last executing test programs: 6.615983569s ago: executing program 1 (id=536): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffea}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) (async) r5 = socket(0x10, 0x800, 0x4) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001800010000000000000000000220"], 0x24}}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000580)=0xef) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, 0x0) setresuid(r6, 0x0, r7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vxcan1\x00'}) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$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") (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r9, 0x0, 0x58) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x3c, 0x0, 0x801, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0xffffffffffffff67, 0x2, 0x2}, @NL80211_KEY_IDX={0x5}]}]}, 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000040000933315c233831ab2603a7f86aff0e287a9721bee88ed74866a915ec096f8df4e1831431874fca516ed0c603192ec916091f3d25faed8d0d1e50f5bd9b7188802fc87e26e28db090970041a401909c9752390e546c915a9f90b930ffd6ad4da59ad57644d96c4fd8e115ac6444c370a9f8c0a76c938948325edf46d8463d429b60866c16f8eba10cfeba0f8adefacfdfbaf996ae6eb7d85a7bb5a2ffe0b5fb5b8eedb538e6d29853f6a65483f614cbbb761188860c5b1a717517bde0fe3953074bd882cf465b7e1969aa80443f636e9da2aae6a10a1ec3633f44d9ec8ebdeec36a4b39264e7d4bef331", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bc0900000000000035090100000000009500000000000000bf9800000000000056090000010000008500000050000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9030000000000000000380000000000069078ac141400ac1e0001830b40e000000200000000070300000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 6.498677869s ago: executing program 1 (id=537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0}, 0x90) syz_mount_image$f2fs(&(0x7f0000000300), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000180)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@flush_merge}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000000)=0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f000000ac40)={0x2020}, 0x2020) r9 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r9, 0x0, 0x0, 0x9000f4) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) 5.525938888s ago: executing program 1 (id=543): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r10}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xf0}, 0x0, 0x0}, 0x0) 5.247380671s ago: executing program 2 (id=544): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x248}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000280)='./file0\x00', 0xce) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', r4, r5, 0x1, 0x3, 0x2}, 0x48) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000100)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 5.182913866s ago: executing program 4 (id=546): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x6, 0x5}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x4000000000010046) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r5, 0x0, 0x11, 0x0, &(0x7f0000000040)="61df712bc884fef053a7d5722780b6c2a7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x1200440, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',cachetag=ext4\x00,version=9p2000.L,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB=',nodevmap,cache=mmap', @ANYRESDEC]) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b0f4bd4a0f93a00"/21], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x48) 5.054715777s ago: executing program 3 (id=547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x802, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=@other={'lock', ' ', 'none'}, 0xa) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000001dc0)={0x0, 0x1, 0xfdfd, 0x2, 0xfffd}) (async) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) 5.010794631s ago: executing program 3 (id=548): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7042000000000008500000082000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f00000001c0)="8cbe6f4a492f2bc981b2e8de9909") 4.295650689s ago: executing program 2 (id=549): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[], [{@fowner_lt}]}, 0x0, 0x4d7, &(0x7f0000001000)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[], [{@fowner_lt}]}, 0x0, 0x4d7, &(0x7f0000001000)="$eJzs3c9vG1kdAPDvTJImDdlNFvYACNiy7FJQVTtxt1HVU7mAUFUJUXHi0IbEjaLYdRQ7pQk9pP8BByQqcYI/gQMSB6SeuHODG5dyQCpQgRokDkYzHqdOGzeBZOM2/nyk0bwfsb/v2Zr37JdkXgBD61xEbEfEmYi4HRHTRXlSHHGtc2Q/9/zZg8WdZw8Wk2i3b/49yeuzsuh5TOYzxXNORMT3vxPxo+TVuM3NrdWFWq26XuTLrfpaubm5dXGlvrBcXa7erVTm5+Znr1y6XDm2vn5Q//XTb69c/8HvfvvlJ3/Y/uZPsmZNFXW9/egaO4aYSfFMUz1loxFxvbf6LTZS9OfMoBvC/yWNiM9GxIf59T8dI/m7CQCcZu32dLSne/MAwGmX5mtgSVoq1gKmIk1Lpc4a3vsxmdYazdaFO42Nu0udtbKZGEvvrNSqs8Va4UyMJVl+Lk+/yFdeyl+KiPci4mfjZ/N8abFRWxrkBx8AGGLZPD818SL/r/HO/A8AnHITg24AAHDizP8AMHwOMf/7iAAAp4zJHQCGj/kfAIaP+R8Ahk+/+X/7hNsBAJyI7924kR3tneL+10v3NjdWG/cuLlWbq6X6xmJpsbG+VlpuNJbze/bUD3q+WqOxNvdJbNwvt6rNVrm5uXWr3riWdiqrt6p77ql9HDfYBgD+Z+998PhPSfZV/+rZ/IievRxMz3C6pYNuADAwI4NuADAwdvuC4eU7PnDQRrR9/0T40VGinj3Kg4EjOv8F6/8wrKz/w/Cy/g/Dy/o/DK92O7HnPwAMGWv8wGB+/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvt6n8SNJSsRf4VKRpqRTxTkTMxFhyZ6VWnY2IdyPij+Nj41l+btCNBgCOKP1rUuz/dX76o6mXa88k/x7PzxHx41/c/Pn9hVZrfS4r/8dueetRUV7plgAAb5LuPN2dx7ueP3uw2D1Osj1Pv9XZXDSLu1McnZrRGM3PEzEWEZP/TIp8R/Z5ZeQY4m8/jIjP79f/JF8bmSl2Pn05fhb7nRONn+6Jn+Z1nXP2WnzuGNoCw+ZxNv5c2+/6S+Ncft7/+p/IR6ij645/O6+Mf+nu+DfSZ/w7d9gYn/z+u33rHkZ8cXS/+Mlu/KRP/I8OGf/PX/rKh3tLPv5pu91JtX8ZcT72j98bq9yqr5Wbm1sXV+oLy9Xl6t1KZX5ufvbKpcuVcr5GXe6uVOf2fAn929UL776u/5O98UdiN/7EAf3/+JD9/9V/bv/wq6+J/42v7f/+v/+a+Nmc+PVDxl+Y/E3f7buz+Et9Xv+D3v8Lh4z/5C9bSz3Z47hsAIAjaG5urS7UatV1CYlTkph4M5qxf2K8uPDelPb0TQx4YAI+dS8u+kG3BAAAAAAAAAAAAAAA6Ock/p1o0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9PpvAAAA///vEtQr") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000340)={0x0, 0x6c, 0x44}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'rmd256-generic\x00'}}, &(0x7f00000005c0)="7b19caba90982ffec6c69fab5e95999cf229bdc5d14a4957dc42fd1659ef9a12a6dda948daa63c328958e406ec3e3e298d8c12adce6a8aaab186495b6460e4451763b042422ebba7e6e5a867c5a726cdf9f5593f87480594bd3f10af209bb6dba95bb95a66c63ee8de663c20", &(0x7f0000000640)="16afab660aa3864d7dc6b3ecaa19154ce4f99637bbaebe5b96f0403ee015a5686c32619ad24b20c3e1d2dd368640c45a7f6b719b0db0c5d3f5442396fd8e7534cba17274") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lremovexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_default\x00') r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 3.910705851s ago: executing program 3 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000011c0)={&(0x7f00008fc000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) recvfrom(r1, &(0x7f0000001200)=""/88, 0x58, 0x1, &(0x7f0000001280)=@pppoe={0x18, 0x0, {0x1, @local, 'dvmrp1\x00'}}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)) mount$binder(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{@max={'max', 0x3d, 0x2}}, {@stats}], [{@seclabel}, {@fsname}, {@dont_hash}, {@fowner_eq}]}) r7 = dup(r2) write$UHID_INPUT(r7, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) 3.889521332s ago: executing program 2 (id=551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000015c0)="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", 0x0}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.573487078s ago: executing program 2 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffff81f79335000000001142"], 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r9}, 0x10) (async) io_setup(0x3, &(0x7f0000000340)) 3.462702247s ago: executing program 2 (id=553): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000200)={0x0, r2}) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(r3, 0xcdf) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000b39ed7118604aa004e22e2488ee7c7b4809b2b77e0d0a612c1268221391d087790ef770dc876b27b5127e253fb5798406af78f17ca7787701c1c6abb8c772073965146269e14f9eef1ee7733376b1a907ff76b6539c2c4024418221eac705c3bdaa961583934ba43e0c0fcda32c10b7aea9d72fe91ad97f07afc21fb0723f9a9d1801689d16808829972d70c43262bb38cfbc5faab6d25fedbf23cd3dd7a131ec8dbf1834b96624a3d04343ce88e27c5e01f976b8a78d8e5f4c08af0f847d9383de90000000000000000000000000000008fbf1bb2a7c9bd46422d57b2fd0f90b3905bb06ec8fc250e83f71eb695b68bc426a0a5cc983fd0b6aaeab6f55527a2a3d32a4f2a3f0dc27db59cc84a7dc55c2380ce95b7919ccaf5e0cd1f25", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2b, 0x800000000004, @thr={&(0x7f0000000480)="a244e324fda020eddb2bb988738141fb60ef2a2d8e5a635bfcd294494dbcd237f250b63b0f5d250a3ce49e9fe1ea54efe33407ba54c03621114278c1f71d799ef3020d9cf858798c7483ce6aa62a6e4b0eeaec6e824fbfc19de2d478265ee939a197cc543077ad548409cad2b9de79c76b2b316154428651366471ce17c19354b625fb42a2e3a68fae9eda2e783ff8fa8a35eee3212b7fc22a80e6f307bc89fb7d9a5870161c745ec0563e6b4fa904bc55437790c1f7", &(0x7f0000000540)="1022d86c76f2996614053e84713bb11853b2fe394f32c4ce6a049233bb3e621e953711c673aa1c746af57eb1ed2e62f142340b28c0543ee36194b07bd6e95d4d1bb61220cbcb703565b2fbcfda5fc87265df9b3468c05544b877bb8214be635d84dac28f8e53a39490a5e8d620f5d003f3beacd83cf3440f6990b2ea1901b9b8a71c39d1bbc7af59743799dc32da3655229d8c60dbd0a852a9b23a29a8dc6d19dd9d"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0xa) listen(r4, 0x0) 3.18039769s ago: executing program 1 (id=559): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r5, 0x0, 0x20000000}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x3, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r4, 0x100000000, 0x0) getdents64(r8, &(0x7f00000003c0)=""/63, 0x3f) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 2.562674631s ago: executing program 3 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000012c0)={0x1}) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x2}, {0x0, 0xfe01, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x40}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0xa002, &(0x7f00000002c0)=ANY=[], 0x3, 0x150e, &(0x7f0000002180)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000060000006311180000000000950000000000000096e6fa55cc5d5a42e181be71b8171db9ff6bd3f0eec5f63ffb4ee5acd9ddc64d512a44141cf67b8ed7b4f07b617a7323a0a563cadef3067ee635c20a9420cd7cc894e608712facc9ffef9a425a61fe8fb6b3c08c18fb4267e5972f85321d5172bba97e88d3278ac03c0a039d48090dd1f8bdd44a6a1c58c4ccd808ddd44afe3e6e518d6ae7316245a6"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {0x5e}, {0x6, 0x0, 0x0, 0x7}]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x7, &(0x7f0000001400)=ANY=[@ANYRES16=r3, @ANYBLOB="db305cc9391c44c33a0eeec1eddb5ed37bf57d8b408d17408e291fec7a97d3d48ed805bd7619fa2e9333a043619ca69dcf0e28c6012e68dfddc0a63e18555d8ee63f7412145c0cbb831909bda335d3f26df7c598288b50bf8f5e6f4966e3b36acdd0a7b20f1b80b9c69b6dd88a36e1f4d5bdad015b3743e0b77c31c05835893006c022308d605d7b35f66fdb8b4f60a1b1f1b0da30b92cbe80edc4c2c24bc92dc28a2fb81ba880c3d979f69002dcdc4c7d991c7c514486aaa68adf53d79f8bec5205e97f8c669d5a7fcecf24844262a5bb8207f0e268c47accbe74521c0494d68e05ce8ab4c242", @ANYBLOB="000000000000000095affc0000000000ccbdd47e36cdd462f9b4667d009cf74b3f5135395a06a5c6cfa54bde404261c73febe674"], &(0x7f0000001340)='GPL\x00'}, 0x90) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) fsync(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 2.561773871s ago: executing program 4 (id=561): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="f30f5c16bc9c0f01c43667660f382491018b0000ba2100b80e4deff2a7360f4da70000440f20c0663502000000440f22c02e0f78dcb847008ed8660f3834b00000", 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000004c0)={'\x00', 0x8, 0x3, 0x3, 0x0, 0xfff8, 0x100000, 0x4000, '\x00', 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="0f792bf20f009f43fd9aed660fc6e707f30f0926670f01c466653ef20f707019000fe9050100000066ba6100ed640f0d54ef080fc73e", 0x36}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) alarm(0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0xb, 0x2, 0x0, 0x4, 0x0, 0xf, [{0x4, 0x0, 0x4}, {0x0, 0x0, 0x2ee8}]}]}, {0x0, [0x2e]}}, &(0x7f0000000340)=""/57, 0x3f, 0x39, 0x0, 0x2}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x0, 0x2, 0x420, r5, 0x8, '\x00', 0x0, r6, 0x6, 0x3, 0x80006, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r9}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.363138397s ago: executing program 0 (id=562): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r8 = dup(r5) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r7, &(0x7f00000005c0)=ANY=[], 0xff40) (async) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) 2.362004807s ago: executing program 3 (id=563): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000180)={[], [{@seclabel}]}, 0x1, 0x540, &(0x7f0000000fc0)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x80804, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB]) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.164635163s ago: executing program 1 (id=564): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0x2}], 0x1) 2.138502505s ago: executing program 0 (id=565): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00'}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 2.137024715s ago: executing program 0 (id=566): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup(r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000580)=""/104, 0x68}], 0x1) write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) listen(r3, 0xdea) 2.083307219s ago: executing program 1 (id=567): r0 = syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) add_key$fscrypt_v1(&(0x7f0000000800), 0x0, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f00000003c0)=@raw=[@printk, @snprintf], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18}, 0x90) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r4, 0x0, 0x0) socket(0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='rss_stat\x00', r6}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 1.418978854s ago: executing program 3 (id=568): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@random="034855a31003", @empty, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "603687e891129c1061c5488c2600c6427e8b18686bc3f35a29b902d125b3ff1873a9723efca54c7f79affe44ab3455703a82ad837c06dd1fca732e4e101afb43"}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c64656275672c6572726f72733d72656d6f756e742d726f2c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d72656c617865642c757466383d302c726f6469722c726f6469722c00bd11a3d82e3cc8e94a1ac3169cb253bc51dceb1a3c8675eef705933dac0549813c420584251b8849a95afa9de1a80dcc7f9d4e26116050410b89f88108d551843f6115dded9b54fcb36a3a7bab7fb11d2c7265fa11a3ff2f3ca1c0df2142ff9ce532341817f2bb2fef3428793728d4daa090c5becbb74d00c95f965afa83e5bb562620ea9e99853533ca4ef0702dad548503917329f0f431d87efa28137d3f0e0fa2906cb9e236094a2d7a9ce877c1d8509500"/315], 0x1, 0x217, &(0x7f0000000b40)="$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") 1.384077277s ago: executing program 2 (id=569): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r10}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xf0}, 0x0, 0x0}, 0x0) 1.279583025s ago: executing program 0 (id=570): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000500)='.', 0x1}, {0x0}, {0x0}], 0x3, 0x0, 