last executing test programs: 4m46.377789848s ago: executing program 32 (id=790): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m40.836260873s ago: executing program 33 (id=818): bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000006c0)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/227, 0xe3, 0x1, 0x800032}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x39}}, &(0x7f0000000140)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0x1, 0x10000, 0x7, 0xfbf7ffff, 0xff, 'Mk\x00', 0x0, 0x7}) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x7486}, {r0, 0x2384}, {0xffffffffffffffff, 0x410c}], 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d522a82b1}, 0x200048c4) 3m23.73318209s ago: executing program 34 (id=1124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 3m6.918001383s ago: executing program 35 (id=1205): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x222400, 0x0) syz_emit_ethernet(0xd1, &(0x7f0000001800)={@local, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f6ff01", 0x93, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x4b, 0x1, [0x5b93, 0x2], "5ec288538f1ea489a56475583f45b762224031de4802ff9196ad79245f7191db7a7e8a623da0d4acac63f239fdb586eb9be52cf85b0c08a1c19e2dddf0666bb483f01c929b8bb790aa6950"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0xdd86, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b43}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000001140)="7000000018002507b9409b14ffff00000204be040205fe050e0204094300080004000000060000000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f5090", 0x50, 0x70, 0x0, 0x0) statx(r0, 0x0, 0x1000, 0x200, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x69420, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m51.342071564s ago: executing program 36 (id=1261): bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000006c0)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/227, 0xe3, 0x1, 0x800032}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x39}}, &(0x7f0000000140)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0x1, 0x10000, 0x7, 0xfbf7ffff, 0xff, 'Mk\x00', 0x0, 0x7}) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x7486}, {r0, 0x2384}, {0xffffffffffffffff, 0x410c}], 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d522a82b1}, 0x200048c4) 2m18.317232494s ago: executing program 37 (id=1394): timer_settime(0x0, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x1}, 0x1, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x8000, 0x40, 0xfffffffd, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x2, 0x1, 0x0, 0x40000000], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0xfffffffc, 0x3, 0x0, 0x2000079, 0x400, 0x0, 0x2, 0x10003, 0x40000, 0x7, 0xc0800000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x8000000, 0x4771, 0x2000000, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80004000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x2e, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x522, 0x30e8fb43, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8001, 0x80, 0x7fffffff, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x10) ioctl$UI_DEV_CREATE(r1, 0x5501) sched_setaffinity(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_create(0x7, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="8bb7", 0x2}], 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000100)=ANY=[@ANYRESOCT]) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000880)=ANY=[]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x800}, 0x40001) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000000000001201000000000000100000000000000001000000020000001bc8f26ded1b6b562251590b15e9093f1659ecd89a02dfa93911c495498973f009f9166d6fd4f9bf8a8c9f748a0bcf15140de915c52404000819a545c119f1e6fb0e6e737f852eab1801877a0436c37d9de147380dcbb1ba51a1deba53b4f4ee3ba272201ff644b45a736abab4b79ee6520d2dc262"], 0x20}, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff8, 0x50, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m9.49121873s ago: executing program 38 (id=1423): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x82882, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x60}}) 2m7.09197154s ago: executing program 2 (id=1437): mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2000410, &(0x7f0000000200)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ec0000000000000000a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06adb7b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02040000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f6505003cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096746a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd970140495fde085", @ANYBLOB="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"], 0x1, 0x555e, &(0x7f0000005f80)="$eJzs3EtvG1UUAOA7TpPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKKhJ48R9fJ80PjPX12fusUaRzkzkADy15tPff03CxXAmhDATQjifhHw/KbbcSgwvhBAuhRBK/9iSYvzvgbkQwtkQwsVR8pgzKd768srw8vIvb/323Q+nT5376tsfp1c1MG0vhhC6m3F/pxtj1orxTjFeG7bz2L0+LGJ8o3u3OM5i3Gmu5xl2auN5tTxea8X52eZ2fxQ3OrX6KLbaG/n4Zi+esD9sjfPkH7hT28qPG831PLb7WR5be3Fdu3vxb9tefxDzNIp8H+fpw2AwjnG8uduM9WzezWO9NyjGY96s0dwdxWERi9OFetZp5OtYP8o3/Wh7u93b3k2Hza1+O+uly5XqS5XqjXJ1K2s0B83r5Vq3ceN6utDqjKaVB81ad6WVZa1Os1LPuovpQqteL1er6cLN5nq71kur1cq1ytXy8mKxdyV9/fb7aaeRLoziq+3e9ly70083sq00fmIxXapce3kxvVxN311dS9feuXVrde29D29+cPuV1TdfKybdt6x0Yenq0lK5erW8VF18cI1zx13/6AQHrH9wlPo/KxZ9iPqTQ10NcEguMIBDu6//D/p/4OFdPOC8x73/D5Ps/0ctlf7/wf1v6ej9/5H634fs/ydW/wTufzxq9cOR6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5aP81+/Ua+Mx+PzxXjF4qh54rjJIRQCiH8+R9mwty+nDNFntn/mT/7rzV8n4Q8w+gcp4vtbAhhpdj+ePa4vwUAAAB4cn3zyaUvYrceX+anvSBOUrxpUzr/0YTyJSGE2fmfJ5StNHp5fkLJ8uv7VNidULb8BtYzE0oWb7mdmlS2A5kZh08v3BvMC0piKJ3ocgAAgBMxsy+cbBcCAADASfp82gtgOpIwfpQ5fhac/+f9vUebZ/a9BwAAADyGkmkvAAAAADh2ef/v9/8AAADgyRZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLnbvJWRqI4wD8b/uWDz8iMe69ijs4hkdw6VI4gJfgCHgFL8AZcOcRDDW0E5IqJMZObSTPk3TKtOQ3M9DNTJMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMX2rD5svn95+HppzbobJMxoAAADgllN92LQfVl39ebr+Ml16nepFRJQR8fvMfRlVzHqZVcqpb36/aepf+vA1ok24tDFPx7OIeJeO6tXYvwIAAAA8ruNuv+5m612xmrpD/Evdok354n2mvCIi6tX3TGnlpXiTKax9vp/iY6a0dgFrkSmsW3J7un1vlquRvqp3SiNZbNs/sa2V47QLAABMqT8TuDMLAQAA4AF8mLoDTKO4Ftf3jPPulF4ILns1AAAA4D9UTN0BAAAAYHTt/H/4/n9NM/b+fz/s/wcAAAB/rdv/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDGd6sPmuNuv793f/mHOuRkm34gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Mn+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xtFFQcA/Ls7O0tBibWaHqoGEw96kXZBkKMeNI0H/wSTpmyxuogCByGNphc9mZ5J1OjRGBNNvfE/cKYJF7xx6KEmnjXzqww/lA2pM0v7+SRv3nd2J+993+yG8O2bFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKttvx4vdMk6yw3QRV6/d3Flbzvqt+/rM9Y1bc1nL4s6jJvr6rb1PfrK9VD85Nls7+bL5ZAAAADgYkqq+j4jb6eZi1nen8/o/ra7Jav4fjhZxVc/fX/dv7axNlW/NVfX/77/deX53oulinmzQldXRcOHBVHr/0xIn3jOPvKKX3/n8Zy9J/oF031t/bjvN72fnmxs33unn4aEmsgUAHsfxqi+D6v9DWT9oMzEADoxerfCu6v9kut2cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqwvR5PVXEnIuZ6d+PM1s7a8sP66xu35qp2+tq1jfqY2RBpRKysjoZpg2uZdJeuXP14aTQaXmw+OBYR7c1eBh+McU3Ef19Tfj2jvVX8e9CZjDRaDbrl5zMp+exlUH339n7klv5BAgBgH0qORlmPp2VdfzvdXMxe68xE/P3jvfX/q7U4xqz/73x4+mZ9xnr9P2hqmRPv2+8izn86f+nK1ddXzy+dG54bfvLGicGbg5NnTp06M5/dq4X5legOF9pOFAAAgCdYv2z1+r878+D+/5FaHGPW/599P/iiPlei/n+ou5t+bWcCAABwEPV3o2df/uvPTv2tqaLr9Pvx+dLlyxcHxXH3/ERxbDzlx3CobPX6P5lpOysAAACgCdvrnXv2/8/W4hhz///pn174pT5mEhGHIy5ExPD48oXR2eaWM9Ga+EXlfKJ+2ysFAACgLYfLVuz/9/L9/zR//r+7+8hDNyJee6WIq791NU79n7z71c/1uerP/59sbokTqTtb3I+8n43ozbadEQAAAPvZVNmyYv+PdHPxo1+PvN/3/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA0/4JAAD//880Myg=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x43001, 0x20) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) unlink(&(0x7f0000000080)='./bus\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r5, @ANYRES8=r3, @ANYRESHEX=r6, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") lchown(0x0, r5, 0x0) statx(r1, &(0x7f0000002900)='./file0/file0\x00', 0x800, 0x7ff, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(0x0, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000840)='./file1\x00', &(0x7f0000000880), 0x40404, &(0x7f0000002b00)={'trans=virtio,', {[{@uname={'uname', 0x3d, '+,:-*)&],),'}}, {@access_any}, {@dfltgid}, {@dfltuid}, {@noextend}, {@noextend}, {@version_9p2000}, {@directio}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x8}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@pcr={'pcr', 0x3d, 0x28}}, {@uid_gt={'uid>', r5}}, {@euid_gt={'euid>', r7}}, {@fowner_lt={'fowner<', r8}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '/dev/kvm\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m5.866718102s ago: executing program 2 (id=1446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) futex(0xfffffffffffffffc, 0x6, 0x5, 0x0, 0x0, 0x1ffffe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = geteuid() mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2008, &(0x7f0000002200)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x33, 0x37]}}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30, 0x0, 0x2f, 0x37, 0x33, 0x33, 0x32]}}}}, {@gid={'gid', 0x3d, r1}}, {@size={'size', 0x3d, [0x38, 0x39, 0x2d, 0x25, 0x65]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x33, 0x65, 0x25, 0x0, 0x38, 0x38, 0x37, 0x38, 0x78]}}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, '^\x9a+'}}, {@uid_eq={'uid', 0x3d, r2}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000034c0)=ANY=[@ANYBLOB="00006003ffffffffffff0180c200000388a8010081004c0008004500001c00676000952f900100e0000001a00086dd"], 0x36) 2m4.225281518s ago: executing program 2 (id=1450): r0 = socket$inet(0xa, 0x801, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r2, r3, r4) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) (async) r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r1) chmod(&(0x7f0000000400)='./file0\x00', 0xc1) (async) request_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='keyring\x00', r6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) r7 = fcntl$dupfd(r5, 0x406, r5) write$cgroup_pid(r7, &(0x7f0000000240), 0xb375) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) ftruncate(r8, 0xc17a) (async) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000180), 0x4) (async) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0xfdef) accept4(r0, 0x0, 0x0, 0x800) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x460, 0x98, 0x160, 0x160, 0x0, 0x220, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x0, 0x40}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff000000, 'veth1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0xff, 0x1, 0xc}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0xffff]}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 2m3.477407112s ago: executing program 2 (id=1452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000e) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007", @ANYRES32=0x0, @ANYBLOB="06001600ea"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x90) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000140)={0x8, 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000002c0)={0x18, r1, 0x1, 0x0, 0x25dfdbfc, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x890) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x220200, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @mcast2, 0x23}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x94) 2m2.844814349s ago: executing program 2 (id=1455): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000102505a8a440000102030109021b000101000000090400ff020701010009050102003b"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) setpriority(0x0, 0xffffffffffffffff, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001c00070c27bd7000000000fe06000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000000180)='o', 0x1) 1m59.532203853s ago: executing program 2 (id=1469): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000582000/0x4000)=nil, 0x4000, 0x14) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x40002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) 1m58.602711346s ago: executing program 39 (id=1469): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000582000/0x4000)=nil, 0x4000, 0x14) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x40002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) 48.841507335s ago: executing program 9 (id=1810): userfaultfd(0x80001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007118"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x28}) io_setup(0xaa, &(0x7f0000000000)=0x0) io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={[0x1]}, 0x8}) io_destroy(r3) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000780)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0xf, 0x2a4, &(0x7f0000000480)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x18d) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 47.958491176s ago: executing program 9 (id=1812): bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000006c0)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/227, 0xe3, 0x1, 0x800032}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x39}}, &(0x7f0000000140)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x7486}, {r2, 0x2384}, {0xffffffffffffffff, 0x410c}], 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 46.984219163s ago: executing program 9 (id=1817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpgrp(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)=0x0) syz_clone3(&(0x7f0000000680)={0x2008080, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0, {0x34}, &(0x7f0000000500)=""/142, 0x8e, &(0x7f00000005c0)=""/84, &(0x7f0000000640)=[0x0], 0x1}, 0x58) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000780)={0x8000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240), {0x17}, &(0x7f0000000280)=""/142, 0x8e, &(0x7f0000000340)=""/2, &(0x7f0000000700)=[r1, r2, r3, r4, 0xffffffffffffffff, r5], 0x6, {r6}}, 0x58) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fc7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$sock_buf(r10, 0x1, 0x1c, &(0x7f0000000140)=""/19, &(0x7f0000000200)=0x13) 46.943790826s ago: executing program 9 (id=1818): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x550f, &(0x7f000000cf00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x204a869, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x204a869, 0x0, 0x1, 0x0, 0x0) io_setup(0x3, &(0x7f0000000000)) (async) io_setup(0x3, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x68) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) (async) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100010000001300000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x360, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc0cb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x45e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x84}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x59}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc344}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x978}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x51c4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}]}, @TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "598b059633a5247a0528af91e185f0d9145aafb0075d6a3dc9b699f64d7d67076f49"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf0}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "4a805817b86e2fa77adab34069d46edfdd91feabf5b6fa0b0d168e718456ead7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x29}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "4f86a8c9cd68dd2cb459e8911135d4df44690180102b22029a591a93ef209a2727007e8a03016a6fdf34b20f2c26a7d5cf1b55462c65c54ce98b2ac471ce89738a76d5326cbd96782534cb923d139f64aa5d6e1b91db807da96cae201d353a30db0f1f76900a6a366602d18abe25e163a30e0bbe43e8ee2570cf823115d1d2a7a0a4147d5991f2ef7e48471958d3ab4d1ef2c890086761acf04a0d4dc5ba6ae0f642de480525b8d06d346c3362d563905e3754c6255202e33f58cdfa5138"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 46.253661586s ago: executing program 9 (id=1823): r0 = socket$packet(0x11, 0x2, 0x300) accept$packet(r0, 0x0, 0x0) (fail_nth: 1) 46.040536279s ago: executing program 9 (id=1824): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa42080049"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 46.01484626s ago: executing program 40 (id=1824): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa42080049"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 35.607946829s ago: executing program 7 (id=1873): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x22020400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27, 0x7d, 0x4}, 0x6) 35.141539595s ago: executing program 7 (id=1875): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x11, 0x0, &(0x7f0000000080)) 32.593474935s ago: executing program 7 (id=1901): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 32.553774177s ago: executing program 7 (id=1902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000001380)={0x1814, 0x2a, 0x100, 0x70bd28, 