last executing test programs: 2m9.75511075s ago: executing program 0 (id=11): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '^\\'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '\x00'}], 0xa, "e8990386d5ac4e852c08d0ccb559c7ed940be880077b9387ce9bfd8a1dccb6f336df637ff530ff2e9393e89688800e0bd6598a612a44490d1515db2f1b154221d149a24e7f35b923da036b5eedc42e0a0c5a0253406d32cf0afb42ab21cbefbdd9ea9879da076b5dbe6de6d4b2838688fa9ca48ad25a8378be91d90610c85a5a1520c1af8cb622b77bf3"}, 0xa2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000030101010000000000000000020000000c001980080002000d000000980002801400018008000100000000007cc402007f000001a86515b71b1a07c1dede4568d908d99dc7b8528bdf2e3ec4c1728aac8f"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40, 0x4, 0x12}, 0x18) faccessat(r1, &(0x7f0000000140)='./file0\x00', 0xc5) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) fcntl$setlease(r5, 0x400, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x400000000010, 0x3, 0x0) 2m8.780589571s ago: executing program 0 (id=13): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x30, r0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x40000000, 0x0) ptrace$cont(0x1f, r1, 0x7, 0x4082) r2 = syz_open_procfs(r1, &(0x7f0000000100)='pagemap\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="70ba1a0cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2m8.49693992s ago: executing program 0 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000030101010000000000000000020000000c001980080002000d000000980002801400018008000100000000007cc402007f000001a86515b71b1a07c1dede4568d908d99dc7b8528bdf2e3ec4c1728aac8f"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) 2m8.476601911s ago: executing program 0 (id=19): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x101000, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_clone(0x300200, &(0x7f0000000100)="4501d90f678bd9c6845b470c7dfad978f9c75f72082a89a1df425633faf5fbc9889ba57e75ccfe9c2308740e0b9c8b6e672ae1", 0x33, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280)="96944e36c5fe5bc07de175a304e80ca08c26ad2027bb943e1cfe379f4687bc5662b7f6e74bf8f707a264f5d07f1ce48d1d020ec11c2f7be1c60def9db1ac69b49560eda946b32c227062bf66436fd4de6f6861192d193dbacc7083b3af37fd794cf05b8ee1a88cc503f9f39001573eabddbde439315eecffd686f5ef3f23890a42d269de10a5bd4ec8ac6e88cd98c4dc03468ebfdf68496ab6f4d0c7e4c52297713b196b47ee2bb677e56a5ce1c16831164fa995c2492dd5a9fe2e9a63b768bc5c9c7293cf247823fd907a40d54bceff2f93873e0c035ddd97e56acb53b5e6") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f00000004c0)=0xe8) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r5, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r6, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") lchown(&(0x7f0000000380)='./file0\x00', r3, r6) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdng=', @ANYRESHEX=r2, @ANYRESOCT=r0]) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r7], 0x15) socket$packet(0x11, 0x3, 0x300) 2m7.799958483s ago: executing program 0 (id=21): socket(0x840000000002, 0x3, 0xff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc880) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r5, r4, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcf", 0x5d, 0xc001, 0x0, 0x0) r6 = gettid() r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb7c, 0x101000) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000140)=@usbdevfs_disconnect={0x1}) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x4, 0x4, @tid=r6}, &(0x7f0000044000)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900100001000130700000000000000007f00000100000000000000000000000000000000000000000000000000000001000000000000efff000000000000001a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141442ff07000000000000000000000000000032000000fe80000000000000000000000000001700000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000001000000a000400000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580001007863626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffffffea64f64ed94506"], 0x190}}, 0x0) 2m7.522979521s ago: executing program 0 (id=24): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x10, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006b80)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") r0 = syz_clone(0x541043c0, 0x0, 0x13, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) capget(&(0x7f0000000140)={0x20080522, r0}, &(0x7f0000000180)={0x4, 0xa26, 0x1, 0x7, 0xe, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000180)=@ethtool_stats={0x1d, 0x3, [0x1, 0xfffffffffffff000, 0x3]}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000300)={0x0, 0x21, 0x14, {0x14, 0x22, "59a1b9538874b9342a62bc6d9ee67e77076d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x8600, 0xc2) getdents64(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005f40)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002600)=[{&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/182, 0xb6}], 0x6, &(0x7f0000000580)=""/62, 0x3e}, 0x8}, {{&(0x7f00000026c0)=@alg, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002740)=""/255, 0xff}, {&(0x7f0000002840)=""/219, 0xdb}, {&(0x7f0000002940)=""/162, 0xa2}], 0x3, &(0x7f0000000680)=""/223, 0xdf}, 0x8}, {{&(0x7f0000002b40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002bc0)=""/203, 0xcb}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)=""/18, 0x12}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000002e40)=""/42, 0x2a}, {&(0x7f0000002e80)=""/9, 0x9}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/19, 0x13}], 0x9, &(0x7f0000003fc0)=""/167, 0xa7}, 0x81}, {{&(0x7f0000004080)=@rc, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004100)=""/127, 0x7f}, {&(0x7f0000004180)=""/147, 0x93}, {&(0x7f0000004240)=""/128, 0x80}, {&(0x7f00000042c0)=""/216, 0xd8}, {&(0x7f00000043c0)=""/22, 0x16}, {&(0x7f0000004400)=""/248, 0xf8}, {&(0x7f0000004500)=""/74, 0x4a}, {&(0x7f0000004580)=""/14, 0xe}, {&(0x7f00000045c0)=""/253, 0xfd}], 0x9, &(0x7f0000004780)=""/35, 0x23}, 0x200}, {{&(0x7f00000047c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000004840)=""/99, 0x63}, {&(0x7f00000048c0)=""/88, 0x58}, {&(0x7f0000004940)=""/127, 0x7f}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/66, 0x42}, {&(0x7f0000005a40)=""/172, 0xac}, {&(0x7f0000005b00)=""/162, 0xa2}, {&(0x7f0000005bc0)=""/96, 0x60}], 0x8, &(0x7f0000005cc0)=""/39, 0x27}}, {{&(0x7f0000005d00)=@un=@abs, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005d80)=""/27, 0x1b}, {&(0x7f0000005dc0)=""/98, 0x62}, {&(0x7f0000005e40)=""/34, 0x22}], 0x3, &(0x7f0000005ec0)=""/100, 0x64}, 0x80000001}], 0x6, 0x20, 0x0) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSETATTR(r5, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x1) write$P9_RUNLINKAT(r6, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2m7.442977844s ago: executing program 32 (id=24): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x10, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e66c87f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785000000000000000c8f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5531, &(0x7f0000006b80)="$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") r0 = syz_clone(0x541043c0, 0x0, 0x13, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) capget(&(0x7f0000000140)={0x20080522, r0}, &(0x7f0000000180)={0x4, 0xa26, 0x1, 0x7, 0xe, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000180)=@ethtool_stats={0x1d, 0x3, [0x1, 0xfffffffffffff000, 0x3]}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000300)={0x0, 0x21, 0x14, {0x14, 0x22, "59a1b9538874b9342a62bc6d9ee67e77076d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x8600, 0xc2) getdents64(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005f40)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002600)=[{&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/182, 0xb6}], 0x6, &(0x7f0000000580)=""/62, 0x3e}, 0x8}, {{&(0x7f00000026c0)=@alg, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002740)=""/255, 0xff}, {&(0x7f0000002840)=""/219, 0xdb}, {&(0x7f0000002940)=""/162, 0xa2}], 0x3, &(0x7f0000000680)=""/223, 0xdf}, 0x8}, {{&(0x7f0000002b40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002bc0)=""/203, 0xcb}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)=""/18, 0x12}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000002e40)=""/42, 0x2a}, {&(0x7f0000002e80)=""/9, 0x9}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/19, 0x13}], 0x9, &(0x7f0000003fc0)=""/167, 0xa7}, 0x81}, {{&(0x7f0000004080)=@rc, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004100)=""/127, 0x7f}, {&(0x7f0000004180)=""/147, 0x93}, {&(0x7f0000004240)=""/128, 0x80}, {&(0x7f00000042c0)=""/216, 0xd8}, {&(0x7f00000043c0)=""/22, 0x16}, {&(0x7f0000004400)=""/248, 0xf8}, {&(0x7f0000004500)=""/74, 0x4a}, {&(0x7f0000004580)=""/14, 0xe}, {&(0x7f00000045c0)=""/253, 0xfd}], 0x9, &(0x7f0000004780)=""/35, 0x23}, 0x200}, {{&(0x7f00000047c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000004840)=""/99, 0x63}, {&(0x7f00000048c0)=""/88, 0x58}, {&(0x7f0000004940)=""/127, 0x7f}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/66, 0x42}, {&(0x7f0000005a40)=""/172, 0xac}, {&(0x7f0000005b00)=""/162, 0xa2}, {&(0x7f0000005bc0)=""/96, 0x60}], 0x8, &(0x7f0000005cc0)=""/39, 0x27}}, {{&(0x7f0000005d00)=@un=@abs, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005d80)=""/27, 0x1b}, {&(0x7f0000005dc0)=""/98, 0x62}, {&(0x7f0000005e40)=""/34, 0x22}], 0x3, &(0x7f0000005ec0)=""/100, 0x64}, 0x80000001}], 0x6, 0x20, 0x0) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSETATTR(r5, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x1) write$P9_RUNLINKAT(r6, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 12.426134013s ago: executing program 3 (id=607): syz_usb_connect$rtl8150(0xfffffffffffffffd, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="000a0000074582ebe6fcc500b52096cfc35318ecb9dfa6a0e544e613106a37708c85b25ceb82177fcc97b6efd19af28aee"], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) memfd_create(&(0x7f0000000740)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 11.745380095s ago: executing program 3 (id=613): personality(0xbe4e602dc9e6c1d3) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60800, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00ef0000000086e1ce0983c7f0a32673c42f28", @ANYRES32=0x0, @ANYBLOB="21a5060000000000240012800b0001006d61637365630000140002800500090001000000050008000100000008000500", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000180)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@namecase}, {@gid}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") 8.182615699s ago: executing program 3 (id=622): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "e8990386d5ac4e852c08d0ccb559c7ed940be880077b9387ce9bfd8a1dccb6f336df637ff530ff2e9393e89688800e0bd6598a612a44490d1515db2f1b154221d149a24e7f35b923da036b5eedc42e0a0c5a0253406d32cf0afb42ab21cbefbdd9ea9879da076b5dbe6de6d4b2838688fa9ca48ad25a8378be91d90610c85a5a1520c1af8cb622b77bf3"}, 0x95) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000030101010000000000000000020000000c001980080002000d000000980002801400018008000100000000007cc402007f000001a86515b71b1a07c1dede4568d908d99dc7b8528bdf2e3ec4c1728aac8f"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40, 0x4, 0x12}, 0x18) faccessat(r1, &(0x7f0000000140)='./file0\x00', 0xc5) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) fcntl$setlease(r5, 0x400, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x400000000010, 0x3, 0x0) 6.777392274s ago: executing program 3 (id=631): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) io_uring_setup(0xc36, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@rodir}, {@fat=@umask={'umask', 0x3d, 0x65f8f7fd}}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@fat=@check_normal}, {@fat=@discard}, {@utf8no}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) syz_open_dev$mouse(0x0, 0xd, 0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x184) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0"], 0x0, 0x6}, 0x94) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000080)={0x3ffa, 0xc, 0x40}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in=@remote, 0xfe, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {0x0, 0x1, 0x0, 0x8, 0x0, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffc}, {0x2}, 0x70bd2c, 0x3504, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fdf000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) 6.635088578s ago: executing program 2 (id=635): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close_range(r0, 0xffffffffffffffff, 0x0) 6.546234681s ago: executing program 2 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x8080) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 6.527397272s ago: executing program 3 (id=642): fsopen(&(0x7f00000001c0)='qnx6\x00', 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 6.470846403s ago: executing program 2 (id=646): unshare(0x24040400) pipe2$watch_queue(0x0, 0x80) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2a9e524, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80a41, 0x0) 6.381333606s ago: executing program 3 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) 6.350882058s ago: executing program 33 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) 5.692083208s ago: executing program 6 (id=648): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.6388637s ago: executing program 6 (id=649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000050a010100000000000000000a00000a0900010073797a31000000000c0002"], 0x68}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 5.63866119s ago: executing program 6 (id=650): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000240)={'fscrypt:', @auto=[0x32, 0x33, 0x62, 0x61, 0x66, 0x38, 0x34, 0x32, 0x31, 0x67, 0x36, 0x9, 0x0, 0x36, 0x30, 0x62]}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a42120000000000000d36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b100", 0x28}, 0x48, r0) keyctl$invalidate(0x15, r1) 5.63858499s ago: executing program 6 (id=651): fsopen(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.63846798s ago: executing program 6 (id=652): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002955a4f40f30c19e04ffb0102030109022d000180002002090494090274833180090507000000060800091162b367e12306af0905050310"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b04, 0x0) 4.753336248s ago: executing program 1 (id=660): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c918020009050402100000fa0009058402"], 0x0) 3.403140972s ago: executing program 2 (id=662): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 3.402859312s ago: executing program 2 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000008000)=[{{0x0, 0x0, 0x0}, 0x800ac}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/163, 0xa3}, {&(0x7f0000003940)=""/80, 0x50}, {&(0x7f00000039c0)=""/205, 0xcd}, {&(0x7f0000003ac0)=""/199, 0xc7}], 0x6}, 0x7fc}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xa6df}, {{0x0, 0x0, 0x0}, 0xdd7}, {{0x0, 0x0, 0x0}, 0x10001}], 0x8, 0x2000, 0x0) 3.13755073s ago: executing program 1 (id=665): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="40274000000005edaeffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001880)={0x10, &(0x7f0000001380)={0x0, 0x17}, 0x0, 0x0}) 2.571162408s ago: executing program 2 (id=666): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="00300100000044"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.040319085s ago: executing program 5 (id=674): symlinkat(&(0x7f0000000040)='./file0/file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') listxattr(&(0x7f00000019c0)='./file0/../file0\x00', 0x0, 0x0) 1.979165997s ago: executing program 5 (id=675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x3, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x0, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x0, 0x7a}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0x4b, 0x0, 0x0, '\x00', 0x6}, {0x3, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x7f, 0x6}, {0xc3, 0x9, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80}, {0x3}, {0x7, 0x2, 0x5, '\x00', 0x10}, {0x48, 0x2, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x6}, {0x7f, 0x1, 0x4, '\x00', 0x7}]}}) 1.979051897s ago: executing program 5 (id=676): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.978979127s ago: executing program 5 (id=677): syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c", @ANYRES8], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 1.534455351s ago: executing program 6 (id=678): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e1000905f5e5a5"], 0x0) 1.152154804s ago: executing program 4 (id=679): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xffbffffd, @rand_addr=' \x01\x00'}}, 0x5c) 1.087112106s ago: executing program 4 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x5}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 1.086939506s ago: executing program 4 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 1.086740716s ago: executing program 4 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x1, 0xb6cc, 0x7, 0x3b, 0x3, {0x1, 0xfffffffffffffc34, 0x1, 0x3, 0x7fff, 0x100, 0x5, 0xfffffffd, 0x7, 0x4000, 0x0, r2, r3, 0x8001, 0xdfb80000}}, {0x2, 0x4000009, 0x1, 0x4, '*'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 262.708222ms ago: executing program 4 (id=683): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000006000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000005c01000b4d5d00007b8af8ff00000000bfa200000000000107020000f8ffffffb703000008000000b7040000e080af5a850000008200000095"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 249.599312ms ago: executing program 4 (id=684): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000200)={0x0, 0x15, 0x2, ';B'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 182.832734ms ago: executing program 5 (id=685): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) writev(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000180)="7893a6938b", 0x5}], 0x2) 182.709284ms ago: executing program 5 (id=686): r0 = socket$tipc(0x1e, 0x2, 0x0) getpeername(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x80) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 117.134417ms ago: executing program 1 (id=687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @empty, 0x1}, 0x10) 104.937027ms ago: executing program 1 (id=688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a67cb12ea9a6000000000000000000000000d07e0000000000000483", "0800afb4"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 6.94305ms ago: executing program 1 (id=689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xe9c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe70, 0x2, [@TCA_FW_ACT={0xe6c, 0x4, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe9c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 0s ago: executing program 1 (id=690): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): ssive=1 [ 98.752061][ T1612] loop3: detected capacity change from 0 to 131072 [ 98.806523][ T1634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'. [ 98.851959][ T1634] loop1: detected capacity change from 0 to 1024 [ 98.891712][ T1612] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(1539) [ 98.903407][ T1634] JBD2: no valid journal superblock found [ 98.909260][ T1634] EXT4-fs (loop1): error loading journal [ 98.955001][ T1612] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 99.110099][ T1612] F2FS-fs (loop3): Test dummy encryption mode enabled [ 99.117069][ T1612] F2FS-fs (loop3): Test dummy encryption mode enabled [ 99.123951][ T1612] F2FS-fs (loop3): Unrecognized mount option "io_bits=00000000000000000159" or missing value [ 99.148260][ T1628] loop2: detected capacity change from 0 to 40427 [ 99.176931][ T1628] F2FS-fs (loop2): invalid crc value [ 99.189528][ T1628] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.248063][ T1644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 99.351004][ T1628] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.770691][ T1650] loop4: detected capacity change from 0 to 8192 [ 99.797254][ T1659] loop5: detected capacity change from 0 to 512 [ 100.058221][ T1663] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 101.144927][ T1659] EXT4-fs (loop5): first meta block group too large: 2 (group descriptor block count 1) [ 101.156252][ T288] attempt to access beyond end of device [ 101.156252][ T288] loop2: rw=2049, want=45104, limit=40427 [ 101.176875][ T30] audit: type=1400 audit(1778728045.772:408): avc: denied { shutdown } for pid=1648 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.263438][ T1662] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 101.275749][ T1662] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.299437][ T1669] set_capacity_and_notify: 1 callbacks suppressed [ 101.299453][ T1669] loop3: detected capacity change from 0 to 512 [ 101.420297][ T1669] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 101.435178][ T1665] loop4: detected capacity change from 0 to 512 [ 101.442338][ T1665] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.455379][ T1665] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 101.470379][ T1665] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 101.478756][ T1669] EXT4-fs (loop3): mount failed [ 101.570201][ T1675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.372'. [ 101.888899][ T741] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 101.897127][ T30] audit: type=1400 audit(1778728046.492:409): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 101.936947][ T1680] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 102.047716][ T1693] APIC base relocation is unsupported by KVM [ 102.077706][ T1696] loop4: detected capacity change from 0 to 512 [ 102.160142][ T1696] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.170197][ T741] usb 6-1: Using ep0 maxpacket: 32 [ 102.175437][ T1696] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 102.178963][ T293] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 102.186080][ T1696] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 102.289010][ T741] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 102.297444][ T741] usb 6-1: config 0 has no interface number 0 [ 102.303829][ T741] usb 6-1: config 0 interface 184 has no altsetting 0 [ 102.337620][ T1703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 102.381531][ T1707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 102.489112][ T741] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 102.508322][ T741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.551413][ T741] usb 6-1: Product: syz [ 102.568765][ T741] usb 6-1: Manufacturer: syz [ 102.587334][ T741] usb 6-1: SerialNumber: syz [ 102.612729][ T741] usb 6-1: config 0 descriptor?? [ 102.682908][ T741] smsc75xx v1.0.0 [ 102.717129][ T1707] loop4: detected capacity change from 0 to 40427 [ 102.768783][ T1707] F2FS-fs (loop4): fault_injection options not supported [ 102.811398][ T1707] F2FS-fs (loop4): invalid crc value [ 102.827436][ T1713] loop3: detected capacity change from 0 to 512 [ 102.835531][ T1707] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.839304][ T741] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 102.852240][ T741] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 102.863635][ T741] usb 6-1: USB disconnect, device number 12 [ 102.874731][ T1713] EXT4-fs (loop3): first meta block group too large: 2 (group descriptor block count 1) [ 102.903316][ T1707] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 102.938949][ T293] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.979100][ T293] usb 3-1: not running at top speed; connect to a high speed hub [ 103.050184][ T1723] x_tables: duplicate underflow at hook 2 [ 103.078929][ T293] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 103.087247][ T293] usb 3-1: config 1 has no interface number 0 [ 103.093460][ T293] usb 3-1: config 1 interface 138 has no altsetting 0 [ 103.166461][ T1723] loop4: detected capacity change from 0 to 40427 [ 103.217164][ T1723] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 103.224137][ T1723] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 103.233653][ T1723] F2FS-fs (loop4): invalid crc value [ 103.249005][ T767] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 103.259755][ T1723] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 103.270935][ T741] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 103.298960][ T293] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 103.312063][ T1723] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 103.318408][ T293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.321545][ T1723] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 103.327244][ T293] usb 3-1: Product: syz [ 103.343351][ T293] usb 3-1: Manufacturer: syz [ 103.358905][ T293] usb 3-1: SerialNumber: syz [ 103.374779][ T1723] attempt to access beyond end of device [ 103.374779][ T1723] loop4: rw=34817, want=79872, limit=40427 [ 103.426112][ T289] attempt to access beyond end of device [ 103.426112][ T289] loop4: rw=2049, want=45104, limit=40427 [ 103.491752][ T1731] loop1: detected capacity change from 0 to 40427 [ 103.518903][ T767] usb 4-1: Using ep0 maxpacket: 32 [ 103.560586][ T1731] F2FS-fs (loop1): invalid crc value [ 103.571321][ T1731] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 5 [ 103.582584][ T1731] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 103.649080][ T767] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 103.664490][ T767] usb 4-1: config 0 has no interface number 0 [ 103.671011][ T767] usb 4-1: config 0 interface 184 has no altsetting 0 [ 103.679066][ T741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 103.718942][ T741] usb 6-1: not running at top speed; connect to a high speed hub [ 103.799106][ T741] usb 6-1: config 249 has an invalid interface number: 203 but max is 0 [ 103.807499][ T741] usb 6-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 103.817965][ T336] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 103.825775][ T293] usb 3-1: USB disconnect, device number 9 [ 103.832590][ T741] usb 6-1: config 249 has no interface number 0 [ 103.839182][ T741] usb 6-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.849621][ T741] usb 6-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.859155][ T767] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 103.874869][ T741] usb 6-1: config 249 interface 203 has no altsetting 0 [ 103.882005][ T767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.890260][ T767] usb 4-1: Product: syz [ 103.894518][ T767] usb 4-1: Manufacturer: syz [ 103.899454][ T767] usb 4-1: SerialNumber: syz [ 103.908230][ T767] usb 4-1: config 0 descriptor?? [ 103.938042][ T1731] loop1: detected capacity change from 0 to 32768 [ 103.949690][ T767] smsc75xx v1.0.0 [ 103.989425][ T1559] loop1: p1 p2 p3 < p5 > [ 103.993928][ T1559] loop1: p1 size 242222080 extends beyond EOD, truncated [ 104.001897][ T1559] loop1: p2 start 4294967295 is beyond EOD, truncated [ 104.011742][ T1731] loop1: p1 p2 p3 < p5 > [ 104.016338][ T1731] loop1: p1 size 242222080 extends beyond EOD, truncated [ 104.024040][ T1731] loop1: p2 start 4294967295 is beyond EOD, truncated [ 104.039040][ T741] usb 6-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 104.051369][ T741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.059512][ T741] usb 6-1: Product: syz [ 104.063729][ T741] usb 6-1: Manufacturer: syz [ 104.068346][ T741] usb 6-1: SerialNumber: syz [ 104.073346][ T1558] udevd[1558]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.139236][ T1559] udevd[1559]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 104.141292][ T315] udevd[315]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 104.160751][ T1558] udevd[1558]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 104.183363][ T1559] udevd[1559]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 104.194491][ T315] udevd[315]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 104.205949][ T1743] loop2: detected capacity change from 0 to 1024 [ 104.206455][ T1558] udevd[1558]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 104.212698][ T336] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 104.235987][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.244286][ T1743] EXT4-fs (loop2): Ignoring removed orlov option [ 104.257933][ T336] usb 5-1: config 0 descriptor?? [ 104.270397][ T1743] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 104.360832][ T30] audit: type=1400 audit(1778728048.962:410): avc: denied { map } for pid=1750 comm="syz.2.394" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.468928][ T491] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 104.818924][ T20] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 104.838993][ T491] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 104.848343][ T491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.858940][ T491] usb 2-1: config 0 descriptor?? [ 104.868949][ T336] usb 5-1: Cannot set MAC address [ 104.874082][ T336] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 104.883299][ T336] usb 5-1: USB disconnect, device number 12 [ 105.038973][ T767] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 105.049941][ T767] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 105.059127][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 105.079040][ T767] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 105.089908][ T767] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 105.099704][ T767] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 105.109987][ T767] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 105.119502][ T767] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 105.127924][ T767] usb 4-1: USB disconnect, device number 12 [ 105.228956][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.308938][ T20] usb 3-1: config 3 has an invalid interface number: 67 but max is 0 [ 105.317089][ T20] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 105.327372][ T20] usb 3-1: config 3 has no interface number 0 [ 105.333648][ T20] usb 3-1: config 3 interface 67 has no altsetting 0 [ 105.339147][ T491] usb 2-1: Cannot set MAC address [ 105.345595][ T491] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 105.355269][ T491] usb 2-1: USB disconnect, device number 9 [ 105.405276][ T1755] loop4: detected capacity change from 0 to 512 [ 105.440650][ T1755] EXT4-fs (loop4): Unrecognized mount option "uid=00000000000000000000" or missing value [ 105.508945][ T20] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=f4.60 [ 105.518111][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.526214][ T20] usb 3-1: Product: syz [ 105.530460][ T20] usb 3-1: Manufacturer: syz [ 105.535074][ T20] usb 3-1: SerialNumber: syz [ 105.673225][ T1761] Invalid argument reading file caps for ./file0 [ 105.893981][ T30] audit: type=1400 audit(1778728050.492:411): avc: denied { create } for pid=1762 comm="syz.5.398" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.914844][ T30] audit: type=1400 audit(1778728050.502:412): avc: denied { write } for pid=1762 comm="syz.5.398" name="file2" dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.937815][ T20] usb 3-1: bad CDC descriptors [ 105.939618][ T741] rtl8150 6-1:249.203: couldn't find required endpoints [ 105.949855][ T20] usb 3-1: unsupported MDLM descriptors [ 105.956501][ T20] usb 3-1: USB disconnect, device number 10 [ 105.963465][ T30] audit: type=1400 audit(1778728050.502:413): avc: denied { open } for pid=1762 comm="syz.5.398" path="/72/file2" dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.986907][ T741] rtl8150: probe of 6-1:249.203 failed with error -5 [ 105.993766][ T491] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 105.994783][ T30] audit: type=1400 audit(1778728050.502:414): avc: denied { ioctl } for pid=1762 comm="syz.5.398" path="/72/file2" dev="tmpfs" ino=416 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.020814][ T741] usb 6-1: USB disconnect, device number 13 [ 106.030640][ T30] audit: type=1400 audit(1778728050.522:415): avc: denied { mounton } for pid=1762 comm="syz.5.398" path="/72/file2" dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.080648][ T30] audit: type=1400 audit(1778728050.682:416): avc: denied { ioctl } for pid=1762 comm="syz.5.398" path="socket:[20323]" dev="sockfs" ino=20323 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.125414][ T30] audit: type=1400 audit(1778728050.722:417): avc: denied { unlink } for pid=415 comm="syz-executor" name="file2" dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.318632][ T1768] set_capacity_and_notify: 2 callbacks suppressed [ 106.318651][ T1768] loop5: detected capacity change from 0 to 40427 [ 106.339654][ T1768] F2FS-fs (loop5): invalid crc value [ 106.399157][ T491] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.421954][ T1774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.401'. [ 106.467083][ T1774] loop4: detected capacity change from 0 to 1024 [ 106.512717][ T1774] JBD2: no valid journal superblock found [ 106.518591][ T1774] EXT4-fs (loop4): error loading journal [ 106.607158][ T491] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 106.715722][ T1768] F2FS-fs (loop5): Found nat_bits in checkpoint [ 106.775382][ T1768] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 106.820023][ T491] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 106.829238][ T491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 106.910103][ T491] usb 4-1: SerialNumber: syz [ 106.928959][ T1761] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 106.950929][ T491] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 106.959586][ T491] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 107.025245][ T1795] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 107.295800][ T415] attempt to access beyond end of device [ 107.295800][ T415] loop5: rw=2049, want=45104, limit=40427 [ 107.308016][ T30] audit: type=1326 audit(1778728051.902:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.408" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5d32e59 code=0x7ffc0000 [ 107.359965][ T741] usb 4-1: USB disconnect, device number 13 [ 107.386431][ T30] audit: type=1326 audit(1778728051.902:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.408" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5d32e59 code=0x7ffc0000 [ 107.442242][ T6] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 107.718970][ T491] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 107.788900][ T1022] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 107.808961][ T6] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 107.818064][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.827068][ T6] usb 2-1: config 0 descriptor?? [ 107.871821][ T1814] loop3: detected capacity change from 0 to 256 [ 107.926929][ T1814] FAT-fs (loop3): Directory bread(block 64) failed [ 107.933608][ T1814] FAT-fs (loop3): Directory bread(block 65) failed [ 107.940487][ T1814] FAT-fs (loop3): Directory bread(block 66) failed [ 107.947090][ T1814] FAT-fs (loop3): Directory bread(block 67) failed [ 107.953790][ T1814] FAT-fs (loop3): Directory bread(block 68) failed [ 107.960677][ T1814] FAT-fs (loop3): Directory bread(block 69) failed [ 107.967502][ T1814] FAT-fs (loop3): Directory bread(block 70) failed [ 107.974170][ T1814] FAT-fs (loop3): Directory bread(block 71) failed [ 107.980803][ T1814] FAT-fs (loop3): Directory bread(block 72) failed [ 107.987356][ T1814] FAT-fs (loop3): Directory bread(block 73) failed [ 108.014881][ T1676] attempt to access beyond end of device [ 108.014881][ T1676] loop3: rw=1, want=1228, limit=256 [ 108.025745][ T1676] Buffer I/O error on dev loop3, logical block 306, lost async page write [ 108.077077][ T1816] loop3: detected capacity change from 0 to 512 [ 108.083496][ T491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.094455][ T491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.104347][ T491] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 108.113642][ T491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.122991][ T1816] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.135643][ T491] usb 3-1: config 0 descriptor?? [ 108.137523][ T1816] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 108.152478][ T1816] EXT4-fs (loop3): group descriptors corrupted! [ 108.178964][ T1022] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.201965][ T1022] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.308925][ T6] usb 2-1: Cannot set MAC address [ 108.308958][ T1022] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.314313][ T6] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 108.332188][ T1022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.348901][ T1022] usb 6-1: SerialNumber: syz [ 108.354416][ T6] usb 2-1: USB disconnect, device number 10 [ 108.380412][ T1820] loop4: detected capacity change from 0 to 40427 [ 108.429378][ T1820] F2FS-fs (loop4): fault_injection options not supported [ 108.489390][ T1820] F2FS-fs (loop4): invalid crc value [ 108.497100][ T1820] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.509010][ T1826] loop3: detected capacity change from 0 to 40427 [ 108.519845][ T1826] F2FS-fs (loop3): invalid crc value [ 108.537001][ T1826] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.619829][ T1833] loop2: detected capacity change from 0 to 256 [ 108.640373][ T1833] exfat: Deprecated parameter 'utf8' [ 108.645870][ T1833] exfat: Deprecated parameter 'namecase' [ 108.651748][ T1833] exfat: Deprecated parameter 'namecase' [ 108.657584][ T1833] exfat: Deprecated parameter 'namecase' [ 108.679624][ T1833] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 108.819953][ T1812] loop5: detected capacity change from 0 to 512 [ 108.835519][ T1812] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.845701][ T1812] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 108.856247][ T1826] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.859187][ T1812] EXT4-fs (loop5): group descriptors corrupted! [ 108.864137][ T1820] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 109.019818][ T1022] usb 6-1: 0:2 : does not exist [ 109.022324][ T1840] loop4: detected capacity change from 0 to 2048 [ 109.076761][ T1841] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 109.092605][ T1022] usb 6-1: USB disconnect, device number 14 [ 109.310604][ T1840] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.330909][ T1840] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 109.346250][ T1840] EXT4-fs error (device loop4) in ext4_setattr:5676: error 28 [ 109.364252][ T286] attempt to access beyond end of device [ 109.364252][ T286] loop3: rw=2049, want=45104, limit=40427 [ 109.428895][ T6] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 109.449788][ T1559] udevd[1559]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.598913][ T30] kauditd_printk_skb: 568 callbacks suppressed [ 109.598938][ T30] audit: type=1400 audit(1778728054.192:988): avc: denied { unmount } for pid=415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 109.787123][ T1846] loop4: detected capacity change from 0 to 131072 [ 109.793801][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.799006][ T1022] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 109.805539][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.822265][ T6] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 109.831415][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.840253][ T6] usb 2-1: config 0 descriptor?? [ 109.910415][ T1846] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(1539) [ 109.918469][ T1846] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 109.926954][ T1846] F2FS-fs (loop4): Test dummy encryption mode enabled [ 109.929093][ T767] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 109.934889][ T1846] F2FS-fs (loop4): Test dummy encryption mode enabled [ 109.948394][ T1846] F2FS-fs (loop4): Unrecognized mount option "io_bits=00000000000000000159" or missing value [ 110.178961][ T767] usb 6-1: Using ep0 maxpacket: 16 [ 110.845165][ T1858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.426'. [ 110.889121][ T1857] exfat: Deprecated parameter 'utf8' [ 110.894486][ T1857] exfat: Deprecated parameter 'namecase' [ 110.900272][ T1857] exfat: Deprecated parameter 'namecase' [ 110.905949][ T1857] exfat: Deprecated parameter 'namecase' [ 110.984528][ T1858] JBD2: no valid journal superblock found [ 110.990432][ T1858] EXT4-fs (loop4): error loading journal [ 111.014526][ T1857] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 111.037669][ T1022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.049134][ T491] usbhid 3-1:0.0: can't add hid device: -71 [ 111.055317][ T491] usbhid: probe of 3-1:0.0 failed with error -71 [ 111.077263][ T491] usb 3-1: USB disconnect, device number 11 [ 111.094876][ T1022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.167871][ T1861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1861 comm=syz.2.427 [ 111.267910][ T1022] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 111.278991][ T767] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.281344][ T1022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.299396][ T1022] usb 4-1: config 0 descriptor?? [ 111.311636][ T767] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.477168][ T1869] set_capacity_and_notify: 3 callbacks suppressed [ 111.477181][ T1869] loop4: detected capacity change from 0 to 40427 [ 111.490238][ T767] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.499560][ T767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.507602][ T767] usb 6-1: Product: syz [ 111.511833][ T767] usb 6-1: Manufacturer: syz [ 111.516477][ T767] usb 6-1: SerialNumber: syz [ 111.530932][ T1869] F2FS-fs (loop4): invalid crc value [ 111.537654][ T1869] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 111.590220][ T1869] F2FS-fs (loop4): Start checkpoint disabled! [ 111.596998][ T1869] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 111.783407][ T1877] loop3: detected capacity change from 0 to 256 [ 111.793116][ T491] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 111.960394][ T1877] exfat: Deprecated parameter 'utf8' [ 111.965925][ T1877] exfat: Deprecated parameter 'namecase' [ 111.971824][ T1877] exfat: Deprecated parameter 'namecase' [ 111.977724][ T1877] exfat: Deprecated parameter 'namecase' [ 112.006618][ T1877] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 112.119623][ T426] attempt to access beyond end of device [ 112.119623][ T426] loop4: rw=1, want=45224, limit=40427 [ 112.131584][ T426] attempt to access beyond end of device [ 112.131584][ T426] loop4: rw=2049, want=45232, limit=40427 [ 112.143122][ T767] usb 6-1: 0:2 : does not exist [ 112.152843][ T767] usb 6-1: USB disconnect, device number 15 [ 112.182568][ T1879] loop1: detected capacity change from 0 to 2048 [ 112.198952][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 112.205198][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 112.215249][ T6] usb 2-1: USB disconnect, device number 11 [ 112.229586][ T1879] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.257361][ T1879] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 112.272032][ T1879] EXT4-fs error (device loop1) in ext4_setattr:5676: error 28 [ 112.279699][ T491] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 112.296182][ T491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.313347][ T491] usb 3-1: config 0 descriptor?? [ 112.332927][ T1885] loop1: detected capacity change from 0 to 512 [ 112.412941][ T1885] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.444283][ T1885] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 112.454412][ T1885] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 112.731474][ T1892] loop1: detected capacity change from 0 to 512 [ 112.770680][ T1892] EXT4-fs (loop1): Unrecognized mount option "uid=00000000000000000000" or missing value [ 112.783640][ T1893] overlayfs: failed to resolve './file0': -2 [ 112.818966][ T491] usb 3-1: Cannot set MAC address [ 112.824311][ T491] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 112.836111][ T491] usb 3-1: USB disconnect, device number 12 [ 113.015397][ T1895] loop1: detected capacity change from 0 to 256 [ 113.298976][ T1022] usbhid 4-1:0.0: can't add hid device: -71 [ 113.305225][ T1022] usbhid: probe of 4-1:0.0 failed with error -71 [ 113.324252][ T1022] usb 4-1: USB disconnect, device number 14 [ 113.413980][ T1897] loop4: detected capacity change from 0 to 40427 [ 113.424338][ T1897] F2FS-fs (loop4): fault_injection options not supported [ 113.440496][ T1901] loop2: detected capacity change from 0 to 1024 [ 113.448247][ T1897] F2FS-fs (loop4): invalid crc value [ 113.455488][ T1897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.465106][ T1901] EXT4-fs (loop2): Ignoring removed bh option [ 113.473321][ T1899] loop3: detected capacity change from 0 to 40427 [ 113.480145][ T1901] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 9 [ 113.505766][ T1899] F2FS-fs (loop3): invalid crc value [ 113.513367][ T1899] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.537226][ T1897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.568590][ T1909] loop5: detected capacity change from 0 to 128 [ 113.618918][ T1899] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.801419][ T1918] EXT4-fs (loop1): Ignoring removed nobh option [ 113.830814][ T1918] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 113.859458][ T1918] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.904513][ T1923] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 114.038932][ T1918] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.443: corrupted inode contents [ 114.165058][ T767] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 114.189529][ T1918] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #2: comm syz.1.443: mark_inode_dirty error [ 114.207296][ T1918] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.443: corrupted inode contents [ 114.232479][ T1918] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.443: mark_inode_dirty error [ 114.261703][ T1918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=107 sclass=netlink_route_socket pid=1918 comm=syz.1.443 [ 114.295361][ T286] attempt to access beyond end of device [ 114.295361][ T286] loop3: rw=2049, want=45104, limit=40427 [ 114.349018][ T1920] F2FS-fs (loop4): invalid crc value [ 114.360435][ T1920] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 114.386682][ T1920] F2FS-fs (loop4): Start checkpoint disabled! [ 114.408619][ T1920] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 114.428875][ T767] usb 3-1: Using ep0 maxpacket: 8 [ 114.511623][ T1932] x_tables: duplicate underflow at hook 2 [ 114.530002][ T1933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.445'. [ 114.643005][ T1933] JBD2: no valid journal superblock found [ 114.648858][ T1933] EXT4-fs (loop1): error loading journal [ 114.910772][ T10] attempt to access beyond end of device [ 114.910772][ T10] loop4: rw=1, want=45224, limit=40427 [ 114.928931][ T767] usb 3-1: config 1 has an invalid descriptor of length 152, skipping remainder of the config [ 114.940094][ T10] attempt to access beyond end of device [ 114.940094][ T10] loop4: rw=2049, want=45232, limit=40427 [ 114.949211][ T767] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.978931][ T767] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.993615][ T767] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 115.004305][ T767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.051952][ T1929] F2FS-fs (loop3): invalid crc value [ 115.059563][ T767] hub 3-1:1.0: bad descriptor, ignoring hub [ 115.065511][ T767] hub: probe of 3-1:1.0 failed with error -5 [ 115.079431][ T767] cdc_wdm 3-1:1.0: skipping garbage [ 115.089872][ T1929] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.108981][ T767] cdc_wdm 3-1:1.0: skipping garbage [ 115.114255][ T767] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 115.176594][ T1929] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.214174][ T1940] EXT4-fs (loop4): first meta block group too large: 2 (group descriptor block count 1) [ 115.276004][ T1932] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 115.291809][ T1932] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 115.301389][ T1932] F2FS-fs (loop5): invalid crc value [ 115.308043][ T1932] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 115.317679][ T1901] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 115.330069][ T1942] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 115.359762][ T1901] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 115.382025][ T1901] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000003237375" or missing value [ 115.391593][ T1932] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 115.399351][ T1932] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 115.650268][ T286] attempt to access beyond end of device [ 115.650268][ T286] loop3: rw=2049, want=45104, limit=40427 [ 115.790973][ T1932] attempt to access beyond end of device [ 115.790973][ T1932] loop5: rw=34817, want=79872, limit=40427 [ 115.841843][ T415] attempt to access beyond end of device [ 115.841843][ T415] loop5: rw=2049, want=45104, limit=40427 [ 115.906651][ T1952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.916977][ T1952] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.927996][ T1952] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 115.948909][ T6] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 116.011965][ T30] audit: type=1400 audit(1778728060.612:989): avc: denied { create } for pid=1951 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.037524][ T1954] EXT4-fs (loop5): Unrecognized mount option "uid=00000000000000000000" or missing value [ 116.048721][ T30] audit: type=1400 audit(1778728060.612:990): avc: denied { bind } for pid=1951 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.173736][ T1956] EXT4-fs (loop3): Unrecognized mount option "uid=00000000000000000000" or missing value [ 116.202494][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 116.219022][ T767] usb 3-1: USB disconnect, device number 13 [ 116.496642][ T1964] set_capacity_and_notify: 11 callbacks suppressed [ 116.496677][ T1964] loop5: detected capacity change from 0 to 256 [ 117.398945][ T1968] loop3: detected capacity change from 0 to 256 [ 117.837161][ T6] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 117.845459][ T6] usb 5-1: config 0 has no interface number 0 [ 117.851627][ T6] usb 5-1: config 0 interface 184 has no altsetting 0 [ 117.868445][ T1981] FAULT_INJECTION: forcing a failure. [ 117.868445][ T1981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.888965][ T1981] CPU: 0 PID: 1981 Comm: syz.3.456 Not tainted syzkaller #0 [ 117.896391][ T1981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.906559][ T1981] Call Trace: [ 117.909858][ T1981] [ 117.912812][ T1981] __dump_stack+0x21/0x30 [ 117.917179][ T1981] dump_stack_lvl+0x110/0x170 [ 117.921884][ T1981] ? show_regs_print_info+0x20/0x20 [ 117.927109][ T1981] ? __stack_depot_save+0x34/0x480 [ 117.932252][ T1981] dump_stack+0x15/0x20 [ 117.936441][ T1981] should_fail+0x3c1/0x510 [ 117.940890][ T1981] should_fail_alloc_page+0x55/0x80 [ 117.946125][ T1981] prepare_alloc_pages+0x156/0x610 [ 117.951407][ T1981] ? __alloc_pages_bulk+0xad0/0xad0 [ 117.956727][ T1981] __alloc_pages+0x11d/0x460 [ 117.961432][ T1981] ? prep_new_page+0x110/0x110 [ 117.966223][ T1981] ? __kasan_check_read+0x11/0x20 [ 117.971281][ T1981] ? __vm_enough_memory+0x11b/0x2d0 [ 117.976516][ T1981] shmem_alloc_and_acct_page+0x4a2/0x8d0 [ 117.982177][ T1981] ? shmem_swapin_page+0x1610/0x1610 [ 117.987494][ T1981] ? xas_load+0x2ea/0x300 [ 117.991945][ T1981] ? pagecache_get_page+0xcf9/0xde0 [ 117.997168][ T1981] ? page_cache_prev_miss+0x290/0x290 [ 118.002564][ T1981] ? _raw_spin_lock_irq+0x95/0xf0 [ 118.007624][ T1981] ? _raw_spin_lock_irqsave+0x130/0x130 [ 118.013219][ T1981] shmem_getpage_gfp+0xfe5/0x2310 [ 118.018289][ T1981] ? __kasan_check_write+0x14/0x20 [ 118.023434][ T1981] shmem_write_begin+0xce/0x1b0 [ 118.028329][ T1981] generic_perform_write+0x2b7/0x690 [ 118.033652][ T1981] ? grab_cache_page_write_begin+0xb0/0xb0 [ 118.039489][ T1981] ? file_remove_privs+0x5c0/0x5c0 [ 118.044630][ T1981] ? rwsem_write_trylock+0x136/0x300 [ 118.049946][ T1981] ? clear_nonspinnable+0x60/0x60 [ 118.055024][ T1981] __generic_file_write_iter+0x268/0x480 [ 118.060695][ T1981] generic_file_write_iter+0xa9/0x1d0 [ 118.066101][ T1981] vfs_write+0x835/0xfd0 [ 118.070379][ T1981] ? file_end_write+0x1b0/0x1b0 [ 118.075267][ T1981] ? __fget_files+0x2c4/0x320 [ 118.079985][ T1981] ? __fdget_pos+0x1f7/0x380 [ 118.084608][ T1981] ? ksys_write+0x71/0x250 [ 118.089064][ T1981] ksys_write+0x149/0x250 [ 118.093424][ T1981] ? __ia32_sys_read+0x90/0x90 [ 118.098221][ T1981] ? debug_smp_processor_id+0x17/0x20 [ 118.103627][ T1981] __x64_sys_write+0x7b/0x90 [ 118.108245][ T1981] x64_sys_call+0x8ef/0x9a0 [ 118.112773][ T1981] do_syscall_64+0x4c/0xa0 [ 118.117218][ T1981] ? clear_bhb_loop+0x50/0xa0 [ 118.121922][ T1981] ? clear_bhb_loop+0x50/0xa0 [ 118.126631][ T1981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.132563][ T1981] RIP: 0033:0x7f48b24b668e [ 118.137002][ T1981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.156650][ T1981] RSP: 002b:00007f48b0f4fda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.165100][ T1981] RAX: ffffffffffffffda RBX: 00007f48b0f506c0 RCX: 00007f48b24b668e [ 118.173188][ T1981] RDX: 0000000000040000 RSI: 00007f48a8b30000 RDI: 0000000000000004 [ 118.181183][ T1981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.189181][ T1981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 118.197266][ T1981] R13: 00007f48b0f4fee0 R14: 00007f48b0f4fea0 R15: 00007f48a8b30000 [ 118.205273][ T1981] [ 118.278904][ T6] usb 5-1: string descriptor 0 read error: -71 [ 118.288711][ T6] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 118.310487][ T1987] loop2: detected capacity change from 0 to 512 [ 118.341576][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.369773][ T6] usb 5-1: config 0 descriptor?? [ 118.418969][ T6] usb 5-1: can't set config #0, error -71 [ 118.432055][ T6] usb 5-1: USB disconnect, device number 13 [ 118.614839][ T1993] loop2: detected capacity change from 0 to 512 [ 118.733151][ T1993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.794613][ T1993] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 118.804746][ T1993] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 118.841893][ T1998] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 118.860851][ T1983] loop5: detected capacity change from 0 to 40427 [ 118.870521][ T1998] loop1: detected capacity change from 0 to 512 [ 118.888481][ T1983] F2FS-fs (loop5): invalid crc value [ 118.900699][ T1983] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 118.945027][ T1983] F2FS-fs (loop5): Start checkpoint disabled! [ 118.952548][ T1998] EXT4-fs (loop1): dax option not supported [ 118.963246][ T1983] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 119.094893][ T1986] loop3: detected capacity change from 0 to 40427 [ 119.341920][ T1986] F2FS-fs (loop3): invalid crc value [ 119.407798][ T1676] attempt to access beyond end of device [ 119.407798][ T1676] loop5: rw=1, want=45224, limit=40427 [ 119.419744][ T1676] attempt to access beyond end of device [ 119.419744][ T1676] loop5: rw=2049, want=45232, limit=40427 [ 119.436240][ T2005] loop1: detected capacity change from 0 to 8192 [ 119.446145][ T1986] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.496871][ T1986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.536411][ T2020] device macsec0 entered promiscuous mode [ 119.646239][ T2026] FAULT_INJECTION: forcing a failure. [ 119.646239][ T2026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.659512][ T2026] CPU: 0 PID: 2026 Comm: syz.5.469 Not tainted syzkaller #0 [ 119.666822][ T2026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.676896][ T2026] Call Trace: [ 119.680198][ T2026] [ 119.683151][ T2026] __dump_stack+0x21/0x30 [ 119.687517][ T2026] dump_stack_lvl+0x110/0x170 [ 119.692219][ T2026] ? show_regs_print_info+0x20/0x20 [ 119.697449][ T2026] ? __kasan_check_write+0x14/0x20 [ 119.702584][ T2026] ? _raw_spin_lock_irq+0x95/0xf0 [ 119.707634][ T2026] dump_stack+0x15/0x20 [ 119.711819][ T2026] should_fail+0x3c1/0x510 [ 119.716266][ T2026] should_fail_usercopy+0x1a/0x20 [ 119.719140][ T491] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 119.721320][ T2026] copy_page_from_iter_atomic+0x3ff/0x1380 [ 119.721348][ T2026] ? pipe_zero+0x370/0x370 [ 119.739267][ T2026] generic_perform_write+0x310/0x690 [ 119.744599][ T2026] ? grab_cache_page_write_begin+0xb0/0xb0 [ 119.750438][ T2026] ? file_remove_privs+0x5c0/0x5c0 [ 119.755661][ T2026] ? rwsem_write_trylock+0x136/0x300 [ 119.760977][ T2026] ? clear_nonspinnable+0x60/0x60 [ 119.766033][ T2026] __generic_file_write_iter+0x268/0x480 [ 119.771692][ T2026] generic_file_write_iter+0xa9/0x1d0 [ 119.777091][ T2026] vfs_write+0x835/0xfd0 [ 119.781359][ T2026] ? file_end_write+0x1b0/0x1b0 [ 119.786234][ T2026] ? __fget_files+0x2c4/0x320 [ 119.790941][ T2026] ? __fdget_pos+0x1f7/0x380 [ 119.795690][ T2026] ? ksys_write+0x71/0x250 [ 119.800132][ T2026] ksys_write+0x149/0x250 [ 119.804487][ T2026] ? __ia32_sys_read+0x90/0x90 [ 119.809277][ T2026] ? debug_smp_processor_id+0x17/0x20 [ 119.814684][ T2026] __x64_sys_write+0x7b/0x90 [ 119.819307][ T2026] x64_sys_call+0x8ef/0x9a0 [ 119.823829][ T2026] do_syscall_64+0x4c/0xa0 [ 119.828299][ T2026] ? clear_bhb_loop+0x50/0xa0 [ 119.832994][ T2026] ? clear_bhb_loop+0x50/0xa0 [ 119.837776][ T2026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.843693][ T2026] RIP: 0033:0x7fa94594b68e [ 119.848126][ T2026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.867905][ T2026] RSP: 002b:00007fa9443e4da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.876348][ T2026] RAX: ffffffffffffffda RBX: 00007fa9443e56c0 RCX: 00007fa94594b68e [ 119.884485][ T2026] RDX: 0000000000040000 RSI: 00007fa93bfc5000 RDI: 0000000000000004 [ 119.892473][ T2026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.900462][ T2026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 119.908459][ T2026] R13: 00007fa9443e4ee0 R14: 00007fa9443e4ea0 R15: 00007fa93bfc5000 [ 119.916469][ T2026] [ 119.920522][ T2022] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.931058][ T2026] loop5: detected capacity change from 0 to 512 [ 119.954972][ T2026] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.964970][ T2026] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 119.980751][ T2028] loop2: detected capacity change from 0 to 512 [ 119.981866][ T2026] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 119.999951][ T2019] device macsec0 left promiscuous mode [ 120.020804][ T2028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.039566][ T2028] EXT4-fs (loop2): 1 truncate cleaned up [ 120.045312][ T2028] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 120.093668][ T286] attempt to access beyond end of device [ 120.093668][ T286] loop3: rw=2049, want=45104, limit=40427 [ 120.116175][ T2031] EXT4-fs (loop1): first meta block group too large: 2 (group descriptor block count 1) [ 120.178955][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.210689][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.292493][ T491] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 120.302361][ T491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.323839][ T491] usb 5-1: config 0 descriptor?? [ 120.688977][ T6] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 120.749192][ T2046] exfat: Deprecated parameter 'utf8' [ 120.754579][ T2046] exfat: Deprecated parameter 'namecase' [ 120.760419][ T2046] exfat: Deprecated parameter 'namecase' [ 120.766121][ T2046] exfat: Deprecated parameter 'namecase' [ 120.782316][ T2048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.473'. [ 120.834145][ T2046] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 120.870575][ T2048] JBD2: no valid journal superblock found [ 120.876388][ T2048] EXT4-fs (loop3): error loading journal [ 121.191898][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 121.338936][ T6] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 121.347259][ T6] usb 2-1: config 0 has no interface number 0 [ 121.353628][ T6] usb 2-1: config 0 interface 184 has no altsetting 0 [ 121.395139][ T2050] F2FS-fs (loop2): invalid crc value [ 121.406941][ T2050] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 121.442272][ T2050] F2FS-fs (loop2): Start checkpoint disabled! [ 121.448991][ T2050] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 121.538942][ T6] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.551278][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.565566][ T6] usb 2-1: Product: syz [ 121.574033][ T6] usb 2-1: Manufacturer: syz [ 121.582810][ T6] usb 2-1: SerialNumber: syz [ 121.595853][ T6] usb 2-1: config 0 descriptor?? [ 121.993120][ T6] smsc75xx v1.0.0 [ 122.059692][ T1676] attempt to access beyond end of device [ 122.059692][ T1676] loop2: rw=1, want=45224, limit=40427 [ 122.071195][ T1676] attempt to access beyond end of device [ 122.071195][ T1676] loop2: rw=2049, want=45232, limit=40427 [ 122.314361][ T30] audit: type=1400 audit(1778728066.912:991): avc: denied { create } for pid=2065 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.338647][ T2057] set_capacity_and_notify: 4 callbacks suppressed [ 122.338664][ T2057] loop5: detected capacity change from 0 to 131072 [ 122.360406][ T2070] FAULT_INJECTION: forcing a failure. [ 122.360406][ T2070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.381997][ T2070] CPU: 0 PID: 2070 Comm: syz.4.482 Not tainted syzkaller #0 [ 122.389333][ T2070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.399500][ T2070] Call Trace: [ 122.402799][ T2070] [ 122.405745][ T2070] __dump_stack+0x21/0x30 [ 122.410109][ T2070] dump_stack_lvl+0x110/0x170 [ 122.414827][ T2070] ? show_regs_print_info+0x20/0x20 [ 122.420065][ T2070] ? __stack_depot_save+0x34/0x480 [ 122.425220][ T2070] dump_stack+0x15/0x20 [ 122.429403][ T2070] should_fail+0x3c1/0x510 [ 122.433852][ T2070] should_fail_alloc_page+0x55/0x80 [ 122.439082][ T2070] prepare_alloc_pages+0x156/0x610 [ 122.444231][ T2070] ? __alloc_pages_bulk+0xad0/0xad0 [ 122.449463][ T2070] __alloc_pages+0x11d/0x460 [ 122.454078][ T2070] ? prep_new_page+0x110/0x110 [ 122.458872][ T2070] ? __kasan_check_read+0x11/0x20 [ 122.463922][ T2070] ? __vm_enough_memory+0x11b/0x2d0 [ 122.469146][ T2070] shmem_alloc_and_acct_page+0x4a2/0x8d0 [ 122.474808][ T2070] ? shmem_swapin_page+0x1610/0x1610 [ 122.480112][ T2070] ? cgroup_rstat_updated+0xf5/0x360 [ 122.485429][ T2070] ? xas_load+0x2ea/0x300 [ 122.489870][ T2070] ? pagecache_get_page+0xcf9/0xde0 [ 122.495086][ T2070] ? page_cache_prev_miss+0x290/0x290 [ 122.500559][ T2070] ? _raw_spin_lock_irq+0x95/0xf0 [ 122.505733][ T2070] ? _raw_spin_lock_irqsave+0x130/0x130 [ 122.511330][ T2070] shmem_getpage_gfp+0xfe5/0x2310 [ 122.516393][ T2070] ? __kasan_check_write+0x14/0x20 [ 122.521548][ T2070] shmem_write_begin+0xce/0x1b0 [ 122.526422][ T2070] generic_perform_write+0x2b7/0x690 [ 122.531810][ T2070] ? grab_cache_page_write_begin+0xb0/0xb0 [ 122.537647][ T2070] ? file_remove_privs+0x5c0/0x5c0 [ 122.542786][ T2070] ? rwsem_write_trylock+0x136/0x300 [ 122.548096][ T2070] ? clear_nonspinnable+0x60/0x60 [ 122.553141][ T2070] __generic_file_write_iter+0x268/0x480 [ 122.558792][ T2070] generic_file_write_iter+0xa9/0x1d0 [ 122.564176][ T2070] vfs_write+0x835/0xfd0 [ 122.568444][ T2070] ? file_end_write+0x1b0/0x1b0 [ 122.573318][ T2070] ? __fget_files+0x2c4/0x320 [ 122.578029][ T2070] ? __fdget_pos+0x1f7/0x380 [ 122.582640][ T2070] ? ksys_write+0x71/0x250 [ 122.587076][ T2070] ksys_write+0x149/0x250 [ 122.591542][ T2070] ? __ia32_sys_read+0x90/0x90 [ 122.596325][ T2070] ? debug_smp_processor_id+0x17/0x20 [ 122.601707][ T2070] __x64_sys_write+0x7b/0x90 [ 122.606316][ T2070] x64_sys_call+0x8ef/0x9a0 [ 122.610847][ T2070] do_syscall_64+0x4c/0xa0 [ 122.615278][ T2070] ? clear_bhb_loop+0x50/0xa0 [ 122.620085][ T2070] ? clear_bhb_loop+0x50/0xa0 [ 122.624775][ T2070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.630692][ T2070] RIP: 0033:0x7fc1f5cf368e [ 122.635189][ T2070] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.654805][ T2070] RSP: 002b:00007fc1f478cda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.663235][ T2070] RAX: ffffffffffffffda RBX: 00007fc1f478d6c0 RCX: 00007fc1f5cf368e [ 122.671220][ T2070] RDX: 0000000000040000 RSI: 00007fc1ec36d000 RDI: 0000000000000004 [ 122.679287][ T2070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.687272][ T2070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 122.695355][ T2070] R13: 00007fc1f478cee0 R14: 00007fc1f478cea0 R15: 00007fc1ec36d000 [ 122.703432][ T2070] [ 122.706552][ T491] usbhid 5-1:0.0: can't add hid device: -71 [ 122.712909][ T2057] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(1539) [ 122.724134][ T491] usbhid: probe of 5-1:0.0 failed with error -71 [ 122.731055][ T2057] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 122.744276][ T491] usb 5-1: USB disconnect, device number 14 [ 122.751206][ T2057] F2FS-fs (loop5): Test dummy encryption mode enabled [ 122.762513][ T2057] F2FS-fs (loop5): Test dummy encryption mode enabled [ 122.769502][ T2057] F2FS-fs (loop5): Unrecognized mount option "io_bits=00000000000000000159" or missing value [ 122.855105][ T2075] loop5: detected capacity change from 0 to 128 [ 122.890843][ T2079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.486'. [ 122.966221][ T2075] EXT4-fs (loop5): Test dummy encryption mode enabled [ 122.988454][ T2075] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 123.018955][ T2075] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.031579][ T2072] loop3: detected capacity change from 0 to 40427 [ 123.106083][ T2072] F2FS-fs (loop3): invalid crc value [ 123.242595][ T2072] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.351909][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 123.362793][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.388905][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 123.410054][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 123.427237][ T2072] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.430071][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 123.465705][ T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 123.475369][ T6] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 123.485800][ T6] usb 2-1: USB disconnect, device number 12 [ 123.514584][ T2094] loop5: detected capacity change from 0 to 2048 [ 123.558785][ T2094] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.571464][ T2094] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 123.586836][ T2094] EXT4-fs error (device loop5) in ext4_setattr:5676: error 28 [ 123.606477][ T2095] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 123.630255][ T2099] loop2: detected capacity change from 0 to 512 [ 123.638384][ T2101] loop5: detected capacity change from 0 to 512 [ 123.669644][ T2101] EXT4-fs (loop5): Ignoring removed bh option [ 123.675824][ T2101] EXT4-fs (loop5): error: could not find journal device path: error -2 [ 123.766990][ T286] attempt to access beyond end of device [ 123.766990][ T286] loop3: rw=2049, want=45104, limit=40427 [ 123.993658][ T2105] loop2: detected capacity change from 0 to 40427 [ 124.057124][ T6] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 124.064774][ T2105] F2FS-fs (loop2): invalid crc value [ 124.178295][ T2105] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 124.382564][ T767] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 124.397783][ T2105] F2FS-fs (loop2): Start checkpoint disabled! [ 124.404736][ T2105] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 124.616382][ T1676] attempt to access beyond end of device [ 124.616382][ T1676] loop2: rw=1, want=45224, limit=40427 [ 124.627957][ T1676] attempt to access beyond end of device [ 124.627957][ T1676] loop2: rw=2049, want=45232, limit=40427 [ 124.629450][ T767] usb 5-1: Using ep0 maxpacket: 8 [ 124.712653][ T2109] loop5: detected capacity change from 0 to 131072 [ 124.740479][ T2118] loop2: detected capacity change from 0 to 512 [ 124.750618][ T2109] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(1539) [ 124.758769][ T2109] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 124.759323][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.769575][ T2109] F2FS-fs (loop5): Test dummy encryption mode enabled [ 124.778505][ T767] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.813697][ T2109] F2FS-fs (loop5): Test dummy encryption mode enabled [ 124.820867][ T2109] F2FS-fs (loop5): Unrecognized mount option "io_bits=00000000000000000159" or missing value [ 124.828138][ T767] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 124.841647][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.857873][ T6] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 124.867006][ T767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.875896][ T767] usb 5-1: config 0 descriptor?? [ 124.882198][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.898931][ T2118] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.924685][ T6] usb 2-1: config 0 descriptor?? [ 124.939428][ T2118] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 124.966863][ T2118] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 125.032438][ T2128] loop3: detected capacity change from 0 to 512 [ 125.160962][ T2134] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.173337][ T2134] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 125.188740][ T2134] EXT4-fs error (device loop2) in ext4_setattr:5676: error 28 [ 125.207422][ T2107] UDC core: couldn't find an available UDC or it's busy: -16 [ 125.215217][ T2107] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 125.230979][ T767] usb 5-1: USB disconnect, device number 15 [ 125.284617][ T2144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.504'. [ 125.340461][ T2103] exfat: Deprecated parameter 'utf8' [ 125.345828][ T2103] exfat: Deprecated parameter 'namecase' [ 125.351535][ T2103] exfat: Deprecated parameter 'namecase' [ 125.357212][ T2103] exfat: Deprecated parameter 'namecase' [ 125.363002][ T2142] EXT4-fs (loop2): first meta block group too large: 2 (group descriptor block count 1) [ 125.363699][ T336] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 125.383605][ T2103] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 125.618913][ T336] usb 6-1: Using ep0 maxpacket: 16 [ 125.738943][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 125.744920][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 125.752414][ T6] usb 2-1: USB disconnect, device number 13 [ 125.759763][ T336] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 125.778397][ T336] usb 6-1: config 0 has no interface number 0 [ 125.784627][ T336] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 125.794860][ T336] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 125.858909][ T766] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 125.867264][ T2148] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.877450][ T2148] EXT4-fs (loop4): inodes count not valid: 32 vs 8192 [ 125.970343][ T2152] EXT4-fs (loop1): Unrecognized mount option "uid=00000000000000000000" or missing value [ 125.988988][ T336] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 126.002911][ T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.011714][ T336] usb 6-1: Product: syz [ 126.015909][ T336] usb 6-1: Manufacturer: syz [ 126.020748][ T336] usb 6-1: SerialNumber: syz [ 126.032291][ T336] usb 6-1: config 0 descriptor?? [ 126.048957][ T2127] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 126.057384][ T2127] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 126.184029][ T2150] F2FS-fs (loop4): invalid crc value [ 126.192005][ T766] usb 3-1: Using ep0 maxpacket: 32 [ 126.207927][ T2150] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 126.232607][ T2150] F2FS-fs (loop4): Start checkpoint disabled! [ 126.239181][ T2150] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 126.247396][ T2155] EXT4-fs (loop3): Unrecognized mount option "uid=00000000000000000000" or missing value [ 126.369145][ T766] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 126.404014][ T766] usb 3-1: config 0 has no interface number 0 [ 126.635472][ T766] usb 3-1: config 0 interface 184 has no altsetting 0 [ 126.677904][ T2124] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 126.685510][ T2124] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 126.888980][ T766] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 126.918258][ T766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.974588][ T1676] attempt to access beyond end of device [ 126.974588][ T1676] loop4: rw=1, want=45224, limit=40427 [ 127.008583][ T766] usb 3-1: Product: syz [ 127.017196][ T1676] attempt to access beyond end of device [ 127.017196][ T1676] loop4: rw=2049, want=45232, limit=40427 [ 127.044371][ T766] usb 3-1: Manufacturer: syz [ 127.269303][ T766] usb 3-1: SerialNumber: syz [ 127.283135][ T766] usb 3-1: config 0 descriptor?? [ 127.329307][ T766] smsc75xx v1.0.0 [ 127.722392][ T2175] set_capacity_and_notify: 10 callbacks suppressed [ 127.722432][ T2175] loop3: detected capacity change from 0 to 2048 [ 127.865656][ T766] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 127.877492][ T2175] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.888727][ T766] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 127.910673][ T2175] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 127.925281][ T766] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 127.935789][ T2175] EXT4-fs error (device loop3) in ext4_setattr:5676: error 28 [ 127.943710][ T766] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 128.019354][ T30] audit: type=1400 audit(1778728072.622:992): avc: denied { read } for pid=2179 comm="syz.3.514" name="file2" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.047898][ T2182] loop3: detected capacity change from 0 to 512 [ 128.056389][ T2182] EXT4-fs (loop3): Unrecognized mount option "uid=00000000000000000000" or missing value [ 128.095625][ T2161] loop1: detected capacity change from 0 to 131072 [ 128.138933][ T336] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 128.149134][ T336] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 128.159510][ T336] asix: probe of 6-1:0.34 failed with error -71 [ 128.167586][ T336] usb 6-1: USB disconnect, device number 16 [ 128.176253][ T2161] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(1539) [ 128.184251][ T2161] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.193348][ T2161] F2FS-fs (loop1): Test dummy encryption mode enabled [ 128.200441][ T2161] F2FS-fs (loop1): Test dummy encryption mode enabled [ 128.207470][ T2161] F2FS-fs (loop1): Unrecognized mount option "io_bits=00000000000000000159" or missing value [ 128.321116][ T2187] loop3: detected capacity change from 0 to 256 [ 128.808868][ T336] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 128.813274][ T2193] netlink: 24 bytes leftover after parsing attributes in process `syz.5.518'. [ 128.883336][ T766] usb 3-1: USB disconnect, device number 14 [ 128.916469][ T2195] loop2: detected capacity change from 0 to 512 [ 129.147438][ T2195] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.519: inode has both inline data and extents flags [ 129.249137][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.284118][ T2195] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.519: couldn't read orphan inode 15 (err -117) [ 129.296127][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.307523][ T336] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 129.316834][ T2195] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000009,resgid=0x0000000000000000,auto_da_alloc,nobarrier,noblock_validity,,errors=continue. Quota mode: none. [ 129.316844][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.344399][ T336] usb 5-1: config 0 descriptor?? [ 129.452964][ T2195] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.519: Directory hole found for htree leaf block 0 [ 129.493411][ T2200] loop3: detected capacity change from 0 to 40427 [ 129.504626][ T2200] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 129.513400][ T2200] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 129.529866][ T2200] F2FS-fs (loop3): invalid crc value [ 129.536871][ T2200] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.550573][ T2209] loop1: detected capacity change from 0 to 40427 [ 129.571259][ T2209] F2FS-fs (loop1): invalid crc value [ 129.578101][ T2209] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.652731][ T2190] loop4: detected capacity change from 0 to 256 [ 129.661066][ T2209] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.708951][ T2222] loop5: detected capacity change from 0 to 512 [ 129.715767][ T2200] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 129.723417][ T2200] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.754365][ T2190] exfat: Deprecated parameter 'utf8' [ 129.759784][ T2190] exfat: Deprecated parameter 'namecase' [ 129.765550][ T2190] exfat: Deprecated parameter 'namecase' [ 129.771270][ T2190] exfat: Deprecated parameter 'namecase' [ 129.779538][ T2190] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 129.791831][ T2222] EXT4-fs (loop5): Unrecognized mount option "uid=00000000000000000000" or missing value [ 129.828524][ T2223] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 129.948915][ T336] usbhid 5-1:0.0: can't add hid device: -71 [ 129.955494][ T336] usbhid: probe of 5-1:0.0 failed with error -71 [ 129.994553][ T2229] loop5: detected capacity change from 0 to 256 [ 130.010699][ T336] usb 5-1: USB disconnect, device number 16 [ 130.070965][ T30] audit: type=1400 audit(1778728074.672:993): avc: denied { mounton } for pid=2199 comm="syz.3.520" path="/99/file0/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 130.163176][ T2202] overlayfs: failed to resolve './file0': -2 [ 130.244123][ T30] audit: type=1400 audit(1778728074.722:994): avc: denied { remove_name } for pid=2199 comm="syz.3.520" name="#2" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 130.266114][ T30] audit: type=1400 audit(1778728074.722:995): avc: denied { rename } for pid=2199 comm="syz.3.520" name="#2" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.301211][ T30] audit: type=1400 audit(1778728074.732:996): avc: denied { unlink } for pid=2199 comm="syz.3.520" name="#2" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.324858][ T30] audit: type=1400 audit(1778728074.752:997): avc: denied { unlink } for pid=2199 comm="syz.3.520" name="#3" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.370067][ T285] attempt to access beyond end of device [ 130.370067][ T285] loop1: rw=2049, want=45104, limit=40427 [ 130.819971][ T30] audit: type=1400 audit(1778728075.422:998): avc: denied { bind } for pid=2236 comm="syz.5.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.842432][ T2237] EXT4-fs (loop4): first meta block group too large: 2 (group descriptor block count 1) [ 130.949676][ T2240] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.962522][ T2244] EXT4-fs (loop1): Unrecognized mount option "uid=00000000000000000000" or missing value [ 130.996949][ T2240] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 131.082475][ T2240] EXT4-fs error (device loop5) in ext4_setattr:5676: error 28 [ 131.119969][ T6] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 131.153574][ T2246] F2FS-fs (loop3): invalid crc value [ 131.483584][ T2246] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 131.510845][ T2259] xt_hashlimit: size too large, truncated to 1048576 [ 131.539860][ T2257] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 131.565545][ T2246] F2FS-fs (loop3): Start checkpoint disabled! [ 131.574669][ T2246] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 131.582684][ T2257] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 131.590770][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 131.598536][ T2257] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.635635][ T2257] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 131.669001][ T2257] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 131.679113][ T2257] EXT4-fs error (device loop2): __ext4_iget:4950: inode #16: block 127754: comm syz.2.534: invalid block [ 131.699125][ T2257] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.534: couldn't read orphan inode 16 (err -117) [ 131.711173][ T6] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 131.725929][ T6] usb 5-1: config 0 has no interface number 0 [ 131.738874][ T6] usb 5-1: config 0 interface 184 has no altsetting 0 [ 131.745931][ T2257] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 131.918944][ T6] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 131.956458][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.969487][ T6] usb 5-1: Product: syz [ 131.973696][ T6] usb 5-1: Manufacturer: syz [ 132.000880][ T2278] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.534: iget: bad extended attribute block 2147483667 [ 132.009806][ T6] usb 5-1: SerialNumber: syz [ 132.033545][ T6] usb 5-1: config 0 descriptor?? [ 132.071199][ T6] smsc75xx v1.0.0 [ 132.191981][ T10] attempt to access beyond end of device [ 132.191981][ T10] loop3: rw=1, want=45224, limit=40427 [ 132.211560][ T10] attempt to access beyond end of device [ 132.211560][ T10] loop3: rw=2049, want=45232, limit=40427 [ 132.355972][ T2291] F2FS-fs (loop1): invalid crc value [ 132.361571][ T2293] EXT4-fs (loop2): Unrecognized mount option "uid=00000000000000000000" or missing value [ 132.389930][ T2291] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.436330][ T2291] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.508910][ T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 132.587483][ T2302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.540'. [ 132.796498][ T2302] set_capacity_and_notify: 9 callbacks suppressed [ 132.796546][ T2302] loop3: detected capacity change from 0 to 1024 [ 133.145958][ T2305] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 133.164338][ T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 133.202365][ T2302] JBD2: no valid journal superblock found [ 133.208343][ T2302] EXT4-fs (loop3): error loading journal [ 133.216121][ T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 133.235670][ T6] smsc75xx: probe of 5-1:0.184 failed with error -32 [ 133.309641][ T285] attempt to access beyond end of device [ 133.309641][ T285] loop1: rw=2049, want=45104, limit=40427 [ 133.593354][ T2308] loop2: detected capacity change from 0 to 2048 [ 133.643924][ T2308] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.656753][ T2308] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 133.727680][ T2308] EXT4-fs error (device loop2) in ext4_setattr:5676: error 28 [ 133.735439][ T6] usb 5-1: USB disconnect, device number 17 [ 133.910135][ T2321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.545'. [ 133.974361][ T2321] loop4: detected capacity change from 0 to 1024 [ 134.035827][ T2319] loop2: detected capacity change from 0 to 512 [ 134.046535][ T2321] JBD2: no valid journal superblock found [ 134.052411][ T2321] EXT4-fs (loop4): error loading journal [ 134.241925][ T2272] loop5: detected capacity change from 0 to 131072 [ 134.288996][ T2319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.301289][ T2272] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(1539) [ 134.318951][ T2319] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 134.338112][ T2272] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 134.341224][ T2319] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 134.348175][ T2272] F2FS-fs (loop5): Test dummy encryption mode enabled [ 134.365415][ T2272] F2FS-fs (loop5): Test dummy encryption mode enabled [ 134.399037][ T2272] F2FS-fs (loop5): Unrecognized mount option "io_bits=00000000000000000159" or missing value [ 134.443683][ T2317] loop1: detected capacity change from 0 to 40427 [ 134.492174][ T2317] F2FS-fs (loop1): invalid crc value [ 134.515021][ T2317] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.515844][ T2334] tipc: Started in network mode [ 134.546571][ T2334] tipc: Node identity ac14140f, cluster identity 4711 [ 134.556713][ T2334] tipc: New replicast peer: 255.255.255.255 [ 134.576108][ T2317] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.577586][ T2334] tipc: Enabled bearer , priority 10 [ 134.734988][ T2340] input: syz1 as /devices/virtual/input/input5 [ 134.744348][ T2340] loop4: detected capacity change from 0 to 256 [ 134.761805][ T2338] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 134.799542][ T2340] exfat: Deprecated parameter 'utf8' [ 134.836920][ T2341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 134.848408][ T2340] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 134.871531][ T30] audit: type=1400 audit(1778728079.472:999): avc: denied { read append open } for pid=2339 comm="syz.4.551" path="/98/bus/cpuset.effective_cpus" dev="loop4" ino=1048673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.941625][ T285] attempt to access beyond end of device [ 134.941625][ T285] loop1: rw=2049, want=45104, limit=40427 [ 134.958299][ T30] audit: type=1400 audit(1778728079.472:1000): avc: denied { write } for pid=2339 comm="syz.4.551" name="cpuset.effective_cpus" dev="loop4" ino=1048673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.969105][ T2343] loop5: detected capacity change from 0 to 512 [ 135.002776][ T2345] loop3: detected capacity change from 0 to 512 [ 135.059424][ T2343] EXT4-fs (loop5): Unrecognized mount option "uid=00000000000000000000" or missing value [ 135.135154][ T2349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.552'. [ 135.196165][ T2349] loop4: detected capacity change from 0 to 1024 [ 135.203601][ T2345] EXT4-fs (loop3): first meta block group too large: 2 (group descriptor block count 1) [ 135.232879][ T2349] JBD2: no valid journal superblock found [ 135.238699][ T2349] EXT4-fs (loop4): error loading journal [ 135.956205][ T512] tipc: Node number set to 2886997007 [ 136.106286][ T6] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 136.142662][ T2377] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.563: inode has both inline data and extents flags [ 136.149008][ T1022] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 136.163506][ T2377] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.563: couldn't read orphan inode 15 (err -117) [ 136.175546][ T2377] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.348849][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 136.388874][ T491] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 136.398874][ T1022] usb 3-1: Using ep0 maxpacket: 16 [ 136.468915][ T6] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 136.487247][ T6] usb 4-1: config 0 has