0x0) utimes(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 702.637503ms ago: executing program 4 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8f41c288d409ef0e169a340295f36d4b4", &(0x7f0000000380), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3101}) ioctl$TUNSETNOCSUM(r3, 0x8923, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='rseq_update\x00', r7}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 648.353977ms ago: executing program 4 (id=572): socket$inet6(0xa, 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5}, 0x48) syz_open_dev$vcsn(&(0x7f0000000180), 0x56, 0x48503) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x56, 0x48503) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0xd90, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500006410aef7113e64c384002d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) unshare(0x64000600) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) 193.985844ms ago: executing program 0 (id=573): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f00000004c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x2) 118.26111ms ago: executing program 0 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xd}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xb}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@loopback, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, 0x12, 0x1, 0x70bd2d, 0x25dfdbfd, {0x2a, 0xe4, 0x3, 0xf1, {0x4e24, 0x4e24, [0xfffffffd, 0x7776fdf5, 0x9, 0x6], [0x9, 0x7f, 0x5, 0x7], r1, [0x2, 0x4]}, 0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "3909c67e2aec86fee5afb11249f0c20e594d032462e4384ba2430c4bd92d03632a553f5b48c6d2f3b7dcda549915a2f3a5f550b01edd3786e28c2862a069b27b7ab21d485b69e3c85cb5220d620f0a2d637e48fa67c08b4144ac965734eaa794d5bfe385137fdd549832d14ac5e6d698db4e769b7bcb313f"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200400, 0x101) r3 = openat(r2, &(0x7f00000003c0)='./file0\x00', 0x284600, 0x182) syz_usb_connect(0x2, 0xf3, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x91, 0x81, 0x78, 0x10, 0xaf0, 0x6600, 0xa7ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x1, 0x9, 0x0, 0x20, 0x4, [{{0x9, 0x4, 0x44, 0x8, 0x3, 0xb4, 0xe, 0x3d, 0xa3, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x2}}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x7f, 0x8, 0xad, [@generic={0x46, 0x6, "8ed1820b9eec8cac9dda3c7054bc813021e02eb60a8a3b806e445cf8225dc9f83c1bdc535d3c328604ed6c2e1697c371be24c79f8baeedc1a97ce61364579855ff7c987d"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3cf, 0x4, 0x16, 0x66, [@generic={0x51, 0xf, "0388511d3b327cca57a0d785cdccca042fa7a869d5607e8d5710445ff91fb233834ea8c518b5ef88fe73c33adce5512c5177c6251724903b8620054ed2cf3e173168c1821bf23844723c570dfd839f"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0xd, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}, @generic={0xd, 0x8, "c2a515f69d200bbd4bacae"}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x241, 0x3, 0xc, 0x9, 0x8, 0x6}, 0x38, &(0x7f0000000540)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "6e6d8fd1c53464e4d8f5004f81c9915c"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "83129d8e95694d9838c3814239138bba"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x71, 0x9, 0x8, 0xe1}]}, 0x9, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1815}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xe8f0}}, {0x63, &(0x7f0000000740)=@string={0x63, 0x3, "5855d42098c6aef28f5a89dfd786ffb0a70efc67f01e17dea71d5c0dc5d7a8a6caa92ee8315998d797620d055f78b9f8c8b77238f98836c94fa99727dbe39d6f80aee3be5f96b8144e4c26017a547121f9c24c72f6257b7b5035843122709b8b01"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x403}}]}) r4 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000b00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000c40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000c80)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000d80)=0xe8) lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000f40), &(0x7f0000000f80)=0x0, &(0x7f0000000fc0)) lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='system.posix_acl_access\x00', &(0x7f00000010c0)={{}, {}, [{0x2, 0x1, r4}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x4, r5}, {0x2, 0x0, r6}, {0x2, 0x2, r8}, {0x2, 0x2, r10}], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0xa9528d5fc50b11eb, 0xffffffffffffffff}, {0x8, 0x0, r11}, {0x8, 0x5, r12}, {0x8, 0x1, r13}, {0x8, 0x4, 0xee00}, {0x8, 0x5, r14}], {0x10, 0x2}, {0x20, 0x1}}, 0x8c, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=@newtclass={0x40, 0x28, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x5}, {0xfff2, 0xffff}, {0xf, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_cbs={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x18, 0x2b, &(0x7f00000012c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @alu={0x4, 0x0, 0x5, 0x9, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xa0}, @alu={0x0, 0x0, 0x5, 0x5, 0x6, 0xfffffffffffffffc, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001440)='GPL\x00', 0x3, 0x67, &(0x7f0000001480)=""/103, 0x40e00, 0x4, '\x00', r9, 0x0, r3, 0x8, &(0x7f0000001500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0xf, 0x101, 0x83cc}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001580)=[{0x1, 0x5, 0xa, 0xa}, {0x2, 0x3, 0x8, 0x3}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x1, 0x3, 0x4}], 0x10, 0xffffffff}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{0x1}, &(0x7f0000001280), &(0x7f0000001680)=r15}, 0x20) r16 = openat(r3, &(0x7f0000001700)='./file0\x00', 0x804040, 0xca) lsetxattr$trusted_overlay_upper(&(0x7f0000001740)='./file0/../file0\x00', &(0x7f0000001780), &(0x7f00000017c0)={0x0, 0xfb, 0x1015, 0x1, 0x5, "754edd9c4b33cbe627bb7b92a255ecc8", "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"}, 0x1015, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0x10, 0x8, &(0x7f0000002800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xef}]}, &(0x7f0000002840)='GPL\x00', 0x2, 0x9d, &(0x7f0000002880)=""/157, 0x40f00, 0x1a, '\x00', r1, 0x36, r16, 0x8, &(0x7f0000002940)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002980)={0x2, 0x446, 0x5, 0x5}, 0x10, 0x0, r16, 0x6, 0x0, &(0x7f00000029c0)=[{0x5, 0x1, 0xb, 0x7}, {0x3, 0x2, 0x7, 0x1}, {0x1, 0x5, 0xe, 0xb}, {0x3, 0x2, 0x9, 0x3}, {0x4, 0x3, 0x2, 0xa}, {0x4, 0x5, 0x9, 0x8}], 0x10, 0x6}, 0x90) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x3c, r17, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000002c40)) open(&(0x7f0000002c80)='./file0\x00', 0xee614b35e3f8a29c, 0x2) socket$nl_generic(0x10, 0x3, 0x10) write$tcp_congestion(r3, &(0x7f0000002cc0)='htcp\x00', 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002d80)={{{@in6=@mcast2, @in6=@empty, 0x4e22, 0x0, 0x4e21, 0x9, 0xa, 0x80, 0xa0, 0x5e, r9, r6}, {0x7ff, 0x4, 0x9, 0x400, 0x9, 0x200, 0x1, 0x551dd9de}, {0xffffffffffffffff, 0x246, 0x0, 0x10}, 0x1, 0x6e6bb9, 0x0, 0x0, 0x2, 0x3}, {{@in=@empty, 0x4d4, 0x4a}, 0xa, @in6=@local, 0x3505, 0x0, 0x2, 0x2, 0x0, 0x3ea, 0x8}}, 0xe8) 79.872123ms ago: executing program 4 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff194}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609fbbb000006c00fc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000007eba521fb0ec4d39ac64443a2f35563e79d33e2470a6957d373becac05b54c"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) 0s ago: executing program 4 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:apm_bios_t:s0 system_u:system_r:kernel_t:s0 0'], 0x53) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000080), 0x7fffffff) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000004c0)={0x81, 0x0, 0x3}) r5 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ rejected, media not registered [ 74.778152][ T307] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 74.828027][ T24] audit: type=1400 audit(1724048989.900:423): avc: denied { setattr } for pid=1544 comm="syz.3.255" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.018190][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 75.138236][ T307] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.149214][ T307] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.159358][ T307] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.165863][ T307] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 75.175109][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.190464][ T307] usb 2-1: config 0 descriptor?? [ 75.228346][ T326] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 75.382079][ T1563] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 75.391074][ T1563] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 75.674996][ T307] hkems 0003:2006:0118.0014: unbalanced delimiter at end of report description [ 75.685517][ T307] hkems 0003:2006:0118.0014: parse failed [ 75.695336][ T307] hkems: probe of 0003:2006:0118.0014 failed with error -22 [ 76.018194][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.029036][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.038639][ T326] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.051334][ T326] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 76.060218][ T326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.069167][ T326] usb 4-1: config 0 descriptor?? [ 76.136790][ T24] audit: type=1326 audit(1724048991.210:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 76.165243][ T24] audit: type=1326 audit(1724048991.240:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 76.188654][ T24] audit: type=1326 audit(1724048991.240:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 76.249270][ T1583] device syzkaller0 entered promiscuous mode [ 76.538903][ T326] holtek_mouse 0003:04D9:A070.0015: item fetching failed at offset 1/5 [ 76.547394][ T326] holtek_mouse 0003:04D9:A070.0015: hid parse failed: -22 [ 76.554825][ T326] holtek_mouse: probe of 0003:04D9:A070.0015 failed with error -22 [ 76.699073][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 76.699087][ T24] audit: type=1400 audit(1724048991.780:447): avc: denied { create } for pid=1608 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 76.725242][ T24] audit: type=1400 audit(1724048991.780:448): avc: denied { read } for pid=1608 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.748192][ T5] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 76.818129][ T668] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 77.018142][ T326] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 77.108244][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.119108][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.128601][ T5] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 77.137557][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.146364][ T5] usb 5-1: config 0 descriptor?? [ 77.208196][ T668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.218986][ T668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.228480][ T668] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 77.237316][ T668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.246251][ T668] usb 3-1: config 0 descriptor?? [ 77.258152][ T326] usb 1-1: Using ep0 maxpacket: 8 [ 77.298253][ T326] usb 1-1: too many configurations: 147, using maximum allowed: 8 [ 77.398893][ T307] usb 2-1: USB disconnect, device number 14 [ 77.418328][ T326] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 77.428685][ T326] usb 1-1: can't read configurations, error -61 [ 77.499816][ T24] audit: type=1400 audit(1724048992.580:449): avc: denied { read } for pid=1606 comm="syz.2.269" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.840315][ T5] samsung 0003:0419:0600.0016: unknown main item tag 0x0 [ 77.847181][ T5] samsung 0003:0419:0600.0016: unknown main item tag 0x0 [ 77.854084][ T326] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 77.861487][ T5] samsung 0003:0419:0600.0016: unknown main item tag 0x0 [ 77.868309][ T5] samsung 0003:0419:0600.0016: unknown main item tag 0x0 [ 77.875122][ T5] samsung 0003:0419:0600.0016: unknown main item tag 0x0 [ 77.882726][ T5] samsung 0003:0419:0600.0016: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 77.979600][ T5] usb 4-1: USB disconnect, device number 12 [ 77.990391][ T1599] udc-core: couldn't find an available UDC or it's busy [ 77.997845][ T1599] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.006157][ T445] usb 5-1: USB disconnect, device number 14 [ 78.098119][ T326] usb 1-1: Using ep0 maxpacket: 8 [ 78.138206][ T326] usb 1-1: too many configurations: 147, using maximum allowed: 8 [ 78.258212][ T326] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 78.265768][ T326] usb 1-1: can't read configurations, error -61 [ 78.272005][ T326] usb usb1-port1: attempt power cycle [ 78.339182][ T1622] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.346928][ T1622] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.356326][ T1622] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 78.368140][ T1622] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 78.378039][ T1622] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.378157][ T5] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 78.387339][ T1622] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 78.406346][ T1622] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 78.415954][ T1622] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 78.425297][ T1622] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 78.437691][ T1622] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 78.850838][ T326] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 78.938223][ T5] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 78.947175][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.955050][ T326] usb 1-1: Using ep0 maxpacket: 8 [ 78.960568][ T5] usb 4-1: config 0 descriptor?? [ 78.998292][ T326] usb 1-1: too many configurations: 147, using maximum allowed: 8 [ 79.118189][ T326] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 79.125724][ T326] usb 1-1: can't read configurations, error -61 [ 79.203984][ T1619] udc-core: couldn't find an available UDC or it's busy [ 79.210972][ T1619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.278176][ T326] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 79.402721][ T326] usb 1-1: Using ep0 maxpacket: 8 [ 79.414981][ T1637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 79.448178][ T326] usb 1-1: too many configurations: 147, using maximum allowed: 8 [ 79.573749][ T326] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 79.601084][ T326] usb 1-1: can't read configurations, error -61 [ 79.607245][ T326] usb usb1-port1: unable to enumerate USB device [ 79.618165][ T668] usbhid 3-1:0.0: can't add hid device: -71 [ 79.624847][ T668] usbhid: probe of 3-1:0.0 failed with error -71 [ 79.648750][ T1644] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 79.656994][ T668] usb 3-1: USB disconnect, device number 12 [ 79.662840][ T1644] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 79.679313][ T1644] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.752868][ T1644] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 79.763655][ T1644] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.799593][ T24] audit: type=1400 audit(1724048994.880:450): avc: denied { bind } for pid=1643 