last executing test programs: 6.354031535s ago: executing program 2 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) getsockname(r1, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000380)=0x80) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x6, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x7) r4 = syz_open_procfs(r3, 0x0) lseek(r4, 0x10001, 0x0) getpid() syz_clone3(&(0x7f0000000000)={0xe3002400, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r3], 0x1}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) 4.190713894s ago: executing program 0 (id=484): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0x2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs, 0x6e) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f00000002c0)={{0x1, 0x0, 0x4, 0x42, 0x7}, [{0x0, 0x1, 0x6, 0xff}]}) recvmmsg(r5, &(0x7f0000000380), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x18000, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000480)="$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") open(&(0x7f00000007c0)='./file1\x00', 0x1c1242, 0x13) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000800), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0], 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000ac0)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x8000, 0x7, 0x3ff, 0x10001, 0xff, 0x0, 0x8, 0x5, 0x35, 0x9, 0xb731, 0x8, 0x7ff, 0x80000000, 0x9, 0x1, 0x101, 0xdbc, 0xc7d, 0x7, 0xb, 0x4, 0x80000001, 0x7287, 0xb, 0x4, 0x401, 0x3, 0x0, 0x4e8, 0x0, 0x7fffffff, 0x7ff, 0x1, 0x10000, 0x80000001, 0x1, 0xfffffffa, 0x5, 0x8, 0x0, 0x4, 0x5, 0xe800000, 0x3, 0xb50, 0x1, 0x10, 0x5, 0x2, 0xfff, 0x8, 0x5b, 0x1e3d9b5f, 0x9, 0x5, 0x3, 0x2, 0x5, 0x2, 0x3, 0x4, 0xf2, 0x7, 0xfffffffe, 0x1, 0x101, 0x800, 0xffffffff, 0x7, 0x53, 0x6, 0xffff, 0x4, 0xf7, 0x7, 0x0, 0x3, 0x0, 0x3, 0xd6, 0xfffffffe, 0x63, 0x6, 0x4, 0xf, 0x1, 0x81, 0x2, 0x4, 0x2, 0x6, 0x4, 0x10000, 0x4, 0xc43, 0x5, 0xea6, 0x7f, 0x2, 0x0, 0xfff, 0x1, 0x8, 0x5, 0xdd360000, 0x1, 0x2, 0x6, 0x5, 0xfffffffd, 0xffffffff, 0xffff8431, 0x0, 0x8c9, 0x0, 0x4, 0xffff, 0x8, 0x8, 0x7, 0x2, 0x7, 0xff5, 0x7ff, 0x7fffffff, 0x45]}}) 4.189853794s ago: executing program 3 (id=486): syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0x8, 0x0, &(0x7f0000000080)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect$uac3(0x3, 0xf1, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x4, 0x0, 0x0, {0x8, 0xb, 0x1, 0x1, 0x1, 0x26, 0x30, 0xfa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x44, 0xc3e}, [@power_domain={0xb, 0x24, 0x10, 0x0, 0xfff9, 0x2, 0x1, "d355"}, @mixer_unit={0x9, 0x24, 0x5, 0x4, 0x81, "cdb4aa2c"}, @mixer_unit={0xa, 0x24, 0x5, 0x2, 0x3b, "b993c9c7d3"}, @feature_unit={0x15, 0x24, 0x7, 0x4, 0x6, [0xff, 0x2, 0x8, 0xa]}, @mixer_unit={0x7, 0x24, 0x5, 0x2, 0xfe, "8d0f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x7, 0x95}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x7, 0xf8, "ad1d419c9f4077ac"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0x0, 0x2, {0xa, 0x25, 0x25, 0xc04, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x9, 0x10, 0x6}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xb98, 0x3, 0x1, "c5d2b701"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x8, 0x7f, 0x3, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x80, 0x0, 0x0, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x8}}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x4, 0xaa, 0x4, 0x40, 0xfe}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x8, [{0xe8, &(0x7f00000002c0)=@string={0xe8, 0x3, "f7022e28719702eec7f5bae1863b5e7f1ca1ca0607205a26b04249f302d18ab19f736b37b136530421497b6ec0d2a887a5e0fde7e02778cbcc778b63bfc7603c79cedaf85b5d7c206836cd6abf4aa745e2c0637a66d2c658a5dbf5fe2fb69b5a1a70209e6815fb27d0a7a6cd64cbc9b59beaf19bf5d1217a05eb0fab3e81dfd2e436ab33870c8c155cd5ed92f2eac3ffef85f4fefb69ecbc5f3dbf618cf228e9763c2a606f1d9814f80b7c054ff3acd36e171d109d61e1c05538c29b945c97f283f11360d6a771211c2cf1da9064e2926e6273dd94b72e45c307c5b485629e5a25fa30b8e927"}}, {0x9d, &(0x7f00000003c0)=@string={0x9d, 0x3, "ff3c96695f5050272885b99bd84f2e6cd9c5c3988c82aa3b4d62d090154150a8e928d4dc94c143ccf778ae6eda7243828202b463f23fc2d79b23236ed90da10edb25dee99d7e13aa1e47934f04c9fff5e214e87b47474832eea85faec891a5895a834dd71d1ccfafee5b4daa69f6bfd251d6752c449fd3d6b25fb62a7824bd6d975766281eeee86834cb89d74a4aa13e1e8d8719a1bf8a3e1708f9"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41d}}, {0xff, &(0x7f0000000580)=@string={0xff, 0x3, "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"}}, {0x9d, &(0x7f0000000680)=@string={0x9d, 0x3, "1f3f80c545504f7d5a6ff92c377941fe8b465dc5b65e82070ce4201e52eed7d69a7531dc86d24bb11a82e165c6927874c8d2d7b352afe62ddf202bb65eabc775ed1f7da651adf6e3d24df8218e07537f5743607e979c892526ef026e5045838eac3a64796c44adcf00d5cee063ec4a58214f6cd9fa2905e6803de016daa6b9f7c0ae6c89a047a8c471c94ce26a01eec1740ebb4151ba1f79d117d1"}}, {0x3b, &(0x7f0000000740)=@string={0x3b, 0x3, "121f5f66bfa67ed2a1d370283f899f0768826a2564a8ca13cc938c9d12fb35987eb4933e9ee215a8479cf3b8f5cc2ebb3188a88e9dee2789a7"}}, {0xf9, &(0x7f0000000780)=@string={0xf9, 0x3, "ec4270d0f438aeb5e132a30ef027330bbc05fd014292eb7cc849d64e528096db3d7866adba2456f889a824e76c7c5708b4ab1a7eed4856ead9a901a746164907283059d8f0c6bb7630d3dd821065be26c48a35509faa014440e20880abff54affbad4051a921fef3ee05ba673acc75e9eadf7de697556a6b489e7cc10ba38894373b60fc91883334e9239e005e30e2ac7826fa301b5ccf1f2e7a140b82f038384b0734aed1741a59a55a4781ffa2ecb49e0653ecfa2e70d8db73dcc0731c8ab7d12596dd4982dce3ef23b840789008ebf7be34cf2c66542d1b627898bf1f48383bd1db2e8388ae45d914470ffe1b38f91e822348fea223"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1409}}]}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x10001}) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) 4.186539625s ago: executing program 2 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000003, &(0x7f0000000180), 0x1, 0x4e6, &(0x7f0000000440)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000580"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x30b, 0x70bd2d, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x6, 0x20000000, 0x1, 0x8}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3.996814454s ago: executing program 2 (id=492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x8) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000b80)='GPL\x00', 0x4, 0x98, &(0x7f0000000bc0)=""/152}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000fdd284dfd336bc3907ea7564f90d6800000000000000e68215d9a9a58044d64b9e67e6c1e7efffdc29a4793f9cfbd9739046ed14dff1c17faa4300848775e9345d292348b116a20b4bdbd5e92ce3bdefecd83a78dd60c6a4210323f39789dfc8c4412413d020edcf4e09000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000012c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001300)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback, 0x4e22, 0x5, 0x4e1f, 0x7fff, 0xa, 0x0, 0x20, 0x58}, {0xfffffffffffffffb, 0x3, 0x10, 0x4, 0x7, 0x7, 0xffffffff80000001, 0x7}, {0xffffffffffffffff, 0x573, 0x5, 0x6}, 0x5, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x32}, 0xab11e6417b62bccf, @in6=@private2, 0x34ff, 0x4, 0x2, 0xb, 0x5, 0x5, 0x4ddd}}, 0xe8) sched_setscheduler(r3, 0x2, &(0x7f00000029c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000002a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000002ac0), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000002b00), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002b80)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00), 0x8, &(0x7f0000002c40)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) r7 = syz_open_procfs(0x0, &(0x7f0000002c80)='mounts\x00') read$FUSE(r7, &(0x7f0000002cc0)={0x2020}, 0x2020) memfd_create(0x0, 0x0) write$binfmt_misc(r7, &(0x7f00000000c0)="000000000000000000000000054b0800443b6f107430b41d736a26f8baad3737e43072cf1a3e727a701c1f69f88daa5d77d8eab725c7111b35037bbd702981b1d9754f18507d90a16833690000ca5dd8eb4ff6188d0094ab8ba25ed59f3c87a98cdf6909f0b309aa8fdb752c14e992554f6f99e0ec21fd88", 0x78) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) 2.801613796s ago: executing program 2 (id=497): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x180, 0x380, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x8441, 0x1ac) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e26, @multicast1}, 0x10) fallocate(r2, 0x8, 0x4000, 0x8000) 2.701458335s ago: executing program 4 (id=499): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x26020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000060a769fb2e2251b6f2e47db5f5113b448f47b3d9bb1887da258a4fd247fc3bf4520d2b164d63b4f62aae1fa919858547cea46966966ad0c4874dfa00accc90b8028baa334a6d9fcf874d75d73c37ce17cac8e5d7f63355e1b2b5c1144164528645e51852c9eaf176fde2de0703e0d9b44eb1384633f0ce4e660d6b43d6ae9d851a288a84b364f2ffdbe969eaa6e664f39b054f70d1d471f41e0bf59aa89037fd6c9e47fddd4db7cfccb52e219be241"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="1200000003"], 0x10) waitid$P_PIDFD(0x3, r3, &(0x7f0000000280), 0x20000000, &(0x7f0000000300)) shutdown(r0, 0x1) 2.571468209s ago: executing program 4 (id=500): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000340)) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x180, 0x380, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x8441, 0x1ac) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e26, @multicast1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r5, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r6 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000300), 0x4) bind$tipc(r5, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) fallocate(r3, 0x8, 0x4000, 0x8000) 2.56129737s ago: executing program 4 (id=501): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000080)={[{@errors_remount}]}, 0xbe, 0x2a4, &(0x7f0000000b40)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20005891}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000007c0)={@multicast2, @local}, 0xc) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000007c0)={@multicast2, @local}, 0xc) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x3e) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x1, @private=0xa010102}}, 0x1e) (async) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x1, @private=0xa010102}}, 0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000e40)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000f00)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000f00)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x184, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x36, 0xbc27, 0x401, 0x1, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x5, 0x9, 0x6, 0x0, 0x4, 0x0, 0x3}}, {0xa, 0x2, [0x1, 0x5, 0x4]}}, {{0x1c, 0x1, {0x0, 0x6, 0x1, 0x2, 0x0, 0x0, 0x2, 0x9}}, {0x16, 0x2, [0x8, 0xfffd, 0x4, 0x1, 0xb, 0x8001, 0x1, 0x8, 0x4]}}, {{0x1c, 0x1, {0x7f, 0x9, 0x4db9, 0xfffffffa, 0x1, 0x4, 0xffffff5d, 0x2}}, {0x8, 0x2, [0x9, 0x10]}}, {{0x1c, 0x1, {0x80, 0xc, 0x12c3, 0x9, 0x1, 0x7, 0x1, 0x9}}, {0x16, 0x2, [0x3, 0x9, 0x4, 0xfffd, 0x800, 0x6, 0xff, 0x100, 0xdc9]}}, {{0x1c, 0x1, {0x7f, 0x47, 0x0, 0x2, 0x2, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x7, 0xee41, 0x4, 0xd, 0x8]}}, {{0x7c, 0x1, {0xf8, 0x6, 0x6, 0x3, 0x0, 0x3, 0x6, 0xffc6}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xf2, 0x4, 0x3ff, 0x200, 0x1, 0x10002, 0x26, 0x2}}, {0x8, 0x2, [0x9, 0x6]}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x184, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x36, 0xbc27, 0x401, 0x1, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x5, 0x9, 0x6, 0x0, 0x4, 0x0, 0x3}}, {0xa, 0x2, [0x1, 0x5, 0x4]}}, {{0x1c, 0x1, {0x0, 0x6, 0x1, 0x2, 0x0, 0x0, 0x2, 0x9}}, {0x16, 0x2, [0x8, 0xfffd, 0x4, 0x1, 0xb, 0x8001, 0x1, 0x8, 0x4]}}, {{0x1c, 0x1, {0x7f, 0x9, 0x4db9, 0xfffffffa, 0x1, 0x4, 0xffffff5d, 0x2}}, {0x8, 0x2, [0x9, 0x10]}}, {{0x1c, 0x1, {0x80, 0xc, 0x12c3, 0x9, 0x1, 0x7, 0x1, 0x9}}, {0x16, 0x2, [0x3, 0x9, 0x4, 0xfffd, 0x800, 0x6, 0xff, 0x100, 0xdc9]}}, {{0x1c, 0x1, {0x7f, 0x47, 0x0, 0x2, 0x2, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x7, 0xee41, 0x4, 0xd, 0x8]}}, {{0x7c, 0x1, {0xf8, 0x6, 0x6, 0x3, 0x0, 0x3, 0x6, 0xffc6}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xf2, 0x4, 0x3ff, 0x200, 0x1, 0x10002, 0x26, 0x2}}, {0x8, 0x2, [0x9, 0x6]}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000006c0)='./file0\x00', 0x1f0b9, 0x0, 0x40, 0x0, &(0x7f00000007c0)) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r4) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) mkdir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185) symlinkat(&(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.518954664s ago: executing program 0 (id=484): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0x2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs, 0x6e) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f00000002c0)={{0x1, 0x0, 0x4, 0x42, 0x7}, [{0x0, 0x1, 0x6, 0xff}]}) recvmmsg(r5, &(0x7f0000000380), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x18000, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000480)="$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") open(&(0x7f00000007c0)='./file1\x00', 0x1c1242, 0x13) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000800), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0], 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000ac0)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x8000, 0x7, 0x3ff, 0x10001, 0xff, 0x0, 0x8, 0x5, 0x35, 0x9, 0xb731, 0x8, 0x7ff, 0x80000000, 0x9, 0x1, 0x101, 0xdbc, 0xc7d, 0x7, 0xb, 0x4, 0x80000001, 0x7287, 0xb, 0x4, 0x401, 0x3, 0x0, 0x4e8, 0x0, 0x7fffffff, 0x7ff, 0x1, 0x10000, 0x80000001, 0x1, 0xfffffffa, 0x5, 0x8, 0x0, 0x4, 0x5, 0xe800000, 0x3, 0xb50, 0x1, 0x10, 0x5, 0x2, 0xfff, 0x8, 0x5b, 0x1e3d9b5f, 0x9, 0x5, 0x3, 0x2, 0x5, 0x2, 0x3, 0x4, 0xf2, 0x7, 0xfffffffe, 0x1, 0x101, 0x800, 0xffffffff, 0x7, 0x53, 0x6, 0xffff, 0x4, 0xf7, 0x7, 0x0, 0x3, 0x0, 0x3, 0xd6, 0xfffffffe, 0x63, 0x6, 0x4, 0xf, 0x1, 0x81, 0x2, 0x4, 0x2, 0x6, 0x4, 0x10000, 0x4, 0xc43, 0x5, 0xea6, 0x7f, 0x2, 0x0, 0xfff, 0x1, 0x8, 0x5, 0xdd360000, 0x1, 0x2, 0x6, 0x5, 0xfffffffd, 0xffffffff, 0xffff8431, 0x0, 0x8c9, 0x0, 0x4, 0xffff, 0x8, 0x8, 0x7, 0x2, 0x7, 0xff5, 0x7ff, 0x7fffffff, 0x45]}}) 2.341304572s ago: executing program 4 (id=503): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x9000, 0x2, 0x8, 0x1, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000001840)='./file1\x00', 0x8042, 0x0) socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000047902a36e6e500041f00800400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000280), 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001800)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001980), 0x318, 0x0) recvmmsg(r3, &(0x7f00000019c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001a00)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001a40)={'syz_tun\x00', &(0x7f0000001a80)=@ethtool_coalesce={0xf}}) pipe(&(0x7f0000001b00)) socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) 2.321069174s ago: executing program 2 (id=504): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000140)={[{@journal_async_commit}, {@sysvgroups}, {@norecovery}, {@abort}, {@auto_da_alloc}]}, 0x28, 0x604, &(0x7f0000000d80)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x2, 0x8000, 0x7ff) syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x9, 0x6, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800700, &(0x7f00000004c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@grpjquota}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@inlinecrypt}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@inlinecrypt}]}, 0x3, 0x465, &(0x7f00000005c0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, &(0x7f0000000080)="9081cb64d4c6a208c3a9b3caa1ddda020e86e7d2c8e725244d27a42282e8103b4bdf10c01ccce93099cb6c77", &(0x7f0000000380)=""/251, 0x4}, 0x20) 2.103302216s ago: executing program 2 (id=505): syz_usb_connect(0x2, 0xc7, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES64], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 2.094775107s ago: executing program 1 (id=507): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000440)=0x2, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x60000}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/171, 0xab}], 0x1, 0x0, 0x0) lseek(r3, 0x1000, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x48}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c881}, 0x20000080) 2.040022713s ago: executing program 1 (id=508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x8) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000b80)='GPL\x00', 0x4, 0x98, &(0x7f0000000bc0)=""/152}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000fdd284dfd336bc3907ea7564f90d6800000000000000e68215d9a9a58044d64b9e67e6c1e7efffdc29a4793f9cfbd9739046ed14dff1c17faa4300848775e9345d292348b116a20b4bdbd5e92ce3bdefecd83a78dd60c6a4210323f39789dfc8c4412413d020edcf4e09000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000012c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001300)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback, 0x4e22, 0x5, 0x4e1f, 0x7fff, 0xa, 0x0, 0x20, 0x58}, {0xfffffffffffffffb, 0x3, 0x10, 0x4, 0x7, 0x7, 0xffffffff80000001, 0x7}, {0xffffffffffffffff, 0x573, 0x5, 0x6}, 0x5, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x32}, 0xab11e6417b62bccf, @in6=@private2, 0x34ff, 0x4, 0x2, 0xb, 0x5, 0x5, 0x4ddd}}, 0xe8) sched_setscheduler(r3, 0x2, &(0x7f00000029c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000002a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000002ac0), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000002b00), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002b80)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00), 0x8, &(0x7f0000002c40)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) r7 = syz_open_procfs(0x0, &(0x7f0000002c80)='mounts\x00') read$FUSE(r7, &(0x7f0000002cc0)={0x2020}, 0x2020) memfd_create(0x0, 0x0) write$binfmt_misc(r7, &(0x7f00000000c0)="000000000000000000000000054b0800443b6f107430b41d736a26f8baad3737e43072cf1a3e727a701c1f69f88daa5d77d8eab725c7111b35037bbd702981b1d9754f18507d90a16833690000ca5dd8eb4ff6188d0094ab8ba25ed59f3c87a98cdf6909f0b309aa8fdb752c14e992554f6f99e0ec21fd88", 0x78) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) 1.611691946s ago: executing program 0 (id=509): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000750000000000000000000000000000000000000000000000000000000000b86b6e00"], 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0216ef050a0000002dbd7000ffdbdf250800120002000100b86b6e00"], 0x50}}, 0x840) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@discard}, {@mblk_io_submit}, {@noinit_itable}, {@grpquota}, {@noquota}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xf9, 0x47f, &(0x7f0000000600)="$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") creat(&(0x7f0000001b80)='./bus\x00', 0x9e) (async) r2 = creat(&(0x7f0000001b80)='./bus\x00', 0x9e) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, 0x0) 966.864902ms ago: executing program 4 (id=510): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374526963742c6167655f657874656e745f63616368652c6469736361726424b26f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000000f80)="$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") (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x8, 0x7ffc1ffb}]}) getpgrp(0xffffffffffffffff) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents64(r0, &(0x7f00000064c0)=""/4082, 0xff2) (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000140)={[{@noload}, {@bsdgroups}, {@noblock_validity}, {@barrier}]}, 0x0, 0x536, &(0x7f0000000a40)="$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") 966.428752ms ago: executing program 0 (id=511): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x6000, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x5, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x180, 0x380, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x8441, 0x1ac) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e26, @multicast1}, 0x10) fallocate(r4, 0x8, 0x4000, 0x8000) 966.015912ms ago: executing program 3 (id=512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000002300)) timer_settime(0x0, 0x0, &(0x7f0000002340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000002380), &(0x7f00000023c0)='./file0\x00', 0x3018000, &(0x7f0000002400)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="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"/4201, @ANYRESDEC, @ANYRES64, @ANYRES32=0x0, @ANYRESHEX], 0xa, 0x2f1, &(0x7f00000034c0)="$eJzs3E1PE10UwPFDW6AtgbJ48hhNDDe60cRMoLpWGgOJsYkEqfElMRlgqk3Hlsw0mBojunJr/BAuCEt2JMoXYONON27csdDEhSyMY5jO0BeGF0tpEf6/hMyh957pPQyXnGlo1+++eZLP2lpWL0koqqRLRGRDZFBC4uvyjiE37pFaL+Vi349PZ2/fu38zlU6PTSo1npq6nFRKDQy9f/o85k1b6ZW1wYfr35Nf1/5fO73+e+pxzlY5WxWKJaWr6eKXkj5tGmo2Z+c1pSZMQ7cNlSvYhlUZL1bGs2Zxbq6s9MJsf3zOMmxb6YWyyhtlVSqqklVW4Ud6rqA0TVP9ccFeMouTk3qqyeSZFi8Gh8SyUnpYRGLbRjKLHVkQAADoqMb+PySqlf3/0rnVUt+d5QGv/1/pCer/r3yunKuu/4+KSGD/7z9/YP+v/13/v70jOlkO1P/jaBiq25HfLtXsWBF3u1opPe7tX9erB0vDbkD/DwAAAAAAAAAAAAAAAAAAAADAv2DDcRKO4yT8o//VKyJREfG/D0gNi8i1DiwZLXSA649joPrGvciAiPl6PjOfqRy9CasiYoohw5KQX+7vg2cz9t95pDYNygdzwctfmM+E3ZFUVnJu/ogkuqUx33HGb6THRlRFfX63xGvzk5KQ/4Lzk4H5PXLhfE2+Jgn5OCNFMWXWXUc1/8WIUtdvpRvyY+48AAAAAACOA01tCbx/17Sdxiv5W/fXja8PhKv318OB9+cRORPpbO0AAAAAAJwUdvlZXjdNw9oliMnec5oPIod0Zr/C/Wb5/8tweJXuEvhPXjcU9R40e/d1mfb9Y+lqQaUhaSZraLMaddAq/JeNdpojE6Ptv4JucOrtu5+tO+HV5egelTYfhHffF93t+esDAAAAoJ2qTb//yGhnFwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAnUjk9H63SNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFHxJwAA//8USQQ6") capset(&(0x7f00000037c0)={0x20071026}, &(0x7f00000038c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000003900), 0x1, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) bpf$MAP_CREATE(0x0, &(0x7f00000037c0)=ANY=[], 0x40) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000003800)=ANY=[@ANYBLOB="7f454c4607080004ff00000000000000030033de79f70d4e6d650000380000003b0300000400000051e574640800000040000000000000000200000007000400010100002a0000000200000001000000ffffff7fcedc0000ff7f00009c0d0000050000000500d5392de2bb01ef3f00de"], 0x79) futex_waitv(&(0x7f0000003880)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020) openat$cgroup_ro(r4, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000039c0)={r5, r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003a00)={0x3, 0x10, &(0x7f0000003ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000003b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003b80)={r6, 0x0, 0xcc0, 0x0, &(0x7f0000003c00)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x28, 0x5, 0x0) 961.972272ms ago: executing program 1 (id=513): r0 = socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) getsockopt$inet_int(r0, 0x0, 0x22, 0x0, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/keycreate\x00') bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x8, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x5c}, @ringbuf_query]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) socket(0x80000000000000a, 0x2, 0x0) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) (async) getsockopt$inet_int(r0, 0x0, 0x22, 0x0, &(0x7f0000000000)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/keycreate\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x8, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x5c}, @ringbuf_query]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) (async) 929.270236ms ago: executing program 1 (id=514): r0 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60040, 0x1) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file3\x00', &(0x7f00000000c0)={0x8040, 0x0, 0x30}, 0x18) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000018000000000006"], 0x0) 858.992993ms ago: executing program 3 (id=515): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'full'}, 0xfffffdef) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0xfffffff9, r0}, 0x38) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000005c00)={0x3, 0x1, &(0x7f0000000540)={&(0x7f00003f8000/0x3000)=nil, 0xffe}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x25, 0x55bf, &(0x7f00000005c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005b80)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000005bc0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000440)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) read(r3, &(0x7f0000000480)=""/153, 0x99) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 858.418563ms ago: executing program 1 (id=516): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xff, 0x5534, &(0x7f00000006c0)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfbVxo6Q+quu9VuoNj9AhddllxFY5Ar9ALcAa667a7CCLsSRSiECA2JiTfJ9nD2NbzA7GZmacBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE7pbzmf/P71ddA0zmrdzCHvKJomCQAAAK/UspxPqg+juj9M1z+kS59TP4uIPCIeGrsX8WYrZpHilDueL+/l8CeiirB5Rz8d7yLiWzquPp36VwAAAICXazGdjdOqenUanTshulRP2uTvv7cUL4uIcvSvpWj55vTloEfX++eHNv/vXvzccTc7LrVqYisal8zcqKbcem1F26+4raRJzeBOk9VN3l06AABAV7ZHAh2OQgAAAOjYj3MnwHlUq56pFj8V8PfrJi0Ivt3qAQAAABfo2KpnAAAA4DkaPnq3Gv9fwP5/H//b/w8AAACerN7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNalvPJYjobN42zWjfTzrcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAK4/j5XnGqzGTbfQ6k7x7Xkk+nRrfTo1f58Y/yVh3/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAxhMAaA+R8q7qT3P6yE6hlEmIFCSOjiAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKPP9fK9w6/hSPJv27C0HknWTg1bpzGHae+H8dgZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDJzv37xk3FAQD/3vl8pQVECChDEKISAyw0vZaWrgygiIE/ASlKryVw5UebgVYVKAsbytwFwYgQEihs/R86t1KXsnW4oUhMDCD77OT1KOKgin0kn4/0/L62HL/vc6IoXz/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgyfnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6iKRJw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000005c00)='./file1\x00', 0x1c1341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0x4004480d, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000005cc0)='./file1\x00', 0x42, 0x140) write$FUSE_WRITE(r3, &(0x7f0000005d00)={0x18}, 0xfffffdef) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000240)) 772.629872ms ago: executing program 0 (id=517): mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000009) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/64, 0x40, 0x1, &(0x7f0000000040)=""/87, 0x57}, &(0x7f0000000100)=0x40) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) fdatasync(r0) (async) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000180)) (async) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x18000, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000200), 0x1000000, &(0x7f0000000280)) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000340), &(0x7f0000000380)=0x14) (async) execveat(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={[&(0x7f0000000400)=':$\x9c$--%\x00', &(0x7f0000000440)='/proc/self\x00']}, &(0x7f0000000540)={[&(0x7f00000004c0)='/proc/thread-self\x00', &(0x7f0000000500)='/proc/self\x00']}, 0x1000) (async) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsmount(r4, 0x1, 0x80) (async) lremovexattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@known='com.apple.FinderInfo\x00') (async) getdents64(r4, &(0x7f0000000640)=""/203, 0xcb) (async) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/attr/exec\x00', 0x2, 0x0) vmsplice(r5, &(0x7f0000000a00)=[{&(0x7f0000000780)="b01e8f99e1f3a1c15725ce230bb4fb4365510fab4ebe3eb70bd45c80aa6e00ec35ab0dfa06baf73f01c4745a6ca925dc9d75e6719e95806a5f5ff732239e4a3f5d38a416b17dac3d18ed2c4364c04404ac4f4b874748265c57cc9d60c27844e9d891f629e0032f6aafd4212984b194fbb9923b954414c87b2730845f083a424c7f8eac4d83d0895579ea8fb442291530b091274e977504255e176648f69f1a33434d6bd671ae27d4a43f4ccc7515f5455ac098b12cfa3bd1cef35da8af3bf7a11bc76305a3f3ea8bf6aaff5be653824172efe79ff1cb6a6229c71a3788158cbc0c4fa208d30adc6b817f9084a8b892e4e6e2597a89df11dba69b", 0xfa}, {&(0x7f0000000880)="e0c97dabad8f35a746a1d2f326675abf81591dfbffb70632bc7a284629fa84ee5148d744ea577e4c4b9bb9bb15b4b60736bb91772f3ab1948035b09ee616d1dce054e25602f82955c92bc9dc6aea235fc30eb783999e28098fa4597e31b2e4fe1b92695e6e13edcaff07ea33cae0fc55a5f88cb82cb4ca6f60e7e19aca96456667555aa0285ff3189adcd7fed55358", 0x8f}, {&(0x7f0000000940)="aed52d0c032cd433307218b92ec93b903e2cf4ba62e4f10d3f597004a67386ecf8a052f74542e068f5d8be9504020a467514a68df74e0648cd728ec2f75b19da45bb9fc7d3b498d752663f2e5c87dffa481124dbb814b8473f5d3d985c05ebd8869e05109fb0dec973402f3f071f944a2f6a5e42bbefd7286062c0f80eb8ba2c09165bab69f6537a7165c9b505c691a4667921158dcec8a234e622009386c36d0a74", 0xa2}], 0x3, 0x5) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000a40)={0xc5, 0x0, r2}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000ac0)=0x1, 0x4) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r2) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x90, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2a}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3e7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000094}, 0x4000) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000cc0)={0x5db, {{0xa, 0x4e21, 0xffff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xa}}, 0x0, 0x4, [{{0xa, 0x4e24, 0x0, @private0, 0x8560}}, {{0xa, 0x4e23, 0x7, @remote, 0xfffffff9}}, {{0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8d}}, {{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}}]}, 0x290) (async) lgetxattr(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)=@random={'os2.', ':\x00'}, &(0x7f0000001000)=""/76, 0x4c) socket$netlink(0x10, 0x3, 0x7) r8 = accept4$nfc_llcp(r2, &(0x7f0000001080), &(0x7f0000001100)=0x60, 0x800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001140)={'macvtap0\x00'}) (async) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x1) 729.640966ms ago: executing program 0 (id=518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009d5e50d48500000015000000850000000800000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1f, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000007c0)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x4c, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x544c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x2}, @IFLA_IPTUN_PROTO={0x0, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) syz_usb_connect$midi(0x2, 0x65, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0xe, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x8, [], [{{0x9, 0x5, 0x9, 0xc, 0x10, 0xfb, 0x7, 0x6, {0x14, 0x25, 0x1, 0x10, "7f8585e53397bf5ba5ea0e98d618d940"}}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x6, 0xff, 0x6f, {0xc, 0x25, 0x1, 0x8, "87f66651a3c8eaad"}}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x6, 0x80, 0x8, {0x6, 0x25, 0x1, 0x2, "4584"}}}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x1f, 0x2, 0x40, 0x1}, 0x2e, &(0x7f00000008c0)={0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xbab3b7455b553d56, 0x3, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x634a04471b236a1c, 0x0, 0x2, 0x6, 0x6}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "452475d1f237da6e35a339298f5f856b"}]}, 0x9, [{0x57, &(0x7f00000000c0)=@string={0x57, 0x3, "94ade2f68bc3758f6cf89dcc866d108c96b9d507f3287f948f0031b7a14c369e2befbb9eb528b2eab74f88c7fe5a3f598d2054f9275cd1d12f0eb893e3231f348a0c395467c4fa6f289ccc10d315ad6a12fd28702e"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43e}}, {0x9e, &(0x7f00000001c0)=@string={0x9e, 0x3, "14f0efee1bece9399c05b49a8c3501a5c13eee2f1292aff11d2398fb360b3817d6fc7c6d13b9be8697e8e5bef78ce5ba791b5fdaa8eab81dedcb2fd8aa92ac27a1be0d2c92de018042fcc335c38b900dc69bdd6a2c194edda06e6daa40cc392e90c27de950d19ca58c75dfccc8b4c6d120ffa1ab66cd56c958b2a2cb32676230094dffdd1d684c6baaaa4cba22ceda836bab36867d8e1cf6286bb74f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x58, &(0x7f0000000300)=@string={0x58, 0x3, "99b1cb2fb71f1b3f62f0ce7635652ccc1f77675a320d7cb702d25bf350951c24c2e5dbe16b255b738b5c72a444925a8ef09229cabfc35405cad3d37b04d0a95c3f1f617414a8127b6f33ce2195601e6dfaad4cc84e69"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x426}}, {0xb4, &(0x7f00000003c0)=@string={0xb4, 0x3, "3c4ecabe412627c337dcc0fd7c854100eefb3eabf8fcab728c06ebee21dd1ddc1d2a8a8c5193ea394e7071ded056783dd36afd63674978953467c711bc2cc223c631d794a94cdb2aea9c55a8fb5f14a5008cab4538008e3bf0aceccb2ef9d2757b14dceae307717ae2b86240678406ed9d059c63d1ac4e6d2ee8da7af5fa9299cd2f8d2b0cd713069bafde9b6849ec74d62d265c6d0abd49e9ef9f245b6b5e8fc3edd21d98fb94ecce08111e9bee4df8cd8a"}}]}) 678.878751ms ago: executing program 4 (id=519): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r2, 0x200, 0x70bd29, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b7dd30e7ed96bfdd0ad19141388ce6ae"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40060d4}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080026d87000fe00ff01000020000180080003000200000014000200626f6e645f736c6176655f31000005000000000000000000080003000900000008000e00f3ffffff00"/78], 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x240480a0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00d82769b690000000", @ANYRES16=r1, @ANYBLOB="020028bd7000fedbdf2511000000200001800800030003000000140002006d616373656330000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40040) r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fchdir(0xffffffffffffffff) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000526) chdir(&(0x7f0000001180)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000840), 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000007c0)={0x2, &(0x7f0000000800)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x10, 0x1, 0x9, 0x1, {{0x14, 0x4, 0x0, 0x22, 0x50, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @local, {[@rr={0x7, 0x7, 0x28, [@broadcast]}, @timestamp={0x44, 0x14, 0xd0, 0x0, 0x7, [0xa32, 0x1, 0x0, 0x42]}, @timestamp_prespec={0x44, 0xc, 0x95, 0x3, 0x9, [{@private=0xa010101, 0xd6c}]}, @lsrr={0x83, 0x13, 0x25, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', r8, 0x2f, 0x3, 0x3, 0xcbf, 0x4e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, 0x8, 0x8, 0x101, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000600)={'syztnl2\x00', r9, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @private0, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x3) syz_read_part_table(0x5df, &(0x7f0000000c00)="$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") 128.046627ms ago: executing program 1 (id=520): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x403, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@netkit}, 0x1c) io_setup(0x3, &(0x7f0000000380)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000680)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000000900)=[&(0x7f0000000b80)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = syz_mount_image$fuse(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x10000, &(0x7f0000000e00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB="d75aaea965ac9472146c34c38d5438f68c035945fdc994c3cc6a343be8531457a1cbf0a76ee8da8d5594dbe3ac0b317b67f8a284deb33f8b6045edb95731c2693525f699dcea0a5267ce972836ce96a4b1e3ce9f6d970e97a97a7b78760709659ec8b89d1c9be7c50a7d8721", @ANYRESDEC=0xee01, @ANYBLOB="2c616c6c6f775f6f746865722c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313230302c616c6c6f775f6f746865722c6673636f6e746578743d73797361646d5f752c6673757569643d57383138663265632d363103312d373637382d003235372d36636237363131362c6c617a7974696d652c6465"], 0x0, 0x0, &(0x7f0000001980)="4683bfc76b0482ff169941a532e6af6074b057f4d982479b27e624dd08d13bea34ad4fda61126359ee2475323ff3c4b6cb8b90265b6d02a08dcc9ca0fbab7035a39eb3e75f1c0add1d8ade0c1c84aec360c4398f15bbadf9e600f63eae500bc84e8523ff70fd06aa78011717212121250c6ff1d3afce81d13a11128d19ee273fd2738fb4ecd31f4ab03c62eae39910666ac17ca41ec3dd2a0c0c86b2ad7d1d835a48d882d383a73200459658ce941c4a4bdbc58379cf73d5983255d444822fb1a49987ed1a53eee4cbaa155a2c6766888d9df75314c1e2014bc2f83fcc38429f5a8e9664ffce26d5895bb93aab11b22c68fd6c6011fae96212e62c4d835f7f3b8bc6ce72cfbc87c32d1a14f01b0716b7eb97b681b19245b2601ef7d5ae51c60c8e986ef8e647f9ea06126e73d217864da1cfb06f936e0aab9a2fb40c2692e71f62a61b3f5154781fa73bdd9dd82ac597254b0b1a3f88591ea7877bd4d0fc397785d5bd1a617809eb7c42a34ef94e4bbc94bc56f8ead78f3758cfb9e19b1720d49b05b9ed58d378b821b37baba3f974e4d1ad44f10721888daf18a4b28701b2ba414e1f999f4f66487c6816287140124a78b56396a9c2cf1dbcb8c340194d550c5752a46dffbaba8cd738769c89533b2ce2ddcc8099074ff9e818020d1db00c6459e8e8c71ca4ea6b934cc2a706400a70248cad7c0e838a87ac60d62f65fae983bd884939bea9da792d0e597c62855286951d78c53270d86170c37f8b97723f733353e36d09d041b705ef610efbc7a75be3d045b125dc593b0553bd4c9b6ebdb4a589df8cd44a52a78f1c01e5b0471c66d389ae59214dab5b670a22d79ce7020c1be513771fc1876fb8e92dadbb7f5dad28ddc9979da91430d2a120ac2034387f69e397b80b4d307e5cce02f9d560ceec5f2c2c155a5a730684be547757132e18828494a30d11fea5178d25c03736c4137f7add35544d494c4872a7c5797d0861d09cb5d393b06c481ed4d0e4613a72617b4925533c808cf49eeac6908ab0930d9f7192b853b95100364a03e5a72d177626d68c078bf9cef77819fe6f2524c365b9fd0f8000b5b58acc43b8a5c38244345e820bc308327f72ac83e29eff9137f61f1c0b92192054a30b861eabf3fefbcc102aa7f72febd28c79fe2e2e473e6601ea7935457f4bb2e397bf8d685d4e9a25b211eaf186beac658dbb6985453083a72da2fb7e15a811d8757bfa3ddfb39feea3d266c50a6574e78eafbfdbff818beb4596d6b0de96931b424014f2c3a682da4f1a532b2615f8cbae10db298bbd7f31927a6b7d6ad27a1a41625c2ca11dab54648e9fd32b672fa62d9262f6bc70ad4ae83c953eae5d38c68febc1a013c43a9c1d26959faa23e8c517d8b66bfc820e0e6635377e26b439aea819956989ff9564bbe36399dadb460019dafd8ae659e759c446702c56f2414a608e4170af376f3c1b1d93b942cfd372438f83d2f3188e9c8702f00a7dc3be57ab221f6cf13bbd19d4eb9ca49a691a3dbc0e943b5cff6354b5f9f2c39b1a5665d83ba5356f51af8b8e98f643c809d25e436eeef26346d158adfc4ba99b6137da74e638cc0b97b619c5a5672eeeed09819cf40792b01e26d34186406f954b1c79d6f0bebaa2a7dd6ebc8a48fb8c37d2986eff8db061805b27642ea7277579bc88e7aff68b71a82353ba41d48ccb152de1246339f814a429c6397806be95b3d6e7905a401d751a1dd627b2d332e7c38e0b67b097e1d54c43a380b5dea0ecdba244931ad18bcbca6e6e3a924a91d89ababe6dfc91ed7db81817e84f8771aad8815e8e3e9a34c1ab6c66d3a17cc479a03f8abd0753baedb8983fd9d0f02769af17f2461373e50d667a0ae6ad562c8b0ab75d4172b3aa1c84495d8b66a4ef5deb695088bff33b6874758a2b41007ebc6a11ce7fd7abca5932b668889e18f6f97d949ea1fc13b275a87b30dbb9bf54db1bd3e35e5684385d428ed635d138814e43911508ba9ffa91abeb37fde97e6f5a67d89677051e06f909a9c8e8f1d0c7463f1b6958fc68eafefba60d394e202ee522df4a4351353bbbf54f51f5b6bfea35dceea25c1fa118abb392cc999f3d10240a9b65974f35409f0106626dfd62b1c87bded04b7ca35b88582692bed4e005b5e5a650556e445d484bfb01e8a510b56453b4fb20c929320a280c7ca68822b3d8da7faef1f13557a46ff555a268e02a22b266ce767ea8677f2755b6666e6f9b4b51742fcafd7f70671c74e1401d2b7de1c5b85f76d6dc3daab1e90441eeff7ecba4ec822b854ad99550cd3ad19b6d5770feb4715dc1475a02c86fd1851b585bc5cdf0d72d25cf07cb03450232cbc43d179a727f067ec376741b5c62c1d175d2ea68814d249cf5fcfaf500a031f0ac1989b1cdb1d21d3a8d57a8943760de3598d1189e5fd746efcb31d054530a85f7bc8f1dfd53307c1d40d3720e15f75de4aed73e5e8a9764b25137d286d453d90fd35b41847255560ad8e77c6fc2edb5f8efe99a144dd0d92c04dce4808bc166fc557f726d8e004bfab5056c9eb642bc31dcca9234d85f5ac13dd733ef46f4ac47b867aec20f09310faa71c1451d07769ac8edb0bdce7f0d607db3c2cbd56b450f5c76ed9608499c884b3bd58aae748baf04179c83265c08c359f5c2c9d253c85faa564d027bc1c5b90b8502b6a1dc4d60e7f7b0897179b17c35139b0748a17642c10addbf37eba10adc6d450e2baf89f85047cff7b3f1b929e0fbbd79e7c865c1d3be53b8090d17d75e706f7f2ce2316e69839b804c887de793c00e111dd678d52f1665b7405cebf96473ad002f0dc9dad3d762015baab5b47a83624843e62fde32f169546645375e43fd230984bdd1496a3a34d7fc77745c03e1904458b4bd7c3f2e05036c4a38c32b0082f2bad9e294e2775ebcb0df3686b6aa55be946c01a766b9b93491f701726df1690088e532bd6bc202145a5e3f71aeab7824b21b69286343cc81094a2369e8d6da558aaa4c4ac5411d3eeb768efad19637d7725484401457cb97a3ef853bce81023f705a767c3785d5fcf36df61d5e7a7b57590abd77829a5e7ffff02119fb5d68526eb710118e137f0c8a346a1271f8e1264e49db06d915002f6e8acdf6d392e4c1bad6c8e48d78aad6e38e57f16dae3eaa50c75089df68380dde0ed0d8ea5c2fdf96382ed49bfc063de4652bf2c467b9b033fad106f16d49e207d96d2b2896dfc40a155c02c99a72b679033a335839fec33a746aebd31c08e5aa19b201b4ac76c8a436ea564d57cd64dab23904f5fb54d6fc3fd09e23ff74b2ed2dfc775928b96bb5f150b07ea51843cbf5a953aa3f783e5461f50518ac477569b16917592b1b3a1267135812fd571a51e3772745cc566517f0a6a1c937aeac3e367143003e35ed192f85610ba68ca4f7fdb1c212017048341da12fe3e647e505257ca08f1fbf995ecfa5856533582dfe0c509fccbe293ebeb3c66d887ba9875627bdb54d4782909bd9f9df1d7598268b764e26ec965cb6158336723bda7b2697a94862766f65df869e2737818ff1a9868f8a06eb856378810d7bf0df78bc3e288670075f0a76e460bcf2214ec165fdd3c1024d26e610c78d70d730c01d537cc490da99a4c8b82aa66ce3d36e6e9c546d270146c2c2bd939f1d0c196cb20e0ec1c6ac9d78a3fb84e3c51aa4768600d05ca2e277fabc71fd51e5d083a2e8fa7e890354ed51cd49fcfb25aa5f404c8443edde0d6df9e97073efd0e353871700c4648aa6a228c7be103ffa84881928f45f8b75bc27ee56fcc9591bd6ec1ac4db1d9bf9701eb47c02f82e66da0cf2e6fba24444972b4c074472b4c7f708c932b5627721753875a714b3e80afe8baea5ba94fee4218f4c841ef5e420190d36e90d3b1611b11ca7eed5cc118c006df711d66f938dc6a6ddf2c6bee94316aad2e00ff09aa8a8856353d7d230921e09035e8446739299e1004131c42e3bc3cc364ef1d487a1b8d6df0ba8cb9d555464a86bf3370a1b814748e27209f1f6f6c33ba77b7b633effeba2f2a154cccdf1a71673f0f373ecb8700531532f7eb4cb0c11c06808a9cace0a0ed9807c13aee79a1e149f7382c436ac264f91837166107d7c48322e5c9fdfc11970b115aad92631aa557bdb769e8f9c9e7d9dba501098a7878ddae28c88ec164fa8c1b1bbaacb55913208a713454c1a5e2cba565a236cf3b9395b6453ad5cf057684156d9c8200905214c0745ef49bb05cb0d2ba48eabc7c35c51f9cb6f2821ce817138256a8124b3c28d0539c7d3c41d18370aeab2bce3543ff6dc94102e55c69d8b248e8ec97bde2a0d0efdea4775448c919585f6ffa685ade5db6e3048e62982d1cc9e271ae041ce757c4ad5c8a56c3bc2be4ed3c8903e23928ae1527ef8b7adc2f9a8192e77532c51020bed44ea71066b226148bed020d2b2187ae3f4187a7c16b3eb71d619cd77bd3ccaac18f5f11ea10eeceadea8b7719163035c5ddb75df7937f055397fec189d9f555ee5a284d6035032b7f292e4b9633ca1233b083f9a0181806ab40f2e885d36846effe6d2c1a513968c2d6d3e8cb191aa67339de8a729b67b0483ac403e7c4942611a56d9c7dc3127bd1ba82106e5b192ec927282c4dc4c252916c4efb7bbdd6e87961678ca4bcb53fc569ce98ee029fea9e5884020106571c5bfaeca4fe13a212c3c7b5c0a0f3fec869793ae938d85307223bd1d584079a08382ad4c3f42e4bf8fc0956b4878b6ecb83551ca4e0a8b8efcf270934208d34a4f41c0a115922618a7f95beb7d6bac3dbec30157621cebaab473a83e48d89bb47f52c22fa41925ab13c5f459ab4044eeae3d0c68be4b45dd8282f80099e93e64414e8713aaa99b7e85a4a5bee8e96b2ee6187426689300de554a8894252ad01e245e0906d4add7295a93413992c980354c76c5cf9691070153790ec0533db8c17e264b82ddff3355e1145aec792b9a1c8c82fff4726cd9e8222334c68bdc860a4deec5fe9de25c4f218830ef207f2c5cbed19e52ca9947655a9ee6be397c07751f52e8cef135f46e4ac443b4fb766a88ddb979e725b435e77d1c93e39e61e9070d8f9cb4fa9ad274792d28882a83e4084b4b45099d380d53e7b18e16dd809d206ddde9135753445261c11088ca4cf3860632950097f1273646fdbff977a2f93b0739a12b657019d5f129b735d0de5d92b426d76f15808755f3faef772b77df6c098f7edbde3b961ba627ef33c35738112cd18daaa6358aeefc7e5b5280e191855d5d6ca1776a9eed2340bb8eff488b18dcf57edbb8ec28bb1d720ebd5046b4f10c66443c8dd25bb419486a2c61612aa2a026debd13400390b2bc893966b11bf0550c6f189112c237cec5a70bcadb0f3dfde0d27f61d9837f8b2ac8caf0a1ff9610cdff27b0011eb6654171a8644c1393a38c90748082df5ca2e8acebddb1f26f0c89f9b7646ff79602d4f65abfcf88a722b6b1a39aac2dbe06ecb0ec6576a90d1f103bfdc57ba795eafe295962a8d49a7609c678f48052ed38ea01309930bdb846b5fce5e2d1125472c25ac908b68f7fd29ae735b9eaa08cf8ae471076497ee114617217b1f93f1716886537f0e26497a25a59cde66ac9920d16bb323c96a28753ed72a23dcc4d32e75869d9be2d1f4f485eb5cfbe62145361cc7e04669bfd0b6a9f2523f5dd973b8012ccb9fe9534632f18ce0287d2b0dd3611490315a0c66cf1273a8866afbe8935587a7123d2e00109ca33d7ac92f017815659cd359af9349c06e6a72d3803dd13cd635b9371d74b") write$tcp_mem(0xffffffffffffffff, &(0x7f0000002a80)={0xfff, 0x20, 0x0, 0x20, 0x8000000000010001}, 0x48) io_submit(r5, 0x6, &(0x7f0000003d40)=[&(0x7f0000000c00)={0x0, 0x0, 0x0, 0x3, 0x4, r4, &(0x7f0000000bc0)="60085d93081fdf5d2d24bea1f16d76a26beb874ff40eb411b79b031fb90cf74840408f96f352f35aacda90ae2bf80a1d", 0x30, 0xfff, 0x0, 0x0, r2}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x758966c8a06ae6ab, 0x4, r7, &(0x7f0000002980)="b8b702722f7302c5e51d0e92baee0f6d74b4d7c070fcd5261678ce7ff20b7e6b233d581ab9379a813746dad696e8b44e85f6fc4e4737dbd16b91d367debe6305970de00133d0bd62d6691ef3ec5ed8b7ade8ef9cb27c9efca604b89b71bf9c229a17b9907105a5f92bf2be9c0f6f4fe2d08b5e1aba213771935b52ca2c5a6b1050bf4d27c9a49f42b88e02d1758b6eb1212abc2b54", 0x95, 0x9, 0x0, 0x4}, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000002b40)="21cb72713b567f7f8eb45c8d54236dae7d212838f42a7873afb7472c52f6e1362ceb20ce07fc00de7a84250c8d6e9c8f85af4df51d4cbd8e55735dee90ce70cb1ad79102fe297b90bbd75830d66d23c93cd97dec73a4259053d3d10accb18518d46157dbb871bf2bbb85fc52822760568cf14884c6d25d9cd5e63921", 0x7c, 0x5, 0x0, 0x2, r2}, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f0000002c00)="a29e0ea24714bdaad9ef7c0591056e0aecaa6d", 0x13, 0x8, 0x0, 0x2, r2}, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0xd, 0x40, 0xffffffffffffffff, &(0x7f0000002c80)="b6c1a972fec6c77e5b621fe7e4c21c619203ceb107cdac9024b57fc001dcffe945df1e2a4e8e0817e008", 0x2a, 0x8, 0x0, 0x1, r2}, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x3, 0x9ea, 0xffffffffffffffff, &(0x7f0000002d00)="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", 0x1000, 0x5, 0x0, 0x4}]) socket(0x840000000002, 0x3, 0xfd) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000500)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r8, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740), 0x4) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000001840)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x218, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r9}, [@crypt={0x0, 0x10, 0x0, 0xe0, 'crypt\x00', {'aes-cbc-null', 0x20, @hex64=[0x38, 0x63, 0x19, 0x2, 0x61, 0x61, 0x35, 0x63, 0x33, 0x36, 0x38, 0x34, 0x37, 0x6, 0x32, 0x64, 0x34, 0x39, 0x61, 0x77, 0x33, 0x33, 0x35, 0x35, 0x55, 0x32, 0x50, 0x4, 0x39, 0x30, 0x33, 0x66, 0x33, 0x30, 0x34, 0x61, 0x31, 0x31, 0x61, 0x66, 0x30, 0x2, 0x36, 0x61, 0x38, 0x37, 0x33, 0x66, 0x61, 0x71c6c0f18da0319d, 0x62, 0x62, 0x36, 0x62, 0x34, 0x30, 0x62, 0x33, 0x65, 0x32, 0x64, 0x63, 0x69, 0x37, 0x65, 0x50, 0x32, 0x32, 0x32, 0x64, 0x61, 0xcfbe373b0a80ea7e, 0x30, 0x33, 0x30, 0x61, 0x61, 0x34, 0x62, 0x34, 0x37, 0x30, 0x37, 0x34, 0x50, 0x66, 0x63, 0x65, 0x37, 0x37, 0x66, 0x39, 0x62, 0x31, 0x38, 0x33, 0x64, 0x36, 0x39, 0x39, 0x37, 0x66, 0x65, 0x30, 0x30, 0x63, 0x61, 0x32, 0x31, 0x38, 0x33, 0x37, 0x62, 0x31, 0x31, 0x65, 0x61, 0x34, 0x65, 0x66, 0x38, 0x38, 0x65, 0x34, 0x61, 0x31, 0x38, 0x39], 0x20, '128', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1'}, ' 1 sector_size:4096'}}]}) 47.630456ms ago: executing program 3 (id=521): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.force_empty\x00', 0x505542, 0x46) write(r0, &(0x7f0000000080)='0', 0x1) listen(r0, 0x8) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close(0x3) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) openat2(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.force_empty\x00', &(0x7f0000000180)={0x262001, 0x75, 0xc}, 0x18) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000002c0)) 1.44225ms ago: executing program 3 (id=522): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x3a, 0x10, &(0x7f0000000880), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000011c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0xd, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file1\x00', 0x10, &(0x7f0000000980), 0x0, 0x47c, &(0x7f0000000ac0)="$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") ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000f40)={0x200, 0x1, 0x2033, 0x8004, 0x8000007}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000f80)={0xa, 0xb1, 0x3, 0x5, 0x10001}) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x204408, &(0x7f00000013c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r2, @ANYRESOCT=r4], 0x1, 0x39a, &(0x7f00000000c0)="$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") ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000008c0)) r6 = fsopen(&(0x7f0000001080)='ramfs\x00', 0x0) r7 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000001400)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000001440)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000001480), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1a0000000000000000000000ffffffff05220000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x1, 0x0) fchdir(r9) r10 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='.\x00', 0x0, 0x0) fchown(r10, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000001100)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0xc408, 0x103) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0xe, 0x0, &(0x7f0000000a80)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) dup2(r0, r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) kernel console output (not intermixed with test programs): =system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.079164][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.108136][ T28] audit: type=1400 audit(1792925150.885:131): avc: denied { add_name } for pid=391 comm="syz.1.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.175528][ T287] EXT4-fs (loop3): unmounting filesystem. [ 36.281973][ T409] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.17: bg 0: bad block bitmap checksum [ 36.317208][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 36.349779][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.526630][ T28] audit: type=1400 audit(1792925150.895:132): avc: denied { create } for pid=391 comm="syz.1.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.075917][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 37.768482][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.805254][ T286] EXT4-fs (loop1): unmounting filesystem. [ 37.812824][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 37.827869][ T415] loop3: detected capacity change from 0 to 256 [ 37.846118][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 37.854177][ T24] usb 5-1: Product: syz [ 37.879366][ T415] FAT-fs (loop3): Directory bread(block 64) failed [ 37.896175][ T28] audit: type=1400 audit(1792925150.895:133): avc: denied { read append } for pid=391 comm="syz.1.17" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.918828][ T415] FAT-fs (loop3): Directory bread(block 65) failed [ 37.925402][ T415] FAT-fs (loop3): Directory bread(block 66) failed [ 37.932784][ T24] usb 5-1: Manufacturer: syz [ 37.948764][ T24] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 37.975131][ T415] FAT-fs (loop3): Directory bread(block 67) failed [ 37.990781][ T417] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 38.015607][ T24] usb 5-1: USB disconnect, device number 2 [ 38.021499][ T28] audit: type=1400 audit(1792925150.895:134): avc: denied { open } for pid=391 comm="syz.1.17" path="/3/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.040634][ T415] FAT-fs (loop3): Directory bread(block 68) failed [ 38.050681][ T415] FAT-fs (loop3): Directory bread(block 69) failed [ 38.057328][ T415] FAT-fs (loop3): Directory bread(block 70) failed [ 38.063950][ T415] FAT-fs (loop3): Directory bread(block 71) failed [ 38.070823][ T415] FAT-fs (loop3): Directory bread(block 72) failed [ 38.077411][ T415] FAT-fs (loop3): Directory bread(block 73) failed [ 38.118657][ T419] capability: warning: `syz.1.23' uses deprecated v2 capabilities in a way that may be insecure [ 38.139397][ T28] audit: type=1326 audit(1792925151.325:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.17" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2313b9f559 code=0x0 [ 38.445777][ T426] loop0: detected capacity change from 0 to 512 [ 38.456497][ T426] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.625174][ T426] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #11: block 4559633: comm syz.0.25: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 38.640774][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.650239][ T426] EXT4-fs (loop0): 1 orphan inode deleted [ 38.656059][ T426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.947567][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.012664][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 39.265263][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.308407][ T24] usb 4-1: Product: syz [ 39.313582][ T288] EXT4-fs (loop0): unmounting filesystem. [ 39.325633][ T24] usb 4-1: Manufacturer: syz [ 39.340387][ T24] usb 4-1: SerialNumber: syz [ 39.349950][ T24] ftdi_sio 4-1:1.0: FTDI USB Serial Device converter detected [ 39.375988][ T24] usb 4-1: Detected FT2232C/D [ 39.386881][ T417] loop4: detected capacity change from 0 to 40427 [ 39.415528][ T417] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 39.435294][ T417] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 39.454030][ T417] F2FS-fs (loop4): Encrypt feature is off [ 39.515527][ T431] ptp ptp0: new virtual clock ptp1 [ 39.523648][ T431] ptp ptp0: guarantee physical clock free running [ 39.551276][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 39.562055][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 39.578414][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 39.602821][ T24] usb 4-1: USB disconnect, device number 2 [ 39.614500][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 39.630382][ T24] ftdi_sio 4-1:1.0: device disconnected [ 39.884617][ T448] loop4: detected capacity change from 0 to 512 [ 39.900680][ T448] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.31: inode has both inline data and extents flags [ 39.919696][ T448] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.31: couldn't read orphan inode 15 (err -117) [ 39.932127][ T448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.032861][ T451] loop1: detected capacity change from 0 to 16 [ 40.059071][ T451] erofs: (device loop1): mounted with root inode @ nid 36. [ 40.075024][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 40.075098][ T28] audit: type=1400 audit(1792925155.285:168): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.116109][ T28] audit: type=1400 audit(1792925155.325:169): avc: denied { map } for pid=450 comm="syz.1.32" path="/5/file0/file2" dev="loop1" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.199490][ T28] audit: type=1400 audit(1792925155.405:170): avc: denied { listen } for pid=450 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.219025][ T28] audit: type=1400 audit(1792925155.405:171): avc: denied { read } for pid=450 comm="syz.1.32" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.243071][ T28] audit: type=1400 audit(1792925155.405:172): avc: denied { open } for pid=450 comm="syz.1.32" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.281856][ T28] audit: type=1400 audit(1792925155.415:173): avc: denied { ioctl } for pid=450 comm="syz.1.32" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.310331][ T291] EXT4-fs (loop4): unmounting filesystem. [ 40.331157][ T28] audit: type=1400 audit(1792925155.545:174): avc: denied { write } for pid=457 comm="syz.4.34" name="sockstat" dev="proc" ino=4026532611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 40.430294][ T459] loop3: detected capacity change from 0 to 512 [ 40.441157][ T459] EXT4-fs (loop3): Test dummy encryption mode enabled [ 40.632542][ T459] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #11: block 4559633: comm syz.3.33: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 40.649527][ T459] EXT4-fs (loop3): 1 orphan inode deleted [ 40.655333][ T459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.802465][ T462] loop1: detected capacity change from 0 to 2048 [ 40.901809][ T321] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.187756][ T287] EXT4-fs (loop3): unmounting filesystem. [ 41.432447][ T28] audit: type=1400 audit(1792925156.645:175): avc: denied { read write } for pid=467 comm="syz.2.37" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.470550][ T28] audit: type=1400 audit(1792925156.645:176): avc: denied { open } for pid=467 comm="syz.2.37" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.500329][ T28] audit: type=1400 audit(1792925156.715:177): avc: denied { ioctl } for pid=464 comm="syz.3.36" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17431 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.526817][ T469] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 41.553145][ T469] capability: warning: `syz.2.37' uses 32-bit capabilities (legacy support in use) [ 41.787675][ T458] loop4: detected capacity change from 0 to 131072 [ 41.797656][ T458] F2FS-fs (loop4): Test dummy encryption mode enabled [ 41.805234][ T458] F2FS-fs (loop4): invalid crc value [ 41.812211][ T458] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.058388][ T458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.134312][ T484] loop3: detected capacity change from 0 to 512 [ 42.144824][ T458] fscrypt: AES-256-XTS using blk-crypto-fallback [ 42.189853][ T484] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.41: inode has both inline data and extents flags [ 42.203155][ T484] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.41: couldn't read orphan inode 15 (err -117) [ 42.215317][ T484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.365404][ T493] loop1: detected capacity change from 0 to 512 [ 42.426158][ T493] EXT4-fs (loop1): Test dummy encryption mode enabled [ 42.533091][ T493] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #11: block 4559633: comm syz.1.40: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 42.550668][ T493] EXT4-fs (loop1): 1 orphan inode deleted [ 42.556533][ T493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.189700][ T286] EXT4-fs (loop1): unmounting filesystem. [ 43.216884][ T506] mmap: syz.1.46 (506) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.364559][ T287] EXT4-fs (loop3): unmounting filesystem. [ 45.404558][ T513] loop3: detected capacity change from 0 to 256 [ 45.542974][ T513] FAT-fs (loop3): Unrecognized mount option "shotname=winnt" or missing value [ 47.414973][ T539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 49.614124][ T563] xt_TPROXY: Can be used only with -p tcp or -p udp [ 50.044703][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 50.044722][ T28] audit: type=1400 audit(1792925164.135:190): avc: denied { write } for pid=552 comm="syz.0.58" name="001" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.083452][ T28] audit: type=1400 audit(1792925165.295:191): avc: denied { read append } for pid=564 comm="syz.2.60" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 50.092186][ T565] fuse: Bad value for 'fd' [ 50.274570][ T28] audit: type=1400 audit(1792925165.295:192): avc: denied { ioctl open } for pid=564 comm="syz.2.60" path="/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 50.310257][ T28] audit: type=1400 audit(1792925165.295:193): avc: denied { write } for pid=564 comm="syz.2.60" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 50.333461][ T28] audit: type=1400 audit(1792925165.475:194): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.434080][ T565] device-mapper: table: 252:0: crypt: Error decoding and setting key (-EINVAL) [ 50.443336][ T565] device-mapper: ioctl: error adding target to table [ 52.070658][ T586] loop2: detected capacity change from 0 to 512 [ 52.406893][ T586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.495641][ T28] audit: type=1400 audit(1792925167.655:195): avc: denied { unlink } for pid=555 comm="syz.1.59" name="#9" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 53.342976][ T28] audit: type=1400 audit(1792925167.705:196): avc: denied { mmap_zero } for pid=585 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 53.825353][ T598] loop3: detected capacity change from 0 to 4096 [ 53.888188][ T598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.898991][ T602] ======================================================= [ 53.898991][ T602] WARNING: The mand mount option has been deprecated and [ 53.898991][ T602] and is ignored by this kernel. Remove the mand [ 53.898991][ T602] option from the mount to silence this warning. [ 53.898991][ T602] ======================================================= [ 53.946632][ T289] EXT4-fs (loop2): unmounting filesystem. [ 53.997565][ T28] audit: type=1400 audit(1792925169.215:197): avc: denied { write } for pid=593 comm="syz.3.68" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.090776][ T608] xt_TPROXY: Can be used only with -p tcp or -p udp [ 54.142054][ T287] EXT4-fs (loop3): unmounting filesystem. [ 54.169831][ T602] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 54.597210][ T617] xt_TPROXY: Can be used only with -p tcp or -p udp [ 55.049736][ T621] loop2: detected capacity change from 0 to 40427 [ 55.056283][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 55.066447][ T621] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 55.075474][ T621] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 55.084534][ T621] F2FS-fs (loop2): invalid crc value [ 55.100816][ T621] F2FS-fs (loop2): Found nat_bits in checkpoint [ 55.142083][ T621] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 55.149290][ T621] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 55.180456][ T28] audit: type=1400 audit(1792925170.390:198): avc: denied { getopt } for pid=620 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.200216][ T597] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.231206][ T621] netlink: 532 bytes leftover after parsing attributes in process `syz.2.75'. [ 55.249230][ T289] syz-executor: attempt to access beyond end of device [ 55.249230][ T289] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.274008][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.293677][ T19] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 55.304382][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.313686][ T19] usb 4-1: config 0 descriptor?? [ 55.370997][ T626] overlayfs: failed to clone upperpath [ 55.380159][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.390888][ T597] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 55.406056][ T597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.424272][ T597] usb 1-1: Product: syz [ 55.429100][ T597] usb 1-1: Manufacturer: syz [ 55.433729][ T597] usb 1-1: SerialNumber: syz [ 55.974550][ T629] loop1: detected capacity change from 0 to 40427 [ 55.987748][ T629] F2FS-fs (loop1): invalid crc value [ 56.074782][ T629] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.171611][ T629] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.866916][ T19] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 56.892379][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input6 [ 57.015845][ T28] audit: type=1400 audit(1792925172.230:199): avc: denied { create } for pid=633 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.037884][ T637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.76'. [ 57.047019][ T597] (unnamed net_device) (uninitialized): Assigned a random MAC address: 22:a9:b8:39:34:b1 [ 57.058101][ T19] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 57.074029][ T597] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 57.097493][ T28] audit: type=1400 audit(1792925172.250:200): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=653 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.130409][ T28] audit: type=1400 audit(1792925172.250:201): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=653 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.221777][ T28] audit: type=1400 audit(1792925172.250:202): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=653 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.294435][ T19] usb 4-1: USB disconnect, device number 3 [ 57.311023][ T648] loop2: detected capacity change from 0 to 512 [ 57.322090][ T28] audit: type=1400 audit(1792925172.390:203): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.371788][ T28] audit: type=1400 audit(1792925172.390:204): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.399744][ T28] audit: type=1400 audit(1792925172.390:205): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=1019 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.421837][ T28] audit: type=1400 audit(1792925172.390:206): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1019 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.451770][ T28] audit: type=1400 audit(1792925172.390:207): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1019 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.486285][ T648] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 57.494619][ T648] EXT4-fs (loop2): invalid journal inode [ 57.524071][ T648] EXT4-fs (loop2): can't get journal size [ 57.532495][ T648] EXT4-fs (loop2): 1 truncate cleaned up [ 57.539658][ T648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.572620][ T289] EXT4-fs (loop2): unmounting filesystem. [ 57.608356][ T675] x_tables: duplicate underflow at hook 4 [ 57.708662][ T686] binder_alloc: binder_alloc_mmap_handler: 685 7f93a3169000-7f93a317f000 already mapped failed -16 [ 57.754466][ T702] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34 sclass=netlink_audit_socket pid=702 comm=syz.4.87 [ 57.823329][ C1] usb 1-1: eth1: intr status -71 [ 57.825974][ T316] usb 1-1: USB disconnect, device number 2 [ 57.839820][ T141] usb 1-1: device reset failed [ 57.855971][ T699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.87'. [ 57.910726][ T709] loop2: detected capacity change from 0 to 512 [ 57.936656][ T709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.022778][ T709] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.190161][ T709] xt_hashlimit: size too large, truncated to 1048576 [ 58.815645][ T597] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.828219][ T739] loop1: detected capacity change from 0 to 256 [ 58.855391][ T745] fuse: Bad value for 'fd' [ 59.055612][ T597] usb 3-1: Using ep0 maxpacket: 16 [ 59.068772][ T597] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 59.085152][ T597] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 59.206001][ T597] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 59.332332][ T597] usb 3-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 59.472587][ T597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.548740][ T597] usb 3-1: Product: syz [ 59.588050][ T597] usb 3-1: Manufacturer: syz [ 59.665244][ T597] usb 3-1: SerialNumber: syz [ 59.770217][ T597] r8152-cfgselector 3-1: config 0 descriptor?? [ 60.075083][ T729] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.90: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 61.213644][ T597] r8152-cfgselector 3-1: Unknown version 0x0000 [ 61.221761][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 61.221775][ T28] audit: type=1400 audit(1792925176.430:239): avc: denied { map } for pid=770 comm="syz.4.102" path="socket:[18105]" dev="sockfs" ino=18105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 61.325382][ T597] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 61.409879][ T776] process 'syz.3.101' launched '/dev/fd/-1' with NULL argv: empty string added [ 61.441011][ T776] loop3: detected capacity change from 0 to 128 [ 61.525983][ T28] audit: type=1400 audit(1792925176.730:240): avc: denied { mount } for pid=778 comm="syz.4.104" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 61.550429][ T779] ./dev/sda1: Can't open blockdev [ 61.726881][ T289] EXT4-fs (loop2): unmounting filesystem. [ 61.832084][ T28] audit: type=1400 audit(1792925177.040:241): avc: denied { ioctl } for pid=782 comm="syz.1.106" path="socket:[16868]" dev="sockfs" ino=16868 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.862911][ T785] loop1: detected capacity change from 0 to 128 [ 61.878890][ T28] audit: type=1400 audit(1792925177.090:242): avc: denied { name_bind } for pid=784 comm="syz.1.107" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.918244][ T786] loop1: detected capacity change from 0 to 8192 [ 61.970388][ T789] loop3: detected capacity change from 0 to 512 [ 61.985246][ T789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.997407][ T789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.006569][ T789] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.054493][ T597] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 63.546086][ T597] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 63.562557][ T806] loop1: detected capacity change from 0 to 128 [ 63.577656][ T597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.617898][ T597] usb 3-1: Product: syz [ 63.643933][ T597] usb 3-1: Manufacturer: syz [ 63.661498][ T597] usb 3-1: SerialNumber: syz [ 63.681551][ T806] syz.1.113: attempt to access beyond end of device [ 63.681551][ T806] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 63.739013][ T809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.784159][ T806] syz.1.113: attempt to access beyond end of device [ 63.784159][ T806] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 63.825852][ T806] syz.1.113: attempt to access beyond end of device [ 63.825852][ T806] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.866206][ T806] syz.1.113: attempt to access beyond end of device [ 63.866206][ T806] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.910658][ T287] EXT4-fs (loop3): unmounting filesystem. [ 63.960579][ T28] audit: type=1400 audit(1792925179.170:243): avc: denied { create } for pid=813 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.004119][ T823] loop1: detected capacity change from 0 to 2048 [ 64.096959][ T28] audit: type=1400 audit(1792925179.310:244): avc: denied { watch } for pid=819 comm="syz.3.116" path="/20/file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.193259][ T28] audit: type=1400 audit(1792925179.400:245): avc: denied { connect } for pid=822 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.233829][ T28] audit: type=1400 audit(1792925179.430:246): avc: denied { getopt } for pid=830 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.273456][ T28] audit: type=1400 audit(1792925179.470:247): avc: denied { write } for pid=833 comm="syz.3.120" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.292316][ T840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.303998][ T840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.320150][ T597] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:8f:43:b7:8b:fa [ 64.359920][ T597] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 64.535612][ T6] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 64.545355][ T856] loop1: detected capacity change from 0 to 512 [ 64.578839][ T856] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.123: inode has both inline data and extents flags [ 64.610580][ T856] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.123: couldn't read orphan inode 15 (err -117) [ 64.642058][ T856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.685609][ T6] usb 4-1: device descriptor read/64, error -71 [ 64.896518][ T286] EXT4-fs (loop1): unmounting filesystem. [ 64.955642][ T6] usb 4-1: device descriptor read/64, error -71 [ 64.983004][ C0] usb 3-1: eth1: intr status -71 [ 64.986827][ T766] usb 3-1: USB disconnect, device number 3 [ 65.008946][ T141] usb 3-1: device reset failed [ 65.114801][ T874] loop1: detected capacity change from 0 to 512 [ 65.126762][ T874] EXT4-fs (loop1): Test dummy encryption mode enabled [ 65.253690][ T874] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #11: block 4559633: comm syz.1.124: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 65.270754][ T874] EXT4-fs (loop1): 1 orphan inode deleted [ 65.276645][ T874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.924949][ T286] EXT4-fs (loop1): unmounting filesystem. [ 65.947651][ T884] loop1: detected capacity change from 0 to 512 [ 65.963894][ T884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.153671][ T884] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.197734][ T884] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.040080][ T899] loop2: detected capacity change from 0 to 128 [ 67.061905][ T641] udevd[641]: incorrect ext4 checksum on /dev/loop2 [ 67.069234][ T899] ext4: Unknown parameter 'permit_directio' [ 67.080326][ T901] device ip6gre1 entered promiscuous mode [ 67.095603][ T6] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 67.150728][ T901] syz.4.128 (901) used greatest stack depth: 18728 bytes left [ 67.201124][ T286] EXT4-fs (loop1): unmounting filesystem. [ 67.210178][ T28] audit: type=1400 audit(1792925182.420:248): avc: denied { block_suspend } for pid=906 comm="syz.4.130" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.232175][ T908] xt_hashlimit: size too large, truncated to 1048576 [ 67.245457][ T28] audit: type=1400 audit(1792925182.420:249): avc: denied { listen } for pid=906 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 67.265791][ T6] usb 4-1: device descriptor read/64, error -71 [ 67.342781][ T922] xt_hashlimit: size too large, truncated to 1048576 [ 67.375852][ T924] fuse: Bad value for 'fd' [ 67.925701][ T301] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 68.187549][ T301] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 68.211984][ T301] usb 2-1: config 0 has no interface number 0 [ 69.461782][ T301] usb 2-1: config 0 interface 41 has no altsetting 0 [ 69.557858][ T301] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 69.585740][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.559842][ T301] usb 2-1: Product: syz [ 70.564068][ T301] usb 2-1: Manufacturer: syz [ 70.568759][ T301] usb 2-1: SerialNumber: syz [ 70.574159][ T301] usb 2-1: config 0 descriptor?? [ 70.765511][ T956] loop3: detected capacity change from 0 to 512 [ 70.798393][ T301] usb 2-1: can't set config #0, error -71 [ 70.807088][ T301] usb 2-1: USB disconnect, device number 2 [ 70.867031][ T766] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.881245][ T766] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.059695][ T28] audit: type=1400 audit(1792925186.270:250): avc: denied { write } for pid=959 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.232081][ T974] ptp ptp0: guarantee physical clock free running [ 71.280432][ T961] loop1: detected capacity change from 0 to 40427 [ 71.291152][ T961] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 71.306593][ T961] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 71.327315][ T961] F2FS-fs (loop1): invalid crc value [ 71.354435][ T961] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.419659][ T961] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 71.426944][ T961] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 71.444688][ T28] audit: type=1400 audit(1792925186.650:251): avc: denied { create } for pid=960 comm="syz.1.145" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.470209][ T308] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 71.476319][ T28] audit: type=1400 audit(1792925186.680:252): avc: denied { remount } for pid=960 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.486624][ T308] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 71.653509][ T28] audit: type=1400 audit(1792925186.860:253): avc: denied { read write } for pid=960 comm="syz.1.145" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.691900][ T28] audit: type=1400 audit(1792925186.890:254): avc: denied { open } for pid=960 comm="syz.1.145" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.734607][ T28] audit: type=1400 audit(1792925186.930:255): avc: denied { ioctl } for pid=960 comm="syz.1.145" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.966961][ T991] ptp ptp0: guarantee physical clock free running [ 72.081457][ T28] audit: type=1400 audit(1792925187.290:256): avc: denied { bind } for pid=992 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.317678][ T28] audit: type=1400 audit(1792925187.320:257): avc: denied { connect } for pid=992 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.067643][ T28] audit: type=1400 audit(1792925187.330:258): avc: denied { write } for pid=992 comm="syz.2.153" path="socket:[18543]" dev="sockfs" ino=18543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.338120][ T1004] loop1: detected capacity change from 0 to 128 [ 73.351128][ T28] audit: type=1400 audit(1792925188.560:259): avc: denied { connect } for pid=998 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.374499][ T999] tipc: Started in network mode [ 73.399580][ T999] tipc: Node identity 4, cluster identity 4711 [ 73.428870][ T999] tipc: Node number set to 4 [ 73.433678][ T28] audit: type=1400 audit(1792925188.590:260): avc: denied { write } for pid=998 comm="syz.0.155" path="socket:[18650]" dev="sockfs" ino=18650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.469651][ T1004] FAT-fs (loop1): Directory bread(block 32) failed [ 73.480526][ T1004] FAT-fs (loop1): Directory bread(block 33) failed [ 73.726092][ T1004] FAT-fs (loop1): Directory bread(block 34) failed [ 73.787605][ T1004] FAT-fs (loop1): Directory bread(block 35) failed [ 73.841382][ T28] audit: type=1400 audit(1792925189.030:261): avc: denied { append } for pid=1015 comm="syz.3.160" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.867740][ T1004] FAT-fs (loop1): Directory bread(block 36) failed [ 73.914183][ T1004] FAT-fs (loop1): Directory bread(block 37) failed [ 73.958787][ T1004] FAT-fs (loop1): Directory bread(block 38) failed [ 74.032592][ T1004] FAT-fs (loop1): Directory bread(block 39) failed [ 74.046067][ T1020] loop2: detected capacity change from 0 to 512 [ 74.051095][ T28] audit: type=1400 audit(1792925189.200:262): avc: denied { unlink } for pid=1015 comm="syz.3.160" name="file7" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 74.054821][ T1004] FAT-fs (loop1): Directory bread(block 40) failed [ 74.075240][ T28] audit: type=1400 audit(1792925189.200:263): avc: denied { rename } for pid=1015 comm="syz.3.160" name="file7" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 74.137516][ T1020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.149182][ T1004] FAT-fs (loop1): Directory bread(block 41) failed [ 74.260159][ T1020] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.581450][ T28] audit: type=1400 audit(1792925189.200:264): avc: denied { mount } for pid=1015 comm="syz.3.160" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 74.615953][ T1020] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.663100][ T289] EXT4-fs (loop2): unmounting filesystem. [ 74.684094][ T1004] FAT-fs (loop1): Filesystem has been set read-only [ 74.692440][ T1004] syz.1.152: attempt to access beyond end of device [ 74.692440][ T1004] loop1: rw=524288, sector=4108, nr_sectors = 4 limit=128 [ 74.706190][ T1004] syz.1.152: attempt to access beyond end of device [ 74.706190][ T1004] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 75.874600][ T1038] loop1: detected capacity change from 0 to 40427 [ 75.929565][ T1038] F2FS-fs (loop1): invalid crc value [ 76.041361][ T1038] F2FS-fs (loop1): Found nat_bits in checkpoint [ 76.186748][ T1038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 76.714326][ T1047] xt_TPROXY: Can be used only with -p tcp or -p udp [ 76.766262][ T1048] ptp ptp0: guarantee physical clock free running [ 77.000635][ T28] audit: type=1400 audit(1792925192.210:265): avc: denied { mount } for pid=1049 comm="syz.0.168" name="/" dev="ramfs" ino=18879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.091563][ T1056] loop2: detected capacity change from 0 to 256 [ 77.099520][ T1056] exfat: Deprecated parameter 'utf8' [ 77.104881][ T1056] exfat: Deprecated parameter 'utf8' [ 77.110316][ T1056] exfat: Deprecated parameter 'namecase' [ 77.116149][ T1056] exfat: Deprecated parameter 'namecase' [ 77.121872][ T1056] exfat: Deprecated parameter 'namecase' [ 77.141536][ T1056] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 77.441926][ T1039] loop3: detected capacity change from 0 to 40427 [ 77.495649][ T1039] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 77.555377][ T1039] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 77.681391][ T1039] F2FS-fs (loop3): Unrecognized mount option "0xffffffffffffffff" or missing value [ 79.412404][ T28] audit: type=1400 audit(1792925194.620:266): avc: denied { execute } for pid=1075 comm="syz.3.172" path="/selinux/user" dev="selinuxfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 79.774854][ T28] audit: type=1400 audit(1792925194.980:267): avc: denied { create } for pid=1075 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.898449][ T28] audit: type=1400 audit(1792925194.980:268): avc: denied { ioctl } for pid=1075 comm="syz.3.172" path="socket:[18922]" dev="sockfs" ino=18922 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.076626][ T1085] loop1: detected capacity change from 0 to 1024 [ 80.084886][ T1085] EXT4-fs: Ignoring removed oldalloc option [ 80.090898][ T1085] EXT4-fs: Ignoring removed oldalloc option [ 80.989226][ T1087] loop3: detected capacity change from 0 to 512 [ 80.998165][ T1085] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.017034][ T1087] EXT4-fs (loop3): Test dummy encryption mode enabled [ 81.047375][ T28] audit: type=1400 audit(1792925195.180:269): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.727236][ T1085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.148242][ T28] audit: type=1400 audit(1792925197.360:270): avc: denied { mounton } for pid=1078 comm="syz.1.177" path="/32/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.187108][ T1099] loop2: detected capacity change from 0 to 512 [ 82.195110][ T1087] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #11: block 4559633: comm syz.3.179: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 82.216016][ T1087] EXT4-fs (loop3): 1 orphan inode deleted [ 82.221883][ T1087] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 82.253159][ T1099] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.182: inode has both inline data and extents flags [ 82.279978][ T1099] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.182: couldn't read orphan inode 15 (err -117) [ 82.305426][ T1099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.418225][ T287] EXT4-fs (loop3): unmounting filesystem. [ 82.435960][ T1102] device-mapper: table: 252:2: crypt: Error decoding and setting key (-EINVAL) [ 82.445264][ T1102] device-mapper: ioctl: error adding target to table [ 82.528119][ T28] audit: type=1400 audit(1792925197.740:271): avc: denied { remove_name } for pid=286 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.555329][ T286] EXT4-fs (loop1): unmounting filesystem. [ 82.600373][ T28] audit: type=1400 audit(1792925197.740:272): avc: denied { rmdir } for pid=286 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.040054][ T28] audit: type=1400 audit(1792925197.770:273): avc: denied { rmdir } for pid=286 comm="syz-executor" name=".index" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 84.063608][ T28] audit: type=1400 audit(1792925197.770:274): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.072183][ T1111] loop1: detected capacity change from 0 to 512 [ 84.503270][ T28] audit: type=1400 audit(1792925197.770:275): avc: denied { unlink } for pid=286 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 84.760070][ T1111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.039116][ T28] audit: type=1400 audit(1792925200.250:276): avc: denied { create } for pid=1110 comm="syz.1.185" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.079501][ T286] EXT4-fs (loop1): unmounting filesystem. [ 85.824567][ T1123] overlayfs: failed to clone upperpath [ 86.865194][ T289] EXT4-fs (loop2): unmounting filesystem. [ 87.073602][ T1140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'. [ 88.423736][ T1141] loop3: detected capacity change from 0 to 40427 [ 88.548950][ T1141] F2FS-fs (loop3): invalid crc value [ 89.193342][ T407] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.206783][ T1141] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.428114][ T407] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 89.446124][ T407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.465611][ T407] usb 2-1: Product: syz [ 89.469839][ T407] usb 2-1: Manufacturer: syz [ 89.474501][ T407] usb 2-1: SerialNumber: syz [ 89.487134][ T407] ums-karma 2-1:1.0: USB Mass Storage device detected [ 89.511186][ T407] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 89.511186][ T407] Please send a copy of this message to and [ 90.867810][ T1144] loop2: detected capacity change from 0 to 131072 [ 90.874651][ T28] audit: type=1400 audit(1792925206.080:277): avc: denied { append } for pid=1169 comm="syz.0.201" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.916909][ T407] ums-karma: probe of 2-1:1.0 failed with error -5 [ 90.950364][ T407] usb 2-1: USB disconnect, device number 3 [ 90.986957][ T1144] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.003997][ T1173] loop1: detected capacity change from 0 to 512 [ 92.038526][ T28] audit: type=1400 audit(1792925206.260:278): avc: denied { remount } for pid=1174 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.059457][ T28] audit: type=1400 audit(1792925207.270:279): avc: denied { search } for pid=1174 comm="syz.0.204" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 92.073249][ T1173] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.203: inode has both inline data and extents flags [ 92.226392][ T28] audit: type=1400 audit(1792925207.270:280): avc: denied { write } for pid=1174 comm="syz.0.204" name="trace_marker" dev="tracefs" ino=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 92.265296][ T28] audit: type=1400 audit(1792925207.270:281): avc: denied { open } for pid=1174 comm="syz.0.204" path="/38/dir0/trace_marker" dev="tracefs" ino=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 92.294535][ T1173] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.203: couldn't read orphan inode 15 (err -117) [ 92.315954][ T28] audit: type=1400 audit(1792925207.270:282): avc: denied { read } for pid=1174 comm="syz.0.204" name="trace_pipe" dev="tracefs" ino=12852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 92.344088][ T1173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.409783][ T28] audit: type=1400 audit(1792925207.620:283): avc: denied { create } for pid=1189 comm="syz.3.206" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.475159][ T28] audit: type=1400 audit(1792925207.640:284): avc: denied { read write } for pid=1189 comm="syz.3.206" name="dm0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.523444][ T1198] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.525784][ T28] audit: type=1400 audit(1792925207.640:285): avc: denied { open } for pid=1189 comm="syz.3.206" path="/42/dm0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.553780][ T28] audit: type=1400 audit(1792925207.660:286): avc: denied { unlink } for pid=287 comm="syz-executor" name="dm0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.738679][ T286] EXT4-fs (loop1): unmounting filesystem. [ 93.628560][ T1213] loop2: detected capacity change from 0 to 512 [ 94.350150][ T1213] EXT4-fs (loop2): Test dummy encryption mode enabled [ 94.379927][ T1213] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #11: block 4559633: comm syz.2.207: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 94.395515][ T1213] EXT4-fs (loop2): 1 orphan inode deleted [ 94.401312][ T1213] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.430970][ T1223] netlink: 72 bytes leftover after parsing attributes in process `syz.4.215'. [ 94.569087][ T289] EXT4-fs (loop2): unmounting filesystem. [ 94.635709][ T407] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.674324][ T1233] overlayfs: failed to clone upperpath [ 94.855708][ T407] usb 1-1: device descriptor read/64, error -71 [ 96.313581][ T1240] loop3: detected capacity change from 0 to 40427 [ 96.323022][ T407] usb 1-1: device descriptor read/64, error -71 [ 96.333189][ T1240] F2FS-fs (loop3): invalid crc value [ 96.430670][ T1240] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.522798][ T1240] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.740893][ T407] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.842495][ T1247] bridge0: port 3(syz_tun) entered blocking state [ 96.861972][ T1247] bridge0: port 3(syz_tun) entered disabled state [ 96.882683][ T1247] device syz_tun entered promiscuous mode [ 96.902772][ T1247] bridge0: port 3(syz_tun) entered blocking state [ 96.909275][ T1247] bridge0: port 3(syz_tun) entered forwarding state [ 96.916688][ T407] usb 1-1: device descriptor read/64, error -71 [ 97.029469][ T1251] loop3: detected capacity change from 0 to 512 [ 97.055377][ T1251] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.746424][ T287] EXT4-fs (loop3): unmounting filesystem. [ 97.906478][ T334] bridge0: port 3(syz_tun) entered disabled state [ 100.022178][ T1288] loop2: detected capacity change from 0 to 256 [ 100.050797][ T1288] exfat: Deprecated parameter 'utf8' [ 100.063331][ T1288] exfat: Deprecated parameter 'namecase' [ 100.072071][ T1288] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 100.125730][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 100.125747][ T28] audit: type=1400 audit(1792925215.320:288): avc: denied { getopt } for pid=1289 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.226195][ T28] audit: type=1400 audit(1792925215.440:289): avc: denied { setopt } for pid=1296 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.284304][ T28] audit: type=1400 audit(1792925215.460:290): avc: denied { write } for pid=1296 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.315614][ T301] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.486231][ T28] audit: type=1400 audit(1792925215.690:291): avc: denied { read } for pid=1300 comm="syz.2.241" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.593640][ T1310] loop3: detected capacity change from 0 to 128 [ 100.768279][ T301] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.869313][ T28] audit: type=1400 audit(1792925215.690:292): avc: denied { open } for pid=1300 comm="syz.2.241" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.905699][ T309] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 100.947972][ T301] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 101.036499][ T28] audit: type=1400 audit(1792925215.700:293): avc: denied { ioctl } for pid=1300 comm="syz.2.241" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 101.061818][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.070323][ T301] usb 1-1: Product: syz [ 101.074943][ T301] usb 1-1: Manufacturer: syz [ 101.079767][ T301] usb 1-1: SerialNumber: syz [ 102.066444][ T309] usb 3-1: no configurations [ 102.071154][ T309] usb 3-1: can't read configurations, error -22 [ 102.224888][ T1322] loop3: detected capacity change from 0 to 512 [ 102.235665][ T1322] EXT4-fs (loop3): Test dummy encryption mode enabled [ 102.242862][ T309] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 102.277683][ T1322] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #11: block 4559633: comm syz.3.245: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 102.293452][ T1322] EXT4-fs (loop3): 1 orphan inode deleted [ 102.300029][ T1322] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.311477][ T28] audit: type=1400 audit(1792925217.480:294): avc: denied { execute } for pid=1319 comm="syz.4.247" name="file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.352546][ T28] audit: type=1400 audit(1792925217.480:295): avc: denied { execute_no_trans } for pid=1319 comm="syz.4.247" path="/61/file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.399114][ T301] usb 1-1: 1:1 : no cluster descriptor [ 102.407947][ T301] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 102.423156][ T301] usb 1-1: 1:1 : no cluster descriptor [ 102.435716][ T301] snd-usb-audio: probe of 1-1:1.1 failed with error -2 [ 102.446067][ T309] usb 3-1: no configurations [ 102.450763][ T309] usb 3-1: can't read configurations, error -22 [ 102.464345][ T301] usb 1-1: 1:1 : no cluster descriptor [ 102.470769][ T309] usb usb3-port1: attempt power cycle [ 102.496499][ T301] snd-usb-audio: probe of 1-1:1.2 failed with error -2 [ 102.516931][ T612] udevd[612]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.533342][ T301] usb 1-1: USB disconnect, device number 5 [ 102.584020][ T28] audit: type=1400 audit(1792925217.790:296): avc: denied { shutdown } for pid=1346 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.616642][ T1347] loop1: detected capacity change from 0 to 512 [ 102.623013][ T28] audit: type=1400 audit(1792925217.820:297): avc: denied { read } for pid=1346 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.653609][ T1347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.662833][ T1347] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 102.673260][ T1347] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 102.683303][ T1347] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 102.693708][ T1347] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 102.702370][ T1347] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c040e11c, mo2=0000] [ 102.710573][ T1347] EXT4-fs (loop1): too many log groups per flexible block group [ 102.718502][ T1347] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 102.725406][ T1347] EXT4-fs (loop1): mount failed [ 102.917496][ T287] EXT4-fs (loop3): unmounting filesystem. [ 102.945681][ T309] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 102.976770][ T309] usb 3-1: no configurations [ 103.016407][ T309] usb 3-1: can't read configurations, error -22 [ 103.245748][ T309] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 103.283775][ T1357] loop3: detected capacity change from 0 to 128 [ 103.732269][ T309] usb 3-1: device descriptor read/8, error -71 [ 103.926609][ T309] usb 3-1: device descriptor read/8, error -71 [ 103.948470][ T1367] loop1: detected capacity change from 0 to 256 [ 103.976041][ T1367] exfat: Deprecated parameter 'utf8' [ 103.981446][ T1367] exfat: Deprecated parameter 'namecase' [ 104.077792][ T309] usb usb3-port1: unable to enumerate USB device [ 104.098098][ T1367] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 104.973447][ T1365] loop2: detected capacity change from 0 to 40427 [ 105.028701][ T1365] F2FS-fs (loop2): invalid crc value [ 105.062525][ T1365] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.195676][ T1365] F2FS-fs (loop2): Start checkpoint disabled! [ 105.220534][ T1365] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 105.255650][ T1365] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 108.097063][ T1399] syz.0.268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.193399][ T1406] loop1: detected capacity change from 0 to 512 [ 108.203475][ T1406] EXT4-fs: Ignoring removed nobh option [ 108.223498][ T1406] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.294828][ T1410] overlayfs: failed to clone upperpath [ 108.320420][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 108.320443][ T28] audit: type=1400 audit(1792925223.530:306): avc: denied { read } for pid=1409 comm="syz.2.269" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 108.616916][ T1406] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #3: comm syz.1.271: corrupted inode contents [ 108.720183][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 108.782726][ T28] audit: type=1400 audit(1792925223.560:307): avc: denied { open } for pid=1409 comm="syz.2.269" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 108.832569][ T1406] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #3: comm syz.1.271: mark_inode_dirty error [ 109.058328][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 109.085198][ T1406] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #3: comm syz.1.271: corrupted inode contents [ 109.135173][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 109.147471][ T1427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 109.165774][ T1406] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.271: mark_inode_dirty error [ 109.196371][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 109.213698][ T1406] Quota error (device loop1): write_blk: dquota write failed [ 109.233573][ T1406] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 109.264095][ T1406] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.271: Failed to acquire dquot type 0 [ 109.315335][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 109.341339][ T1406] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #16: comm syz.1.271: corrupted inode contents [ 109.445241][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 109.453696][ T1406] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #16: comm syz.1.271: mark_inode_dirty error [ 110.925292][ T28] audit: type=1400 audit(1792925226.130:308): avc: denied { mounton } for pid=1440 comm="syz.0.279" path="/55/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.955351][ T1442] overlayfs: statfs failed on './file0' [ 110.990559][ T1442] overlayfs: statfs failed on './file0' [ 111.005617][ T28] audit: type=1400 audit(1792925226.160:309): avc: denied { getattr } for pid=1440 comm="syz.0.279" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 111.028631][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 111.035195][ T1406] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #16: comm syz.1.271: corrupted inode contents [ 111.049312][ T1442] overlayfs: statfs failed on './file0' [ 111.055254][ T1442] overlayfs: statfs failed on './file0' [ 111.061364][ T1442] overlayfs: statfs failed on './file0' [ 111.067272][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 111.074286][ T1442] overlayfs: statfs failed on './file0' [ 111.080232][ T1406] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.271: mark_inode_dirty error [ 111.102071][ T1442] overlayfs: statfs failed on './file0' [ 111.112101][ T1442] overlayfs: statfs failed on './file0' [ 111.122049][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 111.135902][ T1442] overlayfs: statfs failed on './file0' [ 111.141964][ T1442] overlayfs: statfs failed on './file0' [ 111.147886][ T1406] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #16: comm syz.1.271: corrupted inode contents [ 111.170332][ T1442] overlayfs: statfs failed on './file0' [ 111.180209][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 111.187306][ T1442] overlayfs: statfs failed on './file0' [ 111.198575][ T1442] overlayfs: statfs failed on './file0' [ 111.205397][ T1446] netlink: 76 bytes leftover after parsing attributes in process `syz.4.281'. [ 111.214622][ T1406] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 111.223666][ T1442] overlayfs: statfs failed on './file0' [ 111.229645][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 111.239103][ T1454] netlink: 76 bytes leftover after parsing attributes in process `syz.4.281'. [ 111.242915][ T1434] loop3: detected capacity change from 0 to 40427 [ 111.248271][ T403] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.256678][ T1406] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #16: comm syz.1.271: corrupted inode contents [ 111.273999][ T1442] overlayfs: statfs failed on './file0' [ 111.279988][ T1434] F2FS-fs (loop3): invalid crc value [ 111.285727][ T1442] overlayfs: statfs failed on './file0' [ 111.291849][ T1442] overlayfs: statfs failed on './file0' [ 111.295384][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 111.305037][ T1442] overlayfs: statfs failed on './file0' [ 111.306468][ T1406] EXT4-fs error (device loop1): ext4_truncate:4327: inode #16: comm syz.1.271: mark_inode_dirty error [ 111.322337][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 111.329272][ T1442] overlayfs: statfs failed on './file0' [ 111.330695][ T1406] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 111.344087][ T1442] overlayfs: statfs failed on './file0' [ 111.352857][ T1406] EXT4-fs (loop1): Remounting filesystem read-only [ 111.358114][ T1434] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.361376][ T1406] EXT4-fs (loop1): 1 truncate cleaned up [ 111.371697][ T1406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.381109][ T1406] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.381931][ T1442] overlayfs: statfs failed on './file0' [ 111.402304][ T1442] overlayfs: statfs failed on './file0' [ 111.408194][ T1442] overlayfs: statfs failed on './file0' [ 111.417388][ T1442] overlayfs: statfs failed on './file0' [ 111.423433][ T1442] overlayfs: statfs failed on './file0' [ 111.429895][ T286] EXT4-fs (loop1): unmounting filesystem. [ 111.438360][ T1442] overlayfs: statfs failed on './file0' [ 111.444331][ T1442] overlayfs: statfs failed on './file0' [ 111.450562][ T1442] overlayfs: statfs failed on './file0' [ 111.457810][ T1442] overlayfs: statfs failed on './file0' [ 111.464598][ T1442] overlayfs: statfs failed on './file0' [ 111.472216][ T403] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.484270][ T1442] overlayfs: statfs failed on './file0' [ 112.455509][ T403] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 112.482233][ T28] audit: type=1400 audit(1792925227.690:310): avc: denied { setopt } for pid=1462 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.893632][ T403] usb 3-1: config 1 interface 0 has no altsetting 0 [ 112.909115][ T1463] xt_hashlimit: size too large, truncated to 1048576 [ 112.930137][ T403] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 112.970288][ T28] audit: type=1400 audit(1792925228.180:311): avc: denied { mounton } for pid=1462 comm="syz.1.283" path="/sys" dev="ramfs" ino=19869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 112.993992][ T403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.012414][ T403] usb 3-1: Product: syz [ 113.021814][ T403] usb 3-1: Manufacturer: syz [ 113.028733][ T403] usb 3-1: SerialNumber: syz [ 113.039435][ T403] usb-storage 3-1:1.0: USB Mass Storage device detected [ 113.057676][ T403] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 113.121945][ T1476] loop3: detected capacity change from 0 to 512 [ 113.133628][ T28] audit: type=1400 audit(1792925228.340:312): avc: denied { read } for pid=1471 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.166022][ T1476] EXT4-fs (loop3): Test dummy encryption mode enabled [ 113.174900][ T1476] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 113.190212][ T1476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e01c, mo2=0002] [ 113.215611][ T1476] System zones: 1-12 [ 113.220175][ T1476] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.236340][ T1476] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.286: invalid indirect mapped block 12 (level 1) [ 113.245292][ T1444] fuse: Unknown parameter 'roode' [ 113.258087][ T1444] loop2: detected capacity change from 0 to 512 [ 113.289468][ T1444] EXT4-fs: Ignoring removed nobh option [ 113.297456][ T1476] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.286: invalid indirect mapped block 2 (level 2) [ 113.325413][ T1476] EXT4-fs (loop3): 1 truncate cleaned up [ 113.331132][ T1444] EXT4-fs (loop2): 1 truncate cleaned up [ 113.336983][ T1476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.341134][ T1444] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.375231][ T1444] EXT4-fs (loop2): unmounting filesystem. [ 114.536662][ T1491] overlayfs: failed to clone upperpath [ 114.782899][ T403] usb 3-1: USB disconnect, device number 8 [ 114.875325][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.899346][ T1499] loop2: detected capacity change from 0 to 16 [ 115.049116][ T1499] erofs: (device loop2): mounted with root inode @ nid 36. [ 116.535624][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 116.722810][ T24] usb 4-1: device descriptor read/all, error -71 [ 116.731819][ T287] EXT4-fs (loop3): unmounting filesystem. [ 116.773971][ T1497] loop1: detected capacity change from 0 to 40427 [ 116.816541][ T1497] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 116.851107][ T1497] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 116.879709][ T1497] F2FS-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 117.366574][ T1516] loop2: detected capacity change from 0 to 40427 [ 117.435001][ T28] audit: type=1400 audit(1792925232.640:313): avc: denied { map } for pid=1518 comm="syz.0.300" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.459896][ T1516] F2FS-fs (loop2): invalid crc value [ 117.484909][ T1519] fuse: Bad value for 'fd' [ 117.563837][ T1516] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.666322][ T1516] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.208926][ T1526] loop3: detected capacity change from 0 to 1024 [ 118.255481][ T1526] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.276942][ T28] audit: type=1400 audit(1792925233.490:314): avc: denied { setopt } for pid=1528 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.422310][ T1526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 118.442143][ T1526] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.579647][ T1537] loop1: detected capacity change from 0 to 128 [ 119.472662][ T1539] loop2: detected capacity change from 0 to 512 [ 119.481126][ T1539] EXT4-fs (loop2): Test dummy encryption mode enabled [ 120.048427][ T1541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 120.069395][ T1526] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.301: bg 0: block 112: padding at end of block bitmap is not set [ 120.084192][ T1557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 120.087937][ T1526] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 120.226627][ T1539] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #11: block 4559633: comm syz.2.304: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 120.242194][ T1539] EXT4-fs (loop2): 1 orphan inode deleted [ 120.247993][ T1539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.272140][ T1526] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.272140][ T1526] [ 120.282616][ T1526] EXT4-fs (loop3): Total free blocks count 0 [ 120.288899][ T1526] EXT4-fs (loop3): Free/Dirty block details [ 120.294927][ T1526] EXT4-fs (loop3): free_blocks=0 [ 120.300511][ T1526] EXT4-fs (loop3): dirty_blocks=64 [ 120.306004][ T1526] EXT4-fs (loop3): Block reservation details [ 120.312153][ T1526] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 120.343314][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 50 with error 28 [ 120.426461][ T289] EXT4-fs (loop2): unmounting filesystem. [ 122.050147][ T28] audit: type=1400 audit(1792925237.260:315): avc: denied { write } for pid=1575 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.081355][ T1578] fuse: Bad value for 'fd' [ 122.641957][ T1583] loop1: detected capacity change from 0 to 40427 [ 122.657553][ T1583] F2FS-fs (loop1): invalid crc value [ 122.693888][ T1583] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.765795][ T1583] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 123.204003][ T1599] loop3: detected capacity change from 0 to 40427 [ 123.217993][ T1599] F2FS-fs (loop3): invalid crc value [ 123.244390][ T1599] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.294047][ T1599] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.424474][ T1608] loop1: detected capacity change from 0 to 512 [ 123.455996][ T1608] EXT4-fs: Ignoring removed i_version option [ 123.746190][ T1608] EXT4-fs: Ignoring removed oldalloc option [ 123.875137][ T1608] EXT4-fs (loop1): Test dummy encryption mode enabled [ 124.082673][ T1608] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 124.283729][ T1586] loop2: detected capacity change from 0 to 40427 [ 124.324950][ T286] EXT4-fs (loop1): unmounting filesystem. [ 124.347612][ T1586] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 124.375636][ T1586] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.407121][ T1586] F2FS-fs (loop2): Unrecognized mount option "0xffffffffffffffff" or missing value [ 124.814106][ T1621] loop1: detected capacity change from 0 to 512 [ 124.894305][ T1621] EXT4-fs: Ignoring removed oldalloc option [ 125.001723][ T1621] EXT4-fs: Ignoring removed nobh option [ 125.294803][ T1621] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.334275][ T1621] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.397953][ T1626] fuse: Bad value for 'fd' [ 125.647627][ T28] audit: type=1400 audit(1792925240.860:316): avc: denied { bind } for pid=1645 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.668347][ T286] EXT4-fs (loop1): unmounting filesystem. [ 125.707215][ T28] audit: type=1400 audit(1792925240.860:317): avc: denied { setopt } for pid=1645 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.735827][ T1652] loop1: detected capacity change from 0 to 256 [ 125.750576][ T28] audit: type=1400 audit(1792925240.880:318): avc: denied { read } for pid=1645 comm="syz.0.327" path="socket:[20068]" dev="sockfs" ino=20068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.805703][ T1652] exfat: Deprecated parameter 'utf8' [ 125.821946][ T1664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 125.835825][ T1652] exfat: Deprecated parameter 'namecase' [ 125.861084][ T1652] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 126.272036][ T1673] overlayfs: failed to clone upperpath [ 127.079422][ T1678] fuse: Bad value for 'fd' [ 127.785662][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.987236][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.069600][ T24] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 128.282441][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.319855][ T24] usb 2-1: Product: syz [ 128.335598][ T24] usb 2-1: Manufacturer: syz [ 128.340247][ T24] usb 2-1: SerialNumber: syz [ 128.450166][ T1704] device macsec0 entered promiscuous mode [ 128.463018][ T1704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 128.482910][ T1704] device veth1_macvtap left promiscuous mode [ 128.499656][ T1704] device macsec0 left promiscuous mode [ 128.524977][ T28] audit: type=1400 audit(1792925243.730:319): avc: denied { mount } for pid=1705 comm="syz.2.344" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 128.594495][ T24] usb 2-1: USB disconnect, device number 4 [ 128.769156][ T1706] loop2: detected capacity change from 0 to 40427 [ 128.811362][ T1706] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 128.818751][ T1706] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 128.827932][ T1706] F2FS-fs (loop2): invalid crc value [ 128.856421][ T1706] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 129.240303][ T1706] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 129.288083][ T1706] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.672315][ T1714] f2fs_ckpt-7:2: attempt to access beyond end of device [ 129.672315][ T1714] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.686468][ T28] audit: type=1400 audit(1792925244.880:320): avc: denied { write open } for pid=1705 comm="syz.2.344" path="/56/file1/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.876556][ T1727] xt_hashlimit: size too large, truncated to 1048576 [ 129.985263][ T28] audit: type=1400 audit(1792925245.190:321): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 130.017280][ T1731] device ipip0 entered promiscuous mode [ 130.046376][ T1736] Non-string source [ 130.156637][ T1731] loop3: detected capacity change from 0 to 8192 [ 130.188907][ T1721] loop1: detected capacity change from 0 to 40427 [ 130.210192][ T1721] F2FS-fs (loop1): invalid crc value [ 130.227114][ T1731] loop3: p1 p2 p3 p4 [ 130.232000][ T1731] loop3: p1 start 16777216 is beyond EOD, truncated [ 130.253515][ T1731] loop3: p2 start 151126016 is beyond EOD, truncated [ 130.266938][ T1731] loop3: p3 start 655105 is beyond EOD, truncated [ 130.281418][ T1731] loop3: p4 size 33554432 extends beyond EOD, truncated [ 130.288836][ T1721] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.393393][ T1721] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 130.423841][ T1734] syz.3.353 (1734): drop_caches: 2 [ 130.561195][ T28] audit: type=1400 audit(1792925245.770:322): avc: denied { read write } for pid=1730 comm="syz.3.353" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.601949][ T1748] FAULT_INJECTION: forcing a failure. [ 130.601949][ T1748] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.615163][ T28] audit: type=1400 audit(1792925245.770:323): avc: denied { open } for pid=1730 comm="syz.3.353" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.640396][ T1748] CPU: 1 PID: 1748 Comm: syz.1.355 Tainted: G W syzkaller #0 [ 130.649205][ T1748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.659318][ T1748] Call Trace: [ 130.662645][ T1748] [ 130.665616][ T1748] __dump_stack+0x21/0x24 [ 130.669989][ T1748] dump_stack_lvl+0x110/0x170 [ 130.674696][ T1748] ? __cfi_dump_stack_lvl+0x8/0x8 [ 130.679754][ T1748] dump_stack+0x15/0x24 [ 130.683942][ T1748] should_fail_ex+0x3bf/0x510 [ 130.688654][ T1748] should_fail+0xb/0x10 [ 130.692846][ T1748] should_fail_usercopy+0x1a/0x20 [ 130.697900][ T1748] _copy_to_user+0x1e/0x90 [ 130.702350][ T1748] simple_read_from_buffer+0xe9/0x160 [ 130.707761][ T1748] proc_fail_nth_read+0x1a6/0x220 [ 130.712840][ T1748] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 130.718417][ T1748] ? security_file_permission+0x94/0xb0 [ 130.724011][ T1748] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 130.729589][ T1748] vfs_read+0x286/0x930 [ 130.733781][ T1748] ? __cfi_vfs_read+0x10/0x10 [ 130.738488][ T1748] ? __kasan_check_write+0x14/0x20 [ 130.743637][ T1748] ? mutex_lock+0x93/0x1b0 [ 130.748086][ T1748] ? __cfi_mutex_lock+0x10/0x10 [ 130.752969][ T1748] ? __fdget_pos+0x2cd/0x380 [ 130.757588][ T1748] ? ksys_read+0x70/0x260 [ 130.761979][ T1748] ksys_read+0x14a/0x260 [ 130.766248][ T1748] ? __cfi_ksys_read+0x10/0x10 [ 130.771035][ T1748] ? fput+0x154/0x1a0 [ 130.775055][ T1748] ? debug_smp_processor_id+0x17/0x20 [ 130.780468][ T1748] __x64_sys_read+0x7b/0x90 [ 130.785004][ T1748] x64_sys_call+0x2f/0x9a0 [ 130.789459][ T1748] do_syscall_64+0x4c/0xa0 [ 130.793905][ T1748] ? clear_bhb_loop+0x30/0x80 [ 130.798617][ T1748] ? clear_bhb_loop+0x30/0x80 [ 130.803332][ T1748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.809266][ T1748] RIP: 0033:0x7f2313b5fd8e [ 130.813707][ T1748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.833354][ T1748] RSP: 002b:00007f2314a01fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.841805][ T1748] RAX: ffffffffffffffda RBX: 00007f2314a026c0 RCX: 00007f2313b5fd8e [ 130.849811][ T1748] RDX: 000000000000000f RSI: 00007f2314a020a0 RDI: 0000000000000004 [ 130.857831][ T1748] RBP: 00007f2314a02090 R08: 0000000000000000 R09: 0000000000000000 [ 130.865847][ T1748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.873858][ T1748] R13: 00007f2313e26038 R14: 00007f2313e25fa0 R15: 00007ffe304668a8 [ 130.881873][ T1748] [ 130.948430][ T1755] loop1: detected capacity change from 0 to 512 [ 131.041569][ T28] audit: type=1400 audit(1792925246.250:324): avc: denied { read } for pid=1754 comm="syz.1.360" name="cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 131.069824][ T28] audit: type=1400 audit(1792925246.250:325): avc: denied { open } for pid=1754 comm="syz.1.360" path="/63/dev/cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 131.108327][ T1761] 9pnet_fd: Insufficient options for proto=fd [ 131.148785][ T1755] xt_hashlimit: size too large, truncated to 1048576 [ 132.274000][ T1763] loop3: detected capacity change from 0 to 40427 [ 132.328888][ T1763] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 132.361478][ T1763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 132.370257][ T1763] F2FS-fs (loop3): Image doesn't support compression [ 132.378740][ T1763] F2FS-fs (loop3): Image doesn't support compression [ 132.397252][ T1763] F2FS-fs (loop3): invalid crc value [ 132.416148][ T1763] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 132.475632][ T1763] F2FS-fs (loop3): Start checkpoint disabled! [ 132.482126][ T1763] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 132.505914][ T1763] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 132.513003][ T1763] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 132.555606][ T28] audit: type=1400 audit(1792925247.760:326): avc: denied { append } for pid=1762 comm="syz.3.362" path="/69/file0/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.605906][ T308] kworker/u4:3: attempt to access beyond end of device [ 132.605906][ T308] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.625619][ T28] audit: type=1400 audit(1792925247.790:327): avc: denied { read } for pid=1762 comm="syz.3.362" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.655639][ T403] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.683498][ T28] audit: type=1400 audit(1792925247.790:328): avc: denied { ioctl } for pid=1762 comm="syz.3.362" path="/69/file0/file0" dev="loop3" ino=10 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.725593][ T28] audit: type=1326 audit(1792925247.790:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.1.367" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2313b9f559 code=0x7ffc0000 [ 132.775641][ T28] audit: type=1326 audit(1792925247.790:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.1.367" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2313b9f559 code=0x7ffc0000 [ 132.845623][ T28] audit: type=1326 audit(1792925247.790:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.1.367" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2313b9f559 code=0x7ffc0000 [ 132.879643][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.900841][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.925601][ T403] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.945579][ T28] audit: type=1326 audit(1792925247.790:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.1.367" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2313b9f559 code=0x7ffc0000 [ 132.980703][ T403] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.983927][ T1789] printk: syz.0.370 (1789): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 133.000087][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.011818][ T28] audit: type=1326 audit(1792925247.790:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.1.367" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f2313b9f559 code=0x7ffc0000 [ 133.026572][ T403] usb 3-1: config 0 descriptor?? [ 133.054248][ T1790] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.074701][ T1790] device bridge_slave_0 left promiscuous mode [ 133.125236][ T1790] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.153527][ T1790] device bridge_slave_1 left promiscuous mode [ 133.154536][ T1797] loop3: detected capacity change from 0 to 2048 [ 133.169658][ T1790] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.181777][ T1800] FAULT_INJECTION: forcing a failure. [ 133.181777][ T1800] name failslab, interval 1, probability 0, space 0, times 1 [ 133.196708][ T1800] CPU: 0 PID: 1800 Comm: syz.1.374 Tainted: G W syzkaller #0 [ 133.205526][ T1800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.215610][ T1800] Call Trace: [ 133.218915][ T1800] [ 133.221907][ T1800] __dump_stack+0x21/0x24 [ 133.226283][ T1800] dump_stack_lvl+0x110/0x170 [ 133.231028][ T1800] ? __cfi_dump_stack_lvl+0x8/0x8 [ 133.236088][ T1800] dump_stack+0x15/0x24 [ 133.240274][ T1800] should_fail_ex+0x3bf/0x510 [ 133.244992][ T1800] __should_failslab+0xac/0xf0 [ 133.249817][ T1800] should_failslab+0x9/0x20 [ 133.254360][ T1800] __kmem_cache_alloc_node+0x3d/0x2d0 [ 133.259772][ T1800] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 133.265534][ T1800] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 133.271299][ T1800] kmalloc_trace+0x29/0xb0 [ 133.275751][ T1800] selinux_sk_alloc_security+0x7e/0x1a0 [ 133.281436][ T1800] security_sk_alloc+0x83/0xb0 [ 133.286252][ T1800] sk_prot_alloc+0x108/0x320 [ 133.290892][ T1800] sk_alloc+0x3b/0x460 [ 133.294999][ T1800] ? _raw_spin_lock+0x94/0xf0 [ 133.299710][ T1800] pppol2tp_create+0x32/0x200 [ 133.304432][ T1800] pppox_create+0x13a/0x1a0 [ 133.308967][ T1800] __sock_create+0x39e/0x7c0 [ 133.313604][ T1800] __sys_socket+0xcd/0x1a0 [ 133.318066][ T1800] __x64_sys_socket+0x7a/0x90 [ 133.322783][ T1800] x64_sys_call+0x449/0x9a0 [ 133.327320][ T1800] do_syscall_64+0x4c/0xa0 [ 133.331767][ T1800] ? clear_bhb_loop+0x30/0x80 [ 133.336524][ T1800] ? clear_bhb_loop+0x30/0x80 [ 133.341236][ T1800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.347179][ T1800] RIP: 0033:0x7f2313b9f559 [ 133.351623][ T1800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.371268][ T1800] RSP: 002b:00007f2314a02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 133.379716][ T1800] RAX: ffffffffffffffda RBX: 00007f2313e25fa0 RCX: 00007f2313b9f559 [ 133.387708][ T1800] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000018 [ 133.395699][ T1800] RBP: 00007f2313c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 133.403687][ T1800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.411678][ T1800] R13: 00007f2313e26038 R14: 00007f2313e25fa0 R15: 00007ffe304668a8 [ 133.419677][ T1800] [ 133.430818][ T1797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.439511][ T1797] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.511314][ T287] EXT4-fs (loop3): unmounting filesystem. [ 133.524414][ T1805] loop1: detected capacity change from 0 to 256 [ 133.533766][ T1805] exfat: Deprecated parameter 'utf8' [ 133.549022][ T1805] exfat: Deprecated parameter 'namecase' [ 133.557799][ T1805] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 133.575959][ T1805] FAULT_INJECTION: forcing a failure. [ 133.575959][ T1805] name failslab, interval 1, probability 0, space 0, times 0 [ 133.588887][ T1805] CPU: 1 PID: 1805 Comm: syz.1.385 Tainted: G W syzkaller #0 [ 133.597859][ T1805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.607944][ T1805] Call Trace: [ 133.611251][ T1805] [ 133.614211][ T1805] __dump_stack+0x21/0x24 [ 133.618576][ T1805] dump_stack_lvl+0x110/0x170 [ 133.623269][ T1805] ? __cfi_dump_stack_lvl+0x8/0x8 [ 133.628305][ T1805] ? __kasan_check_write+0x14/0x20 [ 133.633421][ T1805] ? mutex_unlock+0x8f/0x230 [ 133.638016][ T1805] dump_stack+0x15/0x24 [ 133.642168][ T1805] should_fail_ex+0x3bf/0x510 [ 133.646862][ T1805] ? getname_flags+0xba/0x510 [ 133.651557][ T1805] __should_failslab+0xac/0xf0 [ 133.656329][ T1805] should_failslab+0x9/0x20 [ 133.660830][ T1805] kmem_cache_alloc+0x3b/0x320 [ 133.665608][ T1805] ? __cfi_ksys_write+0x10/0x10 [ 133.670495][ T1805] getname_flags+0xba/0x510 [ 133.674996][ T1805] ? debug_smp_processor_id+0x17/0x20 [ 133.680384][ T1805] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 133.686493][ T1805] __x64_sys_unlink+0x3c/0x50 [ 133.691208][ T1805] x64_sys_call+0x958/0x9a0 [ 133.695743][ T1805] do_syscall_64+0x4c/0xa0 [ 133.700185][ T1805] ? clear_bhb_loop+0x30/0x80 [ 133.704896][ T1805] ? clear_bhb_loop+0x30/0x80 [ 133.709601][ T1805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.715522][ T1805] RIP: 0033:0x7f2313b9f559 [ 133.719963][ T1805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.739590][ T1805] RSP: 002b:00007f2314a02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 133.748031][ T1805] RAX: ffffffffffffffda RBX: 00007f2313e25fa0 RCX: 00007f2313b9f559 [ 133.756023][ T1805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001880 [ 133.764012][ T1805] RBP: 00007f2314a02090 R08: 0000000000000000 R09: 0000000000000000 [ 133.772009][ T1805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.780008][ T1805] R13: 00007f2313e26038 R14: 00007f2313e25fa0 R15: 00007ffe304668a8 [ 133.788032][ T1805] [ 134.455238][ T1808] loop3: detected capacity change from 0 to 40427 [ 134.498975][ T403] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 134.509518][ T1808] F2FS-fs (loop3): invalid crc value [ 134.583809][ T1808] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.699559][ T1808] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.853163][ T403] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 135.040949][ T1817] loop1: detected capacity change from 0 to 512 [ 135.062866][ T1817] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.377: inode has both inline data and extents flags [ 135.082587][ T1821] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.106049][ T1817] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.377: couldn't read orphan inode 15 (err -117) [ 135.126459][ T1817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.268815][ T286] EXT4-fs (loop1): unmounting filesystem. [ 136.191629][ T580] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 136.375508][ T1848] loop3: detected capacity change from 0 to 256 [ 136.376679][ T1839] loop1: detected capacity change from 0 to 40427 [ 136.391824][ T1848] exfat: Deprecated parameter 'utf8' [ 136.403989][ T1848] exfat: Deprecated parameter 'namecase' [ 136.427557][ T1848] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 136.441088][ T1839] F2FS-fs (loop1): invalid crc value [ 136.476426][ T1839] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.583565][ T1839] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 136.598012][ T1861] loop3: detected capacity change from 0 to 256 [ 136.622478][ T1861] exfat: Deprecated parameter 'utf8' [ 136.633145][ T1861] exfat: Deprecated parameter 'utf8' [ 136.638512][ T1861] exfat: Deprecated parameter 'utf8' [ 136.643819][ T1861] exfat: Deprecated parameter 'utf8' [ 136.649604][ T1861] exfat: Bad value for 'errors' [ 136.682612][ T1861] No source specified [ 136.728694][ T1863] loop3: detected capacity change from 0 to 512 [ 136.766656][ T1863] EXT4-fs (loop3): orphan cleanup on readonly fs [ 136.773198][ T1863] EXT4-fs error (device loop3): ext4_find_extent:900: inode #4: comm syz.3.388: inode has invalid extent depth: 7 [ 136.786230][ T1863] __quota_error: 79 callbacks suppressed [ 136.786246][ T1863] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 136.801859][ T1863] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 136.817616][ T1863] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 136.824293][ T1863] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.843690][ T28] audit: type=1326 audit(1792925252.050:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1862 comm="syz.3.388" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d9419f559 code=0x0 [ 136.848615][ T1869] FAULT_INJECTION: forcing a failure. [ 136.848615][ T1869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.881113][ T1869] CPU: 1 PID: 1869 Comm: syz.0.389 Tainted: G W syzkaller #0 [ 136.889918][ T1869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.892745][ T1871] loop2: detected capacity change from 0 to 512 [ 136.900004][ T1869] Call Trace: [ 136.900012][ T1869] [ 136.900019][ T1869] __dump_stack+0x21/0x24 [ 136.900044][ T1869] dump_stack_lvl+0x110/0x170 [ 136.921550][ T1869] ? __cfi_dump_stack_lvl+0x8/0x8 [ 136.926594][ T1869] ? __cfi_mutex_unlock+0x10/0x10 [ 136.931636][ T1869] dump_stack+0x15/0x24 [ 136.935816][ T1869] should_fail_ex+0x3bf/0x510 [ 136.940507][ T1869] should_fail+0xb/0x10 [ 136.944677][ T1869] should_fail_usercopy+0x1a/0x20 [ 136.949748][ T1869] strncpy_from_user+0x24/0x2c0 [ 136.954623][ T1869] ? kmem_cache_alloc+0x166/0x320 [ 136.959668][ T1869] ? getname_flags+0xba/0x510 [ 136.964370][ T1869] getname_flags+0xf5/0x510 [ 136.968882][ T1869] ? debug_smp_processor_id+0x17/0x20 [ 136.974282][ T1869] __x64_sys_unlink+0x3c/0x50 [ 136.978974][ T1869] x64_sys_call+0x958/0x9a0 [ 136.983495][ T1869] do_syscall_64+0x4c/0xa0 [ 136.987921][ T1869] ? clear_bhb_loop+0x30/0x80 [ 136.992619][ T1869] ? clear_bhb_loop+0x30/0x80 [ 136.997319][ T1869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.003231][ T1869] RIP: 0033:0x7f96e239f559 [ 137.007654][ T1869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.027270][ T1869] RSP: 002b:00007f96e31c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 137.035697][ T1869] RAX: ffffffffffffffda RBX: 00007f96e2625fa0 RCX: 00007f96e239f559 [ 137.043684][ T1869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001880 [ 137.051705][ T1869] RBP: 00007f96e31c2090 R08: 0000000000000000 R09: 0000000000000000 [ 137.059706][ T1869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.067700][ T1869] R13: 00007f96e2626038 R14: 00007f96e2625fa0 R15: 00007ffe847faa48 [ 137.075690][ T1869] [ 137.098372][ T403] usb 3-1: USB disconnect, device number 9 [ 137.120463][ T1871] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.390: inode has both inline data and extents flags [ 137.134063][ T1871] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.390: couldn't read orphan inode 15 (err -117) [ 137.147473][ T1871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.057967][ T287] EXT4-fs (loop3): unmounting filesystem. [ 139.073033][ T1886] loop1: detected capacity change from 0 to 128 [ 139.451631][ T289] EXT4-fs (loop2): unmounting filesystem. [ 139.468875][ T1886] FAT-fs (loop1): bogus sectors per cluster 0 [ 139.485719][ T28] audit: type=1400 audit(1792925254.670:414): avc: denied { create } for pid=1883 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.511377][ T1886] FAT-fs (loop1): Can't find a valid FAT filesystem [ 139.638319][ T1886] loop1: detected capacity change from 0 to 128 [ 139.806520][ T1886] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 140.074792][ T1900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.396'. [ 140.718030][ T28] audit: type=1400 audit(1792925255.930:415): avc: denied { getopt } for pid=1899 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.899254][ T1904] loop2: detected capacity change from 0 to 256 [ 141.036817][ T1904] exfat: Deprecated parameter 'utf8' [ 141.042286][ T1904] exfat: Deprecated parameter 'namecase' [ 141.061730][ T1910] loop1: detected capacity change from 0 to 256 [ 141.073542][ T1910] exfat: Deprecated parameter 'utf8' [ 141.083763][ T1910] exfat: Deprecated parameter 'namecase' [ 141.089936][ T1904] exfat: Unknown parameter 'fowner>00000000000000000000' [ 141.137873][ T1910] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 141.339826][ T1917] loop1: detected capacity change from 0 to 512 [ 141.983806][ T1920] loop2: detected capacity change from 0 to 40427 [ 141.993491][ T1917] EXT4-fs (loop1): Test dummy encryption mode enabled [ 142.008047][ T1920] F2FS-fs (loop2): invalid crc value [ 142.063427][ T1920] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.306975][ T1920] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.444052][ T1917] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #11: block 4559633: comm syz.1.402: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 142.460085][ T1917] EXT4-fs (loop1): 1 orphan inode deleted [ 142.465893][ T1917] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.515133][ T286] EXT4-fs (loop1): unmounting filesystem. [ 144.229607][ T1942] loop2: detected capacity change from 0 to 512 [ 144.289506][ T1943] loop3: detected capacity change from 0 to 512 [ 144.301263][ T1942] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.407: inode has both inline data and extents flags [ 144.327998][ T1942] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.407: couldn't read orphan inode 15 (err -117) [ 144.346586][ T1942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.364778][ T1936] loop1: detected capacity change from 0 to 40427 [ 144.372701][ T1936] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 144.380622][ T1936] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.389373][ T1936] F2FS-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 144.419019][ T1950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 144.640904][ T1943] loop3: detected capacity change from 0 to 256 [ 144.683313][ T289] EXT4-fs (loop2): unmounting filesystem. [ 144.815976][ T28] audit: type=1400 audit(1792925260.000:416): avc: denied { lock } for pid=1955 comm="syz.1.413" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 145.120615][ T1965] loop2: detected capacity change from 0 to 512 [ 145.128333][ T1965] EXT4-fs (loop2): Test dummy encryption mode enabled [ 145.246710][ T1965] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #11: block 4559633: comm syz.2.414: lblock 3 mapped to illegal pblock 4559633 (length 1) [ 145.262809][ T1965] EXT4-fs (loop2): 1 orphan inode deleted [ 145.268618][ T1965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 145.817973][ T28] audit: type=1400 audit(1792925261.030:417): avc: denied { mounton } for pid=1969 comm="syz.4.418" path=2F3130332FE91F7189591E9233614B dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 145.848450][ T1943] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 145.866976][ T289] EXT4-fs (loop2): unmounting filesystem. [ 145.956294][ T1981] loop3: detected capacity change from 0 to 256 [ 145.972654][ T1981] exfat: Deprecated parameter 'utf8' [ 146.011173][ T1981] exfat: Deprecated parameter 'namecase' [ 146.131901][ T1981] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 146.594567][ T1987] loop3: detected capacity change from 0 to 256 [ 147.028488][ T1987] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 147.184928][ T1995] loop3: detected capacity change from 0 to 512 [ 147.208938][ T1997] loop1: detected capacity change from 0 to 512 [ 147.254471][ T1999] overlayfs: failed to clone upperpath [ 147.362419][ T1995] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.465487][ T1997] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.425: inode has both inline data and extents flags [ 147.485192][ T1995] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.562601][ T1979] loop2: detected capacity change from 0 to 40427 [ 147.597459][ T1997] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.425: couldn't read orphan inode 15 (err -117) [ 147.667543][ T1979] F2FS-fs (loop2): invalid crc value [ 147.699008][ T28] audit: type=1400 audit(1792925262.910:418): avc: denied { mounton } for pid=1994 comm="syz.3.424" path="/83/file1/dev" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 147.811301][ T1997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.849925][ T1979] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.185995][ T1979] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 148.587142][ T286] EXT4-fs (loop1): unmounting filesystem. [ 148.679859][ T287] EXT4-fs (loop3): unmounting filesystem. [ 148.847358][ T2014] device lo entered promiscuous mode [ 148.865172][ T2030] loop1: detected capacity change from 0 to 256 [ 148.872150][ T2014] device tunl0 entered promiscuous mode [ 148.878658][ T2014] device gre0 entered promiscuous mode [ 148.895687][ T2030] exfat: Deprecated parameter 'utf8' [ 148.913019][ T2014] device gretap0 entered promiscuous mode [ 148.919944][ T2030] exfat: Deprecated parameter 'namecase' [ 148.943439][ T2014] device erspan0 entered promiscuous mode [ 148.952054][ T2030] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 148.965258][ T2014] device ip_vti0 entered promiscuous mode [ 148.973036][ T2014] device ip6_vti0 entered promiscuous mode [ 148.986100][ T2014] device sit0 entered promiscuous mode [ 148.992066][ T2014] device ip6tnl0 entered promiscuous mode [ 149.006691][ T2014] device ip6gre0 entered promiscuous mode [ 149.015698][ T28] audit: type=1400 audit(1792925264.190:419): avc: denied { ioctl } for pid=2029 comm="syz.1.432" path="/77/file1/file1" dev="loop1" ino=1048663 ioctlcmd=0x6613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.047951][ T2014] device syz_tun entered promiscuous mode [ 149.062716][ T2014] device ip6gretap0 entered promiscuous mode [ 149.076699][ T2014] device bridge0 entered promiscuous mode [ 149.090428][ T2014] device vcan0 entered promiscuous mode [ 149.103483][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.120231][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.136213][ T2014] device dummy0 entered promiscuous mode [ 149.148678][ T2014] device veth0 entered promiscuous mode [ 149.158688][ T2014] device veth1 entered promiscuous mode [ 149.164845][ T2014] device wg0 entered promiscuous mode [ 149.170799][ T2014] device wg1 entered promiscuous mode [ 149.176845][ T2014] device wg2 entered promiscuous mode [ 149.182588][ T2014] device veth0_to_bridge entered promiscuous mode [ 149.189976][ T2014] device bridge_slave_0 entered promiscuous mode [ 149.196952][ T2014] device veth1_to_bridge entered promiscuous mode [ 149.203902][ T2014] device bridge_slave_1 entered promiscuous mode [ 149.231053][ T2014] device veth0_to_bond entered promiscuous mode [ 149.245618][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.261823][ T2014] device bond_slave_0 entered promiscuous mode [ 149.283215][ T2014] device veth1_to_bond entered promiscuous mode [ 149.304609][ T2014] device bond_slave_1 entered promiscuous mode [ 149.330146][ T2014] device veth0_to_team entered promiscuous mode [ 149.352436][ T2014] device team_slave_0 entered promiscuous mode [ 149.373522][ T2014] device veth1_to_team entered promiscuous mode [ 149.395369][ T2014] device team_slave_1 entered promiscuous mode [ 149.450658][ T2014] device veth0_to_batadv entered promiscuous mode [ 149.472839][ T2014] device batadv_slave_0 entered promiscuous mode [ 149.480868][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.499281][ T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.516007][ T2014] device veth1_to_batadv entered promiscuous mode [ 149.537012][ T2014] device batadv_slave_1 entered promiscuous mode [ 149.543882][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.571811][ T2014] device xfrm0 entered promiscuous mode [ 149.589805][ T19] usb 2-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 149.600854][ T2014] device veth0_to_hsr entered promiscuous mode [ 149.621695][ T2014] device hsr_slave_0 entered promiscuous mode [ 149.631626][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.650616][ T2014] device veth1_to_hsr entered promiscuous mode [ 149.672086][ T2014] device hsr_slave_1 entered promiscuous mode [ 149.692855][ T2014] device veth1_virt_wifi entered promiscuous mode [ 149.701719][ T19] usb-storage 2-1:1.0: USB Mass Storage device detected [ 149.724347][ T19] usb-storage 2-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 149.733406][ T2014] device veth0_virt_wifi entered promiscuous mode [ 149.754717][ T2014] device veth1_vlan entered promiscuous mode [ 149.805875][ T2014] device vlan0 entered promiscuous mode [ 149.812082][ T2014] device vlan1 entered promiscuous mode [ 149.826328][ T2014] device veth1_macvtap entered promiscuous mode [ 149.843309][ T2014] device veth0_macvtap entered promiscuous mode [ 149.853418][ T2014] device erspan1 entered promiscuous mode [ 149.905221][ T19] usb 2-1: USB disconnect, device number 5 [ 149.956682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 149.972294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.980991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 149.989584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.998136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.006858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.015279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.024032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.331442][ T28] audit: type=1400 audit(1792925265.540:420): avc: denied { accept } for pid=2040 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.360561][ T2046] loop2: detected capacity change from 0 to 256 [ 150.366868][ T28] audit: type=1400 audit(1792925265.570:421): avc: denied { sys_admin } for pid=2040 comm="syz.0.434" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 150.392276][ T2046] FAT-fs (loop2): Unrecognized mount option "sys_immut" or missing value [ 150.402207][ T28] audit: type=1400 audit(1792925265.620:422): avc: denied { watch_reads } for pid=2042 comm="syz.2.436" path="/69" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.095686][ T2053] loop3: detected capacity change from 0 to 40427 [ 151.138910][ T2053] F2FS-fs (loop3): invalid crc value [ 151.242800][ T2053] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.334702][ T28] audit: type=1400 audit(1792925266.540:423): avc: denied { read } for pid=2052 comm="syz.1.439" path="socket:[21915]" dev="sockfs" ino=21915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.363456][ T2053] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.009493][ T2066] loop2: detected capacity change from 0 to 512 [ 152.056330][ T2066] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.442: inode has both inline data and extents flags [ 152.156236][ T2066] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.442: couldn't read orphan inode 15 (err -117) [ 152.184811][ T2066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.410584][ T2079] loop1: detected capacity change from 0 to 128 [ 155.398828][ T2098] loop3: detected capacity change from 0 to 256 [ 155.422593][ T289] EXT4-fs (loop2): unmounting filesystem. [ 155.439718][ T2098] exfat: Deprecated parameter 'utf8' [ 155.445103][ T2098] exfat: Deprecated parameter 'namecase' [ 155.461843][ T2098] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 155.667916][ T2095] loop1: detected capacity change from 0 to 131072 [ 155.753912][ T28] audit: type=1400 audit(1792925270.960:424): avc: denied { read } for pid=2092 comm="syz.4.448" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.775134][ T2095] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 155.783313][ T2095] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 155.793557][ T2095] F2FS-fs (loop1): invalid crc value [ 156.023346][ T2095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.146098][ T2095] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 156.153234][ T2095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 156.682293][ T2107] loop2: detected capacity change from 0 to 40427 [ 156.695833][ T2107] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 156.703093][ T2107] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 156.745638][ T2107] F2FS-fs (loop2): Image doesn't support compression [ 156.752389][ T2107] F2FS-fs (loop2): Image doesn't support compression [ 156.863572][ T2107] F2FS-fs (loop2): invalid crc value [ 156.870487][ T2107] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 157.882145][ T2107] F2FS-fs (loop2): Start checkpoint disabled! [ 157.906004][ T2107] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 158.055833][ T2107] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 158.063031][ T2107] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 158.106281][ T28] audit: type=1400 audit(1792925273.320:425): avc: denied { remount } for pid=2127 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 158.140904][ T2130] loop1: detected capacity change from 0 to 128 [ 158.165578][ T28] audit: type=1400 audit(1792925273.340:426): avc: denied { associate } for pid=2129 comm="syz.4.458" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 158.475562][ T316] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 158.572922][ T2139] x_tables: duplicate underflow at hook 2 [ 158.665625][ T316] usb 3-1: Using ep0 maxpacket: 16 [ 158.672333][ T316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.689410][ T316] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice= 0.40 [ 158.706761][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.730244][ T316] usb 3-1: Product: syz [ 158.748800][ T316] usb 3-1: Manufacturer: syz [ 158.753611][ T316] usb 3-1: SerialNumber: syz [ 158.983253][ T2107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.000612][ T2154] loop1: detected capacity change from 0 to 128 [ 159.008564][ T2107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.031686][ T316] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 159.062159][ T1488] udevd[1488]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.078492][ T316] usb 3-1: USB disconnect, device number 10 [ 160.068638][ T334] kworker/u4:4: attempt to access beyond end of device [ 160.068638][ T334] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.106747][ T28] audit: type=1400 audit(1792925275.320:427): avc: denied { write } for pid=2181 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 160.625654][ T28] audit: type=1400 audit(1792925275.350:428): avc: denied { create } for pid=2181 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 161.100114][ T2208] loop3: detected capacity change from 0 to 512 [ 161.137811][ T288] cgroup: fork rejected by pids controller in /syz0 [ 161.207264][ T1488] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.207915][ T2204] loop3: detected capacity change from 0 to 256 [ 162.051990][ T2220] netlink: 'syz.2.474': attribute type 7 has an invalid length. [ 162.059718][ T2220] netlink: 'syz.2.474': attribute type 5 has an invalid length. [ 162.067418][ T2220] netlink: 17 bytes leftover after parsing attributes in process `syz.2.474'. [ 162.331071][ T2229] loop1: detected capacity change from 0 to 256 [ 162.424207][ T2229] exfat: Deprecated parameter 'utf8' [ 162.545653][ T2229] exfat: Deprecated parameter 'namecase' [ 162.632312][ T2229] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 162.726245][ T28] audit: type=1400 audit(1792925277.930:429): avc: denied { mounton } for pid=2235 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 162.803403][ T28] audit: type=1400 audit(1792925278.000:430): avc: denied { create } for pid=2235 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 162.826428][ T2237] loop2: detected capacity change from 0 to 512 [ 162.847912][ T2242] overlayfs: failed to clone lowerpath [ 162.861326][ T2237] EXT4-fs (loop2): orphan cleanup on readonly fs [ 162.873586][ T2246] fuse: Bad value for 'fd' [ 162.873943][ T2237] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.487: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 162.895988][ T309] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.912559][ T2237] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.487: Bad quota inode: 4, type: 1 [ 162.924114][ T2237] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.939066][ T2237] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 162.941935][ T2248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.491'. [ 162.946190][ T2237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 162.973225][ T2235] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.980539][ T2235] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.981239][ T289] EXT4-fs (loop2): unmounting filesystem. [ 162.989252][ T2235] device bridge_slave_0 entered promiscuous mode [ 163.005680][ T2235] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.012752][ T2235] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.026775][ T2235] device bridge_slave_1 entered promiscuous mode [ 163.086599][ T309] usb 4-1: device descriptor read/64, error -71 [ 163.229661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.247917][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.329546][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.375628][ T309] usb 4-1: device descriptor read/64, error -71 [ 163.441527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.526626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.614001][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.645742][ T309] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.707509][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.714646][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.815624][ T309] usb 4-1: device descriptor read/64, error -71 [ 163.935994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.954828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.986369][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.993603][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.085561][ T309] usb 4-1: device descriptor read/64, error -71 [ 164.185642][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.216061][ T309] usb usb4-port1: attempt power cycle [ 164.224324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.234571][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.249274][ T2235] device veth0_vlan entered promiscuous mode [ 164.255922][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.264104][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.280152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.288260][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.296100][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.304476][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.316030][ T2235] device veth1_macvtap entered promiscuous mode [ 164.333521][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.341315][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.350174][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.362365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.376217][ T28] audit: type=1400 audit(1792925279.590:431): avc: denied { bind } for pid=2279 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.378338][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.426512][ T334] tipc: Left network mode [ 164.431787][ T28] audit: type=1400 audit(1792925279.640:432): avc: denied { mount } for pid=2235 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.463689][ T2282] netlink: 72 bytes leftover after parsing attributes in process `syz.4.501'. [ 164.474892][ T28] audit: type=1400 audit(1792925279.640:433): avc: denied { mounton } for pid=2235 comm="syz-executor" path="/root/syzkaller.M8Nq04/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 164.483965][ T2284] netlink: 72 bytes leftover after parsing attributes in process `syz.4.501'. [ 164.519448][ T28] audit: type=1400 audit(1792925279.730:434): avc: denied { bind } for pid=2281 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.610336][ T2289] loop1: detected capacity change from 0 to 512 [ 164.619104][ T2289] EXT4-fs: Ignoring removed bh option [ 164.625031][ T2289] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.644448][ T2293] loop2: detected capacity change from 0 to 1024 [ 164.655039][ T2293] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (56885!=20869) [ 164.667358][ T2293] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 164.676279][ T309] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.695577][ T2289] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 164.710334][ T2289] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.502: bg 0: block 248: padding at end of block bitmap is not set [ 164.716881][ T2293] loop2: detected capacity change from 0 to 512 [ 164.729060][ T309] usb 4-1: device descriptor read/8, error -71 [ 164.737355][ T2289] Quota error (device loop1): write_blk: dquota write failed [ 164.744937][ T2289] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 164.755415][ T2289] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.502: Failed to acquire dquot type 1 [ 164.765883][ T2293] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.504: inode #1: comm syz.2.504: iget: illegal inode # [ 164.769084][ T2289] EXT4-fs (loop1): 1 truncate cleaned up [ 164.784991][ T2293] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.504: error while reading EA inode 1 err=-117 [ 164.785079][ T2289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 164.801275][ T2293] EXT4-fs (loop2): 1 orphan inode deleted [ 164.812127][ T2293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 164.831189][ T289] EXT4-fs (loop2): unmounting filesystem. [ 164.859314][ T286] EXT4-fs (loop1): unmounting filesystem. [ 164.886681][ T309] usb 4-1: device descriptor read/8, error -71 [ 164.895292][ T28] audit: type=1400 audit(1792925280.100:435): avc: denied { write } for pid=2304 comm="syz.1.507" name="wireless" dev="proc" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 164.900786][ T2305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2305 comm=syz.1.507 [ 165.155673][ T309] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 165.188099][ T309] usb 4-1: device descriptor read/8, error -71 [ 165.223647][ T316] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 165.377267][ T309] usb 4-1: device descriptor read/8, error -71 [ 165.680291][ T309] usb usb4-port1: unable to enumerate USB device [ 165.865933][ T28] audit: type=1326 audit(1792925281.080:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2314 comm="syz.4.510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ec79f559 code=0x7ffc0000 [ 165.927375][ T2321] loop3: detected capacity change from 0 to 128 [ 166.027589][ T2333] futex_wake_op: syz.3.512 tries to shift op by 144; fix this program [ 166.165567][ T316] usb 3-1: device descriptor read/64, error -71 [ 166.274938][ T2351] netem: invalid attributes len -16 [ 166.284008][ T2351] netem: change failed [ 166.315223][ T2351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 166.354198][ T2341] loop1: detected capacity change from 0 to 40427 [ 166.361706][ T2341] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 166.368383][ T2341] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 166.377421][ T2341] F2FS-fs (loop1): invalid crc value [ 166.412931][ T2341] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 166.445608][ T316] usb 3-1: device descriptor read/64, error -71 [ 166.460808][ T2341] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 166.468771][ T2341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.472175][ T2342] loop3: detected capacity change from 0 to 40427 [ 166.485937][ T2342] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 166.493801][ T2342] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 166.502082][ T2342] F2FS-fs (loop3): Unrecognized mount option "0xffffffffffffffff" or missing value [ 166.503652][ T1963] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 166.546271][ T1963] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.605628][ T39] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 166.725596][ T316] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 166.797424][ T39] usb 1-1: not running at top speed; connect to a high speed hub [ 166.809737][ T39] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 166.825452][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.841257][ T39] usb 1-1: Product: о [ 166.848159][ T39] usb 1-1: Manufacturer: ఊ [ 166.852920][ T39] usb 1-1: SerialNumber: 㧩֜骴㖌ꔁ㻁⿮鈒⌝ﮘଶ᜸ﳖ浼뤓蚾뻥賷뫥᭹ᶸ쯭銪➬뺡Ⰽ老ﱂ㗃诃ඐ鯆櫝᤬溠ꩭ챀⸹슐텐ꖜ疌쳟듈퇆＠ꮡ쵦쥖뉘쮢朲ぢ䴉栝歌ꪪ멌츢菚꭫蘶蹽欨侷 [ 166.876435][ T286] syz-executor: attempt to access beyond end of device [ 166.876435][ T286] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.905576][ T316] usb 3-1: device descriptor read/64, error -71 [ 166.987102][ T2366] loop3: detected capacity change from 0 to 512 [ 166.987578][ T2368] fuse: Bad value for 'fd' [ 166.999495][ C0] ================================================================== [ 167.007679][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 167.015084][ C0] Read of size 8 at addr ffff888132ec0990 by task udevd/1400 [ 167.022470][ C0] [ 167.024814][ C0] CPU: 0 PID: 1400 Comm: udevd Tainted: G W syzkaller #0 [ 167.033249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 167.043319][ C0] Call Trace: [ 167.046616][ C0] [ 167.049472][ C0] __dump_stack+0x21/0x24 [ 167.053821][ C0] dump_stack_lvl+0x110/0x170 [ 167.058539][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 167.063603][ C0] ? debug_smp_processor_id+0x17/0x20 [ 167.069001][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 167.074054][ C0] print_address_description+0x71/0x200 [ 167.079646][ C0] print_report+0x4a/0x60 [ 167.084001][ C0] kasan_report+0x122/0x150 [ 167.088520][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 167.093566][ C0] __asan_report_load8_noabort+0x14/0x20 [ 167.099243][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 167.104130][ C0] rcu_do_batch+0x4bc/0xc30 [ 167.108668][ C0] ? rcu_core+0xf00/0xf00 [ 167.113016][ C0] ? swake_up_one_online+0x66/0x110 [ 167.118230][ C0] ? rcu_report_qs_rnp+0x37b/0x390 [ 167.123370][ C0] rcu_core+0x486/0xf00 [ 167.127548][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 167.132766][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 167.137990][ C0] rcu_core_si+0x9/0x10 [ 167.142167][ C0] handle_softirqs+0x1dd/0x5f0 [ 167.146950][ C0] __irq_exit_rcu+0x52/0xf0 [ 167.151474][ C0] irq_exit_rcu+0x9/0x10 [ 167.155740][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 167.161409][ C0] [ 167.164353][ C0] [ 167.167298][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 167.173328][ C0] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 167.179156][ C0] Code: 74 12 48 89 fb 48 c7 c7 c0 db 0d 87 e8 01 fb b4 fc 48 89 df 48 83 3d 26 c8 0b 02 00 74 26 e8 13 0d 00 00 90 fb bf 01 00 00 00 83 83 4a fc 65 8b 05 14 5a 00 7b 85 c0 74 03 5b 5d c3 e8 e4 68 [ 167.198776][ C0] RSP: 0018:ffffc90000aef1b8 EFLAGS: 00000246 [ 167.204867][ C0] RAX: 0000000000000001 RBX: ffff88810baac07c RCX: dffffc0000000000 [ 167.212851][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 167.220841][ C0] RBP: ffffc90000aef1c0 R08: ffff88811352e558 R09: 0000000000000004 [ 167.228829][ C0] R10: dffffc0000000000 R11: fffff5200015dde0 R12: ffff88810baac080 [ 167.236810][ C0] R13: ffff88810bb3ce08 R14: dffffc0000000000 R15: ffff88810baac088 [ 167.244822][ C0] ? _raw_spin_unlock_irq+0x41/0x70 [ 167.250040][ C0] loop_queue_rq+0x927/0xae0 [ 167.254656][ C0] __blk_mq_try_issue_directly+0x4d0/0x7e0 [ 167.260484][ C0] ? blk_mq_commit_rqs+0x280/0x280 [ 167.265622][ C0] blk_mq_plug_issue_direct+0x173/0x3e0 [ 167.271201][ C0] blk_mq_flush_plug_list+0x450/0xa70 [ 167.276598][ C0] ? submit_bio+0x1ae/0x2a0 [ 167.281116][ C0] ? __cfi_blk_mq_flush_plug_list+0x10/0x10 [ 167.287026][ C0] ? mpage_readahead+0x446/0x540 [ 167.291984][ C0] ? __cfi_mpage_readahead+0x10/0x10 [ 167.297291][ C0] __blk_flush_plug+0x3f2/0x470 [ 167.302159][ C0] ? __cfi___blk_flush_plug+0x10/0x10 [ 167.307546][ C0] ? xas_nomem+0x6b/0x1f0 [ 167.311885][ C0] blk_finish_plug+0x5d/0x80 [ 167.316495][ C0] read_pages+0xa9d/0xe10 [ 167.320843][ C0] ? page_cache_ra_unbounded+0x850/0x850 [ 167.326494][ C0] ? filemap_add_folio+0x113/0x260 [ 167.331616][ C0] page_cache_ra_unbounded+0x6ff/0x850 [ 167.337092][ C0] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 167.343087][ C0] ? filemap_get_read_batch+0x771/0x7d0 [ 167.348644][ C0] do_page_cache_ra+0x10f/0x230 [ 167.353509][ C0] page_cache_sync_ra+0x32b/0x3d0 [ 167.358552][ C0] filemap_read+0x6b6/0x23c0 [ 167.363159][ C0] ? __cfi_mas_store_prealloc+0x10/0x10 [ 167.368726][ C0] ? __cfi_filemap_read+0x10/0x10 [ 167.373763][ C0] ? __kasan_check_write+0x14/0x20 [ 167.378896][ C0] ? rwsem_read_trylock+0x2af/0x640 [ 167.384121][ C0] ? __fsnotify_parent+0x72a/0x820 [ 167.389246][ C0] ? get_unmapped_area+0x30c/0x370 [ 167.394380][ C0] blkdev_read_iter+0x439/0x580 [ 167.399244][ C0] vfs_read+0x46e/0x930 [ 167.403410][ C0] ? __cfi_vfs_read+0x10/0x10 [ 167.408099][ C0] ? __kasan_check_read+0x11/0x20 [ 167.413130][ C0] ? __fdget_pos+0x1f2/0x380 [ 167.417751][ C0] ksys_read+0x14a/0x260 [ 167.422017][ C0] ? __cfi_ksys_read+0x10/0x10 [ 167.426790][ C0] ? debug_smp_processor_id+0x17/0x20 [ 167.432182][ C0] __x64_sys_read+0x7b/0x90 [ 167.436698][ C0] x64_sys_call+0x2f/0x9a0 [ 167.441128][ C0] do_syscall_64+0x4c/0xa0 [ 167.445565][ C0] ? clear_bhb_loop+0x30/0x80 [ 167.450255][ C0] ? clear_bhb_loop+0x30/0x80 [ 167.454952][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.460865][ C0] RIP: 0033:0x7f2271ea7407 [ 167.465287][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 167.484907][ C0] RSP: 002b:00007ffdd5a05620 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 167.493331][ C0] RAX: ffffffffffffffda RBX: 00007f227261c880 RCX: 00007f2271ea7407 [ 167.501318][ C0] RDX: 0000000000000200 RSI: 00007f227261b000 RDI: 0000000000000009 [ 167.509300][ C0] RBP: 000055f9509a5790 R08: 0000000000000000 R09: 0000000000000000 [ 167.517370][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 167.525350][ C0] R13: 0000000000000000 R14: 000055f9509a6b48 R15: 00007f227274339c [ 167.533343][ C0] [ 167.536376][ C0] [ 167.538705][ C0] Allocated by task 2362: [ 167.543037][ C0] kasan_set_track+0x4b/0x70 [ 167.547651][ C0] kasan_save_alloc_info+0x1f/0x30 [ 167.552775][ C0] __kasan_kmalloc+0x95/0xb0 [ 167.557376][ C0] __kmalloc+0xb4/0x1e0 [ 167.561558][ C0] l2tp_session_create+0x38/0xbd0 [ 167.566603][ C0] pppol2tp_connect+0xbf5/0x1640 [ 167.571563][ C0] __sys_connect+0x3da/0x460 [ 167.576190][ C0] __x64_sys_connect+0x7a/0x90 [ 167.580993][ C0] x64_sys_call+0x88d/0x9a0 [ 167.585508][ C0] do_syscall_64+0x4c/0xa0 [ 167.589940][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.595863][ C0] [ 167.598205][ C0] Freed by task 8: [ 167.601931][ C0] kasan_set_track+0x4b/0x70 [ 167.606537][ C0] kasan_save_free_info+0x2b/0x40 [ 167.611571][ C0] ____kasan_slab_free+0x132/0x180 [ 167.616701][ C0] __kasan_slab_free+0x11/0x20 [ 167.621476][ C0] slab_free_freelist_hook+0xc2/0x190 [ 167.626854][ C0] __kmem_cache_free+0xb7/0x1b0 [ 167.631744][ C0] kfree+0x6f/0xf0 [ 167.635476][ C0] l2tp_session_put+0xaf/0x1a0 [ 167.640261][ C0] l2tp_session_delete+0x3df/0x4d0 [ 167.645389][ C0] l2tp_tunnel_del_work+0x199/0x410 [ 167.650604][ C0] process_one_work+0x717/0xc30 [ 167.655470][ C0] worker_thread+0xa4d/0x11d0 [ 167.660161][ C0] kthread+0x281/0x320 [ 167.664241][ C0] ret_from_fork+0x1f/0x30 [ 167.668676][ C0] [ 167.671004][ C0] Last potentially related work creation: [ 167.676718][ C0] kasan_save_stack+0x3a/0x60 [ 167.681403][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 167.686870][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 167.692701][ C0] call_rcu+0xcf/0xf50 [ 167.696778][ C0] pppol2tp_release+0x1e3/0x2b0 [ 167.701652][ C0] sock_close+0xc9/0x220 [ 167.705906][ C0] __fput+0x1fd/0x8f0 [ 167.709908][ C0] ____fput+0x15/0x20 [ 167.713911][ C0] task_work_run+0x1e1/0x250 [ 167.718534][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 167.723742][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 167.729218][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 167.734700][ C0] do_syscall_64+0x58/0xa0 [ 167.739120][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.745020][ C0] [ 167.747374][ C0] The buggy address belongs to the object at ffff888132ec0800 [ 167.747374][ C0] which belongs to the cache kmalloc-512 of size 512 [ 167.761432][ C0] The buggy address is located 400 bytes inside of [ 167.761432][ C0] 512-byte region [ffff888132ec0800, ffff888132ec0a00) [ 167.774718][ C0] [ 167.777054][ C0] The buggy address belongs to the physical page: [ 167.783468][ C0] page:ffffea0004cbb000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x132ec0 [ 167.793713][ C0] head:ffffea0004cbb000 order:2 compound_mapcount:0 compound_pincount:0 [ 167.802041][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 167.808162][ C0] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 167.816759][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 167.825350][ C0] page dumped because: kasan: bad access detected [ 167.831776][ C0] page_owner tracks the page as allocated [ 167.837492][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 19, tgid 19 (kworker/0:1), ts 26617668942, free_ts 0 [ 167.856948][ C0] post_alloc_hook+0x1f5/0x210 [ 167.861731][ C0] prep_new_page+0x1c/0x110 [ 167.866245][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 167.871828][ C0] __alloc_pages+0x1fa/0x610 [ 167.876434][ C0] alloc_slab_page+0x6e/0xf0 [ 167.881034][ C0] new_slab+0x98/0x3e0 [ 167.885113][ C0] ___slab_alloc+0x70f/0xb70 [ 167.889724][ C0] __slab_alloc+0x5e/0xa0 [ 167.894087][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 167.899564][ C0] __kmalloc_node_track_caller+0xa1/0x1e0 [ 167.905298][ C0] __alloc_skb+0x226/0x4a0 [ 167.909727][ C0] ndisc_ns_create+0x26e/0x920 [ 167.914649][ C0] ndisc_send_ns+0xb7/0x160 [ 167.919160][ C0] addrconf_dad_work+0x9d6/0x14a0 [ 167.924197][ C0] process_one_work+0x717/0xc30 [ 167.929069][ C0] worker_thread+0xa4d/0x11d0 [ 167.933765][ C0] page_owner free stack trace missing [ 167.939135][ C0] [ 167.941459][ C0] Memory state around the buggy address: [ 167.947086][ C0] ffff888132ec0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.955156][ C0] ffff888132ec0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.963236][ C0] >ffff888132ec0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.971296][ C0] ^ [ 167.975887][ C0] ffff888132ec0a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.983962][ C0] ffff888132ec0a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.992027][ C0] ================================================================== [ 168.000144][ C0] Disabling lock debugging due to kernel taint [ 168.012331][ T39] usb 1-1: MIDIStreaming interface descriptor not found [ 168.026702][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 168.026717][ T28] audit: type=1400 audit(1792925283.240:447): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 168.056890][ T2368] device-mapper: table: 252:3: crypt: Error decoding and setting key (-EINVAL) [ 168.060659][ T28] audit: type=1400 audit(1792925283.270:448): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.067773][ T2368] device-mapper: ioctl: error adding target to table [ 168.092126][ T28] audit: type=1400 audit(1792925283.270:449): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.119110][ T39] usb 1-1: USB disconnect, device number 6 [ 168.126626][ T28] audit: type=1400 audit(1792925283.270:450): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.148157][ T28] audit: type=1400 audit(1792925283.270:451): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.164123][ T2366] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.523: inode has both inline data and extents flags [ 168.169214][ T28] audit: type=1400 audit(1792925283.270:452): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.183180][ T2366] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.523: couldn't read orphan inode 15 (err -117) [ 168.207744][ T28] audit: type=1400 audit(1792925283.270:453): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.222605][ T2366] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.342438][ T287] EXT4-fs (loop3): unmounting filesystem. [ 168.366218][ T1400] udevd[1400]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory