08: 0000000000000000 R09: 0000000000000000 [ 294.828737][ T3274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.836720][ T3274] R13: 00007f5a8c426038 R14: 00007f5a8c425fa0 R15: 00007ffeb2746e68 [ 294.844702][ T3274] [ 294.856100][ T3278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 294.875857][ T3285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 295.037883][ T3296] user requested TSC rate below hardware speed [ 295.236887][ T3306] user requested TSC rate below hardware speed [ 295.613467][ T3287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.365421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 296.383012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.409164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 296.420792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.430047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.438927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.447332][ T337] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 296.457022][ T3310] user requested TSC rate below hardware speed [ 296.463934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.477629][ T322] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 296.482820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.470547][ T3315] loop4: detected capacity change from 0 to 16 [ 297.498300][ T3315] erofs: (device loop4): mounted with root inode @ nid 36. [ 297.936564][ T3316] user requested TSC rate below hardware speed [ 297.959752][ T337] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 297.973333][ T337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.991948][ T337] usb 6-1: Product: syz [ 298.001499][ T337] usb 6-1: Manufacturer: syz [ 298.011864][ T337] usb 6-1: SerialNumber: syz [ 298.058775][ T337] usb 6-1: can't set config #1, error -71 [ 298.085889][ T337] usb 6-1: USB disconnect, device number 12 [ 298.305387][ T3325] loop2: detected capacity change from 0 to 512 [ 298.332466][ T3325] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 298.348592][ T3323] loop3: detected capacity change from 0 to 16 [ 298.357013][ T3323] erofs: (device loop3): mounted with root inode @ nid 36. [ 298.378046][ T3325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 298.386027][ T3325] System zones: 1-12 [ 298.390885][ T3325] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.831: bad orphan inode 131072 [ 298.401793][ T3325] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 298.420153][ T288] EXT4-fs (loop2): unmounting filesystem. [ 298.436153][ T3335] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 298.444802][ T28] audit: type=1400 audit(1793646071.283:290): avc: denied { relabelto } for pid=3334 comm="syz.2.835" name="162" dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 298.471648][ T28] audit: type=1400 audit(1793646071.313:291): avc: denied { associate } for pid=3334 comm="syz.2.835" name="162" dev="tmpfs" ino=1048 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 298.526704][ T28] audit: type=1400 audit(1793646071.353:292): avc: denied { write } for pid=288 comm="syz-executor" name="162" dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 298.569882][ T3338] loop2: detected capacity change from 0 to 512 [ 298.576687][ T28] audit: type=1400 audit(1793646071.353:293): avc: denied { remove_name } for pid=288 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 298.616116][ T28] audit: type=1400 audit(1793646071.353:294): avc: denied { rmdir } for pid=288 comm="syz-executor" name="162" dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 298.616148][ T3338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 298.649461][ T3338] System zones: 1-12 [ 298.654285][ T3338] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.836: missing EA_INODE flag [ 298.666458][ T3338] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.836: error while reading EA inode 12 err=-117 [ 298.679165][ T3338] EXT4-fs (loop2): 1 orphan inode deleted [ 298.686942][ T3338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 298.726673][ T322] usb 3-1: device not accepting address 15, error -71 [ 298.835944][ T288] EXT4-fs (loop2): unmounting filesystem. [ 298.912538][ T3345] netlink: 'syz.2.838': attribute type 9 has an invalid length. [ 298.924223][ T3345] loop2: detected capacity change from 0 to 256 [ 298.931110][ T3345] exfat: Deprecated parameter 'namecase' [ 298.937400][ T3345] exfat: Deprecated parameter 'namecase' [ 298.946353][ T3345] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 299.086735][ T301] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 299.298756][ T301] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.316955][ T3357] user requested TSC rate below hardware speed [ 299.385238][ T301] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.512614][ T301] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.627921][ T301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.685637][ T3350] loop3: detected capacity change from 0 to 40427 [ 299.719306][ T301] usb 6-1: SerialNumber: syz [ 299.759413][ T3350] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 299.890537][ T3350] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 300.192821][ T3350] F2FS-fs (loop3): invalid crc value [ 300.347777][ T3350] F2FS-fs (loop3): Found nat_bits in checkpoint [ 300.372988][ T301] usb 6-1: invalid UAC_HEADER (v1) [ 300.387417][ T28] audit: type=1400 audit(1793646073.233:295): avc: denied { watch } for pid=3363 comm="syz.0.842" path="/188" dev="tmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 300.413084][ T3369] loop0: detected capacity change from 0 to 16 [ 300.422228][ T3369] process 'syz.0.842' launched './file1' with NULL argv: empty string added [ 300.461725][ T28] audit: type=1400 audit(1793646073.273:296): avc: denied { create } for pid=3363 comm="syz.0.842" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 300.463789][ T301] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 300.501025][ T3350] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 300.508784][ T301] usb 6-1: USB disconnect, device number 13 [ 300.530130][ T3350] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 300.741907][ T3379] syz.3.840: attempt to access beyond end of device [ 300.741907][ T3379] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 300.757580][ T3379] syz.3.840: attempt to access beyond end of device [ 300.757580][ T3379] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 300.824202][ T2284] udevd[2284]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 301.507320][ T28] audit: type=1400 audit(1793646074.353:297): avc: denied { sqpoll } for pid=3386 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 301.533510][ T3385] loop2: detected capacity change from 0 to 2048 [ 301.634241][ T322] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 301.668658][ T3385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 301.800366][ T3400] loop0: detected capacity change from 0 to 16 [ 301.837698][ T3400] erofs: (device loop0): mounted with root inode @ nid 36. [ 301.846704][ T322] usb 6-1: Using ep0 maxpacket: 16 [ 301.854630][ T322] usb 6-1: config 1 has an invalid interface number: 33 but max is 0 [ 301.905660][ T3402] user requested TSC rate below hardware speed [ 301.964890][ T322] usb 6-1: config 1 has no interface number 0 [ 301.974668][ T322] usb 6-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 302.063204][ T322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.229999][ T322] usb 6-1: Found UVC 0.00 device (1bcf:0b40) [ 302.317977][ T322] usb 6-1: Forcing UVC version to 1.0a [ 302.425676][ T322] usb 6-1: No valid video chain found. [ 303.017469][ T322] usb 6-1: USB disconnect, device number 14 [ 303.109426][ T288] EXT4-fs (loop2): unmounting filesystem. [ 303.310629][ T3405] loop4: detected capacity change from 0 to 40427 [ 303.336123][ T3405] F2FS-fs (loop4): invalid crc value [ 303.351447][ T3405] F2FS-fs (loop4): Found nat_bits in checkpoint [ 303.366741][ T337] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 303.430804][ T3405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 303.559173][ T337] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 303.570495][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.584036][ T337] usb 4-1: Product: syz [ 303.593777][ T337] usb 4-1: Manufacturer: syz [ 303.603040][ T337] usb 4-1: SerialNumber: syz [ 303.666671][ T900] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 303.826700][ T337] usb 4-1: Can't get UAC3 power state for id 10 [ 303.836395][ T337] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 303.856876][ T900] usb 6-1: Using ep0 maxpacket: 16 [ 303.863463][ T900] usb 6-1: config 1 has an invalid interface number: 33 but max is 0 [ 303.877403][ T337] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 303.889980][ T900] usb 6-1: config 1 has no interface number 0 [ 303.914702][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 303.933528][ T337] usb 4-1: USB disconnect, device number 9 [ 303.941672][ T900] usb 6-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 303.962039][ T900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.984073][ T900] usb 6-1: Found UVC 0.00 device (1bcf:0b40) [ 303.991233][ T900] usb 6-1: Forcing UVC version to 1.0a [ 303.997083][ T900] usb 6-1: No valid video chain found. [ 304.103435][ T3421] user requested TSC rate below hardware speed [ 304.184852][ T337] usb 6-1: USB disconnect, device number 15 [ 304.335348][ T3428] user requested TSC rate below hardware speed [ 304.479642][ T3439] loop2: detected capacity change from 0 to 2048 [ 304.487945][ T3426] user requested TSC rate below hardware speed [ 304.527188][ T3439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 304.589807][ T3447] user requested TSC rate below hardware speed [ 304.639157][ T3448] loop3: detected capacity change from 0 to 2048 [ 304.702696][ T3448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 304.789820][ T3440] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 304.812925][ T3440] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 304.827853][ T3440] EXT4-fs (loop3): This should not happen!! Data will be lost [ 304.827853][ T3440] [ 304.837845][ T3440] EXT4-fs (loop3): Total free blocks count 0 [ 304.843934][ T3440] EXT4-fs (loop3): Free/Dirty block details [ 304.850027][ T3440] EXT4-fs (loop3): free_blocks=66060288 [ 304.855692][ T3440] EXT4-fs (loop3): dirty_blocks=32 [ 304.860990][ T3440] EXT4-fs (loop3): Block reservation details [ 304.867095][ T3440] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 305.255763][ T288] EXT4-fs (loop2): unmounting filesystem. [ 305.369161][ T43] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 305.413773][ T3460] loop3: detected capacity change from 0 to 512 [ 305.432740][ T3460] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 305.460390][ T3457] kvm [3456]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x11e) = 0x6000000338b [ 305.843860][ T3461] loop3: detected capacity change from 0 to 40427 [ 305.867231][ T3461] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 305.885267][ T3461] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 305.904503][ T3461] F2FS-fs (loop3): invalid crc value [ 305.931166][ T3461] F2FS-fs (loop3): Found nat_bits in checkpoint [ 306.007382][ T3461] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 306.024659][ T3461] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 306.196105][ T3469] loop2: detected capacity change from 0 to 1024 [ 306.223943][ T3469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 306.233047][ T3469] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.339141][ T3473] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.865: lblock 3 mapped to illegal pblock 3 (length 2) [ 306.388441][ T3476] loop4: detected capacity change from 0 to 128 [ 306.395894][ T3474] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.865: lblock 0 mapped to illegal pblock 0 (length 3) [ 306.409507][ T322] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 