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.136281][ T1661] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 80.149263][ T1661] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038 (0x7fffffff) [ 80.198933][ T1661] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 80.207323][ T1661] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.280: mark_inode_dirty error [ 80.219893][ T1661] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 80.228815][ T1661] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.280: mark_inode_dirty error [ 80.245949][ T24] audit: type=1400 audit(1724048995.330:451): avc: denied { setattr } for pid=1659 comm="syz.2.280" path="/66/file0/bus/file0" dev="overlay" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.655066][ T287] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /66/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 80.676030][ T287] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /66/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 80.698499][ T287] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /66/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 80.720021][ T287] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /66/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 80.746662][ T287] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /66/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 80.767479][ T287] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /66/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 80.909688][ T24] audit: type=1400 audit(1724048995.990:452): avc: denied { nlmsg_write } for pid=1678 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.103321][ T443] usb 4-1: USB disconnect, device number 13 [ 81.461856][ T24] audit: type=1400 audit(1724048996.540:454): avc: denied { ioctl } for pid=1689 comm="syz.3.288" path="socket:[19310]" dev="sockfs" ino=19310 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.543288][ T24] audit: type=1400 audit(1724048996.540:453): avc: denied { ioctl } for pid=1689 comm="syz.3.288" path="socket:[19310]" dev="sockfs" ino=19310 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.565088][ T1695] device syzkaller0 entered promiscuous mode [ 81.857370][ T1702] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 81.932388][ T24] audit: type=1400 audit(1724048997.010:455): avc: denied { read } for pid=1701 comm="syz.3.290" path="socket:[20079]" dev="sockfs" ino=20079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.998532][ T24] audit: type=1400 audit(1724048997.060:456): avc: denied { ioctl } for pid=1704 comm="syz.4.291" path="socket:[19328]" dev="sockfs" ino=19328 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.028513][ T1711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 82.201017][ T24] audit: type=1400 audit(1724048997.110:457): avc: denied { getopt } for pid=1707 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.222152][ T24] audit: type=1400 audit(1724048997.280:458): avc: denied { listen } for pid=1701 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.855547][ T24] audit: type=1400 audit(1724048997.280:459): avc: denied { connect } for pid=1701 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.943051][ T24] audit: type=1400 audit(1724048998.020:460): avc: denied { create } for pid=1718 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 84.138121][ T5] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 84.388092][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 84.478120][ T699] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 84.508272][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.519264][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.529001][ T5] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 84.537965][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.561778][ T5] usb 4-1: config 0 descriptor?? [ 84.748151][ T699] usb 5-1: device descriptor read/64, error -71 [ 84.931939][ T24] audit: type=1400 audit(1724049000.010:461): avc: denied { mounton } for pid=1742 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 84.978519][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.985378][ T1742] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.992979][ T1742] device bridge_slave_0 entered promiscuous mode [ 85.001442][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.008353][ T1742] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.015572][ T1742] device bridge_slave_1 entered promiscuous mode [ 85.070872][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.070883][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.070953][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.070964][ T1742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.087624][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.088020][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.088485][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.090754][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.090913][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.090922][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.092407][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.092552][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.092561][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.100276][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.101879][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.153642][ T1748] Leaked POSIX lock on dev=0x0:0x26 ino=0x5c fl_owner=ffff888126a1e3c0 fl_flags=0x81 fl_type=0x1 fl_pid=1725 [ 85.155050][ T699] usb 5-1: device descriptor read/64, error -71 [ 85.241298][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.252819][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.260739][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.267926][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.277950][ T1742] device veth0_vlan entered promiscuous mode [ 85.288608][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.297817][ T1742] device veth1_macvtap entered promiscuous mode [ 85.304479][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 85.310001][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.310401][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 85.327302][ T5] usb 4-1: USB disconnect, device number 14 [ 85.345582][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.398824][ T400] device bridge_slave_1 left promiscuous mode [ 85.405067][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.412933][ T400] device bridge_slave_0 left promiscuous mode [ 85.419193][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.427205][ T400] device veth1_macvtap left promiscuous mode [ 85.433544][ T400] device veth0_vlan left promiscuous mode [ 85.508169][ T699] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 85.583025][ T1756] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.628491][ T1756] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 85.673148][ T1401] Leaked locks on dev=0x0:0x26 ino=0x5c: [ 85.679092][ T1401] POSIX: fl_owner=ffff888126a1e3c0 fl_flags=0x81 fl_type=0x1 fl_pid=1725 [ 85.720191][ T24] audit: type=1400 audit(1724049000.800:462): avc: denied { bind } for pid=1762 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.905139][ T24] audit: type=1326 audit(1724049000.980:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1770 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 85.998214][ T307] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 86.090623][ T699] usb 5-1: device descriptor read/64, error -71 [ 86.097572][ T24] audit: type=1326 audit(1724049000.980:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1770 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 86.147844][ T1783] syz.0.308[1783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.147889][ T1783] syz.0.308[1783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.160744][ T1783] 9pnet: Insufficient options for proto=fd [ 86.448149][ T5] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 86.448250][ T307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.465310][ T307] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 86.474957][ T307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 86.484546][ T307] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 86.488149][ T699] usb 5-1: device descriptor read/64, error -71 [ 86.494033][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 86.588396][ T307] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.597563][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.605427][ T307] usb 4-1: SerialNumber: syz [ 86.618263][ T699] usb usb5-port1: attempt power cycle [ 86.648703][ T307] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 86.656420][ T307] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 86.662707][ T307] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 86.708207][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 86.909804][ T326] usb 4-1: USB disconnect, device number 15 [ 87.008197][ T5] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 87.017154][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.025037][ T5] usb 1-1: Product: syz [ 87.029048][ T5] usb 1-1: Manufacturer: syz [ 87.033430][ T5] usb 1-1: SerialNumber: syz [ 87.038975][ T5] usb 1-1: config 0 descriptor?? [ 87.048142][ T699] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 87.219958][ T699] usb 5-1: device descriptor read/8, error -71 [ 87.428488][ T699] usb 5-1: device descriptor read/8, error -71 [ 87.612015][ T1790] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 87.619728][ T1790] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 87.628891][ T1790] F2FS-fs (loop3): invalid crc value [ 87.635606][ T1790] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.669109][ T1790] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 87.676218][ T1790] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.038372][ T5] usb 1-1: MIDIStreaming interface descriptor not found [ 88.081943][ T5] usb 1-1: USB disconnect, device number 19 [ 88.122377][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.422835][ T1742] attempt to access beyond end of device [ 88.422835][ T1742] loop2: rw=524288, want=45072, limit=40427 [ 88.448518][ T1742] attempt to access beyond end of device [ 88.448518][ T1742] loop2: rw=0, want=45072, limit=40427 [ 88.460275][ T1813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 88.473919][ T1813] fuse: Unknown parameter '/d' [ 88.479182][ T1742] attempt to access beyond end of device [ 88.479182][ T1742] loop2: rw=2049, want=45104, limit=40427 [ 88.581207][ T1805] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.585391][ T24] audit: type=1400 audit(1724049003.660:465): avc: denied { read } for pid=1820 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.621339][ T1805] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.645854][ T1824] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 88.656843][ T1824] exFAT-fs (loop3): invalid boot region [ 88.662559][ T1824] exFAT-fs (loop3): failed to recognize exfat type [ 88.828986][ T1826] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.852027][ T1829] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.859101][ T1829] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.866328][ T1829] device bridge_slave_0 entered promiscuous mode [ 88.888089][ T1829] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.897048][ T1829] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.910328][ T1829] device bridge_slave_1 entered promiscuous mode [ 88.940708][ T1835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.319'. [ 89.138602][ T1829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.145468][ T1829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.152632][ T1829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.159496][ T1829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.168181][ T699] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 89.190470][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.197955][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.205150][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.214410][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.222499][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.229366][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.249588][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.258268][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.265124][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.273758][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.281779][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.304104][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.316760][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.325985][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.333660][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.343708][ T1829] device veth0_vlan entered promiscuous mode [ 89.357532][ T1837] FAT-fs (loop0): Directory bread(block 64) failed [ 89.364017][ T1837] FAT-fs (loop0): Directory bread(block 65) failed [ 89.370388][ T1837] FAT-fs (loop0): Directory bread(block 66) failed [ 89.375894][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.376718][ T1837] FAT-fs (loop0): Directory bread(block 67) failed [ 89.376759][ T1837] FAT-fs (loop0): Directory bread(block 68) failed [ 89.389681][ T1829] device veth1_macvtap entered promiscuous mode [ 89.390819][ T1837] FAT-fs (loop0): Directory bread(block 69) failed [ 89.409602][ T1837] FAT-fs (loop0): Directory bread(block 70) failed [ 89.413488][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.415869][ T1837] FAT-fs (loop0): Directory bread(block 71) failed [ 89.430362][ T1837] FAT-fs (loop0): Directory bread(block 72) failed [ 89.436646][ T1837] FAT-fs (loop0): Directory bread(block 73) failed [ 89.444963][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.498171][ T699] usb 5-1: Using ep0 maxpacket: 8 [ 89.584781][ T331] device bridge_slave_1 left promiscuous mode [ 89.601065][ T1837] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 89.620905][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.639259][ T331] device bridge_slave_0 left promiscuous mode [ 89.645567][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.652742][ T1837] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803c118, mo2=0002] [ 89.661215][ T1837] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,debug,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 89.678450][ T699] usb 5-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 89.694141][ T24] audit: type=1326 audit(1724049004.780:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5bcefe79 code=0x7ffc0000 [ 89.717940][ T699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.726020][ T331] device veth1_macvtap left promiscuous mode [ 89.727101][ T699] usb 5-1: config 0 descriptor?? [ 89.737413][ T24] audit: type=1326 audit(1724049004.780:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d5bcee810 code=0x7ffc0000 [ 89.761206][ T331] device veth0_vlan left promiscuous mode [ 89.768674][ T699] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 89.793917][ T24] audit: type=1326 audit(1724049004.780:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d5bcee810 