no interface number 0 [ 136.493634][ T6] usb 4-1: config 0 interface 184 has no altsetting 0 [ 136.523667][ T1022] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 136.534835][ T1022] usb 3-1: config 0 has no interface number 0 [ 136.554236][ T1022] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 136.564991][ T1022] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 136.599762][ T2385] EXT4-fs (loop4): Unrecognized mount option "uid=00000000000000000000" or missing value [ 136.688932][ T6] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 136.698025][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.706267][ T6] usb 4-1: Product: syz [ 136.710584][ T6] usb 4-1: Manufacturer: syz [ 136.716540][ T6] usb 4-1: SerialNumber: syz [ 136.727338][ T6] usb 4-1: config 0 descriptor?? [ 136.772920][ T1022] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 136.782738][ T491] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 136.791856][ T1022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.799902][ T491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.801747][ T2383] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(1539) [ 136.809159][ T1022] usb 3-1: Product: syz [ 136.820410][ T491] usb 2-1: config 0 descriptor?? [ 136.825601][ T1022] usb 3-1: Manufacturer: syz [ 136.827963][ T6] smsc75xx v1.0.0 [ 136.830551][ T1022] usb 3-1: SerialNumber: syz [ 136.838959][ T2383] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 136.847377][ T2383] F2FS-fs (loop5): Test dummy encryption mode enabled [ 136.854814][ T1022] usb 3-1: config 0 descriptor?? [ 136.860782][ T2383] F2FS-fs (loop5): Test dummy encryption mode enabled [ 136.867796][ T2383] F2FS-fs (loop5): Unrecognized mount option "io_bits=00000000000000000159" or missing value [ 136.930052][ T2359] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 136.937349][ T2359] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 137.188606][ T2357] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 137.197210][ T2357] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 137.371534][ T2398] EXT4-fs (loop5): Unrecognized mount option "uid=00000000000000000000" or missing value [ 137.408943][ T6] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 137.419159][ T491] usb 2-1: Cannot set MAC address [ 137.420438][ T6] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 137.426005][ T491] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 137.435683][ T6] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 137.460043][ T6] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 137.517899][ T2407] EXT4-fs (loop4): Unrecognized mount option "uid=00000000000000000000" or missing value [ 137.531120][ T491] usb 2-1: USB disconnect, device number 14 [ 137.949309][ T2412] set_capacity_and_notify: 8 callbacks suppressed [ 137.949337][ T2412] loop4: detected capacity change from 0 to 256 [ 138.188128][ T30] audit: type=1400 audit(1778728082.782:1001): avc: denied { setattr } for pid=2413 comm="syz.5.573" name="RFCOMM" dev="sockfs" ino=23445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.243506][ T2419] loop5: detected capacity change from 0 to 512 [ 138.253576][ T2419] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 138.263983][ T2419] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 138.273854][ T2419] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 138.446945][ T2423] netlink: 16 bytes leftover after parsing attributes in process `syz.5.576'. [ 138.484816][ T2423] loop5: detected capacity change from 0 to 1024 [ 138.610432][ T2417] loop1: detected capacity change from 0 to 40427 [ 138.624497][ T2425] loop4: detected capacity change from 0 to 512 [ 138.640402][ T491] usb 4-1: USB disconnect, device number 15 [ 138.663374][ T2423] JBD2: no valid journal superblock found [ 138.669255][ T2423] EXT4-fs (loop5): error loading journal [ 138.758930][ T1022] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 138.771045][ T2417] F2FS-fs (loop1): invalid crc value [ 138.777142][ T1022] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 138.787870][ T2425] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.797814][ T2417] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.808073][ T1022] asix: probe of 3-1:0.34 failed with error -71 [ 138.816331][ T2425] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 138.850039][ T1022] usb 3-1: USB disconnect, device number 15 [ 138.857696][ T2425] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 138.904331][ T2417] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.099857][ T2443] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 139.254514][ T285] attempt to access beyond end of device [ 139.254514][ T285] loop1: rw=2049, want=45104, limit=40427 [ 139.323415][ T2450] loop2: detected capacity change from 0 to 512 [ 139.403958][ T2450] EXT4-fs (loop2): Unrecognized mount option "uid=00000000000000000000" or missing value [ 139.482200][ T2441] loop4: detected capacity change from 0 to 40427 [ 139.504962][ T2441] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 139.515070][ T2441] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.525359][ T2441] F2FS-fs (loop4): invalid crc value [ 139.532313][ T2441] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.645395][ T2459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.583'. [ 139.754459][ T2460] loop2: detected capacity change from 0 to 256 [ 139.817116][ T2459] loop1: detected capacity change from 0 to 1024 [ 140.472727][ T2459] JBD2: no valid journal superblock found [ 140.478611][ T2459] EXT4-fs (loop1): error loading journal [ 140.536027][ T6] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 140.639938][ T2441] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 140.647464][ T2441] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.724887][ T30] audit: type=1400 audit(1778728085.322:1002): avc: denied { bind } for pid=2463 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.792275][ T30] audit: type=1400 audit(1778728085.352:1003): avc: denied { write } for pid=2463 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.833843][ T2466] capability: warning: `syz.3.587' uses 32-bit capabilities (legacy support in use) [ 141.449403][ T2442] overlayfs: failed to resolve './file0': -2 [ 141.463587][ T2473] loop1: detected capacity change from 0 to 512 [ 141.541946][ T2473] EXT4-fs (loop1): first meta block group too large: 2 (group descriptor block count 1) [ 141.825399][ T6] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 141.834653][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.843813][ T6] usb 6-1: config 0 descriptor?? [ 141.952302][ T2479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.592'. [ 142.062893][ T2479] JBD2: no valid journal superblock found [ 142.068744][ T2479] EXT4-fs (loop3): error loading journal [ 142.168944][ T741] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.448877][ T741] usb 2-1: Using ep0 maxpacket: 32 [ 142.503115][ T2481] F2FS-fs (loop2): invalid crc value [ 142.510329][ T2481] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.545421][ T2481] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.578990][ T6] usb 6-1: Cannot set MAC address [ 142.584313][ T6] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 142.599358][ T6] usb 6-1: USB disconnect, device number 17 [ 142.618879][ T2461] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 142.631357][ T741] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.639791][ T741] usb 2-1: config 0 has no interface number 0 [ 142.645944][ T741] usb 2-1: config 0 interface 184 has no altsetting 0 [ 142.756714][ T2491] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.888900][ T2461] usb 5-1: device descriptor read/64, error -71 [ 142.889117][ T741] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.904295][ T741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.912333][ T741] usb 2-1: Product: syz [ 142.916551][ T741] usb 2-1: Manufacturer: syz [ 142.921204][ T741] usb 2-1: SerialNumber: syz [ 142.926467][ T741] usb 2-1: config 0 descriptor?? [ 142.969591][ T741] smsc75xx v1.0.0 [ 142.991120][ T288] attempt to access beyond end of device [ 142.991120][ T288] loop2: rw=2049, want=45104, limit=40427 [ 143.080895][ T2493] set_capacity_and_notify: 2 callbacks suppressed [ 143.080913][ T2493] loop5: detected capacity change from 0 to 512 [ 143.168238][ T2493] EXT4-fs (loop5): Unrecognized mount option "uid=00000000000000000000" or missing value [ 143.288887][ T2461] usb 5-1: device descriptor read/64, error -71 [ 143.366236][ T2501] loop5: detected capacity change from 0 to 256 [ 143.416249][ T30] audit: type=1326 audit(1778728087.982:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2500 comm="syz.3.598" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b24f5e59 code=0x7ffc0000 [ 143.443126][ T30] audit: type=1326 audit(1778728087.982:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2500 comm="syz.3.598" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b24f5e59 code=0x7ffc0000 [ 143.610837][ T30] audit: type=1326 audit(1778728087.982:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2500 comm="syz.3.598" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b24f5e59 code=0x7ffc0000 [ 143.636120][ T741] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 143.646101][ T30] audit: type=1326 audit(1778728087.982:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2500 comm="syz.3.598" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f48b24f5e59 code=0x7ffc0000 [ 143.651517][ T741] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 143.672605][ T30] audit: type=1326 audit(1778728087.982:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2500 comm="syz.3.598" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b24f5e59 code=0x7ffc0000 [ 143.706630][ T30] audit: type=1326 audit(1778728087.982:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2500 comm="syz.3.598" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b24f5e59 code=0x7ffc0000 [ 143.722347][ T741] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 143.731476][ T30] audit: type=1326 audit(1778728087.992:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2500 comm="syz.3.598" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b24f5e59 code=0x7ffc0000 [ 143.742731][ T741] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 143.766874][ T30] audit: type=1326 audit(1778728087.992:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2500 comm="syz.3.598" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b24f5e59 code=0x7ffc0000 [ 143.778980][ T2461] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 143.806302][ T6] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 143.842505][ T2510] loop3: detected capacity change from 0 to 512 [ 143.872498][ T2510] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.882517][ T2510] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 143.892170][ T2510] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 144.058916][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 144.139515][ T2524] netlink: 16 bytes leftover after parsing attributes in process `syz.5.604'. [ 144.180474][ T2524] loop5: detected capacity change from 0 to 1024 [ 144.244739][ T2524] JBD2: no valid journal superblock found [ 144.250642][ T2524] EXT4-fs (loop5): error loading journal [ 144.462874][ T2461] usb 5-1: device descriptor read/64, error -71 [ 144.477557][ T741] usb 2-1: USB disconnect, device number 15 [ 144.494561][ T2522] loop3: detected capacity change from 0 to 40427 [ 144.504236][ T2522] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 144.512115][ T2522] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 144.526207][ T2522] F2FS-fs (loop3): invalid crc value [ 144.547373][ T2522] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.558907][ T6] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 144.567038][ T6] usb 3-1: config 0 has no interface number 0 [ 144.583854][ T6] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 144.593976][ T6] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 144.628754][ T2522] F2FS-fs (loop3): recover fsync data on readonly fs [ 144.635831][ T2522] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 144.643342][ T2522] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.697695][ T2522] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 144.708545][ T2522] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 144.717442][ T2522] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 144.725983][ T2522] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 144.734323][ T2522] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 144.746945][ T2530] loop1: detected capacity change from 0 to 40427 [ 144.778948][ T6] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 144.788091][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.796388][ T6] usb 3-1: Product: syz [ 144.801240][ T6] usb 3-1: Manufacturer: syz [ 144.805986][ T6] usb 3-1: SerialNumber: syz [ 144.811374][ T2530] F2FS-fs (loop1): invalid crc value [ 144.818669][ T6] usb 3-1: config 0 descriptor?? [ 144.824890][ T2530] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.849013][ T2495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 144.856024][ T2495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 144.868903][ T2461] usb 5-1: device descriptor read/64, error -71 [ 144.924923][ T2530] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.008900][ T2461] usb usb5-port1: attempt power cycle [ 145.044971][ T2530] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.077395][ T2535] loop5: detected capacity change from 0 to 40427 [ 145.099958][ T285] attempt to access beyond end of device [ 145.099958][ T285] loop1: rw=2049, want=45104, limit=40427 [ 145.111043][ T2495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.118159][ T2495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.128524][ T2535] F2FS-fs (loop5): invalid crc value [ 145.144168][ T2535] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 145.173809][ T2535] F2FS-fs (loop5): Start checkpoint disabled! [ 145.180612][ T2535] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 145.385800][ T2546] loop4: detected capacity change from 0 to 4096 [ 145.392840][ T10] attempt to access beyond end of device [ 145.392840][ T10] loop5: rw=1, want=45224, limit=40427 [ 145.404947][ T10] attempt to access beyond end of device [ 145.404947][ T10] loop5: rw=2049, want=45232, limit=40427 [ 145.428942][ T2461] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 145.436602][ T2546] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 145.446064][ T2546] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 145.446064][ T2546] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 145.446064][ T2546] [ 145.464883][ T2546] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 145.489630][ T2546] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouser_xattr,nojournal_checksum,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 145.528860][ T1859] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 145.539821][ T2546] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 145.602287][ T2554] loop4: detected capacity change from 0 to 512 [ 145.649475][ T2554] EXT4-fs (loop4): Unrecognized mount option "uid=00000000000000000000" or missing value [ 145.822843][ T2556] loop4: detected capacity change from 0 to 256 [ 145.848893][ T741] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 145.998001][ T2461] usb 5-1: device not accepting address 20, error -71 [ 146.004883][ T1859] usb 2-1: Using ep0 maxpacket: 32 [ 146.010095][ T293] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 146.138972][ T1859] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 146.147353][ T1859] usb 2-1: config 0 has no interface number 0 [ 146.153522][ T1859] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 146.278975][ T741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.290011][ T741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.299920][ T741] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 146.309483][ T741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.318406][ T741] usb 4-1: config 0 descriptor?? [ 146.319305][ T1859] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 146.332532][ T1859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.340682][ T1859] usb 2-1: Product: syz [ 146.344901][ T1859] usb 2-1: Manufacturer: syz [ 146.349599][ T1859] usb 2-1: SerialNumber: syz [ 146.354803][ T1859] usb 2-1: config 0 descriptor?? [ 146.378975][ T293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.378990][ T2543] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 146.396912][ T293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.407247][ T293] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 146.416363][ T293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.425041][ T293] usb 6-1: config 0 descriptor?? [ 146.508922][ T6] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 146.519393][ T6] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 146.530176][ T6] asix: probe of 3-1:0.34 failed with error -71 [ 146.536967][ T2560] EXT4-fs (loop4): first meta block group too large: 2 (group descriptor block count 1) [ 146.550354][ T6] usb 3-1: USB disconnect, device number 16 [ 146.608002][ T2543] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 147.414748][ T2563] UDC core: couldn't find an available UDC