306.422788][ T3476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 306.425148][ T3473] 9pnet_fd: Insufficient options for proto=fd [ 306.432640][ T3476] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 306.449618][ T3474] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 306.469425][ T3474] EXT4-fs (loop2): This should not happen!! Data will be lost [ 306.469425][ T3474] [ 306.480656][ T290] EXT4-fs (loop4): unmounting filesystem. [ 306.565376][ T3485] fuse: Bad value for 'fd' [ 306.611656][ T322] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 306.635367][ T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.668353][ T322] usb 1-1: Product: syz [ 306.716715][ T322] usb 1-1: Manufacturer: syz [ 306.751842][ T322] usb 1-1: SerialNumber: syz [ 307.048068][ T322] usb 1-1: Can't get UAC3 power state for id 10 [ 307.057066][ T322] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 307.071650][ T322] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 307.091078][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 307.091890][ T322] usb 1-1: USB disconnect, device number 19 [ 307.139045][ T8] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:0: lblock 4 mapped to illegal pblock 4 (length 1) [ 307.154214][ T8] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 307.166895][ T8] EXT4-fs (loop2): This should not happen!! Data will be lost [ 307.166895][ T8] [ 307.177616][ T288] EXT4-fs (loop2): unmounting filesystem. [ 307.302023][ T3495] loop3: detected capacity change from 0 to 2048 [ 307.318407][ T3495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 307.333803][ T286] EXT4-fs (loop3): unmounting filesystem. [ 307.476717][ T301] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 307.543442][ T3504] user requested TSC rate below hardware speed [ 307.636801][ T322] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 307.686700][ T301] usb 3-1: Using ep0 maxpacket: 16 [ 307.694493][ T301] usb 3-1: config 1 has an invalid interface number: 33 but max is 0 [ 307.704500][ T301] usb 3-1: config 1 has no interface number 0 [ 307.711567][ T301] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 307.722495][ T301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.821534][ T322] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 307.831600][ T322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.841291][ T322] usb 4-1: Product: syz [ 307.846122][ T322] usb 4-1: Manufacturer: syz [ 307.864072][ T301] usb 3-1: Found UVC 0.00 device (1bcf:0b40) [ 307.872469][ T322] usb 4-1: SerialNumber: syz [ 307.882361][ T301] usb 3-1: Forcing UVC version to 1.0a [ 307.921039][ T301] usb 3-1: No valid video chain found. [ 308.091420][ T301] usb 3-1: USB disconnect, device number 17 [ 308.161163][ T322] usb 4-1: Can't get UAC3 power state for id 10 [ 308.495421][ T322] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 308.505810][ T322] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 308.520190][ T2247] udevd[2247]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 308.520765][ T322] usb 4-1: USB disconnect, device number 10 [ 308.705696][ T3509] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 308.723613][ T28] audit: type=1400 audit(1793646081.563:298): avc: denied { read write } for pid=3508 comm="syz.4.876" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 308.748338][ T28] audit: type=1400 audit(1793646081.563:299): avc: denied { open } for pid=3508 comm="syz.4.876" path="/158/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 308.756453][ T3511] loop4: detected capacity change from 0 to 128 [ 308.772360][ T28] audit: type=1400 audit(1793646081.573:300): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 308.800300][ T3511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 308.809354][ T3511] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.828575][ T290] EXT4-fs (loop4): unmounting filesystem. [ 308.848752][ T28] audit: type=1400 audit(1793646081.693:301): avc: denied { ioctl } for pid=3513 comm="syz.4.878" path="/dev/binderfs/binder_logs/transaction_log" dev="binder" ino=1048642 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 309.356665][ T900] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 309.516670][ T900] usb 3-1: device descriptor read/64, error -71 [ 309.787308][ T900] usb 3-1: device descriptor read/64, error -71 [ 309.916710][ T3522] loop4: detected capacity change from 0 to 40427 [ 309.933938][ T3522] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 309.941903][ T3522] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 309.951568][ T3522] F2FS-fs (loop4): invalid crc value [ 309.963844][ T3522] F2FS-fs (loop4): Found nat_bits in checkpoint [ 310.014549][ T3522] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 310.021818][ T3522] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 310.056727][ T900] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 310.089911][ T28] audit: type=1400 audit(1793646082.933:302): avc: denied { map } for pid=3521 comm="syz.4.881" path="pipe:[10571]" dev="pipefs" ino=10571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 310.136286][ T290] syz-executor: attempt to access beyond end of device [ 310.136286][ T290] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 310.137268][ T3531] loop0: detected capacity change from 0 to 2048 [ 310.183547][ T3531] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 310.201027][ T287] EXT4-fs (loop0): unmounting filesystem. [ 310.207014][ T900] usb 3-1: device descriptor read/64, error -71 [ 310.296992][ T3536] netlink: 'syz.0.885': attribute type 9 has an invalid length. [ 310.307551][ T3536] loop0: detected capacity change from 0 to 256 [ 310.314940][ T3536] exfat: Deprecated parameter 'namecase' [ 310.320949][ T3536] exfat: Deprecated parameter 'namecase' [ 310.328869][ T3536] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 310.472076][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 310.481229][ T900] usb 3-1: device descriptor read/64, error -71 [ 310.509383][ T3543] loop3: detected capacity change from 0 to 40427 [ 310.519677][ T3543] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 310.527939][ T3543] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 310.538290][ T3543] F2FS-fs (loop3): invalid crc value [ 310.542429][ T3547] loop0: detected capacity change from 0 to 512 [ 310.551906][ T3547] EXT4-fs: Ignoring removed nobh option [ 310.565312][ T3543] F2FS-fs (loop3): Found nat_bits in checkpoint [ 310.566852][ T3547] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 310.581510][ T3547] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.888: attempt to clear invalid blocks 2 len 1 [ 310.597530][ T3547] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 310.600493][ T3543] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 310.612543][ T900] usb usb3-port1: attempt power cycle [ 310.619612][ T3543] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 310.628318][ T3547] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.888: invalid indirect mapped block 1819239214 (level 0) [ 310.646455][ T3547] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.888: invalid indirect mapped block 1819239214 (level 1) [ 310.661185][ T3547] EXT4-fs (loop0): 1 truncate cleaned up [ 310.667160][ T3547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 310.682711][ T3547] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.888: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 310.704551][ T28] audit: type=1400 audit(1793646083.553:303): avc: denied { read } for pid=3546 comm="syz.0.888" name="usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 310.728080][ T28] audit: type=1400 audit(1793646083.553:304): avc: denied { open } for pid=3546 comm="syz.0.888" path="/dev/usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 310.756288][ T28] audit: type=1400 audit(1793646083.593:305): avc: denied { ioctl } for pid=3546 comm="syz.0.888" path="/dev/usbmon5" dev="devtmpfs" ino=174 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 310.798721][ T3557] syz.3.886: attempt to access beyond end of device [ 310.798721][ T3557] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 310.813943][ T3557] syz.3.886: attempt to access beyond end of device [ 310.813943][ T3557] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 310.910883][ T3555] syz.3.886: attempt to access beyond end of device [ 310.910883][ T3555] loop3: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 310.925050][ T3555] F2FS-fs (loop3): Issue discard(5637, 5637, 1) failed, ret: -5 [ 311.027069][ T900] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 311.068263][ T900] usb 3-1: device descriptor read/8, error -71 [ 311.088815][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.095965][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.103718][ T3560] device bridge_slave_0 entered promiscuous mode [ 311.111390][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.118539][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.126052][ T3560] device bridge_slave_1 entered promiscuous mode [ 311.176176][ T3565] loop4: detected capacity change from 0 to 1024 [ 311.193904][ T3565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 311.197030][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.202774][ T3565] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.209494][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.227409][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.234458][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.243121][ T900] usb 3-1: device descriptor read/8, error -71 [ 311.275674][ T3568] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.892: lblock 3 mapped to illegal pblock 3 (length 2) [ 311.290667][ T3568] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.892: lblock 0 mapped to illegal pblock 0 (length 3) [ 311.304756][ T3568] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 311.317586][ T3568] EXT4-fs (loop4): This should not happen!! Data will be lost [ 311.317586][ T3568] [ 311.328397][ T3568] 9pnet_fd: Insufficient options for proto=fd [ 311.729129][ T900] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 312.479362][ T900] usb 3-1: device descriptor read/8, error -71 [ 312.488890][ T28] audit: type=1400 audit(1793646085.333:306): avc: denied { accept } for pid=3569 comm="syz.2.