code=0x7ffc0000 [ 89.817433][ T24] audit: type=1326 audit(1724049004.780:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5bcefe79 code=0x7ffc0000 [ 89.840617][ T24] audit: type=1326 audit(1724049004.780:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f8d5bcefe79 code=0x7ffc0000 [ 89.863868][ T24] audit: type=1326 audit(1724049004.780:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5bcefe79 code=0x7ffc0000 [ 89.892230][ T24] audit: type=1326 audit(1724049004.780:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5bcefe79 code=0x7ffc0000 [ 90.110497][ T1856] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 90.119862][ T1856] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 90.378298][ T24] audit: type=1400 audit(1724049005.390:473): avc: denied { bind } for pid=1855 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.397437][ T445] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 90.698110][ T445] usb 1-1: Using ep0 maxpacket: 32 [ 90.748308][ T445] usb 1-1: too many configurations: 81, using maximum allowed: 8 [ 90.763365][ T1872] EXT4-fs (loop3): 1 truncate cleaned up [ 90.768975][ T1872] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier, [ 90.805547][ T1401] EXT4-fs error (device loop3): htree_dirblock_to_tree:1091: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 90.826338][ T1401] EXT4-fs (loop3): Remounting filesystem read-only [ 90.833076][ T1401] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 90.851105][ T1401] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 90.888238][ T445] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 90.895633][ T445] usb 1-1: can't read configurations, error -61 [ 91.076577][ T445] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 91.112804][ T1879] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.119798][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.127026][ T1879] device bridge_slave_0 entered promiscuous mode [ 91.243711][ T1879] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.252577][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.263232][ T1879] device bridge_slave_1 entered promiscuous mode [ 91.348428][ T445] usb 1-1: Using ep0 maxpacket: 32 [ 91.387938][ T1884] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 91.396651][ T1884] EXT4-fs (loop2): orphan cleanup on readonly fs [ 91.403631][ T1884] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.330: casefold flag without casefold feature [ 91.416450][ T1884] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.330: unexpected EA_INODE flag [ 91.427951][ T1884] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.330: couldn't read orphan inode 16 (err -117) [ 91.437766][ T1879] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.440235][ T1884] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 91.446336][ T1879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.446431][ T1879] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.456205][ T445] usb 1-1: too many configurations: 81, using maximum allowed: 8 [ 91.462092][ T1879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.499450][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.506850][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.514579][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.525832][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.534082][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.540975][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.556506][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.564800][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.571685][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.579065][ T699] usb 5-1: Detected FT8U232AM [ 91.585415][ T699] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 91.594603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.598241][ T445] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 91.602392][ T699] usb 5-1: USB disconnect, device number 19 [ 91.617296][ T699] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 91.625339][ T445] usb 1-1: can't read configurations, error -61 [ 91.628835][ T699] ftdi_sio 5-1:0.0: device disconnected [ 91.638256][ T445] usb usb1-port1: attempt power cycle [ 91.654172][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.662975][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.674854][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.683733][ T1879] device veth0_vlan entered promiscuous mode [ 91.690117][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.697361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.706604][ T331] device bridge_slave_1 left promiscuous mode [ 91.712758][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.720204][ T331] device bridge_slave_0 left promiscuous mode [ 91.726159][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.734036][ T331] device veth1_macvtap left promiscuous mode [ 91.740024][ T331] device veth0_vlan left promiscuous mode [ 91.824542][ T1879] device veth1_macvtap entered promiscuous mode [ 91.831676][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.843173][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.865238][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.934602][ T24] audit: type=1400 audit(1724049007.010:474): avc: denied { getopt } for pid=1891 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.998152][ T699] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 92.065852][ T445] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 92.121291][ T1890] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.168181][ T445] usb 1-1: Using ep0 maxpacket: 32 [ 92.218602][ T445] usb 1-1: too many configurations: 81, using maximum allowed: 8 [ 92.307107][ T1890] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.378477][ T445] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 92.397896][ T445] usb 1-1: can't read configurations, error -61 [ 92.407514][ T1890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 92.421596][ T1890] System zones: 1-12 [ 92.432306][ T1890] EXT4-fs (loop3): 1 truncate cleaned up [ 92.447256][ T1890] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,debug,,errors=continue [ 92.467240][ T699] usb 5-1: Using ep0 maxpacket: 16 [ 92.568114][ T445] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 92.588697][ T699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.606654][ T699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.629616][ T699] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.660743][ T699] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.678175][ T445] usb 1-1: Using ep0 maxpacket: 32 [ 92.682068][ T699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.694386][ T699] usb 5-1: config 0 descriptor?? [ 92.718098][ T1890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.332'. [ 92.738184][ T445] usb 1-1: too many configurations: 81, using maximum allowed: 8 [ 92.878215][ T445] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 92.885614][ T445] usb 1-1: can't read configurations, error -61 [ 92.892452][ T445] usb usb1-port1: unable to enumerate USB device [ 92.932217][ T1903] EXT4-fs error (device loop3): ext4_get_journal_inode:5243: comm syz.3.336: inode #196608: comm syz.3.336: iget: illegal inode # [ 93.013582][ T1903] EXT4-fs (loop3): Remounting filesystem read-only [ 93.020164][ T1903] EXT4-fs (loop3): no journal found [ 93.025462][ T1903] EXT4-fs (loop3): can't get journal size [ 93.031670][ T1903] EXT4-fs (loop3): failed to initialize system zone (-22) [ 93.038941][ T1903] EXT4-fs (loop3): mount failed [ 93.180084][ T1903] EXT4-fs (loop3): 1 orphan inode deleted [ 93.185684][ T1903] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 93.194940][ T1903] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 93.217768][ T1903] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #16: comm syz.3.336: corrupted xattr block 37 [ 93.230104][ T1903] EXT4-fs error (device loop3): __ext4_get_inode_loc:4409: comm syz.3.336: Invalid inode table block 0 in block_group 0 [ 93.243120][ T1903] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 93.252793][ T1903] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #16: comm syz.3.336: mark_inode_dirty error [ 93.264675][ T1903] EXT4-fs error (device loop3): __ext4_get_inode_loc:4409: comm syz.3.336: Invalid inode table block 0 in block_group 0 [ 93.277663][ T1903] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 93.287542][ T1903] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #16: comm syz.3.336: mark_inode_dirty error [ 93.298950][ T1903] EXT4-fs error (device loop3): __ext4_get_inode_loc:4409: comm syz.3.336: Invalid inode table block 0 in block_group 0 [ 93.312831][ T1903] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 93.322582][ T1903] EXT4-fs error (device loop3): ext4_alloc_file_blocks:4505: inode #16: comm syz.3.336: mark_inode_dirty error [ 93.344758][ T1879] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1062: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 93.403220][ T699] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0017/input/input9 [ 93.416791][ T699] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 93.458197][ T445] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 93.607928][ T1920] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.614856][ T1920] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.622342][ T1920] device bridge_slave_0 entered promiscuous mode [ 93.630148][ T1920] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.637013][ T1920] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.644534][ T1920] device bridge_slave_1 entered promiscuous mode [ 93.685561][ T1920] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.692508][ T1920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.699642][ T1920] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.706383][ T1920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.718286][ T445] usb 1-1: Using ep0 maxpacket: 16 [ 93.731544][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.739364][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.746414][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.757617][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.765784][ T668] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.772635][ T668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.788817][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.796930][ T668] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.803804][ T668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.811516][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.819550][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.835042][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.848582][ T445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.862280][ T1920] device veth0_vlan entered promiscuous mode [ 93.868970][ T445] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.878807][ T1920] device veth1_macvtap entered promiscuous mode [ 93.881807][ T445] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.896595][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.902987][ T1925] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.909136][ T445] usb 1-1: config 0 descriptor?? [ 93.915437][ T1925] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.343: invalid block [ 93.929610][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.936932][ T1925] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.343: couldn't read orphan inode 11 (err -117) [ 93.937882][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.949843][ T1925] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 93.960351][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.997224][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.004570][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.011942][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.132524][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.140264][ T1933] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.147622][ T1933] device bridge_slave_0 entered promiscuous mode [ 94.155254][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.162671][ T1933] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.170149][ T1933] device bridge_slave_1 entered promiscuous mode [ 94.180883][ T400] device bridge_slave_1 left promiscuous mode [ 94.186904][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.194728][ T400] device bridge_slave_0 left promiscuous mode [ 94.200881][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.209007][ T400] device veth1_macvtap left promiscuous mode [ 94.214888][ T400] device veth0_vlan left promiscuous mode [ 94.258191][ T699] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 94.280685][ T1930] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.287423][ T1930] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 94.297513][ T1930] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue [ 94.343069][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.349970][ T1933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.357053][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.363864][ T1933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.388518][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.396560][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.405526][ T445] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0018/input/input10 [ 94.419449][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.448590][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.456932][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.465690][ T668] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.472588][ T668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.480096][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.489164][ T445] microsoft 0003:045E:07DA.0018: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 94.507898][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.516180][ T668] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.523041][ T668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.530226][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.538033][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.545821][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.554018][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.571382][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.579598][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.591938][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.600348][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.610175][ T1933] device veth0_vlan entered promiscuous mode [ 94.618250][ T699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 16 [ 94.618432][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.634245][ T699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.634671][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.659258][ T699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.670065][ T699] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 94.677910][ T1933] device veth1_macvtap entered promiscuous mode [ 94.680147][ T699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.694205][ T1942] overlayfs: missing 'lowerdir' [ 94.694987][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.703149][ T699] usb 3-1: config 0 descriptor?? [ 94.707105][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.720042][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.733198][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.741462][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.754329][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.762529][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.773039][ T307] usb 5-1: USB disconnect, device number 20 [ 94.940084][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 94.940099][ T24] audit: type=1400 audit(1724049010.020:479): avc: denied { ioctl } for pid=1954 comm="syz.1.348" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.101188][ T289] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 95.300215][ T1959] erofs: (device loop1): mounted with root inode @ nid 36. [ 95.309381][ T24] audit: type=1400 audit(1724049010.390:480): avc: denied { execute } for pid=1954 comm="syz.1.348" name="file2" dev="loop1" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.394766][ T42] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 95.425874][ T24] audit: type=1400 audit(1724049010.390:481): avc: denied { read open } for pid=1954 comm="syz.1.348" path="/2/file1/file2" dev="loop1" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.457543][ T24] audit: type=1400 audit(1724049010.390:482): avc: denied { execute_no_trans } for pid=1954 comm="syz.1.348" path="/2/file1/file2" dev="loop1" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.508306][ T289] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 95.517265][ T289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.525954][ T289] usb 4-1: config 0 descriptor?? [ 95.538196][ T699] usbhid 3-1:0.0: can't add hid device: -71 [ 95.544102][ T699] usbhid: probe of 3-1:0.0 failed with error -71 [ 95.554805][ T699] usb 3-1: USB disconnect, device number 13 [ 95.718018][ T24] audit: type=1400 audit(1724049010.790:483): avc: denied { write } for pid=1961 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 95.748824][ T400] device bridge_slave_1 left promiscuous mode [ 95.754995][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.762672][ T24] audit: type=1400 audit(1724049010.850:484): avc: denied { getopt } for pid=1966 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.783044][ T400] device bridge_slave_0 left promiscuous mode [ 95.789855][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.800333][ T400] device veth1_macvtap left promiscuous mode [ 95.806318][ T400] device veth0_vlan left promiscuous mode [ 95.929068][ T1969] loop4: unable to read partition table [ 95.934623][ T1969] loop4: partition table beyond EOD, truncated [ 95.941537][ T1969] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 96.085881][ T93] loop4: unable to read partition table [ 96.091983][ T93] loop4: partition table beyond EOD, truncated [ 96.135662][ T443] usb 1-1: USB disconnect, device number 24 [ 96.197766][ T1975] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 96.206996][ T1975] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 96.236602][ T24] audit: type=1400 audit(1724049011.310:485): avc: denied { append } for pid=1982 comm="syz.0.355" name="hwrng" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 96.435312][ T24] audit: type=1400 audit(1724049011.500:486): avc: denied { read } for pid=1987 comm="syz.0.356" name="loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.472867][ T24] audit: type=1400 audit(1724049011.500:487): avc: denied { open } for pid=1987 comm="syz.0.356" path="/dev/loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.526141][ T24] audit: type=1400 audit(1724049011.500:488): avc: denied { ioctl } for pid=1987 comm="syz.0.356" path="/dev/loop-control" dev="devtmpfs" ino=110 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.588179][ T326] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 96.738240][ T289] usb 4-1: Cannot set autoneg [ 96.742999][ T289] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 96.751930][ T289] usb 4-1: USB disconnect, device number 16 [ 96.838146][ T326] usb 5-1: Using ep0 maxpacket: 8 [ 96.908685][ T443] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 96.958181][ T326] usb 5-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 96.968313][ T326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.138141][ T326] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.147105][ T326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.155214][ T326] usb 5-1: Product: syz [ 97.159463][ T326] usb 5-1: Manufacturer: syz [ 97.163875][ T326] usb 5-1: SerialNumber: syz [ 97.178125][ T443] usb 1-1: Using ep0 maxpacket: 16 [ 97.298320][ T443] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 97.562928][ T443] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 97.632681][ T443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.658509][ T2006] F2FS-fs (loop2): Unrecognized mount option "fast_R " or missing value [ 97.689339][ T443] usb 1-1: Product: syz [ 97.712182][ T443] usb 1-1: Manufacturer: syz [ 97.721086][ T443] usb 1-1: SerialNumber: syz [ 97.726372][ T443] usb 1-1: config 0 descriptor?? [ 97.778306][ T326] usb 5-1: 0:1 : does not exist [ 97.779763][ T443] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 97.783320][ T326] usb 5-1: 0:2 : does not exist [ 97.791189][ T443] usb 1-1: Detected FT232RL [ 97.808540][ T326] usb 5-1: USB disconnect, device number 21 [ 97.998224][ T443] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 98.005128][ T289] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 98.249515][ T443] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 98.308243][ T350] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 98.418516][ T289] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 98.427659][ T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.497290][ T289] usb 3-1: config 0 descriptor?? [ 98.542984][ T307] usb 1-1: USB disconnect, device number 25 [ 98.552308][ T307] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 98.562312][ T307] ftdi_sio 1-1:0.0: device disconnected [ 98.678180][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.689215][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.698834][ T350] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 98.707753][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.721191][ T350] usb 2-1: config 0 descriptor?? [ 98.828848][ T2037] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 98.836648][ T2037] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 98.847153][ T2037] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.878802][ T2037] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 98.890346][ T2037] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 98.897195][ T2037] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 99.259883][ T350] hid-led 0003:1D34:000A.0019: unknown main item tag 0x0 [ 99.461891][ T2027] udc-core: couldn't find an available UDC or it's busy [ 99.469113][ T2027] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 99.490884][ T350] hid-led 0003:1D34:000A.0019: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 99.537872][ T2056] ipt_REJECT: ECHOREPLY no longer supported. [ 99.602214][ T350] hid-led 0003:1D34:000A.0019: Dream Cheeky Webmail Notifier initialized [ 99.713638][ T350] usb 2-1: USB disconnect, device number 15 [ 100.515894][ T2065] overlayfs: filesystem on './file1' not supported [ 100.598202][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 100.598215][ T24] audit: type=1400 audit(1724049015.590:493): avc: denied { mounton } for pid=2059 comm="syz.4.372" path="/37/file0/bus" dev="loop4" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 100.778203][ T350] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 100.861597][ T2079] Alternate GPT is invalid, using primary GPT. [ 100.867713][ T2079] loop1: p2 p3 p7 [ 101.071222][ T309] udevd[309]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 101.074799][ T580] udevd[580]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 101.092864][ T593] udevd[593]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 101.198267][ T350] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 101.207846][ T350] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 101.347878][ T289] usb 3-1: Cannot set autoneg [ 101.355808][ T289] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 101.370955][ T289] usb 3-1: USB disconnect, device number 14 [ 101.428184][ T350] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 101.437043][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.444999][ T350] usb 1-1: Product: syz [ 101.449016][ T350] usb 1-1: Manufacturer: syz [ 101.453401][ T350] usb 1-1: SerialNumber: syz [ 101.458844][ T350] usb 1-1: config 0 descriptor?? [ 101.478204][ T2068] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.484989][ T2068] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.509389][ T2100] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 101.528155][ T668] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 101.614929][ T2110] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 101.644461][ T2110] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a800e01c, mo2=0002] [ 101.652762][ T2110] System zones: 1-12 [ 101.657020][ T2110] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.663910][ T2110] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.383: Inode bitmap for bg 0 marked uninitialized [ 101.676460][ T2110] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 101.687140][ T2110] EXT4-fs error (device loop4): ext4_map_blocks:600: inode #2: block 5: comm syz.4.383: lblock 0 mapped to illegal pblock 5 (length 1) [ 101.700958][ T2110] EXT4-fs warning (device loop4): dx_probe:795: inode #2: lblock 0: comm syz.4.383: error -117 reading directory block [ 101.714949][ T2110] EXT4-fs error (device loop4): ext4_map_blocks:600: inode #2: block 5: comm syz.4.383: lblock 0 mapped to illegal pblock 5 (length 1) [ 101.728703][ T2110] EXT4-fs warning (device loop4): dx_probe:795: inode #2: lblock 0: comm syz.4.383: error -117 reading directory block [ 101.741066][ T2068] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.741266][ T2110] EXT4-fs error (device loop4): ext4_map_blocks:600: inode #2: block 5: comm syz.4.383: lblock 0 mapped to illegal pblock 5 (length 1) [ 101.747831][ T2068] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.768884][ T668] usb 2-1: Using ep0 maxpacket: 32 [ 101.769113][ T2110] EXT4-fs warning (device loop4): dx_probe:795: inode #2: lblock 0: comm syz.4.383: error -117 reading directory block [ 101.888237][ T668] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 101.901843][ T2129] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue [ 101.902552][ T668] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 16 [ 101.914439][ T2129] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 101.923884][ T668] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 8 [ 101.963976][ T24] audit: type=1400 audit(1724049017.040:494): avc: denied { create } for pid=2128 comm="syz.2.388" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 101.968154][ T350] Error reading MAC address [ 101.990477][ T2127] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.386: casefold flag without casefold feature [ 101.999768][ T668] usb 2-1: config 1 interface 0 has no altsetting 0 [ 102.010620][ T24] audit: type=1400 audit(1724049017.090:495): avc: denied { bind } for pid=2128 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.010991][ T2127] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 102.040616][ T2127] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 102.040616][ T2127] [ 102.050300][ T2127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 102.168187][ T668] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.177126][ T668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.184895][ T668] usb 2-1: Product: syz [ 102.188947][ T668] usb 2-1: Manufacturer: 倊 [ 102.193278][ T668] usb 2-1: SerialNumber: syz [ 102.218188][ T2092] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 102.225165][ T2092] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 102.308136][ T53] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 102.438424][ T2092] udc-core: couldn't find an available UDC or it's busy [ 102.445242][ T2092] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.452736][ T2092] udc-core: couldn't find an available UDC or it's busy [ 102.459601][ T2092] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.466956][ T2092] udc-core: couldn't find an available UDC or it's busy [ 102.473945][ T2092] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.481394][ T2092] udc-core: couldn't find an available UDC or it's busy [ 102.488207][ T2092] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.495774][ T2092] udc-core: couldn't find an available UDC or it's busy [ 102.503033][ T2092] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.558092][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 102.658642][ T668] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 102.684412][ T668] usb 2-1: USB disconnect, device number 16 [ 102.946876][ T326] usb 1-1: USB disconnect, device number 26 [ 102.978156][ T53] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.995092][ T53] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 103.015609][ T24] audit: type=1326 audit(1724049018.090:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2159 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 103.039260][ T53] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 103.068177][ T53] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 103.069526][ T24] audit: type=1326 audit(1724049018.120:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2159 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 103.140245][ T24] audit: type=1326 audit(1724049018.130:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2159 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 103.188221][ T53] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.194399][ T24] audit: type=1326 audit(1724049018.130:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2159 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 103.226818][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.235794][ T2165] EXT4-fs (loop4): 1 truncate cleaned up [ 103.236100][ T53] usb 3-1: SerialNumber: syz [ 103.244417][ T2165] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 103.246982][ T24] audit: type=1326 audit(1724049018.130:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2159 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 103.279668][ T24] audit: type=1326 audit(1724049018.130:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2159 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 103.304741][ T2129] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.312500][ T24] audit: type=1326 audit(1724049018.130:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2159 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 103.336123][ T53] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 103.344238][ T53] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 103.350617][ T53] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 103.499091][ T2165] device veth1_macvtap left promiscuous mode [ 103.505193][ T2165] device macsec0 entered promiscuous mode [ 103.531576][ T2164] device veth1_macvtap entered promiscuous mode [ 103.538795][ T53] usb 3-1: USB disconnect, device number 15 [ 103.548500][ T2164] device macsec0 left promiscuous mode [ 103.648190][ T326] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 103.745337][ T2177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.396'. [ 103.754094][ T2177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 103.762770][ T2177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 103.783416][ T2177] tipc: Enabling of bearer rejected, failed to enable media [ 103.958167][ T326] usb 1-1: device descriptor read/64, error -71 [ 103.972868][ T668] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 104.153002][ T2184] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev 9p, type 9p) errno=-22 [ 104.225772][ T2179] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.238211][ T668] usb 2-1: Using ep0 maxpacket: 8 [ 104.261226][ T2188] syz.2.399[2188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.261276][ T2188] syz.2.399[2188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.271413][ T2179] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 104.312833][ T2188] FAT-fs (loop2): Directory bread(block 64) failed [ 104.319341][ T2188] FAT-fs (loop2): Directory bread(block 65) failed [ 104.325859][ T2188] FAT-fs (loop2): Directory bread(block 66) failed [ 104.332732][ T2188] FAT-fs (loop2): Directory bread(block 67) failed [ 104.339378][ T2188] FAT-fs (loop2): Directory bread(block 68) failed [ 104.345831][ T2188] FAT-fs (loop2): Directory bread(block 69) failed [ 104.352628][ T2188] FAT-fs (loop2): Directory bread(block 70) failed [ 104.359238][ T326] usb 1-1: device descriptor read/64, error -71 [ 104.365562][ T2188] FAT-fs (loop2): Directory bread(block 71) failed [ 104.372275][ T2188] FAT-fs (loop2): Directory bread(block 72) failed [ 104.378715][ T2188] FAT-fs (loop2): Directory bread(block 73) failed [ 104.408225][ T668] usb 2-1: config 116 has too many interfaces: 215, using maximum allowed: 32 [ 104.416953][ T668] usb 2-1: config 116 has an invalid descriptor of length 1, skipping remainder of the config [ 104.429573][ T668] usb 2-1: config 116 has 0 interfaces, different from the descriptor's value: 215 [ 104.439085][ T668] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 104.447899][ T668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.522050][ T2201] device ip6tnl1 entered promiscuous mode [ 104.532911][ T53] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.638218][ T326] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 104.706594][ T2201] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.713362][ T2201] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 104.721382][ T2201] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.728998][ T2201] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.401: invalid block [ 104.739785][ T2201] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.401: couldn't read orphan inode 11 (err -117) [ 104.755929][ T2201] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,mblk_io_submit,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 104.871326][ T1279] attempt to access beyond end of device [ 104.871326][ T1279] loop4: rw=524288, want=45072, limit=40427 [ 104.882710][ T1279] attempt to access beyond end of device [ 104.882710][ T1279] loop4: rw=0, want=45072, limit=40427 [ 104.897574][ T1279] attempt to access beyond end of device [ 104.897574][ T1279] loop4: rw=2049, want=45104, limit=40427 [ 104.928112][ T326] usb 1-1: device descriptor read/64, error -71 [ 105.011549][ T2172] EXT4-fs (loop1): Ignoring removed orlov option [ 105.099750][ T2172] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,i_version,data_err=abort,noload,orlov,nobarrier,,errors=continue [ 105.113942][ T2172] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 105.306321][ T2218] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.313474][ T2218] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.320429][ T668] usb 2-1: string descriptor 0 read error: -71 [ 105.327294][ T668] usb 2-1: USB disconnect, device number 17 [ 105.333868][ T2218] device bridge_slave_0 entered promiscuous mode [ 105.341924][ T2218] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.348955][ T2218] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.356357][ T2218] device bridge_slave_1 entered promiscuous mode [ 105.434819][ T2218] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.441726][ T2218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.448840][ T2218] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.455780][ T2218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.486401][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.494448][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.502717][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.519325][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.528002][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.534890][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.542659][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.551596][ T326] usb 1-1: device descriptor read/64, error -71 [ 105.560810][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.567642][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.586791][ T2218] device veth0_vlan entered promiscuous mode [ 105.593304][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.601641][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.610297][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.838332][ T326] usb usb1-port1: attempt power cycle [ 105.843880][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.851570][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.859650][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.874122][ T2218] device veth1_macvtap entered promiscuous mode [ 105.881614][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.903603][ T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.924303][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.010578][ T2245] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 106.019663][ T2245] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 106.039289][ T400] device bridge_slave_1 left promiscuous mode [ 106.045835][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.104726][ T400] device bridge_slave_0 left promiscuous mode [ 106.123795][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.131980][ T400] device veth1_macvtap left promiscuous mode [ 106.137838][ T400] device veth0_vlan left promiscuous mode [ 106.458125][ T326] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 106.540656][ T2261] overlayfs: failed to resolve './file2': -2 [ 106.698130][ T15] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 106.944202][ T326] usb 1-1: device not accepting address 29, error -71 [ 107.122846][ T24] kauditd_printk_skb: 53 callbacks suppressed [ 107.122869][ T24] audit: type=1400 audit(1724049022.200:556): avc: denied { map } for pid=2272 comm="syz.1.419" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.161571][ T24] audit: type=1400 audit(1724049022.230:557): avc: denied { append } for pid=2269 comm="syz.4.417" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.184253][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.189214][ T24] audit: type=1400 audit(1724049022.230:558): avc: denied { execute } for pid=2272 comm="syz.1.419" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.227074][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.245388][ T15] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 107.254648][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.268653][ T15] usb 3-1: config 0 descriptor?? [ 107.424093][ T2281] syz.1.420[2281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.424423][ T2281] syz.1.420[2281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.868560][ T15] usbhid 3-1:0.0: can't add hid device: -71 [ 107.894881][ T15] usbhid: probe of 3-1:0.0 failed with error -71 [ 107.902724][ T15] usb 3-1: USB disconnect, device number 16 [ 108.204590][ T2301] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 108.571681][ T53] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 108.668178][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 109.028124][ T326] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 109.318158][ T53] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.328183][ T53] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.348315][ T15] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 109.389053][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.402759][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.412454][ T53] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.421715][ T326] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 109.430551][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.438819][ T326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.443934][ T2327] EXT4-fs (loop3): Test dummy encryption mode enabled [ 109.447288][ T53] usb 2-1: SerialNumber: syz [ 109.459020][ T2327] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.431: invalid block [ 109.464513][ T326] usb 3-1: config 0 descriptor?? [ 109.470302][ T2327] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.431: couldn't read orphan inode 11 (err -117) [ 109.486665][ T2327] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000002000000,inlinecrypt,test_dummy_encryption,,errors=continue [ 109.572717][ T2327] EXT4-fs warning (device loop3): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 109.598125][ T15] usb 5-1: Using ep0 maxpacket: 32 [ 109.635792][ T24] audit: type=1400 audit(1724049024.710:559): avc: denied { connect } for pid=2333 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.779196][ T53] usb 2-1: 0:2 : does not exist [ 109.878183][ T15] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 109.887286][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.895702][ T15] usb 5-1: Product: syz [ 109.900049][ T15] usb 5-1: Manufacturer: syz [ 109.904505][ T15] usb 5-1: SerialNumber: syz [ 109.915396][ T15] usb 5-1: config 0 descriptor?? [ 109.958506][ T326] hid (null): bogus close delimiter [ 109.963786][ T699] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 110.025803][ T2346] netlink: 'syz.0.435': attribute type 16 has an invalid length. [ 110.033501][ T2346] netlink: 'syz.0.435': attribute type 3 has an invalid length. [ 110.041076][ T2346] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.435'. [ 110.056499][ T2346] overlayfs: missing 'lowerdir' [ 110.061456][ T24] audit: type=1400 audit(1724049025.130:560): avc: denied { mount } for pid=2342 comm="syz.0.435" name="/" dev="configfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.179285][ T24] audit: type=1400 audit(1724049025.130:561): avc: denied { mounton } for pid=2342 comm="syz.0.435" path="/71/file0" dev="configfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.207942][ T24] audit: type=1400 audit(1724049025.160:562): avc: denied { read } for pid=2342 comm="syz.0.435" name="/" dev="configfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.229745][ T24] audit: type=1400 audit(1724049025.160:563): avc: denied { open } for pid=2342 comm="syz.0.435" path="/71/file0" dev="configfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.253630][ T326] usb 3-1: language id specifier not provided by device, defaulting to English [ 110.269918][ T2304] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 110.282099][ T2304] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 110.331274][ T53] usb 2-1: USB disconnect, device number 18 [ 110.459888][ T2325] udc-core: couldn't find an available UDC or it's busy [ 110.466694][ T2325] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 110.488131][ T699] usb 4-1: device descriptor read/64, error -71 [ 110.717768][ T24] audit: type=1400 audit(1724049025.790:564): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.738882][ T2353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 110.759227][ T326] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input11 [ 110.771976][ T326] uclogic 0003:256C:006D.001A: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 110.878176][ T699] usb 4-1: device descriptor read/64, error -71 [ 110.947389][ T2307] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.964300][ T2306] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.001585][ T668] usb 3-1: USB disconnect, device number 17 [ 111.148113][ T699] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 111.246216][ T2371] udc-core: couldn't find an available UDC or it's busy [ 111.253158][ T2371] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.418211][ T699] usb 4-1: device descriptor read/64, error -71 [ 112.160870][ T699] usb 4-1: device descriptor read/64, error -71 [ 112.190664][ T326] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 112.217763][ T24] audit: type=1400 audit(1724049027.290:565): avc: denied { create } for pid=2385 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 112.318168][ T699] usb usb4-port1: attempt power cycle [ 112.778155][ T326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.788449][ T326] usb 1-1: config 0 has no interfaces? [ 112.793754][ T326] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 112.802722][ T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.811420][ T326] usb 1-1: config 0 descriptor?? [ 112.819963][ T2396] EXT4-fs (loop3): Ignoring removed bh option [ 112.827928][ T2396] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 112.836286][ T2396] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.447: inline data xattr refers to an external xattr inode [ 112.857938][ T2396] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.447: couldn't read orphan inode 12 (err -117) [ 112.869889][ T2396] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,auto_da_alloc=0x0000000000000007,jqfmt=vfsold,bh,prjquota,usrjquota=,mblk_io_submit,prjquota,nodiscard,,errors=continue [ 113.122299][ T2380] udc-core: couldn't find an available UDC or it's busy [ 113.135420][ T2380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.145485][ T2380] udc-core: couldn't find an available UDC or it's busy [ 113.153651][ T2380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.200508][ T443] usb 1-1: USB disconnect, device number 31 [ 113.418146][ T15] rtl8150 5-1:0.0: couldn't reset the device [ 113.424131][ T15] rtl8150: probe of 5-1:0.0 failed with error -5 [ 113.431900][ T15] usb 5-1: USB disconnect, device number 22 [ 113.468238][ T668] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 113.641412][ T24] audit: type=1400 audit(1724049028.720:566): avc: denied { bind } for pid=2413 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.660743][ T24] audit: type=1400 audit(1724049028.720:567): avc: denied { node_bind } for pid=2413 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 114.095263][ T2421] input: syz0 as /devices/virtual/input/input12 [ 114.161035][ T2424] EXT4-fs (loop3): Ignoring removed nobh option [ 114.168139][ T350] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 114.278904][ T668] usb 2-1: config index 0 descriptor too short (expected 65472, got 36) [ 114.300982][ T2424] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.335424][ T2424] EXT4-fs (loop3): 1 truncate cleaned up [ 114.340998][ T2424] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue [ 114.341423][ T668] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 114.365289][ T668] usb 2-1: config 255 has an invalid descriptor of length 208, skipping remainder of the config [ 114.375595][ T668] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 114.384730][ T668] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.393582][ T668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.258193][ T668] usb 2-1: string descriptor 0 read error: -71 [ 115.266877][ T668] usb 2-1: USB disconnect, device number 19 [ 115.298124][ T350] usb 3-1: device descriptor read/64, error -71 [ 115.311359][ T2440] EXT4-fs (loop1): Test dummy encryption mode enabled [ 115.318236][ T2440] EXT4-fs (loop1): Unrecognized mount option "smackfsfloor=quota" or missing value [ 115.633841][ T2445] EXT4-fs (loop4): Unrecognized mount option "dont_measure" or missing value [ 115.794826][ T350] usb 3-1: device descriptor read/64, error -71 [ 115.855582][ T24] audit: type=1400 audit(1724049030.930:568): avc: denied { setattr } for pid=2439 comm="syz.1.458" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 115.879412][ T24] audit: type=1400 audit(1724049030.930:569): avc: denied { remove_name } for pid=2439 comm="syz.1.458" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.054718][ T2451] fuseblk: Bad value for 'fd' [ 116.054835][ T24] audit: type=1400 audit(1724049030.930:570): avc: denied { unlink } for pid=2439 comm="syz.1.458" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 116.198131][ T350] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 116.321395][ T24] audit: type=1400 audit(1724049031.400:571): avc: denied { accept } for pid=2474 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.488091][ T350] usb 3-1: device descriptor read/64, error -71 [ 116.508097][ T53] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 116.718178][ T699] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 116.748103][ T53] usb 2-1: Using ep0 maxpacket: 8 [ 116.868205][ T53] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 116.879037][ T53] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 116.888641][ T53] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 116.900884][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.988103][ T699] usb 5-1: device descriptor read/64, error -71 [ 117.068265][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.280303][ T2493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2493 comm=syz.3.471 [ 117.515675][ T2467] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.548162][ T53] usb 2-1: string descriptor 0 read error: -71 [ 117.554587][ T53] hub 2-1:32.0: USB hub found [ 117.618184][ T53] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 117.648197][ T699] usb 5-1: device descriptor read/64, error -71 [ 117.697174][ T53] usb 2-1: USB disconnect, device number 20 [ 117.998157][ T699] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 118.190203][ T24] audit: type=1326 audit(1724049033.230:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 118.347002][ T24] audit: type=1326 audit(1724049033.230:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 118.370932][ T24] audit: type=1326 audit(1724049033.230:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 118.398453][ T24] audit: type=1326 audit(1724049033.230:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 118.421860][ T24] audit: type=1326 audit(1724049033.230:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 118.445313][ T24] audit: type=1326 audit(1724049033.230:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 118.473431][ T24] audit: type=1326 audit(1724049033.230:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 118.497169][ T24] audit: type=1326 audit(1724049033.230:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 118.520698][ T24] audit: type=1326 audit(1724049033.230:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 118.544777][ T24] audit: type=1326 audit(1724049033.230:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42592be79 code=0x7ffc0000 [ 118.568240][ T699] usb 5-1: device descriptor read/64, error -71 [ 118.644271][ T2515] xt_bpf: check failed: parse error [ 119.074854][ T2534] EXT4-fs (loop2): Test dummy encryption mode enabled [ 119.078404][ T2530] EXT4-fs (loop3): Test dummy encryption mode enabled [ 119.091359][ T2530] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 119.096045][ T2534] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 119.098651][ T2530] EXT4-fs (loop3): Test dummy encryption mode enabled [ 119.109481][ T2534] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038 (0x7fffffff) [ 119.123651][ T2530] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.480: invalid block [ 119.135888][ T2530] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.480: couldn't read orphan inode 11 (err -117) [ 119.140348][ T699] usb 5-1: device descriptor read/64, error -71 [ 119.148148][ T2530] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,mblk_io_submit,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 119.268216][ T699] usb usb5-port1: attempt power cycle [ 119.730924][ T2550] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 119.808150][ T53] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 119.946731][ T2560] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 119.959916][ T2560] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 120.188166][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.208089][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.217705][ T53] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.230332][ T53] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 120.239106][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.247681][ T53] usb 2-1: config 0 descriptor?? [ 120.277957][ T2569] fuse: Bad value for 'fd' [ 120.289378][ T2562] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.386872][ T2560] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 120.395283][ T2560] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.487: mark_inode_dirty error [ 120.409773][ T2562] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.417391][ T2560] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 120.425629][ T2560] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.487: mark_inode_dirty error [ 120.598137][ T53] usbhid 2-1:0.0: can't add hid device: -71 [ 120.604354][ T53] usbhid: probe of 2-1:0.0 failed with error -71 [ 120.630036][ T53] usb 2-1: USB disconnect, device number 21 [ 120.658095][ T445] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 120.728106][ T315] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 120.978155][ T315] usb 4-1: Using ep0 maxpacket: 32 [ 121.098169][ T315] usb 4-1: config 0 has no interfaces? [ 121.103537][ T315] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 121.112367][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.118200][ T445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.124709][ T315] usb 4-1: config 0 descriptor?? [ 121.131652][ T445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.145712][ T445] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 121.154748][ T445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.163711][ T445] usb 3-1: config 0 descriptor?? [ 121.188270][ T53] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 121.229521][ T2611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 121.319122][ T2616] EXT4-fs (loop4): Test dummy encryption mode enabled [ 121.327000][ T2616] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 121.337762][ T2616] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038 (0x7fffffff) [ 121.428097][ T53] usb 2-1: Using ep0 maxpacket: 16 [ 121.776467][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 121.798691][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 121.886094][ T53] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 121.898088][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.910245][ T53] usb 2-1: config 0 descriptor?? [ 122.341303][ T2596] FAT-fs (loop1): Unrecognized mount option "kfree" or missing value [ 122.456781][ T289] usb 4-1: USB disconnect, device number 20 [ 122.478255][ T445] uclogic 0003:256C:006D.001B: interface is invalid, ignoring [ 122.668608][ T2597] udc-core: couldn't find an available UDC or it's busy [ 122.673351][ T2596] udc-core: couldn't find an available UDC or it's busy [ 122.675525][ T2597] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.682582][ T2596] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.697170][ T53] hid (null): bogus close delimiter [ 122.705237][ T53] hid (null): usage index exceeded [ 122.711490][ T53] hid-generic 0003:0158:0100.001C: unknown main item tag 0x0 [ 122.718860][ T53] hid-generic 0003:0158:0100.001C: unknown main item tag 0x0 [ 122.726084][ T53] hid-generic 0003:0158:0100.001C: bogus close delimiter [ 122.733201][ T53] hid-generic 0003:0158:0100.001C: item 0 0 2 10 parsing failed [ 122.741151][ T53] hid-generic: probe of 0003:0158:0100.001C failed with error -22 [ 123.059108][ T445] usb 2-1: USB disconnect, device number 22 [ 123.118851][ T2643] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 123.139259][ T2643] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 123.146869][ T2643] System zones: 0-2, 18-18, 34-34 [ 123.152782][ T2643] EXT4-fs (loop1): 1 orphan inode deleted [ 123.158504][ T2643] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x000000000000000a,nolazytime,noquota,jqfmt=vfsold,minixdf,init_itable=0x0000000000000002,grpid,debug,,errors=continue [ 123.180101][ T2643] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 123.198030][ T668] usb 3-1: USB disconnect, device number 20 [ 123.357589][ T24] kauditd_printk_skb: 145 callbacks suppressed [ 123.357601][ T24] audit: type=1400 audit(1724049038.430:727): avc: denied { remount } for pid=2647 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 123.389445][ T289] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 123.633976][ T2657] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 123.641637][ T2657] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 123.651796][ T2657] F2FS-fs (loop4): invalid crc value [ 123.658357][ T289] usb 4-1: Using ep0 maxpacket: 16 [ 123.658898][ T2662] raw_sendmsg: syz.0.507 forgot to set AF_INET. Fix it! [ 123.670425][ T2657] F2FS-fs (loop4): Mismatch valid blocks 0 vs. 2 [ 123.677280][ T2657] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 123.779513][ T2681] netlink: 84 bytes leftover after parsing attributes in process `syz.0.511'. [ 123.789819][ T2680] netlink: 84 bytes leftover after parsing attributes in process `syz.0.511'. [ 123.973609][ T289] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 123.983282][ T289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.991584][ T289] usb 4-1: Product: syz [ 123.996029][ T289] usb 4-1: Manufacturer: syz [ 124.000947][ T289] usb 4-1: SerialNumber: syz [ 124.028179][ T24] audit: type=1400 audit(1724049039.040:728): avc: denied { create } for pid=2656 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.052166][ T289] usb 4-1: config 0 descriptor?? [ 124.308111][ T668] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 124.360163][ T24] audit: type=1326 audit(1724049039.440:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e525ee79 code=0x7ffc0000 [ 124.407130][ T24] audit: type=1326 audit(1724049039.440:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e525ee79 code=0x7ffc0000 [ 124.430991][ T2703] capability: warning: `syz.3.501' uses 32-bit capabilities (legacy support in use) [ 124.447468][ T24] audit: type=1326 audit(1724049039.440:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e525ee79 code=0x7ffc0000 [ 124.478153][ T24] audit: type=1326 audit(1724049039.440:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e525ee79 code=0x7ffc0000 [ 124.506902][ T24] audit: type=1326 audit(1724049039.440:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e525ee79 code=0x7ffc0000 [ 124.538299][ T24] audit: type=1326 audit(1724049039.440:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e525ee79 code=0x7ffc0000 [ 124.562409][ T24] audit: type=1326 audit(1724049039.440:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e525ee79 code=0x7ffc0000 [ 124.588105][ T668] usb 1-1: Using ep0 maxpacket: 32 [ 124.622124][ T24] audit: type=1326 audit(1724049039.440:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e525ee79 code=0x7ffc0000 [ 124.676417][ T2710] EXT4-fs (loop1): Test dummy encryption mode enabled [ 124.694212][ T289] usb 4-1: USB disconnect, device number 21 [ 124.703101][ T2710] EXT4-fs error (device loop1): __ext4_iget:4958: inode #11: block 1: comm syz.1.516: invalid block [ 124.715455][ T2710] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.516: couldn't read orphan inode 11 (err -117) [ 124.727589][ T2710] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 124.834021][ T668] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.844309][ T668] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 124.853192][ T668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.862031][ T668] usb 1-1: config 0 descriptor?? [ 124.910163][ T668] usb 1-1: bad CDC descriptors [ 125.259119][ T2680] kvm: vcpu 0: requested 96 ns lapic timer period limited to 200000 ns [ 125.303010][ T326] usb 1-1: USB disconnect, device number 32 [ 125.360411][ T2727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 125.376261][ T2725] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 125.400570][ T2725] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nobarrier,sysvgroups,norecovery,errors=continue,nomblk_io_submit,quota,init_itable=0x0000000000000000,lazytime,,errors=continue [ 125.563357][ T2732] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.521: bad orphan inode 2097152 [ 125.688289][ T2732] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 126.058417][ T2749] exfat: Unknown parameter ' [ 126.058417][ T2749] \r5-9_ܣgȱ2!]M NNfųL^PtkǍ{U7_hkraZN%#'~ ۮ2c#k")_98D%YP "`YP5z--' [ 126.108135][ T15] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 126.119343][ T2732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 126.130779][ T2732] sch_tbf: peakrate 14652803538553308261 is lower than or equals to rate 17681448316114909243 ! [ 126.367405][ T2745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 126.658104][ T668] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 126.718169][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.736134][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.758210][ T15] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 126.771705][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.781239][ T15] usb 4-1: config 0 descriptor?? [ 127.238256][ T445] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 127.245727][ T668] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 127.254605][ T668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.263683][ T668] usb 3-1: config 0 descriptor?? [ 127.370016][ T2725] udc-core: couldn't find an available UDC or it's busy [ 127.377993][ T2725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 127.468162][ T15] usbhid 4-1:0.0: can't add hid device: -32 [ 127.474048][ T15] usbhid: probe of 4-1:0.0 failed with error -32 [ 127.522065][ T668] usb 4-1: USB disconnect, device number 22 [ 127.538105][ T445] usb 5-1: device descriptor read/64, error -71 [ 127.948240][ T445] usb 5-1: device descriptor read/64, error -71 [ 128.148823][ T2791] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.166031][ T2791] EXT4-fs (loop3): 1 orphan inode deleted [ 128.171919][ T2791] EXT4-fs (loop3): 1 truncate cleaned up [ 128.177388][ T2791] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota, [ 128.228591][ T445] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 128.483876][ T2809] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.520270][ T2809] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 128.530098][ T2809] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.556016][ T350] usb 3-1: USB disconnect, device number 21 [ 128.588124][ T315] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 128.644239][ T2822] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 128.965042][ T445] usb 5-1: device descriptor read/64, error -71 [ 128.990250][ T2832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.542'. [ 129.095716][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 129.095741][ T24] audit: type=1400 audit(1724049044.150:761): avc: denied { mount } for pid=2828 comm="syz.3.541" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 129.290313][ T1933] attempt to access beyond end of device [ 129.290313][ T1933] loop1: rw=2049, want=45104, limit=40427 [ 129.369323][ T2835] EXT4-fs error (device loop2): ext4_quota_enable:6419: comm syz.2.542: Bad quota inum: 1, type: 0 [ 129.380735][ T2835] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 129.395864][ T2835] EXT4-fs (loop2): mount failed [ 129.438192][ T315] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.488139][ T445] usb 5-1: device descriptor read/64, error -71 [ 129.548178][ T315] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.557046][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.575330][ T315] usb 1-1: SerialNumber: syz [ 129.628289][ T445] usb usb5-port1: attempt power cycle [ 129.670502][ T2846] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 129.682234][ T2846] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 129.755353][ T24] audit: type=1400 audit(1724049044.830:762): avc: denied { write } for pid=2854 comm="syz.3.547" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 129.779258][ T350] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 130.048277][ T445] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 130.188358][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.199657][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.209928][ T350] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 130.218972][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.234156][ T350] usb 2-1: config 0 descriptor?? [ 130.288250][ T445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 130.291110][ T315] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 130.311293][ T445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 130.322767][ T445] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.328925][ T24] audit: type=1400 audit(1724049045.410:763): avc: denied { read } for pid=132 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 130.356745][ T445] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.386713][ T445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.448533][ T445] usb 5-1: config 0 descriptor?? [ 130.467023][ T24] audit: type=1400 audit(1724049045.440:764): avc: denied { read } for pid=132 comm="dhcpcd" name="n15" dev="tmpfs" ino=4642 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.490845][ T2852] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 130.515944][ T2811] udc-core: couldn't find an available UDC or it's busy [ 130.523066][ T24] audit: type=1400 audit(1724049045.440:765): avc: denied { open } for pid=132 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4642 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.559351][ T2811] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.569022][ T24] audit: type=1400 audit(1724049045.440:766): avc: denied { getattr } for pid=132 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4642 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.592319][ T24] audit: type=1400 audit(1724049045.630:767): avc: denied { search } for pid=2866 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.614240][ T24] audit: type=1400 audit(1724049045.630:768): avc: denied { read } for pid=2872 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.637316][ T24] audit: type=1400 audit(1724049045.630:769): avc: denied { open } for pid=2872 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.662530][ T24] audit: type=1400 audit(1724049045.630:770): avc: denied { getattr } for pid=2872 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.839630][ T25] usb 1-1: USB disconnect, device number 33 [ 130.845892][ T25] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 131.038663][ T350] usbhid 2-1:0.0: can't add hid device: -71 [ 131.045347][ T350] usbhid: probe of 2-1:0.0 failed with error -71 [ 131.060902][ T2903] binder: Unknown parameter 'fsname' [ 131.125989][ T350] usb 2-1: USB disconnect, device number 23 [ 131.229226][ T445] usbhid 5-1:0.0: can't add hid device: -71 [ 131.271525][ T445] usbhid: probe of 5-1:0.0 failed with error -71 [ 131.290400][ T445] usb 5-1: USB disconnect, device number 28 [ 131.532823][ T2923] SELinux: Context system_u: is not valid (left unmapped). [ 131.638154][ T15] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 131.660067][ T2930] EXT4-fs (loop1): Test dummy encryption mode enabled [ 132.196068][ T2930] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 132.208698][ T2932] hub 6-0:1.0: USB hub found [ 132.214284][ T2932] hub 6-0:1.0: 1 port detected [ 132.219176][ T2930] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038 (0x7fffffff) [ 132.438467][ T15] usb 3-1: Using ep0 maxpacket: 16 [ 132.493174][ T2951] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 132.508126][ T326] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 132.512523][ T2951] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 132.534849][ T2951] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 132.543225][ T2951] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.563: mark_inode_dirty error [ 132.558221][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.569901][ T2951] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 132.578138][ T15] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 132.583765][ T2951] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.563: mark_inode_dirty error [ 132.589879][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.619303][ T15] usb 3-1: config 0 descriptor?? [ 132.658770][ T15] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 132.685338][ T2961] input: syz0 as /devices/virtual/input/input13 [ 132.778145][ T2965] EXT4-fs (loop1): Test dummy encryption mode enabled [ 132.790408][ T2965] EXT4-fs error (device loop1): __ext4_iget:4958: inode #11: block 1: comm syz.1.567: invalid block [ 132.805391][ T2965] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.567: couldn't read orphan inode 11 (err -117) [ 132.820353][ T2965] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 132.878648][ T350] usb 3-1: USB disconnect, device number 22 [ 132.888202][ T326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.900409][ T326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.930751][ T326] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 132.939799][ T326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.955038][ T326] usb 5-1: config 0 descriptor?? [ 133.068151][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 133.198122][ T445] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 133.330362][ T1920] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /44/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 133.351344][ T1920] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 133.372298][ T1920] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 133.393762][ T1920] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.416942][ T1920] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 133.440371][ T1920] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 133.518154][ T326] usbhid 5-1:0.0: can't add hid device: -71 [ 133.526174][ T326] usbhid: probe of 5-1:0.0 failed with error -71 [ 133.538542][ T326] usb 5-1: USB disconnect, device number 29 [ 133.658217][ T445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.668990][ T445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.678626][ T445] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 133.687616][ T445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.700870][ T445] usb 2-1: config 0 descriptor?? [ 133.758766][ T2976] SELinux: failed to load policy [ 133.856471][ T15] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 134.072090][ T2978] : renamed from ipvlan1 [ 134.218190][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.234082][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.261200][ T15] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.284081][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.302994][ T15] usb 3-1: config 0 descriptor?? [ 134.668193][ T445] usbhid 2-1:0.0: can't add hid device: -71 [ 134.674663][ T445] usbhid: probe of 2-1:0.0 failed with error -71 [ 134.683236][ T445] usb 2-1: USB disconnect, device number 24 [ 134.968108][ T668] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 134.998561][ T1933] ------------[ cut here ]------------ [ 135.003861][ T1933] kernel BUG at fs/ext4/inode.c:5246! [ 135.009114][ T1933] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 135.014958][ T1933] CPU: 0 PID: 1933 Comm: syz-executor Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 135.024846][ T1933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 135.034763][ T1933] RIP: 0010:ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 135.040734][ T1933] Code: 6d ca ff e9 0f f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 21 f1 ff ff 48 89 df e8 19 6e ca ff e9 14 f1 ff ff e8 af d4 8c ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 57 41 [ 135.060170][ T1933] RSP: 0018:ffffc90000f7f980 EFLAGS: 00010293 [ 135.066074][ T1933] RAX: ffffffff81ddd451 RBX: 0000000000000000 RCX: ffff8881164d0000 [ 135.073898][ T1933] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 135.081704][ T1933] RBP: ffffc90000f7fa90 R08: ffffffff81ddb06d R09: ffffed10220af411 [ 135.089508][ T1933] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 135.097320][ T1933] R13: 00000000ffffffff R14: 00000000000000a5 R15: ffff888121988000 [ 135.105137][ T1933] FS: 0000555555f14500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 135.113910][ T1933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.120322][ T1933] CR2: 0000555555f374e8 CR3: 0000000131527000 CR4: 00000000003526b0 [ 135.128135][ T1933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.135940][ T1933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.143749][ T1933] Call Trace: [ 135.146892][ T1933] ? __die_body+0x62/0xb0 [ 135.151051][ T1933] ? die+0x88/0xb0 [ 135.154606][ T1933] ? do_trap+0x1a4/0x310 [ 135.158788][ T1933] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 135.164166][ T1933] ? handle_invalid_op+0x95/0xc0 [ 135.168939][ T1933] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 135.174321][ T1933] ? exc_invalid_op+0x32/0x50 [ 135.178833][ T1933] ? asm_exc_invalid_op+0x12/0x20 [ 135.183692][ T1933] ? ext4_mark_iloc_dirty+0x1a6d/0x3e60 [ 135.189076][ T1933] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 135.194455][ T1933] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 135.199845][ T1933] __ext4_mark_inode_dirty+0x4fc/0x7b0 [ 135.205138][ T1933] ? sb_end_intwrite+0x110/0x110 [ 135.209905][ T1933] ? current_time+0x1af/0x2f0 [ 135.214418][ T1933] ? atime_needs_update+0x5a0/0x5a0 [ 135.219453][ T1933] ? __ext4_unlink+0x6f0/0xac0 [ 135.224051][ T1933] __ext4_unlink+0x8b5/0xac0 [ 135.228478][ T1933] ? ext4_orphan_del+0x7c0/0x7c0 [ 135.233251][ T1933] ? down_write+0xd7/0x150 [ 135.237504][ T1933] ? down_read_killable+0x220/0x220 [ 135.242538][ T1933] ? may_delete+0x533/0x760 [ 135.247119][ T1933] ext4_unlink+0x142/0x3f0 [ 135.251337][ T1933] vfs_unlink+0x23b/0x510 [ 135.255499][ T1933] do_unlinkat+0x430/0x8b0 [ 135.259775][ T1933] ? fsnotify_link_count+0x90/0x90 [ 135.264829][ T1933] ? strncpy_from_user+0x18e/0x2d0 [ 135.269773][ T1933] ? getname_flags+0x1fd/0x520 [ 135.274371][ T1933] __x64_sys_unlink+0x49/0x50 [ 135.278881][ T1933] do_syscall_64+0x34/0x70 [ 135.283138][ T1933] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 135.288860][ T1933] RIP: 0033:0x7fd3c3849427 [ 135.293133][ T1933] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.312564][ T1933] RSP: 002b:00007ffe29d22048 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 135.320804][ T1933] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd3c3849427 [ 135.328610][ T1933] RDX: 00007ffe29d22070 RSI: 00007ffe29d22100 RDI: 00007ffe29d22100 [ 135.336423][ T1933] RBP: 00007ffe29d22100 R08: 0000000000000000 R09: 0000000000000000 [ 135.344232][ T1933] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe29d231f0 [ 135.352045][ T1933] R13: 00007fd3c38b77b4 R14: 000000000002066a R15: 00007ffe29d242b0 [ 135.359857][ T1933] Modules linked in: [ 135.363718][ T1933] ---[ end trace d15f48b19216b7b4 ]--- [ 135.369346][ T1933] RIP: 0010:ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 135.375426][ T1933] Code: 6d ca ff e9 0f f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 21 f1 ff ff 48 89 df e8 19 6e ca ff e9 14 f1 ff ff e8 af d4 8c ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 57 41 [ 135.395041][ T1933] RSP: 0018:ffffc90000f7f980 EFLAGS: 00010293 [ 135.400873][ T1933] RAX: ffffffff81ddd451 RBX: 0000000000000000 RCX: ffff8881164d0000 [ 135.408698][ T1933] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 135.416570][ T1933] RBP: ffffc90000f7fa90 R08: ffffffff81ddb06d R09: ffffed10220af411 [ 135.424416][ T1933] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 135.432205][ T1933] R13: 00000000ffffffff R14: 00000000000000a5 R15: ffff888121988000 [ 135.440039][ T1933] FS: 0000555555f14500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 135.448793][ T1933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.455193][ T1933] CR2: 0000555555f374e8 CR3: 0000000131527000 CR4: 00000000003526b0 [ 135.463039][ T1933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.470840][ T1933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.478683][ T1933] Kernel panic - not syncing: Fatal exception [ 135.484770][ T1933] Kernel Offset: disabled [ 135.488903][ T1933] Rebooting in 86400 seconds..