or it's busy: -16 [ 147.429518][ T2563] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.499393][ T2562] exfat: Deprecated parameter 'utf8' [ 147.504961][ T2562] exfat: Deprecated parameter 'namecase' [ 147.510831][ T2562] exfat: Deprecated parameter 'namecase' [ 147.516699][ T2562] exfat: Deprecated parameter 'namecase' [ 147.557950][ T2562] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 147.777238][ T1859] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 147.787631][ T2565] exfat: Deprecated parameter 'utf8' [ 147.792997][ T2565] exfat: Deprecated parameter 'namecase' [ 147.798677][ T2565] exfat: Deprecated parameter 'namecase' [ 147.804391][ T2565] exfat: Deprecated parameter 'namecase' [ 147.810465][ T1859] asix: probe of 2-1:0.188 failed with error -71 [ 147.817736][ T1859] usb 2-1: USB disconnect, device number 16 [ 147.826110][ T2565] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 147.878976][ T2461] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 147.969020][ T2461] usb 5-1: Using ep0 maxpacket: 32 [ 148.052265][ T2571] EXT4-fs (loop2): Ignoring removed nobh option [ 148.058803][ T2571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.070489][ T2571] EXT4-fs (loop2): 1 truncate cleaned up [ 148.076206][ T2571] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,nobh,nodiscard,,errors=continue. Quota mode: none. [ 148.099021][ T2461] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 148.107762][ T2461] usb 5-1: config 0 has no interface number 0 [ 148.114300][ T2461] usb 5-1: config 0 interface 184 has no altsetting 0 [ 148.298937][ T2461] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 148.310130][ T2461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.318204][ T2461] usb 5-1: Product: syz [ 148.322913][ T2461] usb 5-1: Manufacturer: syz [ 148.327572][ T2461] usb 5-1: SerialNumber: syz [ 148.337359][ T2461] usb 5-1: config 0 descriptor?? [ 148.381011][ T2461] smsc75xx v1.0.0 [ 148.441055][ T2581] set_capacity_and_notify: 4 callbacks suppressed [ 148.441069][ T2581] loop1: detected capacity change from 0 to 40427 [ 148.458779][ T2581] F2FS-fs (loop1): invalid crc value [ 148.466733][ T2581] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.515580][ T2581] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.596330][ T2581] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 148.641577][ T285] attempt to access beyond end of device [ 148.641577][ T285] loop1: rw=2049, want=45104, limit=40427 [ 148.773292][ T2588] FAULT_INJECTION: forcing a failure. [ 148.773292][ T2588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.786526][ T2588] CPU: 1 PID: 2588 Comm: syz.1.620 Not tainted syzkaller #0 [ 148.793824][ T2588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.803882][ T2588] Call Trace: [ 148.807186][ T2588] [ 148.810134][ T2588] __dump_stack+0x21/0x30 [ 148.814558][ T2588] dump_stack_lvl+0x110/0x170 [ 148.819213][ T2461] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 148.819283][ T2588] ? show_regs_print_info+0x20/0x20 [ 148.830946][ T2461] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 148.835245][ T2588] ? __kasan_check_write+0x14/0x20 [ 148.835274][ T2588] ? _raw_spin_lock_irq+0x95/0xf0 [ 148.845341][ T2461] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 148.850051][ T2588] dump_stack+0x15/0x20 [ 148.850082][ T2588] should_fail+0x3c1/0x510 [ 148.850104][ T2588] should_fail_usercopy+0x1a/0x20 [ 148.850123][ T2588] copy_page_from_iter_atomic+0x3ff/0x1380 [ 148.850149][ T2588] ? pipe_zero+0x370/0x370 [ 148.858686][ T2461] smsc75xx: probe of 5-1:0.184 failed with error -32 [ 148.865337][ T2588] generic_perform_write+0x310/0x690 [ 148.865371][ T2588] ? grab_cache_page_write_begin+0xb0/0xb0 [ 148.865392][ T2588] ? file_remove_privs+0x5c0/0x5c0 [ 148.912055][ T2588] ? rwsem_write_trylock+0x136/0x300 [ 148.917374][ T2588] ? clear_nonspinnable+0x60/0x60 [ 148.922892][ T2588] __generic_file_write_iter+0x268/0x480 [ 148.928545][ T2588] generic_file_write_iter+0xa9/0x1d0 [ 148.934036][ T2588] vfs_write+0x835/0xfd0 [ 148.938287][ T2588] ? file_end_write+0x1b0/0x1b0 [ 148.943148][ T2588] ? __fget_files+0x2c4/0x320 [ 148.947851][ T2588] ? __fdget_pos+0x1f7/0x380 [ 148.952439][ T2588] ? ksys_write+0x71/0x250 [ 148.956855][ T2588] ksys_write+0x149/0x250 [ 148.961184][ T2588] ? __ia32_sys_read+0x90/0x90 [ 148.965952][ T2588] ? debug_smp_processor_id+0x17/0x20 [ 148.971339][ T2588] __x64_sys_write+0x7b/0x90 [ 148.976003][ T2588] x64_sys_call+0x8ef/0x9a0 [ 148.980514][ T2588] do_syscall_64+0x4c/0xa0 [ 148.984969][ T2588] ? clear_bhb_loop+0x50/0xa0 [ 148.989646][ T2588] ? clear_bhb_loop+0x50/0xa0 [ 148.994327][ T2588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.000238][ T2588] RIP: 0033:0x7f4af265d68e [ 149.004666][ T2588] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.024276][ T2588] RSP: 002b:00007f4af10f6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.032777][ T2588] RAX: ffffffffffffffda RBX: 00007f4af10f76c0 RCX: 00007f4af265d68e [ 149.040758][ T2588] RDX: 0000000000040000 RSI: 00007f4ae8cd7000 RDI: 0000000000000004 [ 149.048872][ T2588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.056892][ T2588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 149.064867][ T2588] R13: 00007f4af10f6ee0 R14: 00007f4af10f6ea0 R15: 00007f4ae8cd7000 [ 149.072860][ T2588] [ 149.122764][ T2588] loop1: detected capacity change from 0 to 512 [ 149.134102][ T2588] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.145227][ T2588] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 149.155008][ T2588] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 149.191716][ T2591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.622'. [ 149.199409][ T293] usbhid 6-1:0.0: can't add hid device: -71 [ 149.272314][ T741] usbhid 4-1:0.0: can't add hid device: -71 [ 149.273412][ T293] usbhid: probe of 6-1:0.0 failed with error -71 [ 149.279008][ T741] usbhid: probe of 4-1:0.0 failed with error -71 [ 149.309766][ T741] usb 4-1: USB disconnect, device number 16 [ 149.334850][ T293] usb 6-1: USB disconnect, device number 18 [ 149.351329][ T2601] loop1: detected capacity change from 0 to 512 [ 149.371497][ T2601] EXT4-fs (loop1): Unrecognized mount option "uid=00000000000000000000" or missing value [ 149.695651][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 149.695677][ T30] audit: type=1400 audit(1778728094.292:1134): avc: denied { create } for pid=2606 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 149.714545][ T2607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 149.749422][ T30] audit: type=1400 audit(1778728094.352:1135): avc: denied { create } for pid=2606 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 149.796423][ T30] audit: type=1400 audit(1778728094.392:1136): avc: denied { write } for pid=2610 comm="syz.2.628" name="ptype" dev="proc" ino=4026532552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 149.819707][ T2611] loop2: detected capacity change from 0 to 256 [ 149.840669][ T1022] usb 5-1: USB disconnect, device number 21 [ 149.858716][ T2614] loop4: detected capacity change from 0 to 256 [ 149.880303][ T2615] loop2: detected capacity change from 0 to 512 [ 149.919459][ T2614] exfat: Deprecated parameter 'utf8' [ 149.921065][ T2615] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 149.924953][ T2614] exfat: Deprecated parameter 'namecase' [ 149.936073][ T2615] EXT4-fs (loop2): orphan cleanup on readonly fs [ 149.938260][ T2614] exfat: Deprecated parameter 'namecase' [ 149.944770][ T2615] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 149.950729][ T2614] exfat: Deprecated parameter 'namecase' [ 149.959818][ T2615] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.630: attempt to clear invalid blocks 2 len 1 [ 149.977617][ T2615] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 149.994081][ T2615] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.630: invalid indirect mapped block 1819239214 (level 0) [ 150.270188][ T2618] loop1: detected capacity change from 0 to 256 [ 150.465608][ T293] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 150.478790][ T2615] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.630: invalid indirect mapped block 1819239214 (level 1) [ 150.495440][ T2614] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 150.508399][ T2615] EXT4-fs (loop2): 1 truncate cleaned up [ 150.514555][ T2615] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 150.562702][ T2620] loop3: detected capacity change from 0 to 128 [ 150.604346][ T2622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 150.688991][ T2632] netlink: 'syz.2.635': attribute type 13 has an invalid length. [ 150.766425][ T30] audit: type=1400 audit(1778728095.362:1137): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.787013][ T286] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 150.802996][ T286] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 150.878931][ T293] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 150.887990][ T293] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 150.899955][ T293] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 150.910859][ T293] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 150.919967][ T293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.949259][ T2594] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.997367][ T30] audit: type=1400 audit(1778728095.592:1138): avc: denied { mounton } for pid=2655 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 151.047829][ T2655] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.055001][ T2655] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.062577][ T2655] device bridge_slave_0 entered promiscuous mode [ 151.071957][ T2655] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.079066][ T2655] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.086444][ T2655] device bridge_slave_1 entered promiscuous mode [ 151.108879][ T1022] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 151.108889][ T2461] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 151.120031][ T1859] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 151.153146][ T2655] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.160263][ T2655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.167592][ T2655] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.174671][ T2655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.197110][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.205007][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.212286][ T293] usb 6-1: string descriptor 0 read error: -71 [ 151.218696][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.227022][ T293] usb 6-1: USB disconnect, device number 19 [ 151.237411][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.245830][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.252929][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.261975][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.270339][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.277436][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.293170][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.302012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.318223][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.330790][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.339231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.346818][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.355081][ T2655] device veth0_vlan entered promiscuous mode [ 151.373016][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.382175][ T2655] device veth1_macvtap entered promiscuous mode [ 151.392000][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.404748][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.413301][ T1859] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 151.426276][ T30] audit: type=1400 audit(1778728096.022:1139): avc: denied { mount } for pid=2655 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.449350][ T30] audit: type=1400 audit(1778728096.022:1140): avc: denied { mounton } for pid=2655 comm="syz-executor" path="/root/syzkaller.O67RVp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 151.449652][ T1676] device bridge_slave_1 left promiscuous mode [ 151.478702][ T1559] udevd[1559]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.485736][ T1676] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.499017][ T2461] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.515988][ T2461] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.516077][ T1676] device bridge_slave_0 left promiscuous mode [ 151.531535][ T1676] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.539608][ T1676] device veth1_macvtap left promiscuous mode [ 151.545664][ T1676] device veth0_vlan left promiscuous mode [ 151.670870][ T1022] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 151.679778][ T2461] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 151.681241][ T1022] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 151.689927][ T2461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.698047][ T1022] usb 5-1: Product: syz [ 151.705840][ T2461] usb 2-1: Product: syz [ 151.713721][ T2461] usb 2-1: Manufacturer: syz [ 151.718437][ T2461] usb 2-1: SerialNumber: syz [ 151.723533][ T1022] usb 5-1: SerialNumber: syz [ 151.735712][ T1022] usb 5-1: config 0 descriptor?? [ 151.938927][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 152.012037][ T2461] usb 2-1: USB disconnect, device number 17 [ 152.248933][ T1859] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.258055][ T1859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.266231][ T1859] usb 3-1: Product: syz [ 152.270476][ T1859] usb 3-1: Manufacturer: syz [ 152.275227][ T1859] usb 3-1: SerialNumber: syz [ 152.299013][ T6] usb 7-1: config 128 has an invalid interface number: 148 but max is 0 [ 152.307459][ T6] usb 7-1: config 128 has no interface number 0 [ 152.308937][ T1022] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 152.313946][ T6] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 152.333381][ T6] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 152.344710][ T6] usb 7-1: config 128 interface 148 has no altsetting 0 [ 152.497874][ T30] audit: type=1400 audit(1778728097.092:1141): avc: denied { create } for pid=2684 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.509189][ T6] usb 7-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 152.518463][ T30] audit: type=1400 audit(1778728097.102:1142): avc: denied { read } for pid=2684 comm="syz.1.659" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.538951][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.554477][ T6] usb 7-1: Product: syz [ 152.565326][ T6] usb 7-1: Manufacturer: syz [ 152.570031][ T6] usb 7-1: SerialNumber: syz [ 152.578889][ T1022] usb 6-1: Using ep0 maxpacket: 32 [ 152.698967][ T1022] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.708802][ T1022] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 152.718632][ T1022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 152.828884][ T336] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 152.850536][ T6] usb 7-1: USB disconnect, device number 2 [ 152.878986][ T1022] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 152.888157][ T1022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.896402][ T1022] usb 6-1: Product: syz [ 152.900773][ T1022] usb 6-1: Manufacturer: syz [ 152.905393][ T1022] usb 6-1: SerialNumber: syz [ 152.910709][ T1022] usb 6-1: config 0 descriptor?? [ 153.068987][ T336] usb 2-1: Using ep0 maxpacket: 16 [ 153.188927][ T336] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 153.197102][ T336] usb 2-1: config 4 has no interface number 0 [ 153.203250][ T336] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 153.213104][ T336] usb 2-1: config 4 interface 9 altsetting 2 endpoint 0x84 has invalid wMaxPacketSize 0 [ 153.222906][ T336] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 0 [ 153.232654][ T336] usb 2-1: config 4 interface 9 has no altsetting 0 [ 153.399076][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 153.399078][ T336] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 153.399105][ T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.423798][ T336] usb 2-1: Product: syz [ 153.427958][ T336] usb 2-1: Manufacturer: syz [ 153.432591][ T336] usb 2-1: SerialNumber: syz [ 153.449085][ T2687] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 153.638874][ T6] usb 7-1: Using ep0 maxpacket: 8 [ 153.671209][ T2461] usb 2-1: USB disconnect, device number 18 [ 153.758979][ T6] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 153.767227][ T6] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.777089][ T6] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.786852][ T6] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 153.796806][ T6] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.810079][ T6] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.819230][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.843132][ T1859] usb 5-1: USB disconnect, device number 22 [ 153.856812][ T336] usb 3-1: USB disconnect, device number 17 [ 153.867127][ T2691] netlink: 128 bytes leftover after parsing attributes in process `syz.4.661'. [ 154.258880][ T1859] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 154.448883][ T336] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 154.498898][ T1859] usb 5-1: Using ep0 maxpacket: 32 [ 154.618915][ T1859] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 154.627093][ T1859] usb 5-1: config 0 has no interface number 0 [ 154.633646][ T1859] usb 5-1: config 0 interface 12 has no altsetting 0 [ 154.798954][ T1859] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 154.808145][ T1859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.816204][ T1859] usb 5-1: Product: syz [ 154.820425][ T1859] usb 5-1: Manufacturer: syz [ 154.825346][ T1859] usb 5-1: SerialNumber: syz [ 154.830988][ T1859] usb 5-1: config 0 descriptor?? [ 154.838973][ T336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.849235][ T336] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 154.858346][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.867364][ T336] usb 2-1: config 0 descriptor?? [ 155.018896][ T741] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 155.043517][ T336] usb 6-1: USB disconnect, device number 20 [ 155.072869][ T2708] binder: 2707:2708 ioctl 400c620e 0 returned -14 [ 155.079769][ T2708] binder: 2707:2708 ioctl c4009420 0 returned -22 [ 155.159677][ T2717] binder: 2716:2717 ioctl c0306201 200000000080 returned -14 [ 155.167897][ T30] audit: type=1400 audit(1778728099.762:1143): avc: denied { write } for pid=2716 comm="syz.5.672" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.170012][ T2717] binder: 2716:2717 ioctl c0306201 2000000003c0 returned -14 [ 155.192639][ T30] audit: type=1400 audit(1778728099.762:1144): avc: denied { map } for pid=2716 comm="syz.5.672" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.223819][ T30] audit: type=1400 audit(1778728099.812:1145): avc: denied { call } for pid=2716 comm="syz.5.