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.510269][ T287] EXT4-fs (loop0): unmounting filesystem. [ 312.516782][ T43] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:2: lblock 4 mapped to illegal pblock 4 (length 1) [ 312.531162][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.550699][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 312.568344][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.587089][ T43] EXT4-fs (loop4): This should not happen!! Data will be lost [ 312.587089][ T43] [ 312.605353][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.617008][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.626295][ T290] EXT4-fs (loop4): unmounting filesystem. [ 312.633315][ T900] usb 3-1: device descriptor read/8, error -71 [ 312.677204][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.685255][ T3578] loop4: detected capacity change from 0 to 2048 [ 312.697030][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.714780][ T28] audit: type=1326 audit(1793646085.553:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3571 comm="syz.2.896" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 312.717851][ T983] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.747193][ T983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.756418][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.766647][ T900] usb usb3-port1: unable to enumerate USB device [ 312.770218][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.775505][ T3578] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 312.783679][ T983] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.799276][ T983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.808816][ T290] EXT4-fs (loop4): unmounting filesystem. [ 312.819152][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 312.838028][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.887940][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.902398][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.910991][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.926763][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.935244][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.013131][ T3560] device veth0_vlan entered promiscuous mode [ 313.039055][ T3560] device veth1_macvtap entered promiscuous mode [ 313.830134][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 313.830151][ T28] audit: type=1400 audit(1793646086.673:315): avc: denied { mount } for pid=3560 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 313.882558][ T28] audit: type=1400 audit(1793646086.703:316): avc: denied { mounton } for pid=3560 comm="syz-executor" path="/root/syzkaller.HYzCSV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 313.962810][ T3599] user requested TSC rate below hardware speed [ 314.052546][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.062542][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.070920][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.079811][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.088120][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.095871][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.104597][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.113653][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.122558][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.132076][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.139950][ T983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.175828][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.244051][ T3614] loop4: detected capacity change from 0 to 1024 [ 314.321421][ T3616] user requested TSC rate below hardware speed [ 314.395939][ T3614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 314.431293][ T3619] xt_TCPMSS: Only works on TCP SYN packets [ 314.529671][ T3614] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.570529][ T3620] user requested TSC rate below hardware speed [ 314.708690][ T3622] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.904: lblock 3 mapped to illegal pblock 3 (length 2) [ 314.746901][ T1402] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 314.872765][ T3624] 9pnet_fd: Insufficient options for proto=fd [ 315.370913][ T1402] usb 6-1: Using ep0 maxpacket: 32 [ 315.380994][ T3623] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.904: lblock 0 mapped to illegal pblock 0 (length 3) [ 315.393103][ T1402] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 315.409147][ T3623] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 315.416667][ T1402] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 315.433004][ T3623] EXT4-fs (loop4): This should not happen!! Data will be lost [ 315.433004][ T3623] [ 315.442777][ T1402] usb 6-1: config 0 has no interface number 0 [ 315.448943][ T1402] usb 6-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.467633][ T1402] usb 6-1: config 0 interface 184 has no altsetting 0 [ 316.119598][ T10] device bridge_slave_1 left promiscuous mode [ 316.126503][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.138359][ T1402] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 316.144319][ T10] device bridge_slave_0 left promiscuous mode [ 316.148012][ T1402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.162251][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.162305][ T1402] usb 6-1: Product: syz [ 316.174684][ T1402] usb 6-1: Manufacturer: syz [ 316.174716][ T10] device veth1_macvtap left promiscuous mode [ 316.179487][ T1402] usb 6-1: SerialNumber: syz [ 316.205759][ T10] device veth0_vlan left promiscuous mode [ 316.214596][ T43] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:2: lblock 4 mapped to illegal pblock 4 (length 1) [ 316.235917][ T1402] usb 6-1: config 0 descriptor?? [ 316.245022][ T1402] smsc75xx v1.0.0 [ 316.249258][ T1402] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 316.261476][ T1402] smsc75xx: probe of 6-1:0.184 failed with error -22 [ 316.261789][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 316.313144][ T43] EXT4-fs (loop4): This should not happen!! Data will be lost [ 316.313144][ T43] [ 316.340990][ T290] EXT4-fs (loop4): unmounting filesystem. [ 316.382766][ T3633] loop0: detected capacity change from 0 to 2048 [ 316.414538][ T3633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 316.455461][ T2547] usb 6-1: USB disconnect, device number 16 [ 316.570068][ T287] EXT4-fs (loop0): unmounting filesystem. [ 317.952422][ T3645] kvm [3644]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x11e) = 0x6000000338b [ 318.048326][ T3657] bridge_slave_1: default FDB implementation only supports local addresses [ 318.236307][ T28] audit: type=1400 audit(1793646091.073:317): avc: denied { read write } for pid=3656 comm="syz.0.915" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 318.468998][ T28] audit: type=1400 audit(1793646091.123:318): avc: denied { open } for pid=3656 comm="syz.0.915" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 318.596720][ T1402] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 318.816834][ T28] audit: type=1400 audit(1793646091.143:319): avc: denied { setattr } for pid=3656 comm="syz.0.915" name="CAN_RAW" dev="sockfs" ino=40404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 318.888644][ T1402] usb 1-1: config 0 has an invalid interface number: 95 but max is 2 [ 318.922300][ T1402] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 318.944861][ T1402] usb 1-1: config 0 has an invalid interface number: 109 but max is 2 [ 318.977221][ T3662] loop2: detected capacity change from 0 to 1024 [ 318.984950][ T1402] usb 1-1: config 0 has an invalid interface number: 130 but max is 2 [ 319.024595][ T1402] usb 1-1: config 0 has no interface number 0 [ 319.052510][ T3662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.066681][ T1402] usb 1-1: config 0 has no interface number 1 [ 319.077014][ T3662] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.087739][ T1402] usb 1-1: config 0 has no interface number 2 [ 319.093881][ T1402] usb 1-1: config 0 interface 95 altsetting 3 endpoint 0x9 has invalid maxpacket 120, setting to 64 [ 319.125408][ T1402] usb 1-1: config 0 interface 95 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 319.146367][ T1402] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 319.168021][ T1402] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 319.180429][ T28] audit: type=1400 audit(1793646092.023:320): avc: denied { create } for pid=3661 comm="syz.2.916" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 319.201616][ T3668] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.916: lblock 3 mapped to illegal pblock 3 (length 2) [ 319.216203][ T1402] usb 1-1: config 0 interface 109 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 319.221258][ T28] audit: type=1400 audit(1793646092.063:321): avc: denied { listen } for pid=3669 comm="syz.6.918" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 319.236652][ T1402] usb 1-1: config 0 interface 109 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 319.268250][ T3670] ip_tables: iptables: counters copy to user failed while replacing table [ 319.287621][ T3672] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.916: lblock 0 mapped to illegal pblock 0 (length 3) [ 319.302280][ T1402] usb 1-1: config 0 interface 109 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 319.310283][ T3672] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 319.314185][ T1402] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x6 has invalid maxpacket 2560, setting to 64 [ 319.337935][ T3668] 9pnet_fd: Insufficient options for proto=fd [ 319.344980][ T1402] usb 1-1: config 0 interface 130 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 319.358591][ T1402] usb 1-1: config 0 interface 95 has no altsetting 0 [ 319.367194][ T3672] EXT4-fs (loop2): This should not happen!! Data will be lost [ 319.367194][ T3672] [ 319.370581][ T1402] usb 1-1: config 0 interface 130 has no altsetting 0 [ 319.381411][ T3676] loop6: detected capacity change from 0 to 2048 [ 319.398206][ T1402] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=91.d1 [ 319.409382][ T1402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.418178][ T1402] usb 1-1: Product: 墥ற͔雋ࡃ馹吨 [ 319.424424][ T1402] usb 1-1: SerialNumber: 㖿행缲鲫俎త呂ꪚ璔㭦㩼꧝흉ᶫ븕浙鸲곅啄㙆藦鋦㨗悒⫮笪⊥ⴢ湠鮀缥뮶ệ璠暿ᘞ뜫䧟噱-泗ਗ਼ञᶞ婭㳡ζὰ [ 319.467902][ T1402] usb 1-1: config 0 descriptor?? [ 320.478197][ T3676] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 320.513262][ T3560] EXT4-fs (loop6): unmounting filesystem. [ 320.523349][ T10] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:1: lblock 4 mapped to illegal pblock 4 (length 1) [ 320.538114][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 320.551362][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 320.551362][ T10] [ 320.562718][ T288] EXT4-fs (loop2): unmounting filesystem. [ 320.616688][ T865] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 320.708280][ T1402] usb 1-1: USB disconnect, device number 20 [ 320.839192][ T865] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 320.852732][ T865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.869174][ T865] usb 5-1: Product: syz [ 320.878769][ T865] usb 5-1: Manufacturer: syz [ 320.888407][ T865] usb 5-1: SerialNumber: syz [ 321.115674][ T865] usb 5-1: Can't get UAC3 power state for id 10 [ 321.126318][ T865] usb 5-1: BAAD MICROPHONE c_chmask mismatch [ 321.144049][ T865] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 321.167889][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 321.184568][ T865] usb 5-1: USB disconnect, device number 21 [ 321.244567][ T3696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'. [ 321.480042][ T3702] loop6: detected capacity change from 0 to 16 [ 321.487548][ T3702] erofs: (device loop6): mounted with root inode @ nid 36. [ 323.280603][ T3709] loop2: detected capacity change from 0 to 1024 [ 323.308590][ T3709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 323.317941][ T3709] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.395019][ T3712] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.928: lblock 3 mapped to illegal pblock 3 (length 2) [ 323.455913][ T3713] 9pnet_fd: Insufficient options for proto=fd [ 325.516406][ T288] EXT4-fs (loop2): unmounting filesystem. [ 325.519622][ T28] audit: type=1400 audit(1793646098.363:322): avc: denied { ioctl } for pid=3717 comm="syz.0.929" path="socket:[39747]" dev="sockfs" ino=39747 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 325.565383][ T3720] loop4: detected capacity change from 0 to 2048 [ 325.601479][ T3720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 325.648680][ T290] EXT4-fs (loop4): unmounting filesystem. [ 325.659909][ T3734] loop0: detected capacity change from 0 to 1024 [ 325.696388][ T3734] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 325.718590][ T3734] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.817364][ T3744] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.933: lblock 3 mapped to illegal pblock 3 (length 2) [ 326.001166][ T3744] 9pnet_fd: Insufficient options for proto=fd [ 326.158049][ T3746] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.933: lblock 0 mapped to illegal pblock 0 (length 3) [ 326.183685][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 326.215817][ T3741] loop4: detected capacity change from 0 to 40427 [ 326.238884][ T3741] F2FS-fs (loop4): invalid crc value [ 326.306183][ T3746] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 326.322095][ T3741] F2FS-fs (loop4): Found nat_bits in checkpoint [ 326.410892][ T3746] EXT4-fs (loop0): This should not happen!! Data will be lost [ 326.410892][ T3746] [ 326.434907][ T3741] F2FS-fs (loop4): Start