0x25dfdbfb, {0x9}, [@generic="acc47215195b417eb02a1b59c5ebc1fccd6fa66b0f61b2bf474d13fa6e9b0e5980addf893becb72eb6ca1fb7923a3544e3fdf09634ab2c570014b8fefa5583c51181231ea766736df67fb5fc754faaa43d50096622b89c46fe6aa661dcd49435f774df4c09282dc53004741db69b32e5f7967232a29fd7450a5eaacc5595c1daef49486ebf252365f115d349defd717c51148536ab0c6ff25327693ae954aecf75466f765d9bf81bce1b989997d3992f4c29de72d1c09ac2fb6cb3fc237634df8ca2e4713f6365e218343dced641bd3f042e7931bea673184f3f4cec7ea952b7554a67511cf17a5cca8f9b07a22018244b4949d0a37740f11da6c81d98e59bea9d7ba0780af1be7bfa8c2c9b06bf4692a1f5075ae0882a9e12ea4fcd36739592682f14e6ad6426ea8ffce67fbb170e56dd7a959f836ded09fdde727ce78f7f6de3199d6505cf35862a157cdf4edac25734d97de186ee2eed69214b8e764bdf8c7f668d8fa9acaccfc3ec1cf0c4aeecc934558d03a693888a1e6ec3f97eab21311ad0f4e7aba42d9a9081b99c3b54ca93d9fcea0cb8af97760fb5b651218fc428e01f44dd61c99006de56927f00068572a44e596f94e87c348041b176247993f4af24226a4de8c8d4361a2ddb25a2f63e01b83bbe1028bd44484ab67662086ed9a9054c8a94a60d612dbba03228c6b0ce8e3a8fc4007ec82f76db0bcea6ca76fbcd2761467d59b100f46690c847ef23d82667719c40a45092ae3d4e8a807c7682b6e6fb6bad8a2f8d5cfd4d831432f0a5570eea6217e97fc3ab0fded35d0b561c4b92c10b36d5b91f0ce261b3bc71f5f848302a3d460edbaeab2183969afd256f1ba6ee973dc86cdf17857a117a3747acfc25d29df15c6bf31cd6e78b8cd3076c7713dfc9f05dc13f553e265533b4ef052f0b672892d8fb2dae4980b3f1be19db15fc1a92732b1c8df6c4b12ca1cb340178ea866796fe0f8f7185b86f53953c7de7849b6398c1adad39f55e6711575e8b8a2157c50a252dd332e1e78270e67de6884a27fbe4348eae5a1b949573d484bfed2e3cf7970399608897f68a86d6962515feb0ec60f999964b0f74a2a23ffac225ab993307181cac6ca863b33e7bceaf7b0bd9b0ffa68669c7eb0b24cb3dbb7ab02f17ba1120a37ecda8e9cc2c66ea46f0bf5f065391464953471780f37630a2659563648276c6d7c6d500fa99575c9374e9a8342f058ad63ad8bc8a55e18fc6642301ce2068667fca6752b1850fc9b0dc100c7f011747fbf00356a2a39a29e5e60cb36237dd67bf1ec7ba0de5b221d21ecc716cf8c75f26432b28ce8db4164eb493dea181a11885af425328778058b4680679301342cdd27b8e767c1d405e71d3758741f6214ccc1bfceedd133388795c7f08026938bfbe54eb7d22d73a7a56e27257dfaa7baa9d64106db52538fd65df320c9ec1270a77b71b16f6900c493a746e6d45d5dc2e1ad7fc85991b3634a9e74816e71bcfec52c79983895634bad068b6c9ead9bcebcfb37e626e2d39166580fdbaab601f81d13a6dda1293dc347980808460841bc1bc255e15bd4b6971fec9c7dce1be3377bb3d569d47e9bc3082fbe685e9d98097381388623c06cb6346ad608eae5950f6c27c18ea66e476b521bec672246980dbf20bced6b4aef9b67478a718ea37f1fd74a27f7b767fdaaa6a02480ab77bd3760a47c7c1c3cbb32332f4a32b1c69ed812f0a2a53ce5fbf2d55da3aa36a8d7f35eaa96219025025acd685b23f789fb760a10a425221910238b784c3a79bdb64656e07d59f6ee1f1168f53fd05ca0ac709a062163d0e805939764f6599a29cd0b67bfd6f8a6a8ccd8a30be0fd10606838a6710366497f17ac2beca3e0d200c49a31e33af1cf36fd41a421b90b2ae1e676b45ea4713d543b1f90394bcf551aff980096830f761e829024977316de4591eb10ccb9901b8fd452c97a963fae3f9dae0e363a10adcc3b86cab8dd596859060ea5f231ead2e7ac2461475c51aa0cefdcec36a66e417cccfbca6e11ecdc6b5afca2e39224fca2ade9c1c0adb0c9b61fec8c349a27914cddb6d1f53ab7d3abd05a9b0e2045117a45b798855f6714b84cf6c4b965ddbd9dd29700965e7baa582d47b26ed0005bc9d790a93e23815765606767e69c44f37d4b3d55784f5309f623a8aa99930a32c23f73fcb23329e866b224db8e2b53eb58ed90da17dc896ade56aa3320a73eca8aaeb3f5da54650c727524fa664fe1377ca79f41f3dd2417658cb07f80ab0d1f32eea2afdb4726f5c29c904cf5657fd380e4117d835a15ab679b97137257f27886e316476b7e47642c18739890950321def31ee13dfc04b15b3e52ca87ce62a61107d89d56257bf6f427b2f9ddd868dda679028c7122f717bbf4fcf0930457877f301483c27657e51e1776bef8d4fdf9b339cdc66e3e6bccacfd8b9051ae7ea63d1fd5e6905d99556ba543dbc39454157e308a127e8e3a4cb9b7b92e96381c3c04f934a2fd0d80b23255dc686f5c4b4b4b654ee823afb224d67537a19fee43bcf127f1dd8a08fadab73d945d2705bf46fdf4729346e4e4e0774ed5258e236849e75bb2ee8dc2133232d1a544d9523763ccd57c1c410e4bfef7f87f459e8b71fa57a033179e3e56d1ddbbe390fcda91fb3e4457a7efaba3c7a24336966e693667e9247b7663dcf43f7872f356fa6afeab356f862228589eb7cc54bef49c06de72397b1f0b852ede1585e56045f5798da9a352bbfa4651405ded7adc119e5f05bd08c6094bc84078120753f59373a28a661a0f54abf6d944ad870938337888e08dde05f3386c9ddc9b5a4afbb1da625c3ae1c3da9eb3e9c5f26b6a5b461dbe673bb1a2a1d17ed028473c96a3efd504898908f0c392b", @generic="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"]}, 0x1814}, 0x1, 0x0, 0x0, 0x4890}, 0x8881) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) getpeername(r2, &(0x7f0000000300)=@ieee802154={0x24, @short}, &(0x7f0000000000)=0x80) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x11) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$RNDZAPENTCNT(r5, 0x5204, 0x0) 31.425127333s ago: executing program 7 (id=1905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x1, 0x0, [{0x1, 0x403, 0x5913, 0xffffffff, 0x2100}]}) 31.357146837s ago: executing program 7 (id=1907): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 31.29776495s ago: executing program 41 (id=1907): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 18.880437076s ago: executing program 3 (id=2031): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000080)) 18.82126994s ago: executing program 3 (id=2032): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r3, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x4c000) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x15c, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xd}, @DEVLINK_ATTR_RATE_NODE_NAME={0xfe, 0xa8, @random="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"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113f00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 17.439974951s ago: executing program 3 (id=2039): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040044) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd66a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000dde0000000000000800000000000002d544755723dfba15d044cbf9f1539b913518327b2f2067c241285c86a16643f3e166b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x803, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000b00)="130000000102039839", 0x9}], 0x1) 15.91600914s ago: executing program 3 (id=2050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000001380)={0x1814, 0x2a, 0x100, 0x70bd28, 0x25dfdbfb, {0x9}, [@generic="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", @generic="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"]}, 0x1814}, 0x1, 0x0, 0x0, 0x4890}, 0x8881) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) getpeername(r2, &(0x7f0000000300)=@ieee802154={0x24, @short}, &(0x7f0000000000)=0x80) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x11) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) 14.171803312s ago: executing program 3 (id=2062): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 14.112893525s ago: executing program 4 (id=2065): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x129100, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 14.096715776s ago: executing program 3 (id=2066): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3a) 14.080291957s ago: executing program 4 (id=2068): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xfffffffffffffffd, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0x1}, {0xe}, {0xfff1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8020}, 0x4000000) 13.998493692s ago: executing program 42 (id=2066): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3a) 13.996084732s ago: executing program 4 (id=2072): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) recvfrom$inet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000100)=0x6, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300030b00000000000000000000000100090000000000030006006c0000000200000000000000000000000000000002000100000000000000060b00000050030005000000000002"], 0x58}, 0x1, 0x7}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r6 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0xfffffffffffffffc) read$msr(r0, &(0x7f0000000380)=""/157, 0x9d) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x7f, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240), 0x1, 0x55e, &(0x7f0000001bc0)="$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") r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r7, 0x0, 0x0, 0x1001f0) fallocate(r7, 0x3, 0xf00, 0x10000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.286698892s ago: executing program 4 (id=2083): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000100)={[{@sb={'sb', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}]}, 0x2, 0x53c, &(0x7f00000021c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) 11.253103632s ago: executing program 4 (id=2088): userfaultfd(0x801) pipe2(&(0x7f0000001cc0), 0x800) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010001000000c2e79f760eb62f83060003"], 0x1c}}, 0x8004) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) 10.94502979s ago: executing program 4 (id=2092): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65) 10.889404684s ago: executing program 43 (id=2092): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65) 6.093417744s ago: executing program 1 (id=2124): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000005300)}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4064844}, 0x0) pwritev2(r1, &(0x7f0000000300)=[{&(0x7f00000003c0)="65b30700"/13, 0xd}, {&(0x7f0000000040)="01018d30", 0x4}], 0x2, 0xa74a, 0x7ffffffc, 0x10) 5.921497284s ago: executing program 1 (id=2128): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x8}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {}]}, 0x1, 0x151e, &(0x7f0000007640)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) 5.313541749s ago: executing program 0 (id=2130): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) 4.852331686s ago: executing program 0 (id=2131): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x40, 0x7, 0x2, 0x8, 0xa9, 0x5, &(0x7f0000000600)="c41465830e6a4d46a79c32638a1ebc42a6a02a7ca0147a045e156b052510813334450597a8d4fc7e76f82a9c961f7d2b57494d8443b071d33b4ed003c2b699a51a1858c8595658b330adebcf2d1865d178e83cc29cbfbd9722de978c748dcea544a9758e95b84a466adeb46199c77d5e97001bbdf5569c78045403b5b48020bdf133af5b1e86957295db8ac3f8f724a9f4284556f35068bebe8cdb7f209c67de63ab85176df8ce641f"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8080) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000080)={0x1, 0x1}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x8}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x783, &(0x7f0000001340)="$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") socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020660b, &(0x7f00000005c0)={0x1dcc, 0x10100002000001, 0x0, 0x5}) 4.687795396s ago: executing program 1 (id=2134): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000340)={[{@nouser_xattr}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@delalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x200000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) lchown(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@grpid}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_err_ignore}]}, 0x4, 0x62c, &(0x7f0000001140)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4089, 0xff9) 3.855855395s ago: executing program 0 (id=2140): syz_open_procfs$namespace(0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) 3.486805346s ago: executing program 1 (id=2142): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="fe", 0x1}], 0x1}}], 0x1, 0x9200000024008004) r1 = dup3(0xffffffffffffffff, r0, 0x0) read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020) 3.486185616s ago: executing program 0 (id=2143): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05150000000000000109022400010000c00509040000810300000009"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@dstopts={{0x18, 0x29, 0x32, {0xff}}}], 0x18}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) readlink(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x5, 0x2, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xffffffff, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x100000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x6}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x100000000004, 0x8000000002, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.42207759s ago: executing program 1 (id=2145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.355228344s ago: executing program 5 (id=2148): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900c000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e03000600000000000200000300000000000000000000000002000100000000000000021601000020030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 3.354911074s ago: executing program 1 (id=2149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0xffffffffffffffff) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x12, @string={0x12, 0x3, "e8d0e22e124c6e526de1833dc38e155b"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8e, 0x0, 0xfffffffffffffffa}]}) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000000000)) 3.354078234s ago: executing program 5 (id=2150): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x40, 0x7, 0x2, 0x8, 0xa9, 0x5, &(0x7f0000000600)="c41465830e6a4d46a79c32638a1ebc42a6a02a7ca0147a045e156b052510813334450597a8d4fc7e76f82a9c961f7d2b57494d8443b071d33b4ed003c2b699a51a1858c8595658b330adebcf2d1865d178e83cc29cbfbd9722de978c748dcea544a9758e95b84a466adeb46199c77d5e97001bbdf5569c78045403b5b48020bdf133af5b1e86957295db8ac3f8f724a9f4284556f35068bebe8cdb7f209c67de63ab85176df8ce641f"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8080) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000080)={0x1, 0x1}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x8}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x783, &(0x7f0000001340)="$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") socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)={0x1dcc, 0x10100002000001, 0x0, 0x5}) 2.436462237s ago: executing program 6 (id=2160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.386103651s ago: executing program 5 (id=2161): socket$inet6(0xa, 0x2, 0x3a) setxattr$system_posix_acl(&(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000002c0), 0xfe, 0x479, &(0x7f00000004c0)="$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") socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141b82, 0xa9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(r0) connect$unix(r4, &(0x7f0000002200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 2.329449704s ago: executing program 6 (id=2163): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x210000000, 0x1, 0xfffffffffffffffc}, &(0x7f0000000000)={0x18, 0x8, 0xc00, 0x0, 0x7, 0x400000, 0xfffffffffffffffd, 0x7ff}, 0x0, 0x0, 0x0) 2.22915317s ago: executing program 8 (id=2164): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x800) setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2.094539098s ago: executing program 8 (id=2165): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x80000000, 0x0, 0x5, 0x2, 0xfffffffd, 0xffffffff, 0x5c86}]}) 1.897669849s ago: executing program 8 (id=2166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x1}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1.470716344s ago: executing program 5 (id=2167): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 1.415542307s ago: executing program 6 (id=2168): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 1.414421607s ago: executing program 6 (id=2169): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 993.788582ms ago: executing program 0 (id=2170): fstat(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nogrpid}, {@block_validity}], [{@permit_directio}, {@seclabel, 0x22}, {@euid_gt}]}, 0x0, 0x533, &(0x7f0000000b00)="$eJzs3c9vI1cdAPDveO39mW1S4ACVaEtbtLuCtTeN2kYcSpEQnCoB5b6ExImideJV7LSbaEWz4g9AQgiQOMGFCxJ/ABKqxIUjQqoE5yJAIARbOIBEd9DYYzcktvPLsbPJ5yPNznvz3vj7XnZndt7MxC+AM+u1fHmUpumNiJjMtxfy5bkssxXxbES8//D+fLYkkaZv/D2JJN/W+ay05UJcae8SUYz42pcjvpnsjtvY2LwzV6tV1/J8pblyt9LY2Ly5vDK3VF2qrs7MTL88+8rsS7O3jtK9xSt54mpEvPrFP3//Oz/90qu//Oxbf7j91+vfStptfjt29OOAioMK210vxcU8fyNfrx0y2ElU3J64tL99HuT/RAAAGK3suvQj+XX+oz3qfjCiNgEAAADDlX5+Iv6bdJ7d7XK+z3YAAADgMVKIiIlICuX8fd+JKBTK5Wi9w/uxuFyo1RvNzyzW11cXsrKIqSgVFpdr1Vv5u8JTUUqy/HQr/WH+xR35mYh4MiK+N3mplS/P12sL4775AQAAAGfElR3j/39Ntsf/AAAAwCkzNe4GAAAAAMfO+B8AAABOP+N/AAAAONW+8vrr2ZJ25r9eeHNj/U79zZsL1cad8sr6fHm+vna3vFSvL7W+s29l4Id1J4JeXb9XaVYbzUpjY/P2Sn19tXl7uTsFNgAAADBiTz7zzu+TiNj63KXWkjm/rfw/+TwBY2sgcGy6t+wiydfnd1d674l2xT+Nrl3A8Ts37gYAY1M8UO2tY2sHMHqlcTcAGLtkj/K+L+/8Jl9/arjtAQAAhu/aJ/o//y8M3HNrcDFw4jmI4ezy/B/Ortbz/x6v/PXkYgFOlZIrADjzjvz8f09+hwgAAMZtorUkhXJ+e28iCoVyOeJqa1qAUrK4XKveiognIuJ3k6ULWX66tWey15ABAAAAAAAAAAAAAAAAAAAAAAAAAMilaRLpAM8NLAUAAAAeBxGFvyS/Slrzf12bfGFi5/2B88m/JyOfIvStH73xg3tzzebadLb9H93tzR/m21886N0Hcw8CAADAceiM0zvjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYngf5+v78+w/vz48y8t++EBFTEVncztIuKcbF1vpilCLi8j+TKG7bL4mIc0OIv5V1/eO94idZs7ohe8W/dPzxYyr/KfSKf2UI8eEseyc7/7zW6/grxLOtde/jrxjxf/nD6n/+i+7571yf4//qPmM89e7PK33jP4h4qtj7/NOJn/SJ//w+43/j65ub/crSH0dci97xt8eqNFfuVhobmzeXV+aWqkvV1ZmZ6ZdnX5l9afZWZXG5Vs3/7Bnju5/8xaNB/b/cJ/7UHv1/YZ/9/+Ddew8/2k6WesW//nyP+L/+SV5jd/xC/n/fp/N0Vn6tk95qp7d7+me/fXpQ/xf69H+vv//r++z/ja9++4/7rAoAjEBjY/POXK1WXTuZiaR45M/JRun7qZxeOPE/DYkjJUq7try9u/IzcegQaZqm2TF1hKYmh4/eN/FeHKBy0t0y7jMTAAAwbB9e/Y+7JQAAAAAAAAAAAAAAAAAAAHB2jeB71y7sjPmgm0qG8RXaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABD8b8AAAD//x4S41s=") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 986.421133ms ago: executing program 8 (id=2171): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000080)={[{@noinit_itable}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@usrquota}]}, 0x2, 0x47d, &(0x7f0000000a80)="$eJzs3MtvVNUfAPDvvdMBfrzaH+IDRK0SY+OjpQWVhRuNJi4wmugCdVXbQgiFGloTIUSqMbgxMSS6Vpcm/gXu3BjjysTEle4NCVE2oKuae+de6AwzfdBhpnY+n+TCOXPOzDnnnnvunHvPnQbQswazf5KI7RHxW0T016L1GQZr/12/en7i76vnJ5JYWHj9zyTPd+3q+Ykya/m+bUVkKI1IP06KQurNnj13cnx6eupMER+ZO/XuyOzZc0+dODV+fOr41Omxw4cPHRx99pmxp9vSzqxd1/Z+MLNvz8tvXnpl4uild3Z+m9V3e5G+uB23ZdOtLw1mDf9rIdeY9mj8b03FrTc7FoWTvi5WhFWpRETWXdV8/PdHJW52Xn+89FFXKwfcUdl30+bWyfMLwAaWRLdrAHRH+UWfXf+WW4emHuvCledrF0BZu68XWy2lL9IiT7Xh+radBiPi6Pw/X2ZbtOM+BADAMj6d+OJIPNls/pfGPYvy7SzWUAYi4v8RsSsi7oqI3RFxd0Se996IuG+V5TcuDd06/0kv31bDViib/z1XrG3Vz/+K2V81BipFbEfe/mpy7MT01IFinwxFdXMWH12ijO9f/OWzVmmL53/ZlpVfzgWLelzua7hBNzk+N55PStvgyocRe/uatT+5sRKQRMSeiNi7uo/eWQZOPP7NvlaZlm//EtqwzrTwdcRjtf6fj4b2l5Kl1ydHtsT01IGR8qi41U8/X3ytVflran8bZP2/tf74L1K+OlsEBt5evF47G6teubz4+yctr2lu9/jflLyRn4/KZdf3x+fmzoxGbEqO5PG618duvreMl/mz9g/tbz7+dxXvyfr//ojIDuIHIuLBiHioqPvDEfFIROxfov0/vtA6bT30/2TT89+N438gqev/1QcqJ3/4rlX5K+v/Q3loqHglP/8tY6UVXMu+AwAAgP+KNH8GPkmHb4TTdHi49gz/7tiaTs/Mzj1xbOa905O1Z+UHopqWd7r6F90PHU3mi0+sxceKe8Vl+sHivvHnlcjjwxMz05Ndbjv0um0txn/mj0q3awfccc3W0caa/KAN2Hgax39aH73waicrA3TKEr/9A3rBMs/RpZ2qB9B5/l4L9K5m4/9CQ9xaAGxMvv+hdxn/0LuMf+hdDeO/Er92qyZAB63ld/0C6yVQPqtZjYhOFRrp+mj7SgIr/3sQSwa2FLt5DZ/z1jrYGysLdPGkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Eb/BgAA//+EBOc+") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 868.809329ms ago: executing program 0 (id=2172): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x40, 0x7, 0x2, 0x8, 0xa9, 0x5, &(0x7f0000000600)="c41465830e6a4d46a79c32638a1ebc42a6a02a7ca0147a045e156b052510813334450597a8d4fc7e76f82a9c961f7d2b57494d8443b071d33b4ed003c2b699a51a1858c8595658b330adebcf2d1865d178e83cc29cbfbd9722de978c748dcea544a9758e95b84a466adeb46199c77d5e97001bbdf5569c78045403b5b48020bdf133af5b1e86957295db8ac3f8f724a9f4284556f35068bebe8cdb7f209c67de63ab85176df8ce641f"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8080) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000080)={0x1, 0x1}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x8}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x783, &(0x7f0000001340)="$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") socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)={0x1dcc, 0x10100002000001, 0x0, 0x5}) 707.620018ms ago: executing program 8 (id=2173): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000000000000200000000000100000000001bb7f47de5a68efa39558f5184bb27ba9dfded089d38787d2a717fc155c5fc88245d4c3e552645013482851c79e25570c735e4f1f3ce146fe3917317d5373f79489e33e030d19a0442ea5d256095e6427727b2690cbd4bb3a3c40baa6222f7b35dac04300e147a2b76b0d0cae4e2c049e1040ff639c873be5f88764c9ae95ab89d5d9fea2a7c8e2173d4dbc1bcbb89e113fd774d5f75c5e31b03eca366404fafc73aa7f9a2"], 0x28}}], 0x1, 0x0) 107.270694ms ago: executing program 5 (id=2174): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0xeff, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) 66.322026ms ago: executing program 6 (id=2175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000023000305"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x810) 64.451876ms ago: executing program 8 (id=2176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) unshare(0x24020400) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x3b}, 0x28) 35.257138ms ago: executing program 5 (id=2177): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(0x0, 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 6 (id=2178): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="fe", 0x1}], 0x1}}], 0x1, 0x9200000024008004) r1 = dup3(r0, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): robability 0, space 0, times 0 [ 471.361995][ T7117] CPU: 1 PID: 7117 Comm: syz.4.1750 Not tainted syzkaller #0 [ 471.370449][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.380612][ T7117] Call Trace: [ 471.380686][ T5438] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 471.383946][ T7117] __dump_stack+0x21/0x24 [ 471.383959][ T7117] dump_stack_lvl+0x1a7/0x208 [ 471.384006][ T7117] ? show_regs_print_info+0x18/0x18 [ 471.405963][ T7117] dump_stack+0x15/0x1c [ 471.410764][ T7117] should_fail+0x3c1/0x510 [ 471.415306][ T7117] should_fail_usercopy+0x1a/0x20 [ 471.421001][ T7117] _copy_from_user+0x20/0xd0 [ 471.425630][ T7117] iovec_from_user+0x1bc/0x2f0 [ 471.430618][ T7117] __import_iovec+0x71/0x390 [ 471.435221][ T7117] ? __fget_files+0x2c4/0x320 [ 471.439909][ T7117] import_iovec+0x7c/0xb0 [ 471.444246][ T7117] do_readv+0x229/0x450 [ 471.448503][ T7117] ? do_iter_readv_writev+0x5f0/0x5f0 [ 471.454286][ T7117] ? mutex_lock+0x92/0xf0 [ 471.459083][ T7117] ? __kasan_check_write+0x14/0x20 [ 471.464207][ T7117] ? fput_many+0x15a/0x1a0 [ 471.470204][ T7117] ? debug_smp_processor_id+0x17/0x20 [ 471.475849][ T7117] __x64_sys_readv+0x7d/0x90 [ 471.480827][ T7117] do_syscall_64+0x31/0x40 [ 471.485264][ T7117] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 471.491916][ T7117] RIP: 0033:0x7f565621aeb9 [ 471.496718][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.516466][ T7117] RSP: 002b:00007f5654c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 471.525111][ T7117] RAX: ffffffffffffffda RBX: 00007f5656495fa0 RCX: 00007f565621aeb9 [ 471.533103][ T7117] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 471.541647][ T7117] RBP: 00007f5654c77090 R08: 0000000000000000 R09: 0000000000000000 [ 471.549845][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.558153][ T7117] R13: 00007f5656496038 R14: 00007f5656495fa0 R15: 00007ffeec1baf58 [ 471.566477][ T20] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 471.591032][ T15] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 471.620236][ T15] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 471.632642][ T15] asix: probe of 9-1:0.188 failed with error -71 [ 471.640634][ T15] usb 9-1: USB disconnect, device number 26 [ 471.790250][ T5438] usb 10-1: Using ep0 maxpacket: 8 [ 472.149477][ T24] audit: type=1400 audit(2000000011.200:3670): avc: denied { setattr } for pid=7114 comm="syz.0.1749" name="file0" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 472.250378][ T5438] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 472.262906][ T5438] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 472.273303][ T5438] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 472.285259][ T5438] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 59144, setting to 1024 [ 472.360441][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.371997][ T20] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 472.381646][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.390942][ T20] usb 4-1: config 0 descriptor?? [ 472.460365][ T5438] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.470265][ T536] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 472.506283][ T15] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 472.514588][ T5438] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.524199][ T5438] usb 10-1: Product: syz [ 472.529105][ T5438] usb 10-1: Manufacturer: syz [ 472.534533][ T5438] usb 10-1: SerialNumber: syz [ 472.563781][ T7131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7131 comm=syz.4.1755 [ 472.730202][ T536] usb 1-1: Using ep0 maxpacket: 32 [ 472.760238][ T15] usb 9-1: Using ep0 maxpacket: 32 [ 472.851994][ T536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.860704][ T5438] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 472.864353][ T20] zeroplus 0003:0C12:0005.001F: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 472.880566][ T15] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 472.883937][ T536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.892102][ T5438] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 472.902020][ T20] zeroplus 0003:0C12:0005.001F: no inputs found [ 472.913755][ T15] usb 9-1: config 0 has no interface number 0 [ 472.916349][ T536] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 472.930317][ T15] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.947450][ T5438] usb 10-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 472.952691][ T536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.963830][ T5438] usb 10-1: 2:1 : invalid channels 0 [ 472.969960][ T15] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.980272][ T536] usb 1-1: config 0 descriptor?? [ 472.991843][ T15] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 473.005110][ T5438] usb 10-1: USB disconnect, device number 27 [ 473.018587][ T15] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.030875][ T536] hub 1-1:0.0: USB hub found [ 473.032461][ T15] usb 9-1: config 0 descriptor?? [ 473.062443][ T309] usb 4-1: USB disconnect, device number 41 [ 473.231702][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 473.250356][ T536] hub 1-1:0.0: 25 ports detected [ 473.270252][ T536] hub 1-1:0.0: insufficient power available to use all downstream ports [ 473.380345][ T15] usbhid 9-1:0.1: can't add hid device: -71 [ 473.386712][ T15] usbhid: probe of 9-1:0.1 failed with error -71 [ 473.403267][ T15] usb 9-1: USB disconnect, device number 27 [ 473.470380][ T536] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 473.480642][ T536] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 473.813099][ T536] usbhid 1-1:0.0: can't add hid device: -71 [ 473.826820][ T536] usbhid: probe of 1-1:0.0 failed with error -71 [ 473.880883][ T536] usb 1-1: USB disconnect, device number 59 [ 474.337221][ T7175] binder: 7174:7175 ioctl 402c542c 200000000340 returned -22 [ 474.741563][ T536] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 475.050291][ T536] usb 1-1: Using ep0 maxpacket: 8 [ 475.085123][ T7183] serio: Serial port ttyS3 [ 475.227692][ T7187] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 475.241635][ T7187] EXT4-fs (loop3): Test dummy encryption mode enabled [ 475.250894][ T7187] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,discard,noblock_validity,discard,,errors=continue [ 475.363178][ T536] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 475.386640][ T536] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 475.405500][ T536] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 475.417335][ T536] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 59144, setting to 1024 [ 475.437419][ T24] audit: type=1400 audit(2000000014.490:3671): avc: denied { ioctl } for pid=7186 comm="syz.3.1771" path=2F37332F2E022F626C6B696F2E6266712E69646C655F74696D65 dev="loop3" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 475.467810][ T24] audit: type=1400 audit(2000000014.520:3672): avc: denied { map } for pid=7186 comm="syz.3.1771" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.657817][ T536] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.668963][ T536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.677603][ T536] usb 1-1: Product: syz [ 475.682105][ T536] usb 1-1: Manufacturer: syz [ 475.686749][ T536] usb 1-1: SerialNumber: syz [ 475.730268][ T1411] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 475.737999][ T25] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 476.210338][ T536] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 476.218688][ T536] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 476.226306][ T536] usb 1-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 476.234066][ T536] usb 1-1: 2:1 : invalid channels 0 [ 476.240923][ T7192] F2FS-fs (loop9): Invalid log sectorsize (67108873) [ 476.247747][ T7192] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 476.267892][ T536] usb 1-1: USB disconnect, device number 60 [ 476.274978][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 476.280250][ T1411] usb 9-1: Using ep0 maxpacket: 32 [ 476.287449][ T7192] F2FS-fs (loop9): invalid crc value [ 476.302008][ T7192] F2FS-fs (loop9): Found nat_bits in checkpoint [ 476.311097][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 476.351612][ T7192] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 476.359726][ T7192] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 476.400354][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.408805][ T1411] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.419968][ T25] usb 5-1: config 0 has no interface number 0 [ 476.480705][ T1411] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.491309][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.502916][ T1411] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 476.512180][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.522904][ T1411] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.531327][ T25] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 476.540449][ T24] audit: type=1400 audit(2000000015.590:3673): avc: denied { ioctl } for pid=7191 comm="syz.9.1772" path="socket:[42475]" dev="sockfs" ino=42475 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 476.572018][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.581216][ T7211] FAULT_INJECTION: forcing a failure. [ 476.581216][ T7211] name failslab, interval 1, probability 0, space 0, times 0 [ 476.581636][ T1411] usb 9-1: config 0 descriptor?? [ 476.594507][ T7211] CPU: 0 PID: 7211 Comm: syz.3.1776 Not tainted syzkaller #0 [ 476.606966][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.617045][ T7211] Call Trace: [ 476.620368][ T7211] __dump_stack+0x21/0x24 [ 476.624290][ T25] usb 5-1: config 0 descriptor?? [ 476.624998][ T7211] dump_stack_lvl+0x1a7/0x208 [ 476.634601][ T7211] ? thaw_kernel_threads+0x220/0x220 [ 476.639932][ T7211] ? show_regs_print_info+0x18/0x18 [ 476.642363][ T1411] hub 9-1:0.0: USB hub found [ 476.645152][ T7211] ? pointer+0xc70/0xc70 [ 476.645166][ T7211] dump_stack+0x15/0x1c [ 476.645177][ T7211] should_fail+0x3c1/0x510 [ 476.645224][ T7211] ? kvasprintf_const+0xf2/0x240 [ 476.669852][ T7211] __should_failslab+0xa4/0xe0 [ 476.675479][ T7211] should_failslab+0x9/0x20 [ 476.680883][ T7211] __kmalloc_track_caller+0x5f/0x320 [ 476.688038][ T7211] kvasprintf+0xe3/0x1a0 [ 476.695331][ T7211] ? __kasan_kmalloc+0xec/0x110 [ 476.701875][ T7211] ? __kasan_kmalloc+0xda/0x110 [ 476.707352][ T7211] ? bust_spinlocks+0xe0/0xe0 [ 476.713323][ T7211] ? do_iter_read+0x177/0x640 [ 476.719011][ T7211] ? format_decode+0x1bb/0x1520 [ 476.724629][ T7211] ? vsnprintf+0x14e/0x1990 [ 476.729156][ T7211] kvasprintf_const+0xf2/0x240 [ 476.733941][ T7211] kobject_set_name_vargs+0x61/0x110 [ 476.739567][ T7211] dev_set_name+0xdf/0x130 [ 476.744244][ T7211] ? memset+0x35/0x40 [ 476.748720][ T7211] ? __serio_register_port+0x159/0x300 [ 476.754590][ T7211] ? get_device+0x30/0x30 [ 476.759130][ T7211] ? pm_runtime_init+0x258/0x330 [ 476.764640][ T7211] __serio_register_port+0x17a/0x300 [ 476.769937][ T7211] serport_ldisc_read+0x335/0x5a0 [ 476.775075][ T7211] ? serport_ldisc_close+0x40/0x40 [ 476.781012][ T7211] ? stack_trace_save+0xa6/0xf0 [ 476.786138][ T7211] ? stack_trace_snprint+0xf0/0xf0 [ 476.791381][ T7211] ? path_openat+0x2970/0x31c0 [ 476.796782][ T7211] tty_read+0x2af/0x5c0 [ 476.801055][ T7211] ? release_one_tty+0x310/0x310 [ 476.806204][ T7211] ? __fsnotify_parent+0x6d2/0x7c0 [ 476.811688][ T7211] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 476.819425][ T7211] do_iter_readv_writev+0x478/0x5f0 [ 476.825140][ T7211] ? avc_policy_seqno+0x1b/0x70 [ 476.830481][ T7211] ? generic_file_rw_checks+0x2a0/0x2a0 [ 476.836274][ T7211] ? security_file_permission+0x83/0xa0 [ 476.842185][ T7211] ? rw_verify_area+0x1c0/0x360 [ 476.847332][ T7211] do_iter_read+0x177/0x640 [ 476.852391][ T7211] do_readv+0x25d/0x450 [ 476.857598][ T7211] ? do_iter_readv_writev+0x5f0/0x5f0 [ 476.861056][ T1411] hub 9-1:0.0: 25 ports detected [ 476.863734][ T7211] ? mutex_lock+0x92/0xf0 [ 476.863752][ T7211] ? __kasan_check_write+0x14/0x20 [ 476.863798][ T7211] ? fput_many+0x15a/0x1a0 [ 476.884264][ T7211] ? debug_smp_processor_id+0x17/0x20 [ 476.889938][ T7211] __x64_sys_readv+0x7d/0x90 [ 476.890463][ T1411] hub 9-1:0.0: insufficient power available to use all downstream ports [ 476.894724][ T7211] do_syscall_64+0x31/0x40 [ 476.894739][ T7211] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 476.894774][ T7211] RIP: 0033:0x7f0fcd1c4eb9 [ 476.918179][ T7211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.940472][ T7211] RSP: 002b:00007f0fcbc21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 476.949934][ T7211] RAX: ffffffffffffffda RBX: 00007f0fcd43ffa0 RCX: 00007f0fcd1c4eb9 [ 476.958878][ T7211] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000004 [ 476.960784][ T25] usbhid 5-1:0.1: can't add hid device: -71 [ 476.968341][ T7211] RBP: 00007f0fcbc21090 R08: 0000000000000000 R09: 0000000000000000 [ 476.968349][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.968358][ T7211] R13: 00007f0fcd440038 R14: 00007f0fcd43ffa0 R15: 00007ffc76bf5e68 [ 476.969263][ T7211] serio: Serial port ttyS3 [ 476.976905][ T25] usbhid: probe of 5-1:0.1 failed with error -71 [ 477.030901][ T25] usb 5-1: USB disconnect, device number 64 [ 477.080362][ T1411] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 477.097927][ T1411] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 477.210286][ T1411] usbhid 9-1:0.0: can't add hid device: -71 [ 477.217830][ T1411] usbhid: probe of 9-1:0.0 failed with error -71 [ 477.260740][ T1411] usb 9-1: USB disconnect, device number 28 [ 477.332005][ T7237] FAULT_INJECTION: forcing a failure. [ 477.332005][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 477.344996][ T7237] CPU: 1 PID: 7237 Comm: syz.9.1777 Not tainted syzkaller #0 [ 477.352523][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.362728][ T7237] Call Trace: [ 477.366368][ T7237] __dump_stack+0x21/0x24 [ 477.370914][ T7237] dump_stack_lvl+0x1a7/0x208 [ 477.375752][ T7237] ? thaw_kernel_threads+0x220/0x220 [ 477.381249][ T7237] ? rw_verify_area+0x1c0/0x360 [ 477.386342][ T7237] ? show_regs_print_info+0x18/0x18 [ 477.391575][ T7237] ? vfs_write+0xb27/0xdc0 [ 477.396034][ T7237] dump_stack+0x15/0x1c [ 477.400214][ T7237] should_fail+0x3c1/0x510 [ 477.400763][ T5438] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 477.404831][ T7237] ? __se_sys_request_key+0x1bd/0x350 [ 477.417861][ T7237] __should_failslab+0xa4/0xe0 [ 477.422798][ T7237] should_failslab+0x9/0x20 [ 477.427340][ T7237] __kmalloc_track_caller+0x5f/0x320 [ 477.432656][ T7237] ? strnlen_user+0xe8/0x1c0 [ 477.437288][ T7237] strndup_user+0x74/0x150 [ 477.441721][ T7237] __se_sys_request_key+0x1bd/0x350 [ 477.446911][ T7237] ? fput+0x1a/0x20 [ 477.450717][ T7237] ? __x64_sys_request_key+0xb0/0xb0 [ 477.456272][ T7237] ? debug_smp_processor_id+0x17/0x20 [ 477.462227][ T7237] __x64_sys_request_key+0x9b/0xb0 [ 477.467736][ T7237] do_syscall_64+0x31/0x40 [ 477.472457][ T7237] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 477.478478][ T7237] RIP: 0033:0x7f70cd0d7eb9 [ 477.482922][ T7237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.504092][ T7237] RSP: 002b:00007f70cbb34028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 477.513747][ T7237] RAX: ffffffffffffffda RBX: 00007f70cd352fa0 RCX: 00007f70cd0d7eb9 [ 477.522778][ T7237] RDX: 0000200000000380 RSI: 0000200000000080 RDI: 0000200000000340 [ 477.531020][ T7237] RBP: 00007f70cbb34090 R08: 0000000000000000 R09: 0000000000000000 [ 477.539131][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.547168][ T7237] R13: 00007f70cd353038 R14: 00007f70cd352fa0 R15: 00007ffdf04b5748 [ 477.600095][ T7241] EXT4-fs (loop9): Test dummy encryption mode enabled [ 477.609317][ T7241] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 477.630354][ T7241] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 477.680433][ T5438] usb 4-1: Using ep0 maxpacket: 8 [ 477.720466][ T349] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 477.880331][ T5438] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 477.889464][ T5438] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 477.899807][ T5438] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.908718][ T309] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 478.010332][ T1411] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 478.020360][ T536] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 478.070462][ T5438] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.080135][ T5438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.080284][ T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.099592][ T5438] usb 4-1: Product: syz [ 478.103885][ T5438] usb 4-1: Manufacturer: syz [ 478.108505][ T5438] usb 4-1: SerialNumber: syz [ 478.113250][ T349] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 478.122791][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.132890][ T349] usb 1-1: config 0 descriptor?? [ 478.270325][ T309] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.280394][ T536] usb 10-1: Using ep0 maxpacket: 32 [ 478.281353][ T309] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.286751][ T1411] usb 9-1: Using ep0 maxpacket: 8 [ 478.301161][ T309] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 478.315947][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.324788][ T309] usb 5-1: config 0 descriptor?? [ 478.361038][ T309] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 478.430469][ T536] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.441614][ T1411] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 478.452546][ T536] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.462529][ T1411] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 478.472799][ T536] usb 10-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 478.482003][ T1411] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 478.493643][ T536] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.500678][ T5438] usb 4-1: 0:2 : does not exist [ 478.502400][ T1411] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 59144, setting to 1024 [ 478.519636][ T536] usb 10-1: config 0 descriptor?? [ 478.525495][ T5438] usb 4-1: USB disconnect, device number 42 [ 478.621161][ T349] zeroplus 0003:0C12:0005.0020: unknown main item tag 0x2 [ 478.629399][ T349] zeroplus 0003:0C12:0005.0020: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.0-1/input0 [ 478.641292][ T349] zeroplus 0003:0C12:0005.0020: no inputs found [ 478.670296][ T1411] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.680371][ T1411] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.688503][ T1411] usb 9-1: Product: syz [ 478.692986][ T1411] usb 9-1: Manufacturer: syz [ 478.697617][ T1411] usb 9-1: SerialNumber: syz [ 478.740831][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 478.839724][ T323] usb 1-1: USB disconnect, device number 61 [ 478.891895][ T24] audit: type=1400 audit(2000000017.950:3674): avc: denied { execute } for pid=7254 comm="syz.3.1792" path="/selinux/mls" dev="selinuxfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 478.924585][ T7257] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1789'. [ 478.985072][ T7259] EXT4-fs (loop3): Ignoring removed orlov option [ 478.992738][ T7259] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,,errors=continue [ 479.002456][ T7259] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 479.003082][ T536] zydacron 0003:13EC:0006.0021: unknown main item tag 0x0 [ 479.042847][ T1411] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 479.053786][ T1411] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 479.062031][ T1411] usb 9-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 479.073583][ T1411] usb 9-1: 2:1 : invalid channels 0 [ 479.079782][ T536] zydacron 0003:13EC:0006.0021: unknown main item tag 0x0 [ 479.088321][ T536] zydacron 0003:13EC:0006.0021: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.9-1/input0 [ 479.102961][ T1411] usb 9-1: USB disconnect, device number 29 [ 479.204022][ T5438] usb 10-1: USB disconnect, device number 28 [ 479.310934][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 479.446596][ T24] audit: type=1400 audit(2000000018.500:3675): avc: denied { getopt } for pid=7265 comm="syz.0.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 479.529641][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 479.550962][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.559771][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 479.598126][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.608289][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.617198][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.626011][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 479.634770][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 479.643587][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 479.652388][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 479.661146][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 479.669398][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 479.677589][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 479.685860][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 480.020244][ T536] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 480.060227][ T5438] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 480.244622][ T7280] F2FS-fs (loop3): invalid crc value [ 480.252431][ T7280] F2FS-fs (loop3): Found nat_bits in checkpoint [ 480.260445][ T536] usb 1-1: Using ep0 maxpacket: 16 [ 480.296273][ T7280] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 480.304134][ T5438] usb 10-1: Using ep0 maxpacket: 16 [ 480.380407][ T536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.394779][ T536] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.414660][ T536] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 480.424309][ T536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.436713][ T536] usb 1-1: config 0 descriptor?? [ 480.440697][ T5438] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 15104, setting to 1024 [ 480.453603][ T5438] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 480.464314][ T5438] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.478385][ T5438] usb 10-1: config 1 interface 0 has no altsetting 0 [ 480.865012][ T309] usb 5-1: USB disconnect, device number 65 [ 480.930319][ T5438] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 480.943766][ T5438] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.961585][ T5438] usb 10-1: Product: syz [ 480.971574][ T5438] usb 10-1: Manufacturer: syz [ 480.976801][ T5438] usb 10-1: SerialNumber: syz [ 481.010297][ T7278] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 481.080431][ T7296] FAULT_INJECTION: forcing a failure. [ 481.080431][ T7296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.094207][ T7296] CPU: 1 PID: 7296 Comm: syz.4.1804 Not tainted syzkaller #0 [ 481.101878][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.112203][ T7296] Call Trace: [ 481.115531][ T7296] __dump_stack+0x21/0x24 [ 481.120088][ T7296] dump_stack_lvl+0x1a7/0x208 [ 481.124809][ T7296] ? thaw_kernel_threads+0x220/0x220 [ 481.130212][ T7296] ? show_regs_print_info+0x18/0x18 [ 481.135441][ T7296] dump_stack+0x15/0x1c [ 481.139705][ T7296] should_fail+0x3c1/0x510 [ 481.144171][ T7296] should_fail_usercopy+0x1a/0x20 [ 481.149217][ T7296] _copy_to_user+0x20/0x90 [ 481.153673][ T7296] simple_read_from_buffer+0xe9/0x160 [ 481.159446][ T7296] proc_fail_nth_read+0x1a6/0x220 [ 481.164886][ T7296] ? proc_fault_inject_write+0x310/0x310 [ 481.170549][ T7296] ? rw_verify_area+0x1c0/0x360 [ 481.175424][ T7296] ? proc_fault_inject_write+0x310/0x310 [ 481.181917][ T7296] vfs_read+0x209/0xa60 [ 481.188286][ T7296] ? kernel_read+0x70/0x70 [ 481.193646][ T7296] ? __kasan_check_write+0x14/0x20 [ 481.198900][ T7296] ? mutex_lock+0x92/0xf0 [ 481.203342][ T7296] ? mutex_trylock+0xa0/0xa0 [ 481.207969][ T7296] ? __fget_files+0x2c4/0x320 [ 481.213073][ T7296] ? __fdget_pos+0x2d2/0x380 [ 481.217821][ T7296] ? ksys_read+0x71/0x250 [ 481.222196][ T7296] ksys_read+0x149/0x250 [ 481.226999][ T7296] ? vfs_write+0xdc0/0xdc0 [ 481.231740][ T7296] ? __kasan_check_read+0x11/0x20 [ 481.236827][ T7296] __x64_sys_read+0x7b/0x90 [ 481.241389][ T7296] do_syscall_64+0x31/0x40 [ 481.245841][ T7296] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 481.252547][ T7296] RIP: 0033:0x7f56561db78e [ 481.257011][ T7296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 481.278031][ T7296] RSP: 002b:00007f5654c34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 481.286952][ T7296] RAX: ffffffffffffffda RBX: 00007f5654c356c0 RCX: 00007f56561db78e [ 481.295063][ T7296] RDX: 000000000000000f RSI: 00007f5654c350a0 RDI: 0000000000000007 [ 481.303719][ T7296] RBP: 00007f5654c35090 R08: 0000000000000000 R09: 0000000000000000 [ 481.311801][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.319803][ T7296] R13: 00007f5656496218 R14: 00007f5656496180 R15: 00007ffeec1baf58 [ 481.448624][ T536] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 481.455944][ T536] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 481.463532][ T536] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 481.471887][ T536] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 481.474596][ T5438] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 481.479752][ T536] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 481.499004][ T536] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 481.506480][ T536] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 481.513930][ T536] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 481.521879][ T536] HID 045e:07da: Invalid code 65791 type 1 [ 481.552082][ T536] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0022/input/input7 [ 481.570611][ T536] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 481.873057][ T7278] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1799'. [ 481.900179][ C0] usblp0: nonzero write bulk status received: -71 [ 481.907404][ T536] usb 10-1: USB disconnect, device number 29 [ 481.915642][ T536] usblp0: removed [ 481.950312][ T15] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 482.030231][ T309] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 482.190211][ T15] usb 9-1: Using ep0 maxpacket: 8 [ 482.320282][ T15] usb 9-1: config 1 has an invalid descriptor of length 8, skipping remainder of the config [ 482.330605][ T15] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 482.341493][ T15] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 482.351432][ T15] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 482.362963][ T15] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 59144, setting to 1024 [ 482.390374][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.401459][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.411393][ T309] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 482.420602][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.429731][ T309] usb 4-1: config 0 descriptor?? [ 482.444866][ T24] audit: type=1400 audit(2000000021.500:3676): avc: denied { setopt } for pid=7314 comm="syz.9.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 482.470718][ T24] audit: type=1400 audit(2000000021.500:3677): avc: denied { getopt } for pid=7314 comm="syz.9.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 482.540403][ T15] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.549712][ T15] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.558007][ T15] usb 9-1: Product: syz [ 482.562891][ T15] usb 9-1: Manufacturer: syz [ 482.567704][ T15] usb 9-1: SerialNumber: syz [ 482.573071][ T5438] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 482.687828][ T7307] udc-core: couldn't find an available UDC or it's busy [ 482.705988][ T7307] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 482.954292][ T349] usb 1-1: USB disconnect, device number 62 [ 482.962236][ T309] samsung 0003:0419:0001.0023: unbalanced collection at end of report description [ 482.990357][ T5438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.003146][ T309] samsung 0003:0419:0001.0023: parse failed [ 483.010391][ T5438] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 483.021116][ T309] samsung: probe of 0003:0419:0001.0023 failed with error -22 [ 483.029917][ T5438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.059372][ T5438] usb 5-1: config 0 descriptor?? [ 483.245138][ T7307] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 483.275335][ T349] usb 4-1: USB disconnect, device number 43 [ 483.551733][ T5438] zeroplus 0003:0C12:0005.0024: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0 [ 483.563627][ T5438] zeroplus 0003:0C12:0005.0024: no inputs found [ 483.762193][ T323] usb 5-1: USB disconnect, device number 66 [ 484.230246][ T5438] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 484.310237][ T323] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 484.341264][ T7342] tipc: Started in network mode [ 484.346786][ T7342] tipc: Own node identity 96043a84f0d9, cluster identity 4711 [ 484.358076][ T7342] tipc: Enabled bearer , priority 0 [ 484.387302][ T24] audit: type=1400 audit(2000000023.440:3678): avc: denied { getopt } for pid=7343 comm="syz.9.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 484.417752][ T7342] device syzkaller0 entered promiscuous mode [ 484.438668][ T7348] FAULT_INJECTION: forcing a failure. [ 484.438668][ T7348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.452664][ T7341] tipc: Resetting bearer [ 484.452835][ T7348] CPU: 1 PID: 7348 Comm: syz.8.1819 Not tainted syzkaller #0 [ 484.467601][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.478546][ T7348] Call Trace: [ 484.482117][ T7348] __dump_stack+0x21/0x24 [ 484.487054][ T7348] dump_stack_lvl+0x1a7/0x208 [ 484.492161][ T7348] ? thaw_kernel_threads+0x220/0x220 [ 484.497765][ T7348] ? vsnprintf+0x189c/0x1990 [ 484.503391][ T7348] ? show_regs_print_info+0x18/0x18 [ 484.508630][ T7348] dump_stack+0x15/0x1c [ 484.513249][ T7348] should_fail+0x3c1/0x510 [ 484.518972][ T7348] should_fail_usercopy+0x1a/0x20 [ 484.524548][ T7348] _copy_to_user+0x20/0x90 [ 484.529173][ T7348] simple_read_from_buffer+0xe9/0x160 [ 484.534572][ T7348] proc_fail_nth_read+0x1a6/0x220 [ 484.539636][ T7348] ? proc_fault_inject_write+0x310/0x310 [ 484.545319][ T7348] ? rw_verify_area+0x1c0/0x360 [ 484.550377][ T7348] ? proc_fault_inject_write+0x310/0x310 [ 484.556571][ T7348] vfs_read+0x209/0xa60 [ 484.560834][ T15] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 484.560868][ T15] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 484.569527][ T7348] ? kernel_read+0x70/0x70 [ 484.569542][ T7348] ? __kasan_check_write+0x14/0x20 [ 484.569554][ T7348] ? mutex_lock+0x92/0xf0 [ 484.569601][ T7348] ? mutex_trylock+0xa0/0xa0 [ 484.597944][ T7348] ? __fget_files+0x2c4/0x320 [ 484.599881][ T15] usb 9-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 484.602640][ T7348] ? __fdget_pos+0x2d2/0x380 [ 484.602651][ T7348] ? ksys_read+0x71/0x250 [ 484.602688][ T7348] ksys_read+0x149/0x250 [ 484.623557][ T7348] ? vfs_write+0xdc0/0xdc0 [ 484.627984][ T7348] ? debug_smp_processor_id+0x17/0x20 [ 484.633488][ T7348] __x64_sys_read+0x7b/0x90 [ 484.638015][ T7348] do_syscall_64+0x31/0x40 [ 484.642543][ T7348] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 484.649344][ T7348] RIP: 0033:0x7fbba308d78e [ 484.654384][ T7348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.674994][ T7348] RSP: 002b:00007fbba1b28fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.684120][ T7348] RAX: ffffffffffffffda RBX: 00007fbba1b296c0 RCX: 00007fbba308d78e [ 484.693111][ T7348] RDX: 000000000000000f RSI: 00007fbba1b290a0 RDI: 0000000000000004 [ 484.701292][ T7348] RBP: 00007fbba1b29090 R08: 0000000000000000 R09: 0000000000000000 [ 484.709286][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.717761][ T7348] R13: 00007fbba3348038 R14: 00007fbba3347fa0 R15: 00007ffc6319f638 [ 484.727765][ T15] usb 9-1: 2:1 : invalid channels 0 [ 484.741667][ T7341] tipc: Disabling bearer [ 484.757424][ T15] usb 9-1: USB disconnect, device number 30 [ 484.770326][ T5438] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.792119][ T5438] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.812146][ T5438] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 484.822023][ T5438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.834053][ T5438] usb 1-1: config 0 descriptor?? [ 484.881434][ T5438] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 484.890374][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.901878][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.920288][ T7347] F2FS-fs (loop9): invalid crc value [ 484.924917][ T323] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.942205][ T323] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.951525][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.961465][ T323] usb 4-1: config 0 descriptor?? [ 484.966749][ T7347] F2FS-fs (loop9): Found nat_bits in checkpoint [ 485.011536][ T7347] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 485.072086][ T7362] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 485.085695][ T5359] attempt to access beyond end of device [ 485.085695][ T5359] loop9: rw=524288, want=45072, limit=40427 [ 485.099884][ T5359] attempt to access beyond end of device [ 485.099884][ T5359] loop9: rw=0, want=45072, limit=40427 [ 485.132377][ T7] attempt to access beyond end of device [ 485.132377][ T7] loop9: rw=2049, want=40984, limit=40427 [ 485.165659][ T7362] process 'syz.4.1822' launched '/dev/fd/7' with NULL argv: empty string added [ 485.175947][ T24] audit: type=1400 audit(2000000024.230:3679): avc: denied { execute_no_trans } for pid=7359 comm="syz.4.1822" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 485.207171][ T7] tipc: Left network mode [ 485.300307][ T15] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 485.409324][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.416937][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.424933][ T7364] device bridge_slave_0 entered promiscuous mode [ 485.433726][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.441566][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.449599][ T7364] device bridge_slave_1 entered promiscuous mode [ 485.454308][ T7368] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1814'. [ 485.462717][ T323] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 485.467977][ T7368] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1814'. [ 485.486893][ T323] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 485.554314][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.561778][ T7364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.570677][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.578506][ T7364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.587920][ T15] usb 9-1: device descriptor read/64, error -71 [ 485.606973][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.615261][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.623609][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.635030][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.643482][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.652196][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.665550][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.674752][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.682151][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.691581][ T7] device bridge_slave_1 left promiscuous mode [ 485.698290][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.706308][ T7] device bridge_slave_0 left promiscuous mode [ 485.712617][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.720787][ T7] device veth1_macvtap left promiscuous mode [ 485.726826][ T7] device veth0_vlan left promiscuous mode [ 485.818621][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.829194][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.844984][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.854359][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.878490][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.886749][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.895383][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 485.903527][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 485.912582][ T7364] device veth0_vlan entered promiscuous mode [ 485.924847][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 485.933664][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 485.943807][ T7364] device veth1_macvtap entered promiscuous mode [ 485.955168][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 485.963507][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 485.972872][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 485.989018][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.999603][ T15] usb 9-1: device descriptor read/64, error -71 [ 486.006630][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 486.280272][ T15] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 486.580751][ T15] usb 9-1: device descriptor read/64, error -71 [ 487.242012][ T309] usb 4-1: reset high-speed USB device number 44 using dummy_hcd [ 487.269281][ T283] usb 1-1: USB disconnect, device number 63 [ 487.313487][ T15] usb 9-1: device descriptor read/64, error -71 [ 487.410218][ T349] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 487.431106][ T7387] FAT-fs (loop7): Unrecognized mount option "nnonumtail=1" or missing value [ 487.441686][ T15] usb usb9-port1: attempt power cycle [ 487.543727][ T7387] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1830'. [ 487.564122][ T7387] device gretap0 entered promiscuous mode [ 487.640845][ T7393] exfat: Deprecated parameter 'namecase' [ 487.655692][ T7395] FAULT_INJECTION: forcing a failure. [ 487.655692][ T7395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.670986][ T7395] CPU: 0 PID: 7395 Comm: syz.0.1831 Not tainted syzkaller #0 [ 487.679715][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.690421][ T7395] Call Trace: [ 487.694316][ T7395] __dump_stack+0x21/0x24 [ 487.698935][ T7395] dump_stack_lvl+0x1a7/0x208 [ 487.704606][ T7395] ? thaw_kernel_threads+0x220/0x220 [ 487.710962][ T7395] ? vsnprintf+0x189c/0x1990 [ 487.715792][ T7395] ? show_regs_print_info+0x18/0x18 [ 487.721170][ T7395] dump_stack+0x15/0x1c [ 487.725854][ T7395] should_fail+0x3c1/0x510 [ 487.730390][ T7395] should_fail_usercopy+0x1a/0x20 [ 487.735714][ T7395] _copy_to_user+0x20/0x90 [ 487.740293][ T7395] simple_read_from_buffer+0xe9/0x160 [ 487.746399][ T7395] proc_fail_nth_read+0x1a6/0x220 [ 487.751644][ T7395] ? proc_fault_inject_write+0x310/0x310 [ 487.757949][ T7395] ? rw_verify_area+0x1c0/0x360 [ 487.763056][ T7395] ? proc_fault_inject_write+0x310/0x310 [ 487.769450][ T7395] vfs_read+0x209/0xa60 [ 487.774020][ T7395] ? __kasan_check_write+0x14/0x20 [ 487.779285][ T7395] ? kernel_read+0x70/0x70 [ 487.784014][ T7395] ? __kasan_check_write+0x14/0x20 [ 487.789430][ T7395] ? mutex_lock+0x92/0xf0 [ 487.793921][ T7395] ? mutex_trylock+0xa0/0xa0 [ 487.798622][ T7395] ? __fget_files+0x2c4/0x320 [ 487.803417][ T7395] ? __fdget_pos+0x2d2/0x380 [ 487.808346][ T7395] ? ksys_read+0x71/0x250 [ 487.812787][ T7395] ksys_read+0x149/0x250 [ 487.817367][ T7395] ? vfs_write+0xdc0/0xdc0 [ 487.821993][ T7395] ? debug_smp_processor_id+0x17/0x20 [ 487.827401][ T7395] __x64_sys_read+0x7b/0x90 [ 487.832007][ T7395] do_syscall_64+0x31/0x40 [ 487.836461][ T7395] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 487.842646][ T7395] RIP: 0033:0x7f6b9554c78e [ 487.847635][ T7395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 487.868669][ T7395] RSP: 002b:00007f6b93fc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 487.878157][ T7395] RAX: ffffffffffffffda RBX: 00007f6b93fc76c0 RCX: 00007f6b9554c78e [ 487.887338][ T7395] RDX: 000000000000000f RSI: 00007f6b93fc70a0 RDI: 0000000000000005 [ 487.896618][ T7395] RBP: 00007f6b93fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 487.904761][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.913205][ T7395] R13: 00007f6b95807128 R14: 00007f6b95807090 R15: 00007ffdf8be2648 [ 487.930603][ T7393] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 487.990275][ T15] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 488.001689][ T349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.015768][ T349] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 488.025809][ T349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.038179][ T349] usb 5-1: config 0 descriptor?? [ 488.217037][ T7406] FAT-fs (loop3): Directory bread(block 64) failed [ 488.224588][ T7406] FAT-fs (loop3): Directory bread(block 65) failed [ 488.231441][ T7406] FAT-fs (loop3): Directory bread(block 66) failed [ 488.238333][ T7406] FAT-fs (loop3): Directory bread(block 67) failed [ 488.245342][ T7406] FAT-fs (loop3): Directory bread(block 68) failed [ 488.252160][ T7406] FAT-fs (loop3): Directory bread(block 69) failed [ 488.259210][ T7406] FAT-fs (loop3): Directory bread(block 70) failed [ 488.266689][ T7406] FAT-fs (loop3): Directory bread(block 71) failed [ 488.273477][ T7406] FAT-fs (loop3): Directory bread(block 72) failed [ 488.280365][ T7406] FAT-fs (loop3): Directory bread(block 73) failed [ 488.360663][ T5438] usb 4-1: USB disconnect, device number 44 [ 488.490194][ T15] usb 9-1: device not accepting address 33, error -71 [ 488.522168][ T349] zeroplus 0003:0C12:0005.0026: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0 [ 488.533960][ T349] zeroplus 0003:0C12:0005.0026: no inputs found [ 488.724431][ T349] usb 5-1: USB disconnect, device number 67 [ 488.820226][ T5438] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 488.875070][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 488.878843][ T15] usb 9-1: new low-speed USB device number 34 using dummy_hcd [ 489.100338][ T15] usb 9-1: No LPM exit latency info found, disabling LPM. [ 489.170499][ T25] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 489.180684][ T15] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 23058, setting to 8 [ 489.191959][ T15] usb 9-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.205611][ T15] usb 9-1: config 1 interface 0 has no altsetting 0 [ 489.212342][ T5438] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.222618][ T5438] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.235833][ T5438] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 489.244967][ T5438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.257014][ T5438] usb 4-1: config 0 descriptor?? [ 489.301481][ T5438] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 489.460564][ T15] usb 9-1: string descriptor 0 read error: -22 [ 489.467319][ T15] usb 9-1: New USB device found, idVendor=046d, idProduct=c094, bcdDevice= 0.40 [ 489.476811][ T15] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.500399][ T7404] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 489.530382][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.542271][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.552544][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.566074][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.570535][ T283] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 489.577626][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.595124][ T25] usb 1-1: config 0 descriptor?? [ 489.772031][ T7404] loop8: p1 < > p3 [ 489.776466][ T7404] loop8: p3 size 134217728 extends beyond EOD, truncated [ 489.791947][ T7404] udc-core: couldn't find an available UDC or it's busy [ 489.799006][ T7404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 489.840310][ T283] usb 5-1: Using ep0 maxpacket: 32 [ 489.861991][ T7426] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1838'. [ 489.872182][ T7426] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1838'. [ 489.960529][ T283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.975072][ T283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.990357][ T283] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 490.002459][ T283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.013040][ T283] usb 5-1: config 0 descriptor?? [ 490.030418][ T15] usbhid 9-1:1.0: can't add hid device: -71 [ 490.036642][ T15] usbhid: probe of 9-1:1.0 failed with error -71 [ 490.045298][ T15] usb 9-1: USB disconnect, device number 34 [ 490.052013][ T283] hub 5-1:0.0: USB hub found [ 490.081465][ T25] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 490.091792][ T25] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 490.270902][ T283] hub 5-1:0.0: 25 ports detected [ 490.290282][ T283] hub 5-1:0.0: insufficient power available to use all downstream ports [ 490.391224][ T7430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.407003][ T1411] usb 4-1: USB disconnect, device number 45 [ 491.579223][ T15] usb 1-1: reset high-speed USB device number 64 using dummy_hcd [ 491.669307][ T283] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 491.707837][ T283] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 491.810261][ T283] usbhid 5-1:0.0: can't add hid device: -32 [ 491.816644][ T283] usbhid: probe of 5-1:0.0 failed with error -32 [ 491.830218][ T1411] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 492.220212][ T1411] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 492.238233][ T1411] usb 4-1: config 1 has no interface number 0 [ 492.245194][ T1411] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8 [ 492.255974][ T1411] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 492.261689][ T24] audit: type=1400 audit(2000000031.310:3680): avc: denied { append } for pid=7446 comm="syz.8.1847" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 492.269153][ T1411] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x68, skipping [ 492.326723][ T7449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1848'. [ 492.341432][ T24] audit: type=1400 audit(2000000031.400:3681): avc: denied { read } for pid=7448 comm="syz.4.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 492.430713][ T20] usb 5-1: USB disconnect, device number 68 [ 492.490305][ T1411] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 492.510198][ T1411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.528667][ T1411] usb 4-1: Product: syz [ 492.532940][ T1411] usb 4-1: Manufacturer: syz [ 492.537780][ T1411] usb 4-1: SerialNumber: syz [ 492.570277][ T7441] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 492.577733][ T7441] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 492.596625][ T7449] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 492.611634][ T7449] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 492.636427][ T7449] F2FS-fs (loop4): Found nat_bits in checkpoint [ 492.674275][ T7449] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 492.681954][ T7449] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 492.700435][ T25] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 492.780614][ T349] usb 1-1: USB disconnect, device number 64 [ 493.012778][ T7462] device syzkaller0 entered promiscuous mode [ 493.020995][ T24] audit: type=1400 audit(2000000032.080:3682): avc: denied { relabelfrom } for pid=7461 comm="syz.0.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 493.065821][ T24] audit: type=1400 audit(2000000032.110:3683): avc: denied { relabelto } for pid=7461 comm="syz.0.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 493.094507][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'. [ 493.120983][ T25] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 493.134754][ T25] usb 9-1: config 1 has no interface number 0 [ 493.148400][ T25] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8 [ 493.170207][ T25] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 493.171610][ T15] usb 4-1: USB disconnect, device number 46 [ 493.220979][ T7476] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1856'. [ 493.232728][ T25] usb 9-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x68, skipping [ 493.282099][ T24] audit: type=1326 audit(2000000032.320:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9558beb9 code=0x7ffc0000 [ 493.314820][ T24] audit: type=1326 audit(2000000032.320:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9558beb9 code=0x7ffc0000 [ 493.342047][ T24] audit: type=1326 audit(2000000032.320:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9558beb9 code=0x7ffc0000 [ 493.368835][ T24] audit: type=1326 audit(2000000032.320:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9558beb9 code=0x7ffc0000 [ 493.400772][ T24] audit: type=1326 audit(2000000032.320:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9558beb9 code=0x7ffc0000 [ 493.431387][ T24] audit: type=1326 audit(2000000032.320:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9558beb9 code=0x7ffc0000 [ 493.431886][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1862'. [ 493.473289][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 493.810606][ T25] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 493.939880][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.099835][ T25] usb 9-1: Product: syz [ 494.174574][ T25] usb 9-1: Manufacturer: syz [ 494.239934][ T25] usb 9-1: SerialNumber: syz [ 494.510325][ T323] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 494.570580][ T7451] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 494.606810][ T7451] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 495.410219][ T323] usb 5-1: Using ep0 maxpacket: 16 [ 495.730709][ T323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.933973][ T323] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.086467][ T323] usb 5-1: config 0 interface 0 has no altsetting 0 [ 496.100915][ T323] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 496.120204][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.148527][ T323] usb 5-1: config 0 descriptor?? [ 496.248553][ T323] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 496.309336][ T15] usb 5-1: USB disconnect, device number 69 [ 496.735377][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 496.787770][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 496.815303][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 496.978350][ T7549] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro, [ 496.988222][ T7549] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 497.081760][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 497.127824][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 497.162046][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 497.194999][ T20] usb 9-1: USB disconnect, device number 35 [ 497.260692][ T7563] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 497.280279][ T7563] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 497.311529][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 497.335336][ T7563] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.1890: Invalid block bitmap block 0 in block_group 0 [ 497.370382][ T7563] EXT4-fs error (device loop8) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 497.380071][ T7563] EXT4-fs error (device loop8): ext4_clear_blocks:880: inode #11: comm syz.8.1890: attempt to clear invalid blocks 983261 len 1 [ 497.393793][ T7563] EXT4-fs error (device loop8): __ext4_get_inode_loc:4444: comm syz.8.1890: Invalid inode table block 0 in block_group 0 [ 497.407094][ T7563] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5947: Corrupt filesystem [ 497.417443][ T7563] EXT4-fs error (device loop8) in ext4_orphan_del:3292: Corrupt filesystem [ 497.428479][ T7563] EXT4-fs error (device loop8): __ext4_get_inode_loc:4444: comm syz.8.1890: Invalid inode table block 0 in block_group 0 [ 497.441376][ T7563] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5947: Corrupt filesystem [ 497.451187][ T7563] EXT4-fs error (device loop8): ext4_truncate:4396: inode #11: comm syz.8.1890: mark_inode_dirty error [ 497.463168][ T7563] EXT4-fs error (device loop8) in ext4_orphan_cleanup:3108: Corrupt filesystem [ 497.472672][ T7563] EXT4-fs error (device loop8): __ext4_get_inode_loc:4444: comm syz.8.1890: Invalid inode table block 0 in block_group 0 [ 497.486466][ T7563] EXT4-fs (loop8): 1 truncate cleaned up [ 497.492455][ T7563] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue [ 497.784638][ T7580] FAT-fs (loop3): Unrecognized mount option "ÿÿ" or missing value [ 497.818549][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 497.924119][ T7580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1896'. [ 497.960502][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1896'. [ 497.985485][ T7578] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 498.085290][ T7578] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 498.106256][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 498.113314][ T7578] F2FS-fs (loop8): invalid crc value [ 498.667906][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 498.667919][ T24] audit: type=1400 audit(2000000037.580:3696): avc: denied { create } for pid=7588 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 498.702722][ T7578] F2FS-fs (loop8): Found nat_bits in checkpoint [ 498.719833][ T7592] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 498.746979][ T7592] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 498.819794][ T7578] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 498.880867][ T7578] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 498.896032][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 499.175842][ T7611] incfs: ino conflict with backing FS 1 [ 499.226869][ T7611] incfs: Unexpected inode type [ 499.460212][ T24] audit: type=1400 audit(2000000038.210:3697): avc: denied { mount } for pid=7606 comm="syz.7.1902" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 499.534006][ T24] audit: type=1400 audit(2000000038.230:3698): avc: denied { mounton } for pid=7606 comm="syz.7.1902" path="/10/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 499.593589][ T5130] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 499.593604][ T5130] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 499.618813][ T5130] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 499.643083][ T5130] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 499.668782][ T5130] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 499.693172][ T5130] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 499.718042][ T5130] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 499.895365][ T24] audit: type=1400 audit(2000000038.930:3699): avc: denied { unmount } for pid=7364 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 500.003004][ T7614] EXT4-fs (loop4): Ignoring removed bh option [ 500.020622][ T7614] EXT4-fs (loop4): Ignoring removed nobh option [ 500.040368][ T7614] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 500.111360][ T7614] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 500.228383][ T7614] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3358: comm syz.4.1906: Allocating blocks 497-513 which overlap fs metadata [ 500.244543][ T7614] EXT4-fs (loop4): pa ffff88813c08da80: logic 128, phys. 385, len 8 [ 500.252720][ T7614] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 1 [ 500.306123][ T7630] device syzkaller0 entered promiscuous mode [ 500.316969][ T24] audit: type=1400 audit(2000000039.370:3700): avc: denied { mounton } for pid=7626 comm="syz.0.1911" path="/116/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 500.347354][ T7635] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 500.400450][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.407615][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.417220][ T7624] device bridge_slave_0 entered promiscuous mode [ 500.430299][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.447608][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.474415][ T7624] device bridge_slave_1 entered promiscuous mode [ 500.601600][ T7643] EXT4-fs (loop8): Ignoring removed oldalloc option [ 500.638775][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.646090][ T7624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.654739][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.661999][ T7624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.691239][ T7643] EXT4-fs error (device loop8): ext4_map_blocks:630: inode #3: block 2: comm syz.8.1915: lblock 2 mapped to illegal pblock 2 (length 1) [ 500.730318][ T7643] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 500.738468][ T7643] EXT4-fs error (device loop8): ext4_map_blocks:630: inode #3: block 48: comm syz.8.1915: lblock 0 mapped to illegal pblock 48 (length 1) [ 500.777258][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.787436][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.800917][ T7643] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 