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 155.278904][ T741] usb 3-1: Using ep0 maxpacket: 32 [ 155.303462][ T2724] Disabled LAPIC found during irq injection [ 155.398938][ T741] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 155.407166][ T741] usb 3-1: config 0 has no interface number 0 [ 155.413345][ T741] usb 3-1: config 0 interface 12 has no altsetting 0 [ 155.578936][ T741] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 155.588101][ T741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.596137][ T741] usb 3-1: Product: syz [ 155.600384][ T741] usb 3-1: Manufacturer: syz [ 155.604982][ T741] usb 3-1: SerialNumber: syz [ 155.609634][ T766] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 155.617877][ T741] usb 3-1: config 0 descriptor?? [ 155.773778][ T1859] usb 7-1: USB disconnect, device number 3 [ 155.858878][ T766] usb 6-1: Using ep0 maxpacket: 16 [ 156.018959][ T766] usb 6-1: unable to get BOS descriptor or descriptor too short [ 156.098934][ T766] usb 6-1: config 1 has an invalid interface number: 138 but max is 0 [ 156.107158][ T766] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.117466][ T766] usb 6-1: config 1 has no interface number 0 [ 156.123637][ T766] usb 6-1: config 1 interface 138 altsetting 252 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 156.134905][ T766] usb 6-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 156.145003][ T766] usb 6-1: config 1 interface 138 has no altsetting 0 [ 156.159280][ T741] usb 5-1: USB disconnect, device number 23 [ 156.178922][ T1859] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 156.308922][ T766] usb 6-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 156.318002][ T766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.326155][ T766] usb 6-1: Product: syz [ 156.330354][ T766] usb 6-1: Manufacturer: syz [ 156.334941][ T766] usb 6-1: SerialNumber: syz [ 156.428911][ T1859] usb 7-1: Using ep0 maxpacket: 16 [ 156.548977][ T1859] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 156.557340][ T1859] usb 7-1: config 252 has no interface number 0 [ 156.563668][ T1859] usb 7-1: config 252 interface 15 altsetting 0 has an invalid endpoint with address 0xF5, skipping [ 156.728934][ T1859] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 156.738069][ T1859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.746224][ T1859] usb 7-1: Product: syz [ 156.750455][ T1859] usb 7-1: Manufacturer: syz [ 156.755113][ T1859] usb 7-1: SerialNumber: syz [ 156.764589][ T766] usb 6-1: USB disconnect, device number 21 [ 157.000516][ T766] usb 7-1: USB disconnect, device number 4 [ 157.095125][ T30] audit: type=1400 audit(1778728101.692:1146): avc: denied { bind } for pid=2752 comm="syz.5.685" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.120172][ T30] audit: type=1400 audit(1778728101.692:1147): avc: denied { name_bind } for pid=2752 comm="syz.5.685" src=65503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 157.141677][ T30] audit: type=1400 audit(1778728101.692:1148): avc: denied { node_bind } for pid=2752 comm="syz.5.685" saddr=172.20.20.15 src=65503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 157.189490][ T1022] usb 2-1: USB disconnect, device number 19 [ 157.216268][ T30] audit: type=1400 audit(1778728101.812:1149): avc: denied { map } for pid=2758 comm="syz.1.688" path="socket:[24953]" dev="sockfs" ino=24953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.239793][ T30] audit: type=1400 audit(1778728101.812:1150): avc: denied { read } for pid=2758 comm="syz.1.688" path="socket:[24953]" dev="sockfs" ino=24953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.322533][ T2763] ================================================================== [ 157.330631][ T2763] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 157.338805][ T2763] Read of size 8 at addr ffff88810ade41c0 by task syz.1.690/2763 [ 157.346589][ T2763] [ 157.348920][ T2763] CPU: 1 PID: 2763 Comm: syz.1.690 Not tainted syzkaller #0 [ 157.356206][ T2763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.366270][ T2763] Call Trace: [ 157.369550][ T2763] [ 157.372500][ T2763] __dump_stack+0x21/0x30 [ 157.376884][ T2763] dump_stack_lvl+0x110/0x170 [ 157.381569][ T2763] ? show_regs_print_info+0x20/0x20 [ 157.386772][ T2763] ? load_image+0x3e0/0x3e0 [ 157.391290][ T2763] print_address_description+0x7f/0x2c0 [ 157.396844][ T2763] ? tc_setup_flow_action+0x870/0x3240 [ 157.402323][ T2763] kasan_report+0xf1/0x140 [ 157.406741][ T2763] ? tc_setup_flow_action+0x870/0x3240 [ 157.408921][ T2461] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 157.412203][ T2763] __asan_report_load8_noabort+0x14/0x20 [ 157.412233][ T2763] tc_setup_flow_action+0x870/0x3240 [ 157.430797][ T2763] mall_replace_hw_filter+0x2cc/0x8b0 [ 157.436227][ T2763] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 157.442321][ T2763] ? mall_set_parms+0x520/0x520 [ 157.447175][ T2763] ? tcf_exts_destroy+0xb0/0xb0 [ 157.452033][ T2763] ? pcpu_alloc+0x1170/0x16e0 [ 157.456735][ T2763] ? mall_set_parms+0x1e8/0x520 [ 157.461623][ T2763] mall_change+0x544/0x760 [ 157.466133][ T2763] ? __kasan_check_write+0x14/0x20 [ 157.471256][ T2763] ? mall_get+0xa0/0xa0 [ 157.475450][ T2763] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 157.481383][ T2763] ? mall_get+0xa0/0xa0 [ 157.485596][ T2763] tc_new_tfilter+0x142f/0x19b0 [ 157.490469][ T2763] ? tcf_gate_entry_destructor+0x20/0x20 [ 157.496103][ T2763] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 157.501755][ T2763] ? security_capable+0x87/0xb0 [ 157.506627][ T2763] ? ns_capable+0x8c/0xf0 [ 157.510968][ T2763] ? netlink_net_capable+0x125/0x160 [ 157.516265][ T2763] ? tcf_gate_entry_destructor+0x20/0x20 [ 157.521918][ T2763] rtnetlink_rcv_msg+0x871/0xce0 [ 157.526908][ T2763] ? rtnetlink_bind+0x80/0x80 [ 157.531608][ T2763] ? avc_has_perm_noaudit+0x391/0x490 [ 157.537005][ T2763] ? memcpy+0x56/0x70 [ 157.541006][ T2763] ? avc_has_perm_noaudit+0x30b/0x490 [ 157.546391][ T2763] ? arch_stack_walk+0xee/0x140 [ 157.551256][ T2763] ? avc_denied+0x1b0/0x1b0 [ 157.555765][ T2763] ? stack_trace_save+0xa6/0xf0 [ 157.560628][ T2763] ? avc_has_perm+0x163/0x250 [ 157.565334][ T2763] ? avc_has_perm_noaudit+0x490/0x490 [ 157.570722][ T2763] ? x64_sys_call+0x4b/0x9a0 [ 157.575325][ T2763] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 157.581496][ T2763] netlink_rcv_skb+0x1f5/0x440 [ 157.586262][ T2763] ? rtnetlink_bind+0x80/0x80 [ 157.590942][ T2763] ? netlink_ack+0xb50/0xb50 [ 157.595534][ T2763] ? __netlink_lookup+0x387/0x3b0 [ 157.600566][ T2763] rtnetlink_rcv+0x1c/0x20 [ 157.604989][ T2763] netlink_unicast+0x876/0xa40 [ 157.609759][ T2763] netlink_sendmsg+0x879/0xb80 [ 157.614528][ T2763] ? netlink_getsockopt+0x530/0x530 [ 157.619726][ T2763] ? do_futex+0xde8/0x2800 [ 157.624166][ T2763] ? security_socket_sendmsg+0x82/0xa0 [ 157.629620][ T2763] ? netlink_getsockopt+0x530/0x530 [ 157.634863][ T2763] ____sys_sendmsg+0x5b7/0x8f0 [ 157.639646][ T2763] ? __sys_sendmsg_sock+0x40/0x40 [ 157.644688][ T2763] ? import_iovec+0x7c/0xb0 [ 157.649190][ T2763] ___sys_sendmsg+0x236/0x2e0 [ 157.653877][ T2763] ? __sys_sendmsg+0x280/0x280 [ 157.658677][ T2763] ? sock_show_fdinfo+0xa0/0xa0 [ 157.659029][ T2461] usb 6-1: Using ep0 maxpacket: 32 [ 157.663538][ T2763] ? __fdget+0x1a1/0x230 [ 157.672897][ T2763] __x64_sys_sendmsg+0x206/0x2f0 [ 157.677842][ T2763] ? ___sys_sendmsg+0x2e0/0x2e0 [ 157.682703][ T2763] ? __kasan_check_write+0x14/0x20 [ 157.687853][ T2763] ? switch_fpu_return+0x15d/0x2c0 [ 157.692980][ T2763] x64_sys_call+0x4b/0x9a0 [ 157.697434][ T2763] do_syscall_64+0x4c/0xa0 [ 157.701871][ T2763] ? clear_bhb_loop+0x50/0xa0 [ 157.706577][ T2763] ? clear_bhb_loop+0x50/0xa0 [ 157.711352][ T2763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.717265][ T2763] RIP: 0033:0x7f4af269ce59 [ 157.721689][ T2763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.741398][ T2763] RSP: 002b:00007f4af10f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.749828][ T2763] RAX: ffffffffffffffda RBX: 00007f4af2915fa0 RCX: 00007f4af269ce59 [ 157.757817][ T2763] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 157.765803][ T2763] RBP: 00007f4af2732d6f R08: 0000000000000000 R09: 0000000000000000 [ 157.773793][ T2763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.782038][ T2763] R13: 00007f4af2916038 R14: 00007f4af2915fa0 R15: 00007ffe25680338 [ 157.790029][ T2763] [ 157.793057][ T2763] [ 157.795504][ T2763] Allocated by task 2763: [ 157.799852][ T2763] __kasan_kmalloc+0xda/0x110 [ 157.804558][ T2763] __kmalloc+0x13d/0x2c0 [ 157.808816][ T2763] tcf_idr_create+0x5f/0x790 [ 157.813440][ T2763] tcf_idr_create_from_flags+0x61/0x70 [ 157.818937][ T2763] tcf_gact_init+0x342/0x570 [ 157.823555][ T2763] tcf_action_init_1+0x3ff/0x6b0 [ 157.828518][ T2763] tcf_action_init+0x233/0x7a0 [ 157.833316][ T2763] tcf_exts_validate+0x24a/0x580 [ 157.838386][ T2763] mall_set_parms+0x48/0x520 [ 157.842999][ T2763] mall_change+0x478/0x760 [ 157.847585][ T2763] tc_new_tfilter+0x142f/0x19b0 [ 157.852460][ T2763] rtnetlink_rcv_msg+0x871/0xce0 [ 157.857414][ T2763] netlink_rcv_skb+0x1f5/0x440 [ 157.862285][ T2763] rtnetlink_rcv+0x1c/0x20 [ 157.866726][ T2763] netlink_unicast+0x876/0xa40 [ 157.871513][ T2763] netlink_sendmsg+0x879/0xb80 [ 157.876408][ T2763] ____sys_sendmsg+0x5b7/0x8f0 [ 157.881198][ T2763] ___sys_sendmsg+0x236/0x2e0 [ 157.885891][ T2763] __x64_sys_sendmsg+0x206/0x2f0 [ 157.890846][ T2763] x64_sys_call+0x4b/0x9a0 [ 157.895279][ T2763] do_syscall_64+0x4c/0xa0 [ 157.899801][ T2763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.905716][ T2763] [ 157.908054][ T2763] Last potentially related work creation: [ 157.913790][ T2763] kasan_save_stack+0x3a/0x60 [ 157.918504][ T2763] __kasan_record_aux_stack+0xd2/0x100 [ 157.923990][ T2763] kasan_record_aux_stack_noalloc+0xb/0x10 [ 157.929901][ T2763] call_rcu+0x10b/0xf80 [ 157.934070][ T2763] blk_stat_free_callback+0x2a/0x40 [ 157.939291][ T2763] blk_release_queue+0xc7/0x260 [ 157.944161][ T2763] kobject_put+0x18a/0x270 [ 157.948647][ T2763] blk_put_queue+0x19/0x20 [ 157.953086][ T2763] scsi_device_dev_release_usercontext+0x594/0x830 [ 157.959604][ T2763] execute_in_process_context+0x183/0x210 [ 157.965368][ T2763] scsi_device_dev_release+0xfa/0x110 [ 157.970857][ T2763] device_release+0x96/0x1c0 [ 157.975659][ T2763] kobject_put+0x18a/0x270 [ 157.980111][ T2763] put_device+0x1f/0x30 [ 157.984282][ T2763] __scsi_remove_device+0x2e9/0x330 [ 157.989510][ T2763] scsi_probe_and_add_lun+0x14d2/0x3650 [ 157.995260][ T2763] __scsi_scan_target+0x1d2/0xb70 [ 158.000322][ T2763] scsi_scan_host_selected+0x343/0x5f0 [ 158.005811][ T2763] scsi_scan_host+0x39e/0x660 [ 158.010507][ T2763] virtscsi_probe+0x8ba/0xa30 [ 158.015208][ T2763] virtio_dev_probe+0x8d4/0xb20 [ 158.020084][ T2763] really_probe+0x285/0x970 [ 158.024603][ T2763] __driver_probe_device+0x198/0x280 [ 158.029911][ T2763] driver_probe_device+0x54/0x3e0 [ 158.034954][ T2763] __driver_attach+0x416/0x560 [ 158.039738][ T2763] bus_for_each_dev+0x17b/0x1f0 [ 158.044607][ T2763] driver_attach+0x42/0x50 [ 158.049044][ T2763] bus_add_driver+0x335/0x580 [ 158.053734][ T2763] driver_register+0x33a/0x440 [ 158.058515][ T2763] register_virtio_driver+0x9a/0xd0 [ 158.063724][ T2763] init+0x66/0xe0 [ 158.067372][ T2763] do_one_initcall+0x1fc/0x5a0 [ 158.072152][ T2763] do_initcall_level+0x16f/0x2d0 [ 158.077102][ T2763] do_initcalls+0x50/0xa0 [ 158.081442][ T2763] do_basic_setup+0x81/0x90 [ 158.085957][ T2763] kernel_init_freeable+0x294/0x3d0 [ 158.091174][ T2763] kernel_init+0x1d/0x1b0 [ 158.095516][ T2763] ret_from_fork+0x1f/0x30 [ 158.099949][ T2763] [ 158.102281][ T2763] The buggy address belongs to the object at ffff88810ade4100 [ 158.102281][ T2763] which belongs to the cache kmalloc-192 of size 192 [ 158.116346][ T2763] The buggy address is located 0 bytes to the right of [ 158.116346][ T2763] 192-byte region [ffff88810ade4100, ffff88810ade41c0) [ 158.129987][ T2763] The buggy address belongs to the page: [ 158.135649][ T2763] page:ffffea00042b7900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ade4 [ 158.145913][ T2763] flags: 0x4000000000000200(slab|zone=1) [ 158.151610][ T2763] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100042c00 [ 158.160215][ T2763] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 158.168814][ T2763] page dumped because: kasan: bad access detected [ 158.175238][ T2763] page_owner tracks the page as allocated [ 158.180955][ T2763] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2645297287, free_ts 0 [ 158.195809][ T2763] post_alloc_hook+0x192/0x1b0 [ 158.200594][ T2763] prep_new_page+0x1c/0x110 [ 158.205118][ T2763] get_page_from_freelist+0x2d3a/0x2dc0 [ 158.210680][ T2763] __alloc_pages+0x1a2/0x460 [ 158.215285][ T2763] new_slab+0xa1/0x4d0 [ 158.219365][ T2763] ___slab_alloc+0x381/0x810 [ 158.223971][ T2763] __slab_alloc+0x49/0x90 [ 158.228312][ T2763] kmem_cache_alloc_trace+0x146/0x270 [ 158.233698][ T2763] blk_stat_alloc_callback+0x61/0x210 [ 158.239083][ T2763] blk_mq_init_allocated_queue+0x92/0x17e0 [ 158.244901][ T2763] blk_mq_init_queue+0x6c/0xd0 [ 158.249679][ T2763] scsi_alloc_sdev+0x66c/0x9c0 [ 158.254545][ T2763] scsi_probe_and_add_lun+0x188/0x3650 [ 158.260018][ T2763] __scsi_scan_target+0x1d2/0xb70 [ 158.265083][ T2763] scsi_scan_host_selected+0x343/0x5f0 [ 158.270554][ T2763] scsi_scan_host+0x39e/0x660 [ 158.275247][ T2763] page_owner free stack trace missing [ 158.280626][ T2763] [ 158.282960][ T2763] Memory state around the buggy address: [ 158.288601][ T2763] ffff88810ade4080: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 158.296682][ T2763] ffff88810ade4100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.304756][ T2763] >ffff88810ade4180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 158.312830][ T2763] ^ [ 158.318997][ T2763] ffff88810ade4200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.327075][ T2763] ffff88810ade4280: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 158.335157][ T2763] ================================================================== [ 158.343245][ T2763] Disabling lock debugging due to kernel taint [ 158.353569][ T741] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 158.370158][ T30] audit: type=1400 audit(1778728102.972:1151): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 158.380657][ T1859] usb 3-1: USB disconnect, device number 18 [ 158.399650][ T30] audit: type=1400 audit(1778728102.972:1152): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.438933][ T2461] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.450138][ T2461] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.578966][ T2461] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 158.588232][ T2461] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 158.596621][ T2461] usb 6-1: Product: syz [ 158.600927][ T2461] usb 6-1: Manufacturer: syz [ 158.638879][ T741] usb 5-1: Using ep0 maxpacket: 32 [ 158.649682][ T2461] hub 6-1:4.0: USB hub found [ 158.768926][ T741] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 158.777069][ T741] usb 5-1: config 0 has no interface number 0 [ 158.783215][ T741] usb 5-1: config 0 interface 12 has no altsetting 0 [ 158.858953][ T2461] hub 6-1:4.0: 2 ports detected [ 158.948994][ T741] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 158.958128][ T741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.966218][ T741] usb 5-1: Product: syz [ 158.970410][ T741] usb 5-1: Manufacturer: syz [ 158.975006][ T741] usb 5-1: SerialNumber: syz [ 158.980312][ T741] usb 5-1: config 0 descriptor?? [ 160.048927][ T2461] hub 6-1:4.0: hub_hub_status failed (err = -32) [ 160.055357][ T2461] hub 6-1:4.0: config failed, can't get hub status (err -32) [ 160.230368][ T2461] usb 5-1: USB disconnect, device number 24 [ 160.258983][ T1022] usb 6-1: USB disconnect, device number 22