checkpoint disabled! [ 326.443199][ T3741] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 326.457921][ T3741] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 326.507553][ T10] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:1: lblock 4 mapped to illegal pblock 4 (length 1) [ 326.537328][ T28] audit: type=1400 audit(1793646099.373:323): avc: denied { read write open } for pid=3740 comm="syz.4.937" path="/171/file0/bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 326.562780][ T3741] syz.4.937: attempt to access beyond end of device [ 326.562780][ T3741] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 326.596705][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 326.610014][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 326.610014][ T10] [ 326.620987][ T287] EXT4-fs (loop0): unmounting filesystem. [ 326.720580][ T28] audit: type=1400 audit(1793646099.563:324): avc: denied { map } for pid=3755 comm="syz.6.942" path="socket:[39874]" dev="sockfs" ino=39874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.729965][ T3752] loop2: detected capacity change from 0 to 40427 [ 326.747625][ T3756] loop6: detected capacity change from 0 to 512 [ 326.793075][ T3756] EXT4-fs (loop6): 1 truncate cleaned up [ 326.803171][ T28] audit: type=1400 audit(1793646099.593:325): avc: denied { read } for pid=3755 comm="syz.6.942" path="socket:[39874]" dev="sockfs" ino=39874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.821610][ T3756] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 326.838052][ T3752] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 326.846138][ T3752] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 326.856221][ T3752] F2FS-fs (loop2): invalid crc value [ 326.862738][ T3756] EXT4-fs (loop6): unmounting filesystem. [ 327.063978][ T3752] F2FS-fs (loop2): Found nat_bits in checkpoint [ 327.544194][ T3752] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 327.671371][ T3752] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 327.822720][ T3773] 9pnet_fd: Insufficient options for proto=fd [ 328.027260][ T1039] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 328.086283][ T3777] syz.2.940: attempt to access beyond end of device [ 328.086283][ T3777] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 328.102015][ T3777] syz.2.940: attempt to access beyond end of device [ 328.102015][ T3777] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 329.766926][ T1039] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 329.774633][ T1039] usb 7-1: can't read configurations, error -61 [ 329.959273][ T1039] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 330.039917][ T3788] loop0: detected capacity change from 0 to 1024 [ 330.085208][ T3788] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 330.094107][ T3788] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.095891][ T3790] user requested TSC rate below hardware speed [ 330.185171][ T3795] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.950: lblock 3 mapped to illegal pblock 3 (length 2) [ 330.207801][ T1039] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 330.215399][ T1039] usb 7-1: can't read configurations, error -61 [ 330.236726][ T1039] usb usb7-port1: attempt power cycle [ 330.267243][ T3796] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.950: lblock 0 mapped to illegal pblock 0 (length 3) [ 330.290397][ T3796] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 330.304060][ T3795] 9pnet_fd: Insufficient options for proto=fd [ 330.322549][ T3796] EXT4-fs (loop0): This should not happen!! Data will be lost [ 330.322549][ T3796] [ 330.333438][ T3798] user requested TSC rate below hardware speed [ 331.321603][ T1039] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 332.283474][ T3794] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 332.466890][ T983] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:5: lblock 4 mapped to illegal pblock 4 (length 1) [ 332.488714][ T983] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 332.502624][ T983] EXT4-fs (loop0): This should not happen!! Data will be lost [ 332.502624][ T983] [ 332.555823][ T3803] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 332.631167][ T287] EXT4-fs (loop0): unmounting filesystem. [ 332.679031][ T10] kworker/u4:1: attempt to access beyond end of device [ 332.679031][ T10] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 332.904885][ T3812] 9pnet_fd: Insufficient options for proto=fd [ 332.999898][ T3815] lo: Caught tx_queue_len zero misconfig [ 333.026067][ T3815] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 333.744095][ T1039] usb 7-1: device not accepting address 4, error -71 [ 333.817371][ T28] audit: type=1400 audit(1793646106.663:326): avc: denied { accept } for pid=3820 comm="syz.6.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 333.867074][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 333.919005][ T28] audit: type=1400 audit(1793646106.763:327): avc: denied { listen } for pid=3827 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 333.996560][ T28] audit: type=1400 audit(1793646106.783:328): avc: denied { accept } for pid=3827 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.055343][ T3841] 9pnet_fd: Insufficient options for proto=fd [ 334.066649][ T28] audit: type=1326 audit(1793646106.893:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.965" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8c19fb19 code=0x7ffc0000 [ 334.151977][ T28] audit: type=1326 audit(1793646106.893:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.965" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8c19fb19 code=0x7ffc0000 [ 334.180224][ T28] audit: type=1326 audit(1793646106.893:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.965" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8c19fb19 code=0x7ffc0000 [ 334.205303][ T28] audit: type=1326 audit(1793646106.893:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.965" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8c19fb19 code=0x7ffc0000 [ 335.468865][ T28] audit: type=1326 audit(1793646106.893:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.965" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f5a8c19fb19 code=0x7ffc0000 [ 335.504265][ T28] audit: type=1326 audit(1793646106.893:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.965" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8c19fb19 code=0x7ffc0000 [ 335.531604][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 335.539939][ T28] audit: type=1326 audit(1793646106.893:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.4.965" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8c19fb19 code=0x7ffc0000 [ 337.084955][ T3856] loop4: detected capacity change from 0 to 1024 [ 337.188816][ T3856] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 337.203197][ T3856] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.441071][ T3868] netlink: 7 bytes leftover after parsing attributes in process `syz.6.973'. [ 337.672945][ T3871] 9pnet_fd: Insufficient options for proto=fd [ 338.496788][ T290] EXT4-fs (loop4): unmounting filesystem. [ 338.766105][ T3884] loop0: detected capacity change from 0 to 1024 [ 338.995388][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 338.995405][ T28] audit: type=1400 audit(1793646111.833:364): avc: denied { read write } for pid=3885 comm="syz.4.976" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 339.030969][ T3884] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 339.032766][ T3888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.978'. [ 339.039829][ T3884] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.076785][ T28] audit: type=1400 audit(1793646111.873:365): avc: denied { open } for pid=3885 comm="syz.4.976" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 340.469971][ T3897] FAULT_INJECTION: forcing a failure. [ 340.469971][ T3897] name failslab, interval 1, probability 0, space 0, times 0 [ 340.483045][ T3897] CPU: 1 PID: 3897 Comm: syz.4.976 Not tainted syzkaller #0 [ 340.486994][ T3902] 9pnet_fd: Insufficient options for proto=fd [ 340.490367][ T3897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 340.506644][ T3897] Call Trace: [ 340.510041][ T3897] [ 340.513028][ T3897] __dump_stack+0x21/0x24 [ 340.517440][ T3897] dump_stack_lvl+0x110/0x170 [ 340.522234][ T3897] ? __cfi_dump_stack_lvl+0x8/0x8 [ 340.527389][ T3897] dump_stack+0x15/0x24 [ 340.531599][ T3897] should_fail_ex+0x3bf/0x510 [ 340.536296][ T3897] __should_failslab+0xac/0xf0 [ 340.541215][ T3897] should_failslab+0x9/0x20 [ 340.545786][ T3897] __kmem_cache_alloc_node+0x3d/0x2d0 [ 340.551317][ T3897] ? sk_prot_alloc+0xed/0x320 [ 340.556166][ T3897] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 340.562170][ T3897] ? sk_prot_alloc+0xed/0x320 [ 340.566982][ T3897] __kmalloc+0xa4/0x1e0 [ 340.571317][ T3897] sk_prot_alloc+0xed/0x320 [ 340.575858][ T3897] ? _raw_read_lock_irqsave+0x94/0xf0 [ 340.581577][ T3897] sk_alloc+0x3b/0x460 [ 340.585952][ T3897] netlink_create+0x3c2/0x640 [ 340.590840][ T3897] ? __cfi_nfnetlink_bind+0x10/0x10 [ 340.596167][ T3897] ? __cfi_nfnetlink_unbind+0x10/0x10 [ 340.601551][ T3897] __sock_create+0x39e/0x7c0 [ 340.606193][ T3897] __sys_socket+0xcd/0x1a0 [ 340.610672][ T3897] __x64_sys_socket+0x7a/0x90 [ 340.615389][ T3897] x64_sys_call+0x449/0x9a0 [ 340.620003][ T3897] do_syscall_64+0x4c/0xa0 [ 340.624539][ T3897] ? clear_bhb_loop+0x30/0x80 [ 340.629485][ T3897] ? clear_bhb_loop+0x30/0x80 [ 340.634178][ T3897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.640078][ T3897] RIP: 0033:0x7f5a8c19fb19 [ 340.644490][ T3897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.664188][ T3897] RSP: 002b:00007f5a8d01a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 340.672877][ T3897] RAX: ffffffffffffffda RBX: 00007f5a8c426090 RCX: 00007f5a8c19fb19 [ 340.681109][ T3897] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 340.689088][ T3897] RBP: 00007f5a8c237af8 R08: 0000000000000000 R09: 0000000000000000 [ 340.697148][ T3897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.705310][ T3897] R13: 00007f5a8c426128 R14: 00007f5a8c426090 R15: 00007ffeb2746e68 [ 340.713304][ T3897] [ 340.744235][ T287] EXT4-fs (loop0): unmounting filesystem. [ 340.774739][ T3911] loop2: detected capacity change from 0 to 8192 [ 340.798302][ T3911] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 340.809460][ T3919] user requested TSC rate below hardware speed [ 340.861319][ T28] audit: type=1400 audit(1793646113.703:366): avc: denied { setopt } for pid=3934 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 342.189328][ T3943] user requested TSC rate below hardware speed [ 342.450619][ T3948] user requested TSC rate below hardware speed [ 342.472077][ T3951] loop2: detected capacity change from 0 to 1024 [ 342.484850][ T3950] xt_TCPMSS: Only works on TCP SYN packets [ 342.578545][ T3951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 342.598860][ T3951] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.710355][ T3956] 9pnet_fd: Insufficient options for proto=fd [ 342.776719][ T1402] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 342.821780][ T3964] loop4: detected capacity change from 0 to 1024 [ 342.856700][ T3964] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 343.044981][ T3964] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.532390][ T3955] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 343.927210][ T1402] usb 1-1: Using ep0 maxpacket: 32 [ 343.935243][ T3955] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 344.023130][ T3969] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.992: lblock 3 mapped to illegal pblock 3 (length 2) [ 344.467486][ T1402] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 344.475889][ T1402] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 344.486817][ T3970] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.992: lblock 0 mapped to illegal pblock 0 (length 1) [ 344.500665][ T1402] usb 1-1: config 0 has no interface number 