500.812866][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.830345][ T7643] EXT4-fs error (device loop8): ext4_acquire_dquot:6225: comm syz.8.1915: Failed to acquire dquot type 0 [ 500.847616][ T7643] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5947: Corrupt filesystem [ 500.848157][ T112] device bridge_slave_1 left promiscuous mode [ 500.864644][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.872883][ T7646] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 500.872959][ T112] device bridge_slave_0 left promiscuous mode [ 500.883471][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.894398][ T7646] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 500.903648][ T7643] EXT4-fs error (device loop8): ext4_evict_inode:283: inode #11: comm syz.8.1915: mark_inode_dirty error [ 500.915299][ T112] device veth1_macvtap left promiscuous mode [ 500.921990][ T112] device veth0_vlan left promiscuous mode [ 500.922928][ T7646] F2FS-fs (loop4): fault_type options not supported [ 500.935001][ T7643] EXT4-fs warning (device loop8): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 500.936409][ T7646] F2FS-fs (loop4): fault_injection options not supported [ 500.946229][ T7643] EXT4-fs (loop8): 1 orphan inode deleted [ 500.960112][ T7646] F2FS-fs (loop4): invalid crc value [ 500.965916][ T4250] EXT4-fs error (device loop8): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 500.978555][ T7638] F2FS-fs (loop3): invalid crc value [ 500.985970][ T7643] EXT4-fs (loop8): mounted filesystem without journal. Opts: abort,noblock_validity,grpquota,oldalloc,auto_da_alloc,inlinecrypt,,errors=continue [ 501.001950][ T7638] F2FS-fs (loop3): Found nat_bits in checkpoint [ 501.013612][ T7646] F2FS-fs (loop4): Found nat_bits in checkpoint [ 501.046383][ T7638] F2FS-fs (loop3): Start checkpoint disabled! [ 501.053177][ T4250] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 501.061736][ T4250] EXT4-fs error (device loop8): ext4_release_dquot:6261: comm kworker/u4:6: Failed to release dquot type 0 [ 501.081149][ T7638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 501.104420][ T7643] EXT4-fs (loop8): shut down requested (2) [ 501.124093][ T24] audit: type=1400 audit(2000000040.180:3701): avc: denied { rename } for pid=7637 comm="syz.3.1913" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 501.147427][ T7646] F2FS-fs (loop4): Start checkpoint disabled! [ 501.180519][ T24] audit: type=1400 audit(2000000040.180:3702): avc: denied { reparent } for pid=7637 comm="syz.3.1913" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 501.190485][ T4250] attempt to access beyond end of device [ 501.190485][ T4250] loop3: rw=2049, want=40984, limit=40427 [ 501.227260][ T7646] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 501.252011][ T7646] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 501.265009][ T7658] sock: sock_set_timeout: `syz.8.1917' (pid 7658) tries to set negative timeout [ 501.293029][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.302059][ T501] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.309692][ T501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.317584][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.326811][ T501] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.333914][ T501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.341718][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 501.350111][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 501.372560][ T7624] device veth0_vlan entered promiscuous mode [ 501.381579][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.391037][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.400918][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.409176][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.438833][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.458355][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.492192][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 501.510764][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.524240][ T7624] device veth1_macvtap entered promiscuous mode [ 501.542452][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 501.562242][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 501.571722][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 501.591260][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.602894][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.850223][ T323] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 501.956444][ T7665] F2FS-fs (loop3): Found nat_bits in checkpoint [ 501.994999][ T7665] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 502.037618][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 502.058878][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 502.100202][ T323] usb 5-1: Using ep0 maxpacket: 16 [ 502.223570][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 502.242829][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 502.267739][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 502.288849][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 502.354085][ T7694] device syzkaller0 entered promiscuous mode [ 502.374683][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 502.389605][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 502.400332][ T323] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 502.418534][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.437670][ T323] usb 5-1: Product: syz [ 502.442847][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 502.446152][ T323] usb 5-1: Manufacturer: syz [ 502.464798][ T323] usb 5-1: SerialNumber: syz [ 502.473801][ T7699] ------------[ cut here ]------------ [ 502.480602][ T323] usb 5-1: config 0 descriptor?? [ 502.497756][ T7699] WARNING: CPU: 1 PID: 7699 at mm/page_alloc.c:5354 __alloc_pages_nodemask+0x345/0x620 [ 502.514572][ T7699] Modules linked in: [ 502.523271][ T7699] CPU: 1 PID: 7699 Comm: syz.0.1932 Not tainted syzkaller #0 [ 502.541319][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 502.560685][ T7699] RIP: 0010:__alloc_pages_nodemask+0x345/0x620 [ 502.567328][ T7699] Code: 48 3b 8c 24 e0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 f7 c6 00 20 00 00 0f 85 d8 fd ff ff <0f> 0b 31 c0 eb 95 31 c0 e9 a6 fd ff ff 4c 89 ff e8 46 7b f5 ff 49 [ 502.587753][ T7699] RSP: 0018:ffffc90000dc7660 EFLAGS: 00010246 [ 502.595001][ T7699] RAX: ffffc90000dc76f0 RBX: 0000000000000000 RCX: 0000000000000000 [ 502.603398][ T7699] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000dc7708 [ 502.611702][ T7699] RBP: ffffc90000dc7790 R08: ffffc90000dc7707 R09: ffffc90000dc76f0 [ 502.619832][ T7699] R10: dffffc0000000000 R11: fffff520001b8ee1 R12: 1ffff920001b8ed4 [ 502.628326][ T7699] R13: dffffc0000000000 R14: 0000000000040dc0 R15: 0000000000000016 [ 502.636670][ T7699] FS: 00007f6b93fe86c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 502.646457][ T7699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.653305][ T7699] CR2: 00007f6b955d9600 CR3: 0000000111ee2000 CR4: 00000000003506a0 [ 502.662202][ T7699] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 502.671761][ T7699] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 502.679896][ T7699] Call Trace: [ 502.683965][ T7699] ? class_read+0x5d/0x1010 [ 502.688826][ T7699] ? policydb_read+0xac1/0x2ba0 [ 502.694113][ T7699] ? security_load_policy+0x15c/0xf20 [ 502.699504][ T7699] ? sel_write_load+0x37d/0x5c0 [ 502.704436][ T7699] ? vfs_write+0x338/0xdc0 [ 502.708886][ T7699] ? ksys_write+0x149/0x250 [ 502.713584][ T7699] ? __x64_sys_write+0x7b/0x90 [ 502.718392][ T7699] ? do_syscall_64+0x31/0x40 [ 502.723914][ T7699] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 502.729659][ T7699] kmalloc_order+0x4c/0x160 [ 502.734265][ T7699] kmalloc_order_trace+0x16/0x80 [ 502.739267][ T7699] __kmalloc+0x1eb/0x330 [ 502.744709][ T7699] hashtab_init+0xb3/0x130 [ 502.749269][ T7699] symtab_init+0x40/0x60 [ 502.753753][ T7699] class_read+0x298/0x1010 [ 502.758236][ T7699] ? common_read+0x630/0x630 [ 502.763182][ T7699] policydb_read+0xac1/0x2ba0 [ 502.768136][ T7699] security_load_policy+0x15c/0xf20 [ 502.773430][ T7699] ? exc_page_fault+0x67/0xc0 [ 502.778377][ T7699] ? asm_exc_page_fault+0x1e/0x30 [ 502.783720][ T7699] ? selinux_policy_commit+0x5a0/0x5a0 [ 502.789306][ T7699] ? copy_user_enhanced_fast_string+0xe/0x40 [ 502.795530][ T7699] ? _copy_from_user+0x95/0xd0 [ 502.800584][ T7699] sel_write_load+0x37d/0x5c0 [ 502.806162][ T7699] ? sel_make_dir+0x280/0x280 [ 502.811173][ T7699] ? rw_verify_area+0x1c0/0x360 [ 502.816254][ T7699] ? sel_make_dir+0x280/0x280 [ 502.821084][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 502.829287][ T7699] vfs_write+0x338/0xdc0 [ 502.833831][ T7699] ? kernel_write+0x3c0/0x3c0 [ 502.838594][ T7699] ? __kasan_check_write+0x14/0x20 [ 502.843864][ T7699] ? mutex_lock+0x92/0xf0 [ 502.848502][ T7699] ? mutex_trylock+0xa0/0xa0 [ 502.853185][ T7699] ? __fget_files+0x2c4/0x320 [ 502.858090][ T7699] ? __fdget_pos+0x2d2/0x380 [ 502.863237][ T7699] ? ksys_write+0x71/0x250 [ 502.867869][ T7699] ksys_write+0x149/0x250 [ 502.872622][ T7699] ? __ia32_sys_read+0x90/0x90 [ 502.877528][ T7699] ? __kasan_check_read+0x11/0x20 [ 502.882752][ T7699] __x64_sys_write+0x7b/0x90 [ 502.888303][ T7699] do_syscall_64+0x31/0x40 [ 502.893290][ T7699] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 502.899208][ T7699] RIP: 0033:0x7f6b9558beb9 [ 502.903721][ T7699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.924678][ T7699] RSP: 002b:00007f6b93fe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 502.933724][ T7699] RAX: ffffffffffffffda RBX: 00007f6b95806fa0 RCX: 00007f6b9558beb9 [ 502.941942][ T7699] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 502.950486][ T7699] RBP: 00007f6b955f9c1f R08: 0000000000000000 R09: 0000000000000000 [ 502.958606][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.971827][ T323] usb 5-1: USB disconnect, device number 70 [ 502.979429][ T7699] R13: 00007f6b95807038 R14: 00007f6b95806fa0 R15: 00007ffdf8be2648 [ 502.989162][ T7699] ---[ end trace dbc100721709ce65 ]--- [ 503.002902][ T7722] device syzkaller0 entered promiscuous mode [ 503.011233][ T7699] SELinux: failed to load policy [ 503.050087][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 503.180609][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.203548][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.215250][ T25] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 503.226437][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.243310][ T25] usb 6-1: config 0 descriptor?? [ 503.619127][ T7753] x_tables: duplicate underflow at hook 1 [ 504.181023][ T25] hid-led 0003:1D34:0004.0028: hidraw0: USB HID v0.06 Device [HID 1d34:0004] on usb-dummy_hcd.5-1/input0 [ 504.194422][ T25] hid-led 0003:1D34:0004.0028: Dream Cheeky Webmail Notifier initialized [ 504.259795][ T7758] device syzkaller0 entered promiscuous mode [ 504.397461][ T25] usb 6-1: USB disconnect, device number 22 [ 504.561166][ T7782] device syzkaller0 entered promiscuous mode [ 505.100071][ T15] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 506.079109][ T7799] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.1969: inode has both inline data and extents flags [ 506.096455][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 506.096470][ T24] audit: type=1326 audit(2000000045.150:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.5.1974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2064e09eb9 code=0x0 [ 506.129150][ T7799] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1969: couldn't read orphan inode 15 (err -117) [ 506.150068][ T7799] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsdgroups,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue [ 506.186793][ T7817] device syzkaller0 entered promiscuous mode [ 506.420433][ T24] audit: type=1400 audit(2000000045.420:3708): avc: denied { write } for pid=7798 comm="syz.3.1969" name=E91F7189591E9233614B dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 506.590856][ T24] audit: type=1326 audit(2000000045.430:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7798 comm="syz.3.1969" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fcd1c4eb9 code=0x0 [ 506.648969][ T24] audit: type=1400 audit(2000000045.700:3710): avc: denied { getopt } for pid=7826 comm="syz.8.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 506.690270][ T15] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.703308][ T15] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 506.719103][ T15] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 506.733948][ T15] usb 5-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 506.744665][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.759240][ T15] usb 5-1: config 0 descriptor?? [ 506.780316][ T349] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 506.800887][ T15] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 507.023976][ T7832] EXT4-fs (loop3): Ignoring removed orlov option [ 507.067207][ T7832] EXT4-fs (loop3): Ignoring removed bh option [ 507.092977][ T323] usb 5-1: USB disconnect, device number 71 [ 507.363781][ T7832] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,nombcache,init_itable=0x0000000000000009,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue [ 507.702444][ T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.900367][ T7845] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 507.967348][ T7845] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.1984: casefold flag without casefold feature [ 508.000430][ T7845] EXT4-fs (loop4): Remounting filesystem read-only [ 508.008912][ T7845] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1984: couldn't read orphan inode 15 (err -117) [ 508.043060][ T7845] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro, [ 508.088004][ T7845] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 4: comm syz.4.1984: lblock 0 mapped to illegal pblock 4 (length 1) [ 508.100409][ T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.127661][ T7845] EXT4-fs (loop4): Remounting filesystem read-only [ 508.134478][ T349] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 508.147149][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.163551][ T349] usb 1-1: config 0 descriptor?? [ 508.318155][ T24] audit: type=1400 audit(2000000047.370:3711): avc: denied { write } for pid=7855 comm="syz.5.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 508.396369][ T7864] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 508.405346][ T7864] FAT-fs (loop5): Filesystem has been set read-only [ 508.663645][ T24] audit: type=1326 audit(2000000047.710:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.8.1993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbba30cceb9 code=0x0 [ 508.734079][ T7862] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 508.744680][ T7862] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.818182][ T7875] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8c4dac22, utbl_chksum : 0xe619d30d) [ 508.838695][ T24] audit: type=1400 audit(2000000047.890:3713): avc: denied { setattr } for pid=7873 comm="syz.5.1994" name="file0" dev="loop5" ino=1048740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 508.916256][ T7878] usb usb8: usbfs: process 7878 (syz.3.1989) did not claim interface 0 before use [ 509.108197][ T349] hid-led: probe of 0003:1D34:0004.0029 failed with error -71 [ 509.118503][ T349] usb 1-1: USB disconnect, device number 65 [ 509.143321][ T7880] SELinux: policydb string does not match my string SE Linux [ 509.153129][ T7880] SELinux: failed to load policy [ 509.193518][ T24] audit: type=1400 audit(2000000048.250:3714): avc: denied { associate } for pid=7884 comm="syz.4.1997" name="292" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 509.280260][ T7890] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 509.294008][ T7890] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.1999: casefold flag without casefold feature [ 509.307260][ T7890] EXT4-fs (loop4): Remounting filesystem read-only [ 509.314109][ T7890] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1999: couldn't read orphan inode 15 (err -117) [ 509.326486][ T7890] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro, [ 509.361396][ T7890] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 4: comm syz.4.1999: lblock 0 mapped to illegal pblock 4 (length 1) [ 509.382464][ T7890] EXT4-fs (loop4): Remounting filesystem read-only [ 509.400380][ T7899] exfat: Deprecated parameter 'utf8' [ 509.492378][ T7898] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #15: comm syz.5.2001: inode has both inline data and extents flags [ 509.505886][ T7898] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.2001: couldn't read orphan inode 15 (err -117) [ 509.518712][ T7898] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue [ 509.571097][ T7899] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 509.606183][ T7903] EXT4-fs (loop3): Ignoring removed orlov option [ 509.621839][ T7898] EXT4-fs error (device loop5): ext4_lookup:1830: inode #15: comm syz.5.2001: inode has both inline data and extents flags [ 509.635443][ T7903] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 509.645667][ T24] audit: type=1326 audit(2000000048.700:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565621aeb9 code=0x7ffc0000 [ 509.672120][ T7898] EXT4-fs error (device loop5): ext4_lookup:1830: inode #15: comm syz.5.2001: inode has both inline data and extents flags [ 509.687671][ T7903] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2224: inode #15: comm syz.3.2003: corrupted in-inode xattr [ 509.700440][ T7903] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.2003: couldn't read orphan inode 15 (err -117) [ 509.710081][ T24] audit: type=1326 audit(2000000048.700:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565621aeb9 code=0x7ffc0000 [ 509.730908][ T7903] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 509.805317][ T325] udevd[325]: incorrect ext4 checksum on /dev/loop0 [ 509.824776][ T325] udevd[325]: incorrect ext4 checksum on /dev/loop0 [ 509.845191][ T325] udevd[325]: incorrect ext4 checksum on /dev/loop0 [ 509.933134][ T7898] EXT4-fs error (device loop5): ext4_lookup:1830: inode #15: comm syz.5.2001: inode has both inline data and extents flags [ 510.222822][ T7923] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 510.259011][ T7923] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.350430][ T326] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 510.390386][ T323] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 510.643466][ T7940] usb usb8: usbfs: process 7940 (syz.4.2010) did not claim interface 0 before use [ 511.290326][ T323] usb 9-1: Using ep0 maxpacket: 16 [ 511.410254][ T326] usb 6-1: config 9 has an invalid interface number: 81 but max is 0 [ 511.418825][ T323] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 511.427657][ T326] usb 6-1: config 9 has an invalid descriptor of length 22, skipping remainder of the config [ 511.438740][ T323] usb 9-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 511.449581][ T326] usb 6-1: config 9 has no interface number 0 [ 511.456861][ T323] usb 9-1: config 0 has no interface number 0 [ 511.464282][ T326] usb 6-1: config 9 interface 81 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.478004][ T7946] EXT4-fs (loop3): Test dummy encryption mode enabled [ 511.485058][ T7946] EXT4-fs (loop3): Ignoring removed oldalloc option [ 511.493829][ T7946] EXT4-fs (loop3): 1 truncate cleaned up [ 511.499526][ T7946] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,i_version,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,,errors=continue [ 511.518006][ T326] usb 6-1: config 9 interface 81 has no altsetting 0 [ 511.590456][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 511.610295][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 511.660523][ T323] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 511.671825][ T25] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 511.680688][ T326] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 511.691426][ T326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.691434][ T7958] EXT4-fs (loop3): Ignoring removed orlov option [ 511.691498][ T7958] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 511.700018][ T326] usb 6-1: Product: syz [ 511.700029][ T326] usb 6-1: Manufacturer: syz [ 511.700039][ T326] usb 6-1: SerialNumber: syz [ 511.701688][ T323] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.724497][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 511.729979][ T323] usb 9-1: Product: syz [ 511.746771][ T323] usb 9-1: Manufacturer: syz [ 511.751601][ T323] usb 9-1: SerialNumber: syz [ 511.758749][ T323] usb 9-1: config 0 descriptor?? [ 511.767658][ T7958] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2224: inode #15: comm syz.3.2022: corrupted in-inode xattr [ 511.782746][ T7958] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.2022: couldn't read orphan inode 15 (err -117) [ 511.796512][ T7958] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 511.802084][ T323] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 511.834610][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 511.843186][ T323] uvcvideo: No valid video chain found. [ 511.860823][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 511.912164][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 512.061834][ T326] usbserial_generic 6-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 512.073420][ T326] usbserial_generic 6-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 512.085702][ T326] usbserial_generic 6-1:9.81: generic converter detected [ 512.096363][ T7977] usb usb8: usbfs: process 7977 (syz.0.2026) did not claim interface 0 before use [ 512.112250][ T326] usb 6-1: generic converter now attached to ttyUSB0 [ 512.146796][ T326] usb 6-1: USB disconnect, device number 23 [ 512.163016][ T7975] EXT4-fs (loop3): Test dummy encryption mode enabled [ 512.200821][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.217463][ T326] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 512.295517][ T7975] EXT4-fs (loop3): Ignoring removed oldalloc option [ 512.333296][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.369855][ T7975] EXT4-fs (loop3): 1 truncate cleaned up [ 512.375688][ T7975] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,i_version,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,,errors=continue [ 512.379522][ T326] usbserial_generic 6-1:9.81: device disconnected [ 512.402338][ T25] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 512.411976][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.429517][ T323] usb 9-1: USB disconnect, device number 36 [ 512.436016][ T25] usb 5-1: config 0 descriptor?? [ 512.457731][ T7980] binder: 7979:7980 ioctl c0306201 0 returned -14 [ 512.876734][ T3706] udevd[3706]: incorrect ext4 checksum on /dev/loop0 [ 513.060421][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 513.101742][ T25] usbhid: probe of 5-1:0.0 failed with error -71 [ 513.315766][ T25] usb 5-1: USB disconnect, device number 72 [ 513.998251][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 513.998265][ T24] audit: type=1400 audit(2000000053.030:3729): avc: denied { write } for pid=7999 comm="syz.0.2040" name="file1" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 514.037924][ T8009] binder: 8007:8009 ioctl c0306201 0 returned -14 [ 514.058026][ T8011] usb usb8: usbfs: process 8011 (syz.0.2043) did not claim interface 0 before use [ 514.875649][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 515.063191][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 515.374689][ T283] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 515.392468][ T24] audit: type=1400 audit(2000000054.220:3730): avc: denied { read } for pid=8026 comm="syz.8.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 515.610373][ T8035] incfs: ino conflict with backing FS 1 [ 515.886916][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 515.944305][ T8044] usb usb8: usbfs: process 8044 (syz.8.2054) did not claim interface 0 before use [ 515.961746][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 516.000368][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 516.090266][ T283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.111443][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 516.118981][ T283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.133378][ T24] audit: type=1326 audit(2000000055.170:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.4.2060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f565621aeb9 code=0x0 [ 516.360071][ T8065] hub 8-0:1.0: USB hub found [ 516.367007][ T8065] hub 8-0:1.0: 1 port detected [ 517.221011][ T283] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 517.270646][ T24] audit: type=1400 audit(2000000056.330:3732): avc: denied { unmount } for pid=5130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 517.278059][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 517.298345][ T283] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 517.338305][ T283] usb 6-1: config 0 descriptor?? [ 517.360423][ T283] usb 6-1: can't set config #0, error -71 [ 517.375970][ T283] usb 6-1: USB disconnect, device number 24 [ 517.464273][ T24] audit: type=1400 audit(2000000056.520:3733): avc: denied { setattr } for pid=8084 comm="syz.4.2072" path="socket:[46456]" dev="sockfs" ino=46456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 517.871806][ T24] audit: type=1400 audit(2000000056.930:3734): avc: denied { map } for pid=8099 comm="syz.8.2076" path="socket:[47498]" dev="sockfs" ino=47498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 518.305495][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 518.379252][ T9] device bridge_slave_1 left promiscuous mode [ 518.386316][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.398627][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 518.518036][ T9] device bridge_slave_0 left promiscuous mode [ 518.524446][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.536462][ T9] device veth1_macvtap left promiscuous mode [ 518.543178][ T9] device veth0_vlan left promiscuous mode [ 518.560530][ T8106] exfat: Deprecated parameter 'utf8' [ 518.752760][ T8106] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 518.900354][ T326] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 518.964371][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 519.696017][ T326] usb 1-1: Using ep0 maxpacket: 16 [ 519.831063][ T326] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.886619][ T8116] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,auto_da_alloc=0x0000000000000002,,errors=continue [ 519.942422][ T8116] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.957791][ T326] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.969857][ T326] usb 1-1: config 0 interface 0 has no altsetting 0 [ 519.977148][ T326] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 519.986851][ T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.001987][ T326] usb 1-1: config 0 descriptor?? [ 520.033557][ T8126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8126 comm=syz.8.2084 [ 520.053624][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.061372][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.069200][ T8098] device bridge_slave_0 entered promiscuous mode [ 520.077098][ T6165] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 520.089316][ T6165] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 520.100679][ T6165] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 520.112033][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.112393][ T6165] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 520.119528][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.130418][ T6165] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 520.139213][ T8098] device bridge_slave_1 entered promiscuous mode [ 520.149870][ T6165] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 520.164824][ T6165] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 520.175753][ T6165] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 520.186952][ T6165] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 520.197992][ T6165] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 520.273433][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.281264][ T8098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.289257][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.296605][ T8098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.328809][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.343231][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.352171][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.359990][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.379426][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.388457][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.396924][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.405597][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.415017][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.422143][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.430324][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.438403][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 520.451038][ T9] tipc: Left network mode [ 520.462032][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 520.475353][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.484562][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.492395][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.501447][ T8098] device veth0_vlan entered promiscuous mode [ 520.518332][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.526863][ T8110] udc-core: couldn't find an available UDC or it's busy [ 520.532667][ T8098] device veth1_macvtap entered promiscuous mode [ 520.534036][ T8110] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 520.552841][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 520.564949][ T326] hid (null): unknown global tag 0xe [ 520.568837][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 520.574410][ T326] hid (null): report_id 84475906 is invalid [ 520.629657][ T8148] fuse: Bad value for 'fd' [ 520.654396][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.663442][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.671569][ T8144] device bridge_slave_0 entered promiscuous mode [ 520.680701][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.688552][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.696357][ T8144] device bridge_slave_1 entered promiscuous mode [ 520.757795][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.765890][ T8144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.773636][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.780898][ T8144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.812524][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.821414][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.829081][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.829989][ T8154] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 520.847134][ T8154] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 520.886133][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.897728][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.904903][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.920679][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.929508][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.937044][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.956768][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.973969][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 520.995776][ T8144] device veth0_vlan entered promiscuous mode [ 521.006402][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 521.013639][ T8157] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 521.018965][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 521.032108][ T8157] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 521.040937][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 521.055850][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.231780][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 521.251169][ T8157] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 521.358029][ T8157] EXT4-fs error (device loop5): ext4_dirty_inode:6157: inode #2: comm syz.5.2096: mark_inode_dirty error [ 521.376188][ T8157] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 521.389661][ T8157] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 521.398499][ T8157] EXT4-fs error (device loop5): ext4_dirty_inode:6157: inode #2: comm syz.5.2096: mark_inode_dirty error [ 521.412495][ T8157] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 521.422362][ T8157] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #2: comm syz.5.2096: mark_inode_dirty error [ 521.433911][ T8162] fscrypt (loop6, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 521.449889][ T8144] device veth1_macvtap entered promiscuous mode [ 521.462190][ T8157] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 521.474522][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 521.484262][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 521.491621][ T8157] EXT4-fs error (device loop5): ext4_dirty_inode:6157: inode #2: comm syz.5.2096: mark_inode_dirty error [ 521.506593][ T8169] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 521.521068][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 521.529546][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 521.567852][ T9] device bridge_slave_1 left promiscuous mode [ 521.575453][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.598391][ T9] device bridge_slave_0 left promiscuous mode [ 521.604874][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.613877][ T9] device veth1_macvtap left promiscuous mode [ 521.620554][ T9] device veth0_vlan left promiscuous mode [ 521.654010][ T8172] exfat: Deprecated parameter 'utf8' [ 521.708824][ T8172] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 521.933236][ T1411] usb 1-1: USB disconnect, device number 66 [ 522.243614][ T24] audit: type=1400 audit(2000000317.089:3735): avc: denied { mount } for pid=8185 comm="syz.1.2103" name="/" dev="configfs" ino=13274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 522.495340][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 522.580337][ T8196] device veth0_vlan left promiscuous mode [ 522.586411][ T8196] device veth0_vlan entered promiscuous mode [ 522.593745][ T8196] device veth1_macvtap left promiscuous mode [ 522.600592][ T8196] device veth1_macvtap entered promiscuous mode [ 522.681229][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.714030][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.723328][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.732733][ T501] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.740622][ T501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.749163][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 522.785679][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.800075][ T501] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.807244][ T501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.816040][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 522.824775][ T24] audit: type=1400 audit(2000000317.099:3736): avc: denied { search } for pid=8185 comm="syz.1.2103" name="/" dev="configfs" ino=13274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 522.848966][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 522.858217][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.867352][ T24] audit: type=1400 audit(2000000317.099:3737): avc: denied { read } for pid=8185 comm="syz.1.2103" name="/" dev="configfs" ino=13274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 522.890805][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 522.899125][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 522.907699][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 522.916016][ T24] audit: type=1400 audit(2000000317.099:3738): avc: denied { open } for pid=8185 comm="syz.1.2103" path="/" dev="configfs" ino=13274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 522.939934][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 522.949552][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 522.958366][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 522.966742][ T24] audit: type=1400 audit(2000000317.559:3739): avc: denied { mount } for pid=8178 comm="syz.8.2101" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 522.992653][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 523.001278][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 523.009703][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 523.018103][ T24] audit: type=1400 audit(2000000317.559:3740): avc: denied { remount } for pid=8178 comm="syz.8.2101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 523.038885][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.047802][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.056294][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 523.064827][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.073268][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.081443][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 523.090194][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 523.227574][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.236205][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 523.244659][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.252871][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.261472][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.430548][ T8210] fuse: Unknown parameter 'conte' [ 523.447670][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.509055][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 523.567026][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 523.575661][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 523.584147][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 523.591927][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 523.599995][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 523.608068][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 523.615930][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 523.623657][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 523.633571][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 523.654292][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 523.662574][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 523.670867][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 523.678912][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 523.687212][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 523.695132][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 523.702906][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 523.710739][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 523.718615][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 523.726778][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.782985][ T8221] exfat: Deprecated parameter 'utf8' [ 523.796734][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 523.818618][ T8221] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 523.872282][ T24] audit: type=1400 audit(2000000318.919:3741): avc: denied { unmount } for pid=5130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 523.946215][ T8226] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 524.263244][ T8226] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.276949][ T24] audit: type=1400 audit(2000000319.089:3742): avc: denied { mount } for pid=8223 comm="syz.0.2114" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 524.355920][ T8240] EXT4-fs (loop1): Ignoring removed nobh option [ 524.374956][ T8240] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 524.461867][ T8240] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 524.603312][ T8247] usb usb8: usbfs: process 8247 (syz.5.2115) did not claim interface 0 before use [ 524.884069][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 525.798482][ T8265] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 525.857294][ T8265] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2125'. [ 525.866777][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2125'. [ 526.072950][ T8269] exfat: Deprecated parameter 'utf8' [ 526.499583][ T8269] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 526.529355][ T8270] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 526.596551][ T325] udevd[325]: incorrect ext4 checksum on /dev/loop0 [ 526.684085][ T8274] loop5: p1 < > p4 < > [ 526.693344][ T8274] loop5: partition table partially beyond EOD, truncated [ 526.702676][ T8274] loop5: p1 start 33554432 is beyond EOD, truncated [ 526.790055][ T325] udevd[325]: incorrect ext4 checksum on /dev/loop0 [ 526.881165][ T8289] usb usb8: usbfs: process 8289 (syz.0.2131) did not claim interface 0 before use [ 527.145773][ T476] udevd[476]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 527.168106][ T8285] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 69: comm syz.1.2134: lblock 8 mapped to illegal pblock 69 (length 1) [ 527.211271][ T8285] Quota error (device loop1): write_blk: dquota write failed [ 527.219159][ T8285] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 68: comm syz.1.2134: lblock 7 mapped to illegal pblock 68 (length 1) [ 527.235624][ T8285] Quota error (device loop1): write_blk: dquota write failed [ 527.243582][ T8285] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 67: comm syz.1.2134: lblock 6 mapped to illegal pblock 67 (length 1) [ 527.258814][ T8285] Quota error (device loop1): write_blk: dquota write failed [ 527.267729][ T8285] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 527.279911][ T8285] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 48: comm syz.1.2134: lblock 0 mapped to illegal pblock 48 (length 1) [ 527.295013][ T8285] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 527.305100][ T8285] EXT4-fs error (device loop1): ext4_acquire_dquot:6225: comm syz.1.2134: Failed to acquire dquot type 0 [ 527.317510][ T8285] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5947: Corrupt filesystem [ 527.327822][ T8285] EXT4-fs error (device loop1): ext4_evict_inode:283: inode #11: comm syz.1.2134: mark_inode_dirty error [ 527.339731][ T8285] EXT4-fs warning (device loop1): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 527.350755][ T8285] EXT4-fs (loop1): 1 orphan inode deleted [ 527.356909][ T8285] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,grpid,nodiscard,stripe=0x0000000000000001,data_err=ignore,,errors=continue [ 527.376949][ T9] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 527.413706][ T9] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 527.423041][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6261: comm kworker/u4:1: Failed to release dquot type 0 [ 527.439704][ T8285] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2134: Invalid inode bitmap blk 4 in block_group 0 [ 527.565942][ T24] audit: type=1400 audit(2000000322.619:3743): avc: denied { ioctl } for pid=8297 comm="syz.6.2139" path="socket:[46986]" dev="sockfs" ino=46986 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 527.721988][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 527.814811][ T24] audit: type=1400 audit(2000000322.859:3744): avc: denied { create } for pid=8283 comm="syz.1.2134" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 527.815814][ T501] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 527.852723][ T501] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 527.862788][ T501] EXT4-fs error (device loop1): ext4_release_dquot:6261: comm kworker/u4:4: Failed to release dquot type 0 [ 527.875164][ T8144] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5947: Corrupt filesystem [ 527.885077][ T8144] EXT4-fs error (device loop1): ext4_quota_off:6544: inode #3: comm syz-executor: mark_inode_dirty error [ 527.898855][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 528.095907][ T8333] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 528.107621][ T8333] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.123341][ T8340] EXT4-fs (loop8): Test dummy encryption mode enabled [ 528.134727][ T8340] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue [ 528.165836][ T8346] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 528.180323][ T349] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 528.270237][ T283] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 528.453000][ T8354] usb usb8: usbfs: process 8354 (syz.5.2150) did not claim interface 0 before use [ 528.593579][ T24] audit: type=1400 audit(2000000323.649:3745): avc: denied { create } for pid=8338 comm="syz.8.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 529.081284][ T8365] EXT4-fs warning (device loop5): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 529.140400][ T349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.163769][ T349] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 529.175646][ T349] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 529.189150][ T349] usb 1-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 529.199943][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.212980][ T349] usb 1-1: config 0 descriptor?? [ 529.271850][ T24] audit: type=1400 audit(2000000324.329:3746): avc: denied { connect } for pid=8364 comm="syz.5.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 529.541434][ T24] audit: type=1326 audit(2000000324.599:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.8.2166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbba30cceb9 code=0x0 [ 529.581057][ T349] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 529.620395][ T283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.631650][ T283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.720326][ T283] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 529.729872][ T283] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 529.738016][ T283] usb 2-1: Manufacturer: syz [ 529.743600][ T283] usb 2-1: config 0 descriptor?? [ 529.804042][ T20] usb 1-1: USB disconnect, device number 67 [ 530.057679][ T8392] hub 8-0:1.0: USB hub found [ 530.062979][ T8392] hub 8-0:1.0: 1 port detected [ 530.365509][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 530.460337][ T3706] udevd[3706]: incorrect ext4 checksum on /dev/loop0 [ 530.468059][ T8396] EXT4-fs (loop8): Ignoring removed oldalloc option [ 530.481461][ T8396] EXT4-fs (loop8): 1 truncate cleaned up [ 530.487476][ T8396] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,usrquota, [ 530.506873][ T3706] udevd[3706]: incorrect ext4 checksum on /dev/loop0 [ 530.533136][ T476] udevd[476]: incorrect ext4 checksum on /dev/loop0 [ 530.569984][ T8396] EXT4-fs error (device loop8): ext4_clear_blocks:880: inode #18: comm syz.8.2171: attempt to clear invalid blocks 36 len 4 [ 530.584024][ T8396] EXT4-fs (loop8): Remounting filesystem read-only [ 530.591174][ T8396] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5947: Corrupt filesystem [ 530.601699][ T8396] EXT4-fs error (device loop8): ext4_punch_hole:4236: inode #18: comm syz.8.2171: mark_inode_dirty error [ 530.624245][ T5130] EXT4-fs error (device loop8): ext4_map_blocks:630: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 530.662553][ T283] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002B/input/input13 [ 530.679276][ T283] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002B/input/input14 [ 530.694617][ T283] uclogic 0003:256C:006D.002B: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 531.226806][ T8329] udc-core: couldn't find an available UDC or it's busy [ 531.268959][ T8329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 531.293150][ T9] tipc: Left network mode [ 531.299081][ T8406] udevd[8406]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 531.331548][ T326] usb 2-1: USB disconnect, device number 65 [ 531.362954][ T8409] EXT4-fs (loop5): Ignoring removed orlov option [ 531.369536][ T8409] EXT4-fs (loop5): Ignoring removed mblk_io_submit option SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 531.429966][ T329] udevd[329]: incorrect ext4 checksum on /dev/loop0 [ 531.440114][ T8409] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2224: inode #15: comm syz.5.2177: corrupted in-inode xattr [ 531.452942][ T8409] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.2177: couldn't read orphan inode 15 (err -117) [ 531.466865][ T8409] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 531.568106][ T8420] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue [ 531.580303][ T8420] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.120868][ T9] device bridge_slave_1 left promiscuous mode [ 532.127012][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.134553][ T9] device bridge_slave_0 left promiscuous mode [ 532.140993][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.149283][ T9] device veth1_macvtap left promiscuous mode [ 532.155430][ T9] device veth0_vlan left promiscuous mode [ 533.741555][ T9] device bridge_slave_1 left promiscuous mode [ 533.748103][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.756144][ T9] device bridge_slave_0 left promiscuous mode [ 533.763527][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.772579][ T9] device bridge_slave_1 left promiscuous mode [ 533.778980][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.786861][ T9] device bridge_slave_0 left promiscuous mode [ 533.793114][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.801491][ T9] device bridge_slave_1 left promiscuous mode [ 533.807750][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.816224][ T9] device bridge_slave_0 left promiscuous mode [ 533.822965][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.831770][ T9] device bridge_slave_1 left promiscuous mode [ 533.838167][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.846559][ T9] device bridge_slave_0 left promiscuous mode [ 533.855065][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.864420][ T9] device veth1_macvtap left promiscuous mode [ 533.871049][ T9] device veth0_vlan left promiscuous mode [ 533.877106][ T9] device veth1_macvtap left promiscuous mode [ 533.883170][ T9] device veth0_vlan left promiscuous mode [ 533.889359][ T9] device veth1_macvtap left promiscuous mode [ 533.895588][ T9] device veth0_vlan left promiscuous mode [ 533.901814][ T9] device veth1_macvtap left promiscuous mode [ 533.907915][ T9] device veth0_vlan left promiscuous mode [ 535.744473][ T9] ------------[ cut here ]------------ [ 535.750555][ T9] WARNING: CPU: 0 PID: 9 at net/ipv6/xfrm6_tunnel.c:338 xfrm6_tunnel_net_exit+0xc0/0x130 [ 535.762130][ T9] Modules linked in: [ 535.766479][ T9] CPU: 0 PID: 9 Comm: kworker/u4:1 Tainted: G W syzkaller #0 [ 535.775671][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.786304][ T9] Workqueue: netns cleanup_net [ 535.791333][ T9] RIP: 0010:xfrm6_tunnel_net_exit+0xc0/0x130 [ 535.797832][ T9] Code: e8 c5 d0 94 fd 4b 83 3c 3e 00 75 19 e8 19 53 5a fd 49 81 ff f8 07 00 00 74 1b e8 0b 53 5a fd 49 83 c7 08 eb c9 e8 00 53 5a fd <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 535.817777][ T9] RSP: 0018:ffffc90000097c30 EFLAGS: 00010293 [ 535.823927][ T9] RAX: ffffffff840a62d0 RBX: ffff88811125a680 RCX: ffff888100248000 [ 535.832308][ T9] RDX: 0000000000000000 RSI: ffffc90000097a00 RDI: ffff888126b34000 [ 535.840473][ T9] RBP: ffffc90000097c50 R08: 0000000000000003 R09: 0000000000000004 [ 535.848725][ T9] R10: dffffc0000000000 R11: fffff52000012f20 R12: dffffc0000000000 [ 535.857115][ T9] R13: dffffc0000000000 R14: ffff888126b34000 R15: 0000000000000000 [ 535.865144][ T9] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 535.874615][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 535.881259][ T9] CR2: 000055daf4b41430 CR3: 000000000640f000 CR4: 00000000003506b0 [ 535.889355][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 535.897405][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 535.905522][ T9] Call Trace: [ 535.908840][ T9] cleanup_net+0x58e/0xb80 [ 535.913317][ T9] ? __kasan_check_write+0x14/0x20 [ 535.918459][ T9] ? ops_init+0x4a0/0x4a0 [ 535.922839][ T9] ? read_word_at_a_time+0x12/0x20 [ 535.927980][ T9] ? strscpy+0x9b/0x290 [ 535.932200][ T9] process_one_work+0x6e1/0xba0 [ 535.937079][ T9] worker_thread+0xa6a/0x13c0 [ 535.942392][ T9] kthread+0x346/0x3d0 [ 535.947149][ T9] ? worker_clr_flags+0x190/0x190 [ 535.952348][ T9] ? kthread_blkcg+0xd0/0xd0 [ 535.956993][ T9] ret_from_fork+0x1f/0x30 [ 535.961748][ T9] ---[ end trace dbc100721709ce66 ]--- [ 535.967452][ T9] ------------[ cut here ]------------ [ 535.973121][ T9] WARNING: CPU: 0 PID: 9 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x115/0x130 [ 535.983465][ T9] Modules linked in: [ 535.987393][ T9] CPU: 0 PID: 9 Comm: kworker/u4:1 Tainted: G W syzkaller #0 [ 535.996245][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.006514][ T9] Workqueue: netns cleanup_net [ 536.011545][ T9] RIP: 0010:xfrm6_tunnel_net_exit+0x115/0x130 [ 536.017740][ T9] Code: fd 4b 83 bc 3e 00 08 00 00 00 75 19 e8 c4 52 5a fd 49 81 ff f8 07 00 00 74 1b e8 b6 52 5a fd 49 83 c7 08 eb c5 e8 ab 52 5a fd <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 9b 52 5a fd 5b 41 5c 41 5e 41 [ 536.037718][ T9] RSP: 0018:ffffc90000097c30 EFLAGS: 00010293 [ 536.043825][ T9] RAX: ffffffff840a6325 RBX: ffff888126b34800 RCX: ffff888100248000 [ 536.051900][ T9] RDX: 0000000000000000 RSI: ffffc90000097a00 RDI: ffff888126b34808 [ 536.059883][ T9] RBP: ffffc90000097c50 R08: 0000000000000003 R09: 0000000000000004 [ 536.068174][ T9] R10: dffffc0000000000 R11: fffff52000012f20 R12: dffffc0000000000 [ 536.076541][ T9] R13: dffffc0000000000 R14: ffff888126b34000 R15: 0000000000000008 [ 536.084834][ T9] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 536.093834][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.100935][ T9] CR2: 000055daf4b41430 CR3: 000000000640f000 CR4: 00000000003506b0 [ 536.109123][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.117567][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 536.125750][ T9] Call Trace: [ 536.129078][ T9] cleanup_net+0x58e/0xb80 [ 536.133581][ T9] ? __kasan_check_write+0x14/0x20 [ 536.138883][ T9] ? ops_init+0x4a0/0x4a0 [ 536.143413][ T9] ? read_word_at_a_time+0x12/0x20 [ 536.148585][ T9] ? strscpy+0x9b/0x290 [ 536.152953][ T9] process_one_work+0x6e1/0xba0 [ 536.157954][ T9] worker_thread+0xa6a/0x13c0 [ 536.162907][ T9] kthread+0x346/0x3d0 [ 536.167126][ T9] ? worker_clr_flags+0x190/0x190 [ 536.172287][ T9] ? kthread_blkcg+0xd0/0xd0 [ 536.177048][ T9] ret_from_fork+0x1f/0x30 [ 536.181583][ T9] ---[ end trace dbc100721709ce67 ]--- [ 536.203965][ T9] ------------[ cut here ]------------ [ 536.210035][ T9] WARNING: CPU: 1 PID: 9 at net/xfrm/xfrm_state.c:2716 xfrm_state_fini+0x206/0x250 [ 536.220192][ T9] Modules linked in: [ 536.224439][ T9] CPU: 1 PID: 9 Comm: kworker/u4:1 Tainted: G W syzkaller #0 [ 536.233697][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.244027][ T9] Workqueue: netns cleanup_net [ 536.248990][ T9] RIP: 0010:xfrm_state_fini+0x206/0x250 [ 536.254668][ T9] Code: 43 80 3c 2c 00 74 08 48 89 df e8 35 cf aa fd 48 8b 3b 44 89 f6 e8 ca 20 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7a 51 70 fd <0f> 0b e9 64 fe ff ff e8 6e 51 70 fd 0f 0b e9 cc fe ff ff e8 62 51 [ 536.274772][ T9] RSP: 0018:ffffc90000097c10 EFLAGS: 00010293 [ 536.281076][ T9] RAX: ffffffff83f46456 RBX: ffff88811125a680 RCX: ffff888100248000 [ 536.289521][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888100248000 [ 536.297688][ T9] RBP: ffffc90000097c38 R08: ffffffff86b336c7 R09: 1ffffffff0d666d8 [ 536.305723][ T9] R10: dffffc0000000000 R11: fffffbfff0d666d9 R12: 1ffffffff0d664b8 [ 536.313895][ T9] R13: dffffc0000000000 R14: ffff88811125b400 R15: dffffc0000000000 [ 536.321977][ T9] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 536.331370][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.338085][ T9] CR2: 000055daf4b15ff0 CR3: 000000010d5de000 CR4: 00000000003506a0 [ 536.346231][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.354370][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 536.362780][ T9] Call Trace: [ 536.366099][ T9] xfrm_net_exit+0x25/0x60 [ 536.370594][ T9] cleanup_net+0x58e/0xb80 [ 536.375041][ T9] ? __kasan_check_write+0x14/0x20 [ 536.380508][ T9] ? ops_init+0x4a0/0x4a0 [ 536.384868][ T9] ? read_word_at_a_time+0x12/0x20 [ 536.389980][ T9] ? strscpy+0x9b/0x290 [ 536.394212][ T9] process_one_work+0x6e1/0xba0 [ 536.399093][ T9] worker_thread+0xa6a/0x13c0 [ 536.403994][ T9] kthread+0x346/0x3d0 [ 536.408097][ T9] ? worker_clr_flags+0x190/0x190 [ 536.413182][ T9] ? kthread_blkcg+0xd0/0xd0 [ 536.417939][ T9] ret_from_fork+0x1f/0x30 [ 536.422551][ T9] ---[ end trace dbc100721709ce68 ]---