0 [ 344.507025][ T3970] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: comm syz.4.992: lblock 0 mapped to illegal pblock 0 (length 1) [ 344.507677][ T1402] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.539590][ T1402] usb 1-1: config 0 interface 184 has no altsetting 0 [ 344.550067][ T3970] EXT4-fs error (device loop4): ext4_ext_remove_space:2945: inode #15: comm syz.4.992: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 344.577817][ T1402] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 344.596941][ T3969] 9pnet_fd: Insufficient options for proto=fd [ 344.603644][ T1402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.613491][ T1402] usb 1-1: Product: syz [ 344.621763][ T1402] usb 1-1: Manufacturer: syz [ 344.631052][ T1402] usb 1-1: SerialNumber: syz [ 344.646814][ T1402] usb 1-1: config 0 descriptor?? [ 344.659594][ T1402] smsc75xx v1.0.0 [ 344.666561][ T1402] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 344.687680][ T1402] smsc75xx: probe of 1-1:0.184 failed with error -22 [ 345.127396][ T1402] usb 1-1: USB disconnect, device number 21 [ 346.507572][ T288] EXT4-fs (loop2): unmounting filesystem. [ 346.514401][ T290] EXT4-fs (loop4): unmounting filesystem. [ 346.693307][ T3984] syz.4.999 uses obsolete (PF_INET,SOCK_PACKET) [ 346.718492][ T3984] ip_tables: iptables: counters copy to user failed while replacing table [ 346.759858][ T3985] user requested TSC rate below hardware speed [ 346.886682][ T1402] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 347.087305][ T3992] user requested TSC rate below hardware speed [ 347.609692][ T1402] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 347.631098][ T1402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.644978][ T1402] usb 1-1: Product: syz [ 347.651405][ T1402] usb 1-1: Manufacturer: syz [ 347.658408][ T1402] usb 1-1: SerialNumber: syz [ 347.916216][ T1402] usb 1-1: Can't get UAC3 power state for id 10 [ 347.922995][ T4003] TCP: TCP_TX_DELAY enabled [ 347.927106][ T1402] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 347.937188][ T1402] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 347.937853][ T28] audit: type=1400 audit(1793646120.783:367): avc: denied { name_bind } for pid=4002 comm="syz.6.1006" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 347.946985][ T1402] usb 1-1: USB disconnect, device number 22 [ 347.976946][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.067134][ T4006] 9pnet_fd: Insufficient options for proto=fd [ 348.219211][ T4011] loop6: detected capacity change from 0 to 16 [ 348.242364][ T2774] udevd[2774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 348.277746][ T4011] erofs: (device loop6): mounted with root inode @ nid 36. [ 349.487654][ T4014] loop2: detected capacity change from 0 to 1024 [ 349.516050][ T4014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 349.526131][ T4014] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.601027][ T4028] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.1008: lblock 3 mapped to illegal pblock 3 (length 2) [ 349.626993][ T4028] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.1008: lblock 0 mapped to illegal pblock 0 (length 3) [ 349.761245][ T4037] 9pnet_fd: Insufficient options for proto=fd [ 349.770770][ T4028] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 349.784551][ T4028] EXT4-fs (loop2): This should not happen!! Data will be lost [ 349.784551][ T4028] [ 349.826720][ T4019] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 349.833263][ T4036] loop0: detected capacity change from 0 to 8192 [ 349.914993][ T43] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:2: lblock 4 mapped to illegal pblock 4 (length 1) [ 349.939923][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 349.966256][ T43] EXT4-fs (loop2): This should not happen!! Data will be lost [ 349.966256][ T43] [ 349.985189][ T4025] input: syz1 as /devices/virtual/input/input7 [ 349.992665][ T28] audit: type=1400 audit(1793646122.833:368): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1255 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 349.999990][ T288] EXT4-fs (loop2): unmounting filesystem. [ 350.039471][ T28] audit: type=1400 audit(1793646122.833:369): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1255 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.076955][ T4040] FAULT_INJECTION: forcing a failure. [ 350.076955][ T4040] name failslab, interval 1, probability 0, space 0, times 0 [ 350.090269][ T4040] CPU: 1 PID: 4040 Comm: syz.2.1016 Not tainted syzkaller #0 [ 350.098156][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 350.102099][ T28] audit: type=1400 audit(1793646122.833:370): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1255 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.108847][ T4040] Call Trace: [ 350.108855][ T4040] [ 350.108863][ T4040] __dump_stack+0x21/0x24 [ 350.108887][ T4040] dump_stack_lvl+0x110/0x170 [ 350.108912][ T4040] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.108931][ T4040] dump_stack+0x15/0x24 [ 350.108946][ T4040] should_fail_ex+0x3bf/0x510 [ 350.108966][ T4040] ? security_file_alloc+0x33/0x130 [ 350.168388][ T4040] __should_failslab+0xac/0xf0 [ 350.173264][ T4040] should_failslab+0x9/0x20 [ 350.177791][ T4040] kmem_cache_alloc+0x3b/0x320 [ 350.182594][ T4040] ? __alloc_file+0x28/0x2a0 [ 350.187303][ T4040] security_file_alloc+0x33/0x130 [ 350.192366][ T4040] __alloc_file+0xb5/0x2a0 [ 350.196815][ T4040] alloc_empty_file+0x97/0x180 [ 350.201704][ T4040] path_openat+0xf4/0x2f30 [ 350.206321][ T4040] ? kasan_set_track+0x60/0x70 [ 350.211723][ T4040] ? kasan_set_track+0x4b/0x70 [ 350.216980][ T4040] ? __kasan_slab_alloc+0x72/0x80 [ 350.222057][ T4040] ? slab_post_alloc_hook+0x4f/0x2d0 [ 350.227391][ T4040] ? kmem_cache_alloc+0x166/0x320 [ 350.232713][ T4040] ? getname_flags+0xba/0x510 [ 350.237505][ T4040] ? getname+0x19/0x20 [ 350.241831][ T4040] ? do_sys_openat2+0xeb/0x820 [ 350.246625][ T4040] ? __x64_sys_openat+0x136/0x160 [ 350.251852][ T4040] ? x64_sys_call+0x783/0x9a0 [ 350.256825][ T4040] ? do_syscall_64+0x4c/0xa0 [ 350.261552][ T4040] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.267671][ T4040] ? do_filp_open+0x420/0x420 [ 350.272386][ T4040] do_filp_open+0x1ee/0x420 [ 350.276935][ T4040] ? __cfi_do_filp_open+0x10/0x10 [ 350.282021][ T4040] ? alloc_fd+0x4c1/0x570 [ 350.286406][ T4040] do_sys_openat2+0x15e/0x820 [ 350.291383][ T4040] ? __kasan_check_write+0x14/0x20 [ 350.296559][ T4040] ? do_sys_open+0xe0/0xe0 [ 350.301292][ T4040] ? ksys_write+0x1fa/0x260 [ 350.305980][ T4040] ? __cfi_ksys_write+0x10/0x10 [ 350.310949][ T4040] ? do_user_addr_fault+0x9a5/0x1030 [ 350.316475][ T4040] __x64_sys_openat+0x136/0x160 [ 350.321377][ T4040] x64_sys_call+0x783/0x9a0 [ 350.325920][ T4040] do_syscall_64+0x4c/0xa0 [ 350.330379][ T4040] ? clear_bhb_loop+0x30/0x80 [ 350.335110][ T4040] ? clear_bhb_loop+0x30/0x80 [ 350.339825][ T4040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.345854][ T4040] RIP: 0033:0x7f74e719fb19 [ 350.350317][ T4040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.370390][ T4040] RSP: 002b:00007f74e8056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 350.378926][ T4040] RAX: ffffffffffffffda RBX: 00007f74e7425fa0 RCX: 00007f74e719fb19 [ 350.386939][ T4040] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 350.395656][ T4040] RBP: 00007f74e8056090 R08: 0000000000000000 R09: 0000000000000000 [ 350.403832][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.412540][ T4040] R13: 00007f74e7426038 R14: 00007f74e7425fa0 R15: 00007ffc9205af08 [ 350.420991][ T4040] [ 350.573773][ T4051] device bridge1 entered promiscuous mode [ 350.590527][ T28] audit: type=1400 audit(1793646123.433:371): avc: denied { mounton } for pid=4032 comm="syz.0.1015" path="/228/bus/proc" dev="loop0" ino=1048677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 350.688984][ T4054] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1020'. [ 350.735169][ T28] audit: type=1400 audit(1793646123.573:372): avc: denied { ioctl } for pid=4053 comm="syz.4.1020" path="/186/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 350.918112][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 351.061094][ T4067] loop6: detected capacity change from 0 to 1024 [ 351.088493][ T287] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 351.100551][ T287] FAT-fs (loop0): Filesystem has been set read-only [ 351.101038][ T4067] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 351.115977][ T4067] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.285275][ T4073] 9pnet_fd: Insufficient options for proto=fd [ 351.631397][ T4076] loop2: detected capacity change from 0 to 1024 [ 351.737453][ T4076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 351.752530][ T4076] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.853372][ T4079] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.1026: lblock 3 mapped to illegal pblock 3 (length 2) [ 351.950519][ T4080] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.1026: lblock 0 mapped to illegal pblock 0 (length 3) [ 352.261879][ T4079] 9pnet_fd: Insufficient options for proto=fd [ 352.286478][ T4080] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 352.311863][ T4080] EXT4-fs (loop2): This should not happen!! Data will be lost [ 352.311863][ T4080] [ 352.519214][ T4082] loop4: detected capacity change from 0 to 128 [ 352.519253][ T3560] EXT4-fs (loop6): unmounting filesystem. [ 352.532542][ T983] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:5: lblock 4 mapped to illegal pblock 4 (length 1) [ 352.549947][ T983] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 352.550695][ T4082] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 352.564240][ T983] EXT4-fs (loop2): This should not happen!! Data will be lost [ 352.564240][ T983] [ 352.572942][ T4082] FAT-fs (loop4): Filesystem has been set read-only [ 352.614203][ T4087] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 352.615863][ T288] EXT4-fs (loop2): unmounting filesystem. [ 352.904858][ T4106] user requested TSC rate below hardware speed [ 352.979704][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 353.459119][ T4121] loop6: detected capacity change from 0 to 1024 [ 353.497107][ T4123] 9pnet_fd: Insufficient options for proto=fd [ 353.504369][ T4121] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 353.516690][ T4121] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.730723][ T4129] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.1039: lblock 3 mapped to illegal pblock 3 (length 2) [ 353.834053][ T4132] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm syz.6.1039: lblock 0 mapped to illegal pblock 0 (length 3) [ 353.965562][ T4129] 9pnet_fd: Insufficient options for proto=fd [ 353.989313][ T4132] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 354.259725][ T4132] EXT4-fs (loop6): This should not happen!! Data will be lost [ 354.259725][ T4132] [ 354.706113][ T8] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:0: lblock 4 mapped to illegal pblock 4 (length 1) [ 354.731579][ T8] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 354.744740][ T8] EXT4-fs (loop6): This should not happen!! Data will be lost [ 354.744740][ T8] [ 354.758001][ T3560] EXT4-fs (loop6): unmounting filesystem. [ 354.806673][ T301] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 355.068634][ T301] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 355.078042][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.086228][ T301] usb 1-1: Product: syz [ 355.090800][ T301] usb 1-1: Manufacturer: syz [ 355.095633][ T301] usb 1-1: SerialNumber: syz [ 355.144826][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 355.165396][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 355.193276][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.202587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 355.226130][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.235984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.272808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.287933][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.307158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.326522][ T301] usb 1-1: Can't get UAC3 power state for id 10 [ 355.337479][ T301] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 355.361690][ T301] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 355.385258][ T2247] udevd[2247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 355.402133][ T301] usb 1-1: USB disconnect, device number 23 [ 355.474033][ T4158] FAULT_INJECTION: forcing a failure. [ 355.474033][ T4158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.494000][ T4158] CPU: 1 PID: 4158 Comm: syz.2.1050 Not tainted syzkaller #0 [ 355.502118][ T4158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 355.512552][ T4158] Call Trace: [ 355.515857][ T4158] [ 355.518910][ T4158] __dump_stack+0x21/0x24 [ 355.523277][ T4158] dump_stack_lvl+0x110/0x170 [ 355.528277][ T4158] ? __cfi_dump_stack_lvl+0x8/0x8 [ 355.533527][ T4158] dump_stack+0x15/0x24 [ 355.537716][ T4139] loop4: detected capacity change from 0 to 131072 [ 355.545001][ T4158] should_fail_ex+0x3bf/0x510 [ 355.545031][ T4158] should_fail+0xb/0x10 [ 355.553974][ T4158] should_fail_usercopy+0x1a/0x20 [ 355.559389][ T4158] _copy_to_user+0x1e/0x90 [ 355.561105][ T4139] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 355.565435][ T4158] simple_read_from_buffer+0xe9/0x160 [ 355.565471][ T4158] proc_fail_nth_read+0x1a6/0x220 [ 355.585491][ T4158] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 355.588617][ T4139] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 355.591254][ T4158] ? security_file_permission+0x94/0xb0 [ 355.600320][ T4139] F2FS-fs (loop4): invalid crc value [ 355.605066][ T4158] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 355.605098][ T4158] vfs_read+0x286/0x930 [ 355.613479][ T4139] F2FS-fs (loop4): Found nat_bits in checkpoint [ 355.616203][ T4158] ? __cfi_vfs_read+0x10/0x10 [ 355.631626][ T4158] ? __kasan_check_write+0x14/0x20 [ 355.636874][ T4158] ? mutex_lock+0x93/0x1b0 [ 355.641429][ T4158] ? __cfi_mutex_lock+0x10/0x10 [ 355.646392][ T4158] ? __fdget_pos+0x2cd/0x380 [ 355.647806][ T4139] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 355.651020][ T4158] ? ksys_read+0x70/0x260 [ 355.651046][ T4158] ksys_read+0x14a/0x260 [ 355.658578][ T4139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 355.663024][ T4158] ? __cfi_ksys_read+0x10/0x10 [ 355.663046][ T4158] ? fput+0x154/0x1a0 [ 355.683755][ T4158] ? debug_smp_processor_id+0x17/0x20 [ 355.689291][ T4158] __x64_sys_read+0x7b/0x90 [ 355.694092][ T4158] x64_sys_call+0x2f/0x9a0 [ 355.698534][ T4158] do_syscall_64+0x4c/0xa0 [ 355.703138][ T4158] ? clear_bhb_loop+0x30/0x80 [ 355.708111][ T4158] ? clear_bhb_loop+0x30/0x80 [ 355.712887][ T4158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.718880][ T4158] RIP: 0033:0x7f74e716034e [ 355.723388][ T4158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 355.743958][ T4158] RSP: 002b:00007f74e8055fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.752656][ T4158] RAX: ffffffffffffffda RBX: 00007f74e80566c0 RCX: 00007f74e716034e [ 355.761670][ T4158] RDX: 000000000000000f RSI: 00007f74e80560a0 RDI: 0000000000000004 [ 355.770268][ T4158] RBP: 00007f74e8056090 R08: 0000000000000000 R09: 0000000000000000 [ 355.778550][ T4158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.786863][ T4158] R13: 00007f74e7426038 R14: 00007f74e7425fa0 R15: 00007ffc9205af08 [ 355.795225][ T4158] [ 355.798445][ T308] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 355.846734][ T28] audit: type=1400 audit(1793646128.673:373): avc: denied { rename } for pid=4138 comm="syz.4.1045" name="file1" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 356.070528][ T308] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 356.080009][ T308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.088291][ T308] usb 6-1: Product: syz [ 356.092546][ T308] usb 6-1: Manufacturer: syz [ 356.097447][ T308] usb 6-1: SerialNumber: syz [ 356.146728][ T40] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 356.414589][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.431007][ T40] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 356.441537][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.450991][ T40] usb 7-1: config 0 descriptor?? [ 357.891606][ T4179] user requested TSC rate below hardware speed [ 357.926473][ T4166] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 357.951846][ T4180] loop0: detected capacity change from 0 to 1024 [ 358.054776][ T4180] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 358.076757][ T4180] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.255114][ T308] rtl8150 6-1:1.0: couldn't reset the device [ 358.261874][ T308] rtl8150: probe of 6-1:1.0 failed with error -5 [ 358.280375][ T308] usb 6-1: USB disconnect, device number 17 [ 358.338248][ T4188] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.1054: lblock 3 mapped to illegal pblock 3 (length 2) [ 358.373233][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.394634][ T4188] 9pnet_fd: Insufficient options for proto=fd [ 358.529229][ T287] EXT4-fs (loop0): unmounting filesystem. [ 358.553257][ T4197] user requested TSC rate below hardware speed [ 358.568036][ T4166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.585132][ T4166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.624861][ T4201] user requested TSC rate below hardware speed [ 358.699881][ T40] usbhid 7-1:0.0: can't add hid device: -71 [ 358.712873][ T40] usbhid: probe of 7-1:0.0 failed with error -71 [ 358.723037][ T40] usb 7-1: USB disconnect, device number 6 [ 358.815869][ T4207] user requested TSC rate below hardware speed [ 358.833035][ T4208] user requested TSC rate below hardware speed [ 359.046689][ T337] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 359.132949][ T4212] fuse: Bad value for 'blksize' [ 359.239494][ T337] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 359.259845][ T337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.284410][ T337] usb 5-1: Product: syz [ 359.286647][ T1402] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 359.300208][ T337] usb 5-1: Manufacturer: syz [ 359.314663][ T337] usb 5-1: SerialNumber: syz [ 359.489228][ T1402] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 359.504004][ T1402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.547593][ T337] usb 5-1: Can't get UAC3 power state for id 10 [ 359.566466][ T337] usb 5-1: BAAD MICROPHONE c_chmask mismatch [ 359.583553][ T1402] usb 3-1: Product: syz [ 359.594117][ T337] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 359.613497][ T1402] usb 3-1: Manufacturer: syz [ 359.625770][ T1402] usb 3-1: SerialNumber: syz [ 359.903711][ T1402] usb 3-1: Can't get UAC3 power state for id 10 [ 359.973913][ T1402] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 360.217176][ T1402] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 360.428051][ T1402] usb 3-1: USB disconnect, device number 22 [ 360.667175][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 360.683977][ T337] usb 5-1: USB disconnect, device number 22 [ 360.701631][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 360.922521][ T4225] user requested TSC rate below hardware speed [ 361.503116][ T28] audit: type=1400 audit(1793646134.343:374): avc: denied { create } for pid=4226 comm="syz.4.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 361.563464][ T28] audit: type=1400 audit(1793646134.373:375): avc: denied { connect } for pid=4226 comm="syz.4.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 361.949913][ T4240] loop6: detected capacity change from 0 to 2048 [ 362.028476][ T4240] loop6: p1 < > p4 [ 362.039223][ T4240] loop6: p4 size 722688 extends beyond EOD, truncated [ 363.119530][ T337] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 363.169862][ T4241] loop4: detected capacity change from 0 to 16 [ 363.203983][ T4241] erofs: (device loop4): mounted with root inode @ nid 36. [ 363.220861][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.221581][ T2284] udevd[2284]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 363.243849][ T2166] udevd[2166]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 363.309262][ T337] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 363.322734][ T337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.339177][ T337] usb 6-1: Product: syz [ 363.377415][ T337] usb 6-1: Manufacturer: syz [ 363.382069][ T337] usb 6-1: SerialNumber: syz [ 363.771465][ T4249] loop0: detected capacity change from 0 to 40427 [ 363.784388][ T4230] mmap: syz.5.1070 (4230): VmData 17448960 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 363.862380][ T4253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 363.902431][ T337] rtl8150 6-1:1.0: couldn't reset the device [ 363.916700][ T337] rtl8150: probe of 6-1:1.0 failed with error -5 [ 363.924142][ T4253] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 363.938804][ T4254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1075'. [ 363.958330][ T337] usb 6-1: USB disconnect, device number 18 [ 363.991072][ T4253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=4253 comm=syz.0.1075 [ 364.037633][ T4258] loop6: detected capacity change from 0 to 4096 [ 364.065786][ T4258] EXT4-fs: Ignoring removed orlov option [ 364.073008][ T4229] loop2: detected capacity change from 0 to 131072 [ 364.080808][ T4258] EXT4-fs: Ignoring removed orlov option [ 364.093034][ T4229] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 364.106449][ T4258] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 364.122345][ T4229] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 364.142024][ T28] audit: type=1400 audit(1793646136.983:376): avc: denied { append } for pid=4255 comm="syz.6.1076" path=2F33372F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F626C6B696F2E6266712E696F5F736572766963655F6279746573 dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 364.148678][ T4229] F2FS-fs (loop2): invalid crc value [ 364.190931][ T28] audit: type=1400 audit(1793646137.033:377): avc: denied { ioctl } for pid=4255 comm="syz.6.1076" path=2F6E6577726F6F742F33372F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F626C6B696F2E6266712E696F5F736572766963655F6279746573 dev="loop6" ino=18 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 364.245714][ T3560] EXT4-fs (loop6): unmounting filesystem. [ 364.278397][ T4229] F2FS-fs (loop2): Found nat_bits in checkpoint [ 364.334692][ T4229] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 364.342427][ T4229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 364.663172][ T301] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 364.898901][ T301] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 364.998107][ T301] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 365.500298][ T301] usb 6-1: New USB device found, idVendor=045e, idProduct=0203, bcdDevice=99.0b [ 365.526789][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.545240][ T301] usb 6-1: Product: syz [ 365.549617][ T301] usb 6-1: Manufacturer: syz [ 365.554235][ T301] usb 6-1: SerialNumber: syz [ 365.766499][ T4276] user requested TSC rate below hardware speed [ 365.792194][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.828024][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.885249][ T4280] user requested TSC rate below hardware speed [ 365.980622][ T4283] loop0: detected capacity change from 0 to 512 [ 366.011848][ T4283] FAT-fs (loop0): Directory bread(block 2080) failed [ 366.039155][ T4283] FAT-fs (loop0): Directory bread(block 2081) failed [ 366.046336][ T4283] FAT-fs (loop0): Directory bread(block 2082) failed [ 366.106940][ T4283] FAT-fs (loop0): Directory bread(block 2083) failed [ 366.115613][ T4287] user requested TSC rate below hardware speed [ 366.122159][ T4283] FAT-fs (loop0): Directory bread(block 2084) failed [ 366.131282][ T4283] FAT-fs (loop0): Directory bread(block 2085) failed [ 366.139726][ T4283] FAT-fs (loop0): Directory bread(block 2086) failed [ 366.146577][ T4283] FAT-fs (loop0): Directory bread(block 2087) failed [ 366.242215][ T4290] user requested TSC rate below hardware speed [ 366.725574][ T4283] FAT-fs (loop0): Directory bread(block 2080) failed [ 366.795810][ T4283] FAT-fs (loop0): Directory bread(block 2081) failed [ 367.357110][ T301] usb 6-1: USB disconnect, device number 19 [ 367.552645][ T4305] loop4: detected capacity change from 0 to 1024 [ 367.610338][ T4305] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 367.626806][ T4305] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.726984][ T4309] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.1086: lblock 3 mapped to illegal pblock 3 (length 2) [ 367.796664][ T301] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 367.827260][ T4310] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.1086: lblock 0 mapped to illegal pblock 0 (length 3) [ 367.861118][ T4309] 9pnet_fd: Insufficient options for proto=fd [ 367.877542][ T4310] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 367.912010][ T4310] EXT4-fs (loop4): This should not happen!! Data will be lost [ 367.912010][ T4310] [ 367.999220][ T301] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 368.016640][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.025737][ T301] usb 6-1: Product: syz [ 368.046647][ T301] usb 6-1: Manufacturer: syz [ 368.051746][ T301] usb 6-1: SerialNumber: syz [ 369.533686][ T983] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:5: lblock 4 mapped to illegal pblock 4 (length 1) [ 369.550517][ T983] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 369.563369][ T983] EXT4-fs (loop4): This should not happen!! Data will be lost [ 369.563369][ T983] [ 369.584133][ T290] EXT4-fs (loop4): unmounting filesystem. [ 369.633552][ T4316] user requested TSC rate below hardware speed [ 369.797091][ T4316] user requested TSC rate below hardware speed [ 369.898928][ T301] usb 6-1: Can't get UAC3 power state for id 10 [ 369.986519][ T301] usb 6-1: BAAD MICROPHONE c_chmask mismatch [ 370.134250][ T301] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 370.316832][ T301] usb 6-1: USB disconnect, device number 20 [ 370.467468][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 370.812119][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 370.910801][ T4343] loop4: detected capacity change from 0 to 512 [ 370.997421][ T4343] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.1095: corrupted in-inode xattr [ 371.014146][ T4343] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1095: couldn't read orphan inode 15 (err -117) [ 371.035649][ T4343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 371.085311][ T290] EXT4-fs (loop4): unmounting filesystem. [ 371.249496][ T4350] loop0: detected capacity change from 0 to 512 [ 371.261366][ T4350] EXT4-fs: Invalid want_extra_isize 89 [ 371.357697][ T4359] 9pnet_fd: Insufficient options for proto=fd [ 371.571200][ T4337] loop2: detected capacity change from 0 to 131072 [ 371.578961][ T4337] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 371.588081][ T4337] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 371.597515][ T4337] F2FS-fs (loop2): invalid crc value [ 371.616802][ T4337] F2FS-fs (loop2): Found nat_bits in checkpoint [ 371.882838][ T4337] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 372.085863][ T4337] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 372.603515][ T4365] input: syz1 as /devices/virtual/input/input8 [ 373.635691][ T4372] user requested TSC rate below hardware speed [ 373.652391][ T4376] user requested TSC rate below hardware speed [ 373.788805][ T4380] user requested TSC rate below hardware speed [ 373.806708][ T291] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 373.999622][ T291] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 374.019212][ T291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.046659][ T291] usb 5-1: Product: syz [ 374.061680][ T291] usb 5-1: Manufacturer: syz [ 374.069008][ T4384] user requested TSC rate below hardware speed [ 374.079442][ T291] usb 5-1: SerialNumber: syz [ 374.295619][ T4389] loop2: detected capacity change from 0 to 16 [ 374.304323][ T4389] erofs: (device loop2): mounted with root inode @ nid 36. [ 374.417402][ T291] usb 5-1: Can't get UAC3 power state for id 10 [ 374.441580][ T291] usb 5-1: BAAD MICROPHONE c_chmask mismatch [ 374.557467][ T291] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 374.704724][ T291] usb 5-1: USB disconnect, device number 23 [ 374.967409][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 375.463931][ T4402] fuse: Bad value for 'fd' [ 376.856487][ T4416] loop4: detected capacity change from 0 to 4096 [ 376.957087][ T2284] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 377.413181][ T4426] loop4: detected capacity change from 0 to 16 [ 377.468029][ T4426] erofs: (device loop4): mounted with root inode @ nid 36. [ 377.574384][ T4411] input: syz1 as /devices/virtual/input/input11 [ 377.752950][ T4430] fuse: Bad value for 'fd' [ 378.395374][ T4418] loop0: detected capacity change from 0 to 131072 [ 378.421340][ T4418] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 378.430425][ T4418] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 378.442212][ T4418] F2FS-fs (loop0): invalid crc value [ 379.265131][ T4418] F2FS-fs (loop0): Found nat_bits in checkpoint [ 379.431154][ T4418] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 379.438352][ T4418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 379.710618][ T4422] loop2: detected capacity change from 0 to 131072 [ 379.748319][ T4422] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 379.778161][ T4422] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 379.800932][ T4422] F2FS-fs (loop2): invalid crc value [ 379.839871][ T4422] F2FS-fs (loop2): Found nat_bits in checkpoint [ 379.945189][ T4422] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 379.966670][ T4422] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 380.125636][ T28] audit: type=1400 audit(1793646152.963:378): avc: denied { mount } for pid=4456 comm="syz.6.1123" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 380.484307][ T4464] loop2: detected capacity change from 0 to 4096 [ 380.681716][ T28] audit: type=1400 audit(1793646153.473:379): avc: denied { unmount } for pid=3560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 380.744074][ T4476] user requested TSC rate below hardware speed [ 380.755386][ T4473] loop6: detected capacity change from 0 to 512 [ 380.762632][ T28] audit: type=1400 audit(1793646153.613:380): avc: denied { ioctl } for pid=4479 comm="syz.4.1130" path="socket:[45339]" dev="sockfs" ino=45339 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 381.259088][ T4473] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 381.333771][ T4473] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.661730][ T4489] user requested TSC rate below hardware speed [ 382.514165][ T3560] EXT4-fs (loop6): unmounting filesystem. [ 383.150400][ T4497] loop6: detected capacity change from 0 to 4096 [ 383.207062][ T4497] EXT4-fs: Ignoring removed orlov option [ 383.220490][ T4497] EXT4-fs: Ignoring removed orlov option [ 383.261733][ T4497] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 383.424612][ T28] audit: type=1400 audit(1793646156.263:381): avc: denied { getopt } for pid=4516 comm="syz.5.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.671712][ T4493] loop2: detected capacity change from 0 to 131072 [ 383.725933][ T4532] loop4: detected capacity change from 0 to 128 [ 383.728924][ T4493] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 383.740564][ T4493] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 383.751086][ T4493] F2FS-fs (loop2): invalid crc value [ 383.754547][ T4532] EXT4-fs: Ignoring removed i_version option [ 383.780044][ T3560] EXT4-fs (loop6): unmounting filesystem. [ 383.790113][ T4493] F2FS-fs (loop2): Found nat_bits in checkpoint [ 383.797278][ T4532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 383.817043][ T4532] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 383.915932][ T4493] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 383.932368][ T4493] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 383.947320][ T28] audit: type=1400 audit(1793646156.793:382): avc: denied { wake_alarm } for pid=4529 comm="syz.4.1139" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 383.982563][ T290] EXT4-fs (loop4): unmounting filesystem. [ 385.466638][ T291] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 386.149919][ T4573] fuse: Bad value for 'fd' [ 386.477871][ T291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.499589][ T291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.525910][ T291] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 386.540192][ T291] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 386.558583][ T4581] user requested TSC rate below hardware speed [ 386.584311][ T291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.593807][ T291] usb 7-1: config 0 descriptor?? [ 386.730118][ T4590] user requested TSC rate below hardware speed [ 386.856228][ T4592] user requested TSC rate below hardware speed [ 388.022218][ T291] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 388.032045][ T291] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 388.073381][ T4596] device syz_tun entered promiscuous mode [ 388.132144][ T4596] device macsec1 entered promiscuous mode [ 388.203638][ T4598] loop2: detected capacity change from 0 to 1024 [ 388.212119][ T4602] user requested TSC rate below hardware speed [ 388.219155][ T4596] device syz_tun left promiscuous mode [ 388.283088][ T4598] EXT4-fs: Ignoring removed orlov option [ 388.306494][ T4598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 388.325038][ T288] EXT4-fs (loop2): unmounting filesystem. [ 388.393043][ T4610] user requested TSC rate below hardware speed [ 388.454588][ T4613] loop0: detected capacity change from 0 to 1024 [ 388.495133][ T4613] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 388.894883][ T6] usb 7-1: USB disconnect, device number 7 [ 389.050032][ T287] EXT4-fs (loop0): unmounting filesystem. [ 390.600843][ T4628] loop2: detected capacity change from 0 to 4096 [ 390.612159][ T4627] loop4: detected capacity change from 0 to 4096 [ 391.309693][ T4653] fuse: Bad value for 'fd' [ 391.619989][ T28] audit: type=1326 audit(1793646164.463:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.1169" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 391.634390][ T4664] loop4: detected capacity change from 0 to 128 [ 391.660313][ T4659] user requested TSC rate below hardware speed [ 391.674567][ T4666] user requested TSC rate below hardware speed [ 391.730481][ T28] audit: type=1326 audit(1793646164.463:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.1169" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 391.782144][ T28] audit: type=1326 audit(1793646164.493:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.1169" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 391.813317][ T28] audit: type=1326 audit(1793646164.493:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.1169" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 391.840478][ T4673] user requested TSC rate below hardware speed [ 391.842186][ T28] audit: type=1326 audit(1793646164.493:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.1169" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 391.871906][ T4677] user requested TSC rate below hardware speed [ 391.873705][ T28] audit: type=1326 audit(1793646164.493:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.1169" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 391.905304][ T28] audit: type=1326 audit(1793646164.493:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.1169" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 391.931494][ T28] audit: type=1326 audit(1793646164.493:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.1169" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 391.957101][ T28] audit: type=1326 audit(1793646164.493:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.1169" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 391.982747][ T28] audit: type=1326 audit(1793646164.493:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.1169" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e719fb19 code=0x7ffc0000 [ 393.446700][ T1402] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 394.329588][ T1402] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 394.356481][ T1402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.367583][ T1402] usb 5-1: Product: syz [ 394.373288][ T1402] usb 5-1: Manufacturer: syz [ 394.385221][ T1402] usb 5-1: SerialNumber: syz [ 394.459031][ T4707] netlink: 'syz.6.1185': attribute type 4 has an invalid length. [ 394.612912][ T1402] usb 5-1: Can't get UAC3 power state for id 10 [ 394.626677][ T1402] usb 5-1: BAAD MICROPHONE c_chmask mismatch [ 394.644872][ T4709] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1186'. [ 394.655613][ T1402] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 394.662752][ T322] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 394.692482][ T2247] udevd[2247]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 394.710378][ T1402] usb 5-1: USB disconnect, device number 24 [ 394.859586][ T322] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 394.868896][ T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.877732][ T322] usb 1-1: Product: syz [ 394.881990][ T322] usb 1-1: Manufacturer: syz [ 394.886649][ T322] usb 1-1: SerialNumber: syz [ 395.160966][ T301] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 395.356845][ T301] usb 6-1: Using ep0 maxpacket: 32 [ 395.415071][ T301] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 395.535950][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.664879][ T301] usb 6-1: Product: syz [ 395.725479][ T301] usb 6-1: Manufacturer: syz [ 396.076719][ T4724] user requested TSC rate below hardware speed [ 396.093769][ T301] usb 6-1: SerialNumber: syz [ 396.159862][ T4729] loop6: detected capacity change from 0 to 1024 [ 396.169777][ T322] rtl8150 1-1:1.0: couldn't reset the device [ 396.195502][ T322] rtl8150: probe of 1-1:1.0 failed with error -5 [ 396.211586][ T4729] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 396.220687][ T4729] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.233009][ T4734] user requested TSC rate below hardware speed [ 396.248141][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 396.283607][ T4701] loop0: detected capacity change from 0 to 512 [ 396.300412][ T4736] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.1191: lblock 3 mapped to illegal pblock 3 (length 2) [ 396.322655][ T4736] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm syz.6.1191: lblock 0 mapped to illegal pblock 0 (length 3) [ 396.333779][ T4701] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 396.345911][ T4701] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.351128][ T4736] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 396.369257][ T4736] EXT4-fs (loop6): This should not happen!! Data will be lost [ 396.369257][ T4736] [ 396.425721][ T4714] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1188'. [ 396.438692][ T4741] loop2: detected capacity change from 0 to 16 [ 396.836442][ T4713] ================================================================== [ 396.844558][ T4713] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0 [ 396.851527][ T4713] Write of size 8 at addr ffff888131481550 by task syz.5.1188/4713 [ 396.859620][ T4713] [ 396.861961][ T4713] CPU: 1 PID: 4713 Comm: syz.5.1188 Not tainted syzkaller #0 [ 396.869429][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 396.878432][ T4741] erofs: (device loop2): mounted with root inode @ nid 36. [ 396.879586][ T4713] Call Trace: [ 396.879595][ T4713] [ 396.879603][ T4713] __dump_stack+0x21/0x24 [ 396.897685][ T4713] dump_stack_lvl+0x110/0x170 [ 396.902362][ T4713] ? __cfi_dump_stack_lvl+0x8/0x8 [ 396.908087][ T4713] ? mutex_lock+0x86/0x1b0 [ 396.912503][ T4713] print_address_description+0x71/0x200 [ 396.918382][ T4713] print_report+0x4a/0x60 [ 396.922715][ T4713] kasan_report+0x122/0x150 [ 396.927311][ T4713] ? mutex_lock+0x86/0x1b0 [ 396.932335][ T4713] kasan_check_range+0x249/0x2a0 [ 396.937546][ T4713] __kasan_check_write+0x14/0x20 [ 396.942570][ T4713] mutex_lock+0x86/0x1b0 [ 396.946991][ T4713] ? __cfi_mutex_lock+0x10/0x10 [ 396.951845][ T4713] ? kfree+0x6f/0xf0 [ 396.955754][ T4713] ? l2tp_session_put+0xaf/0x1a0 [ 396.961165][ T4713] ? l2tp_session_delete+0x3df/0x4d0 [ 396.967201][ T4713] pppol2tp_release+0x178/0x2b0 [ 396.972088][ T4713] sock_close+0xc9/0x220 [ 396.976347][ T4713] ? __cfi_sock_close+0x10/0x10 [ 396.981552][ T4713] __fput+0x1fd/0x8f0 [ 396.985688][ T4713] ____fput+0x15/0x20 [ 396.989774][ T4713] task_work_run+0x1e1/0x250 [ 396.994377][ T4713] ? __cfi_task_work_run+0x10/0x10 [ 396.999518][ T4713] ? __cfi___close_range+0x10/0x10 [ 397.004660][ T4713] exit_to_user_mode_loop+0x9b/0xb0 [ 397.009944][ T4713] exit_to_user_mode_prepare+0x87/0xd0 [ 397.015410][ T4713] syscall_exit_to_user_mode+0x1a/0x30 [ 397.021070][ T4713] do_syscall_64+0x58/0xa0 [ 397.025678][ T4713] ? clear_bhb_loop+0x30/0x80 [ 397.030554][ T4713] ? clear_bhb_loop+0x30/0x80 [ 397.035870][ T4713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.042322][ T4713] RIP: 0033:0x7fc54c39fb19 [ 397.047107][ T4713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.067530][ T4713] RSP: 002b:00007ffded784238 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 397.076441][ T4713] RAX: 0000000000000000 RBX: 00007ffded784320 RCX: 00007fc54c39fb19 [ 397.084440][ T4713] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 397.092518][ T4713] RBP: 000000000006061c R08: 0000000000000001 R09: 0000000000000000 [ 397.100583][ T4713] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffded784360 [ 397.108658][ T4713] R13: 00007fc54c625fac R14: 0000000000060cba R15: 00007fc54c625fa0 [ 397.116734][ T4713] [ 397.119755][ T4713] [ 397.122078][ T4713] Allocated by task 4714: [ 397.126486][ T4713] kasan_set_track+0x4b/0x70 [ 397.131085][ T4713] kasan_save_alloc_info+0x1f/0x30 [ 397.136202][ T4713] __kasan_kmalloc+0x95/0xb0 [ 397.140809][ T4713] __kmalloc+0xb4/0x1e0 [ 397.144960][ T4713] l2tp_session_create+0x38/0xbd0 [ 397.150139][ T4713] pppol2tp_connect+0xbf5/0x1640 [ 397.155086][ T4713] __sys_connect+0x3da/0x460 [ 397.159773][ T4713] __x64_sys_connect+0x7a/0x90 [ 397.164535][ T4713] x64_sys_call+0x88d/0x9a0 [ 397.169039][ T4713] do_syscall_64+0x4c/0xa0 [ 397.173451][ T4713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.179366][ T4713] [ 397.181788][ T4713] Freed by task 4713: [ 397.185771][ T4713] kasan_set_track+0x4b/0x70 [ 397.190536][ T4713] kasan_save_free_info+0x2b/0x40 [ 397.195555][ T4713] ____kasan_slab_free+0x132/0x180 [ 397.200677][ T4713] __kasan_slab_free+0x11/0x20 [ 397.205467][ T4713] slab_free_freelist_hook+0xc2/0x190 [ 397.210945][ T4713] __kmem_cache_free+0xb7/0x1b0 [ 397.215822][ T4713] kfree+0x6f/0xf0 [ 397.219634][ T4713] l2tp_session_put+0xaf/0x1a0 [ 397.224407][ T4713] l2tp_session_delete+0x3df/0x4d0 [ 397.229702][ T4713] pppol2tp_release+0x169/0x2b0 [ 397.234641][ T4713] sock_close+0xc9/0x220 [ 397.239007][ T4713] __fput+0x1fd/0x8f0 [ 397.243035][ T4713] ____fput+0x15/0x20 [ 397.247033][ T4713] task_work_run+0x1e1/0x250 [ 397.251629][ T4713] exit_to_user_mode_loop+0x9b/0xb0 [ 397.256848][ T4713] exit_to_user_mode_prepare+0x87/0xd0 [ 397.262497][ T4713] syscall_exit_to_user_mode+0x1a/0x30 [ 397.267965][ T4713] do_syscall_64+0x58/0xa0 [ 397.272393][ T4713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.278464][ T4713] [ 397.280810][ T4713] The buggy address belongs to the object at ffff888131481400 [ 397.280810][ T4713] which belongs to the cache kmalloc-512 of size 512 [ 397.295127][ T4713] The buggy address is located 336 bytes inside of [ 397.295127][ T4713] 512-byte region [ffff888131481400, ffff888131481600) [ 397.308487][ T4713] [ 397.310841][ T4713] The buggy address belongs to the physical page: [ 397.317504][ T4713] page:ffffea0004c52000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x131480 [ 397.327824][ T4713] head:ffffea0004c52000 order:2 compound_mapcount:0 compound_pincount:0 [ 397.336325][ T4713] flags: 0x4000000000010200(slab|head|zone=1) [ 397.342404][ T4713] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 397.351158][ T4713] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 397.359740][ T4713] page dumped because: kasan: bad access detected [ 397.366408][ T4713] page_owner tracks the page as allocated [ 397.372125][ T4713] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 290, tgid 290 (syz-executor), ts 23227787031, free_ts 0 [ 397.392796][ T4713] post_alloc_hook+0x1f5/0x210 [ 397.397726][ T4713] prep_new_page+0x1c/0x110 [ 397.402242][ T4713] get_page_from_freelist+0x2ca9/0x2d20 [ 397.407897][ T4713] __alloc_pages+0x1fa/0x610 [ 397.412574][ T4713] alloc_slab_page+0x6e/0xf0 [ 397.417181][ T4713] new_slab+0x98/0x3e0 [ 397.421245][ T4713] ___slab_alloc+0x70f/0xb70 [ 397.425843][ T4713] __slab_alloc+0x5e/0xa0 [ 397.430190][ T4713] __kmem_cache_alloc_node+0x204/0x2d0 [ 397.435651][ T4713] __kmalloc_node_track_caller+0xa1/0x1e0 [ 397.441373][ T4713] __alloc_skb+0x226/0x4a0 [ 397.445939][ T4713] fdb_notify+0x78/0x130 [ 397.450296][ T4713] fdb_add_local+0x16b/0x260 [ 397.454914][ T4713] br_fdb_change_mac_address+0x492/0x4d0 [ 397.460719][ T4713] br_device_event+0x14d/0x790 [ 397.465478][ T4713] raw_notifier_call_chain+0xa1/0x110 [ 397.470939][ T4713] page_owner free stack trace missing [ 397.476301][ T4713] [ 397.478627][ T4713] Memory state around the buggy address: [ 397.484335][ T4713] ffff888131481400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 397.492463][ T4713] ffff888131481480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 397.500606][ T4713] >ffff888131481500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 397.508658][ T4713] ^ [ 397.515348][ T4713] ffff888131481580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 397.523491][ T4713] ffff888131481600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 397.531654][ T4713] ================================================================== [ 398.496797][ T4732] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 398.499223][ T4713] Disabling lock debugging due to kernel taint [ 398.754478][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 398.754496][ T28] audit: type=1400 audit(1793646171.593:459): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 399.471935][ T301] usb 6-1: MIDIStreaming interface descriptor not found [ 399.492465][ T301] usb 6-1: USB disconnect, device number 21 [ 399.498653][ T28] audit: type=1400 audit(1793646171.593:460): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.529533][ T322] usb 1-1: USB disconnect, device number 24 [ 399.536277][ T4314] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:7: lblock 4 mapped to illegal pblock 4 (length 1) [ 399.553404][ T28] audit: type=1400 audit(1793646171.593:461): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.573272][ T4314] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 399.587946][ T4314] EXT4-fs (loop6): This should not happen!! Data will be lost [ 399.587946][ T4314] [ 399.594017][ T28] audit: type=1400 audit(1793646171.593:462): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.599694][ T3560] EXT4-fs (loop6): unmounting filesystem. [ 399.625611][ T287] EXT4-fs (loop0): unmounting filesystem. [ 399.652040][ T28] audit: type=1400 audit(1793646171.593:463): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.673440][ T28] audit: type=1400 audit(1793646171.593:464): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.710422][ T28] audit: type=1400 audit(1793646171.593:465): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.734827][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory