last executing test programs: 24.391313719s ago: executing program 3 (id=1243): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100002c34c027000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) chdir(&(0x7f0000004340)='./file0\x00') write$FUSE_INIT(r0, &(0x7f00000066c0)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000006740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000063c0)={0x10, 0x0, r3}, 0x10) read$FUSE(r0, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000004200)={0x90, 0x0, r4, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) syz_usb_disconnect(0xffffffffffffffff) 23.191019167s ago: executing program 3 (id=1251): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000600)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 23.16386619s ago: executing program 3 (id=1252): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) clock_adjtime(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 22.272936182s ago: executing program 3 (id=1260): socket$inet6(0xa, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f00000003c0), 0xb) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x7, 0x700, 0x1, 0x5, {{0x44, 0x4, 0x3, 0xe, 0x110, 0x67, 0x0, 0x6, 0x4, 0x0, @remote, @empty, {[@rr={0x7, 0x1f, 0x25, [@remote, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @empty, @multicast1, @local]}, @end, @timestamp_prespec={0x44, 0x24, 0x73, 0x3, 0x6, [{@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x7fff}]}, @lsrr={0x83, 0x17, 0x5e, [@local, @loopback, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x1e}]}, @ssrr={0x89, 0x1f, 0x36, [@broadcast, @local, @initdev={0xac, 0x1e, 0xfd, 0x0}, @remote, @broadcast, @remote, @loopback]}, @cipso={0x86, 0x2c, 0xfffffffffffffffd, [{0x0, 0x10, "eab0a6d16f1135990a59404d7c89"}, {0x7, 0x2}, {0x6, 0xe, "3a4f64a464919cf6ebbf2b3b"}, {0x5, 0x6, "cee02bf5"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xb3, 0x3, 0x6, [{@local, 0x8a}, {@multicast2, 0x9}, {@rand_addr=0x64010100, 0xbfffffff}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x80000000}, {@multicast1, 0x9}]}, @timestamp={0x44, 0x24, 0xc, 0x0, 0x8, [0x0, 0xc, 0x7, 0x8b5, 0x5, 0x10000000, 0x6, 0x8]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="300039d5", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf250a00000005000500090000001400018008000700", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) fchmodat(r7, &(0x7f00000000c0)='./file1\x00', 0x1ba) openat(r7, &(0x7f00000001c0)='./file1\x00', 0x5, 0x0) socket$inet6(0xa, 0x3, 0x3c) 19.97346202s ago: executing program 3 (id=1270): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00') readlinkat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/58, 0x3a) 19.534506526s ago: executing program 3 (id=1277): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 11.423297607s ago: executing program 0 (id=1314): open(&(0x7f0000000100)='./file0\x00', 0x83f42, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x10) syz_emit_ethernet(0xae, &(0x7f00000005c0)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x4, 0x65, &(0x7f00000006c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0xc0085508, &(0x7f0000000300)=0xfffffffc) truncate(&(0x7f0000000340)='./file2\x00', 0x0) open$dir(&(0x7f00000000c0)='./file3\x00', 0x0, 0x0) 10.080404117s ago: executing program 4 (id=1319): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048de) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x0, {0x4, 0x0, 0xa, 0xfffffeff}}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@orlov}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@grpquota}, {@auto_da_alloc}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x449, &(0x7f0000000840)="$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") prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, r2, 0x3, &(0x7f0000000580)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.647484224s ago: executing program 4 (id=1322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x4a, 0x3, 0xa, @mcast1, @rand_addr=' \x01\x00', 0x20, 0x40, 0xbc33, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x200}, {r4, 0x4}, {0xffffffffffffffff, 0x3004}, {r4, 0x40}], 0x4, &(0x7f00000003c0), &(0x7f0000000400)={[0x88]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ec4aca9224f3", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r9, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x2, 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.095696041s ago: executing program 0 (id=1323): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x1, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 7.094596441s ago: executing program 2 (id=1324): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000080), 0x0, 0x4) ioctl$UFFDIO_COPY(r1, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) 7.093575511s ago: executing program 4 (id=1325): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 5.307683066s ago: executing program 2 (id=1327): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5") r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 5.307057107s ago: executing program 4 (id=1328): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = gettid() r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) listen(r1, 0x0) r2 = dup2(r1, r1) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, r4, 0x0) r5 = dup(r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9ad8ff00000000b5090800000000007baaf0ff00000000bd8900000000000007080000f8ffffffbfa400000000000007070000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf21000000000000560700000000000085000000aa000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r10, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) 4.999482062s ago: executing program 1 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) open(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) ustat(0x801, &(0x7f00000011c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000000001090000060008000000000006000a0002000000163006bd04d4984bf5ffed4ae6e685e8ddd04d9faeeed319bbd64530b0b13cd94b9ed6fa5dc3402d07b538d504c8a295a1d4f57af53f5e4f9957200014f12ff2b3c77ad5cdaba4cd1aaf8c66d59f9447f82d024252fafb1260c11f40536d14390afb77bfdb6f5e87d06a82921d2e6bca81375b5ff7e4fefe8530688c1b9ae17e89da845056e4288cd64ffbd8cdcbfb4a0dec2d17251e1e8a13c5a3fd901224cd4eede8330d042af30dc65ceb55ee0c58ac5e45671621c36b0bfc56ec55d63aea"], 0x2c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001a5da409fe2f3d513d01d259171323ccb08faaf66f1f473de73b9ead476d3551d6d2922e9241280fb6e0891ac8d6914eb4335e74a1abd8f9f2129825c39806289387b4d6430e0c86", @ANYRES16, @ANYBLOB="00092cbd7000ffdbdf25130000000600080000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.999061092s ago: executing program 2 (id=1330): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 3.148099663s ago: executing program 0 (id=1331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000002000000000004b84ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008001"], 0x26}}, 0x0) 3.147929952s ago: executing program 1 (id=1338): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) close(r0) 3.146566273s ago: executing program 2 (id=1332): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b", @ANYRES32], 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_disconnect(0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) rt_sigaction(0x22, 0x0, 0x0, 0x8, &(0x7f0000000380)) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 3.144819533s ago: executing program 4 (id=1333): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) chdir(&(0x7f00000000c0)='./bus\x00') syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b7083c0e66fb4b4ec818f8ff00000000bfa000000000000007020000f8ffffffb703000008000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x12, 0x0, &(0x7f0000000240)) 3.112812896s ago: executing program 0 (id=1334): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=r0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYRESHEX=0x0], 0x6, 0x2c0, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x21, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execveat(r5, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000540)=[&(0x7f0000000380)='\x00', &(0x7f0000000480)='/dev/input/event#\x00', &(0x7f00000004c0)='workdir'], &(0x7f0000000c00)=[&(0x7f0000000580)='/dev/input/event#\x00', &(0x7f0000000680)='%/&\xb0\\\x00', &(0x7f00000006c0)='#]%\x00', &(0x7f0000000700)='overlay\x00', &(0x7f0000000740)='%\\%%(@^-,\x00', &(0x7f0000000780)='@]\x00'], 0x1000) 3.090579747s ago: executing program 1 (id=1335): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) write(r0, &(0x7f00000003c0)="6b3531c0874f30716217396b6f1d20f1c7d58302485e204a5df9888567868fc8fbf0e7b3bcd5c5cdac05a1f00346198c5aced5503b1643ae1326de20d99ccee7040a21576dd683974a095ea3ec8c9f04b3adf77cb42c9f50e3ee194d48742070b1991563a3995d0a6d5e812fc4369ed8207cab59d4dfe2996e348a099f3eda2d66db1d5d90c376365e4bbe6a90540330e5f3a4016438c8222760c34a57b719914c6f662cb922e869a00372830468b4d4f43886af792e2a81f2f3aee08aee", 0xbe) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[{0x4, 0x9, 0x9, 0x80000001}, {0x80, 0x2, 0xb0, 0x2}, {0x5a, 0x23, 0x6, 0xff}, {0x9, 0x2f, 0xe9, 0xfffffbff}, {0x6, 0x0, 0xcd, 0x9b}, {0x0, 0xf8, 0x2, 0x5}, {0x4, 0xd3, 0x7, 0x5691ccb0}, {0x100, 0x7f, 0x2, 0x9}]}) r1 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000000c0)={0x7, {{0xa, 0x4e22, 0x0, @mcast2}}, {{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000a80)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2b, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe00000}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x31, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f00000082c0)={0x2020}, 0x2020) preadv2(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000012400)={0x2020}, 0x2020) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000280)={@private0, 0x10}) 2.136736055s ago: executing program 0 (id=1336): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000005d00000000000000180000000000000000000000000000009500000000000000b50a00000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.136297765s ago: executing program 1 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000540)='./control\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 79.972493ms ago: executing program 0 (id=1339): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000002040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14957e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x100000a, 0x4002011, r2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000540)={0x0, 0x10001, 0x1, 0x0, 0x1, [{}]}) 77.058584ms ago: executing program 1 (id=1340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) listen(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee00) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) listen(r7, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000240)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a0673bc45ff810500000000000058000b4804009448a49a0c067cc3e0925a0100ddffffed00008000f0fffeffe8099900000ef4320207fff5dd04fcff00"/88, 0x58}], 0x1) 75.332184ms ago: executing program 2 (id=1341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 74.526974ms ago: executing program 4 (id=1342): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15.148289ms ago: executing program 1 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$usbmon(&(0x7f0000000340), 0x4, 0x200) ioctl$MON_IOCX_GET(r2, 0x40189206, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40004}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xae}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r7, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000700)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000840), &(0x7f0000000940), 0x8, 0x10, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) write$cgroup_int(r11, &(0x7f00000001c0), 0xfffffdef) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r12 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r12, &(0x7f0000000080)='./file0\x00') 0s ago: executing program 2 (id=1344): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1011, &(0x7f00000044c0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc={0x4, {@llc={0xe, 0x4e, "06", "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"}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x4, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB="180000000300000000000000260b0000851000000400000018300000020000000000000000000000183d000003", @ANYBLOB="00000000000000001866a8e090fbbd8805019d3f7a8644580000066e6d891800ae7700950000000004006dedcb053c667aa28316d3faf2ec60a1d627ba764bf92b2665bd9767079123aa687eed8adb3e3e796c3bc6b5b640cf0c4bc56042db702c714364594c8ebaa8523058e6c6a28d2616270e7ffbae9b4652513786e9c82eb290ec161e27909978e70eaf9418bbda4ca4f53ff9eb2d4825bacc5e0ad5b2d1e180ec5fac2242f9a3eaf26d58d5b637baedecc8c154e19fa04c0a953cc3ac3e2def5fbf55a464540a28480f7140a68f4e72c7ea0a82ed237d74b7d4b180ce89", @ANYRES16, @ANYRESHEX], &(0x7f0000001cc0)='syzkaller\x00', 0x9, 0x30, &(0x7f0000000200)=""/48, 0x41100, 0x9, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002440)={0x3, 0xf, 0x1}, 0x10}, 0x90) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000002c0)="b4ce26100cdadb46b08eca31e2058e96432a76466e6ea70ee835efa3fa51b2fa554115ec00aacd6790bb0f21e6c78a2eaec99d0ec205aba84838f5630324e0e62f8a4cbb1d0fac332597a675e2373c688fe5eaf662ad53cfc37eddabba1e70aee42d18ddea80832a3c40e250fdf18920290842d798dde1f4cc7e1ae24145eaff545802d6e795436d847a9ca35168", 0x8e}, {&(0x7f0000000e40)="8f9ffc2ff02ff20924876156c6f3cb25b9c5163b7574550c23fd359ef839543043cdf074839544caa76bce86fb5396aee708868daa5bab4e15be7d9f7b3ecdde74544602f84cf5c9bb565e3d51f79f48452fc3b06efcb3670500b19731297d18b23897a51591c8a4e80f0342640a6b4ccd827f78c7e4c26590df354e729e7d6449cbe17256c60e9eb2c64ae2dd3f705730cf72016c929c46997fadb5917083c570203a7fe086d1e00b422184", 0xac}, {&(0x7f0000000a40)="34ef0ee7f20accebe691988f0000001f5896c4a22c2d94bb05558c724e68526b8e20cf6c69dc36229cf1f29e36c77ef61f5686a0e3", 0x35}, {&(0x7f0000001200)="b7bd849b0249701d59f4ad516376f9e969bbba49d37e54870b21cf9fc59303f35a81f3cda6eb16ed753944790fe2b6cdb12f48afd3e4df5450169c5a6eba940c5ab1626b11ffd6b37dc9bf8a065e825c074b0010c51365f6c46c1afd4677e91376793f1fb7abf0f6c9825280591dbc51791ab224cfa835581b7b8de2fa3b6218e91f02379496314759f293f264ca34dcedbaa241a6cb29c05280a116fc5d55f10e7fe3a1a943d38c938d964bf400f5753f19b80e1589d067c8c303df70c74b23727108de200000000000000000", 0xcd}, {&(0x7f00000005c0)="6ed674038af06c94f0f460ef07daa761605e70698dff93786d697709bb3659d42935f66677d0639ed8858c86cb86ddd7f68f32a598a11c70f7b697543249edd3575514c7c6414b4e87af19839e0d67443fa2ada515376442a09b9f9445504fd5f6237d3a415d8bdd56a0ac000e81ac8903b5e48bb60759480554395d8f2cd74034e5", 0x82}, {&(0x7f0000000040)}], 0x7, &(0x7f00000007c0), 0x0, 0x24040000}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000980)="d611afdefa3e3862b8cca9ab08858abe75aa75d3c36f306c725b1a6687359d3f4558a52aa5c0f874c3253c76d6173ded86de19747bb27a7455", 0x39}, {&(0x7f00000008c0)="ed4f3807be6c3186f4a33922e2c50ecaf73f486f15499aaf1866f1684e904427ea69f7a2c0866121ede86a5dfe1d6576f8ebc677a6e5723072d84cdca0a7215647f5683ce219658ad665f82ab615cae84001b9b712a69658d5948c19a6ee9799782bc159253f62733a267522088c8d7361da0f0b8cd0abecd56cb4c7cdb8ab31112f214b73b658dde5efbf74832aced73824d669febec739a1fcc28bbdfa009f", 0xa0}, {&(0x7f0000001d00)="197858d2b1cf2144b3673edf5ee8aba1dc4a3d49ed6f2f893093d3ce44f7e8a1320d137535d48b4ac247dc686b79bd90a81f051045", 0x35}, {&(0x7f0000000a80)="fb8ebc40e498fad5d51471ea9296f08447f69d3849d396504571d510f1e9ead22f11859c0f7d1e3721ff68bb7817e26c9656200b47185b4493c4e69e479bcb2dc55cb59e1d61a787aa1c773f0baf1e484268c265d2af5d6e2e19ec5aeb5796c8944e13d4587d3db3df9f3bec6102dbb3898744217b219b88a70900bfb0b986fc8bd2b05511f75a42afe466dfbf05765faff51d0ede00f8be0b6b3cc3705d86bc673c8f7fe1ba99da89ccd819505fdeaf69f99dae356aac49fe26beb5687e53c4c630044cd5", 0xc5}, {&(0x7f0000000bc0)="babd07f758c7294695ad3fb5f83af5a0a8a7c09c863823e069ea1eae2002f88859d2d83ac422b2cb3910cbd2f6fdda5347d04d76fb95fb4396de0672992d5063be0d3d7777523c809726ac297174ad93f6e4da279edf1f1a5f9950b3d015a03c38ee31ff5bddfe71", 0x68}], 0x5, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x4c804}}, {{0x0, 0x0, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000002040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002180)=[{&(0x7f00000020c0)="21ffaaeef8b3452163f4e8ef1a54678d8392a55617f4b57d640c490c0e9bcd909af4964db2f6a54d24e152bce0fd9161621114477274d8df8d76e7823beef946baf8f6af8591f4fd2f2e4ea4ec6bdbc169e2b8251e2c107c1d8bb17edaf7621d4b0804c605f1cfd6b254875036e2b8f9983af91ac53e95212da1659866bcd17d51ad15498ade6eaa3671da3fa17fd2410085a80224cfc3c820a3705a97ea2f62f234", 0xa2}], 0x1, &(0x7f0000003000)=ANY=[@ANYRESHEX=r4, @ANYRES16=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES64, @ANYBLOB="0000cca92b8fbbfb77f233c1050000200000000000000001000000010000008bc483f8ead828f65bd488a6052b723df51a4f5fabd60a4d306a776899cedaeb8f97566d1543a11544d6cd00969a660ba8a7dd9b4f79dc18fe8d4573c2e2ab98ab52ba54d29c0dc2c3f41771dd584950d48ae56e845b278d9b5215eca61c993c298927c4e75ecca1e0a718b5d3a8ae", @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES8=r3, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYBLOB="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"/285, @ANYRES16, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32], 0xd8, 0x4010}}], 0x4, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000007cc0)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430ebfdfd9c807862ef45320caf34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0xa4}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bf227e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435713b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021d", 0xde}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a4c6b07f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}, {&(0x7f0000000b80)}], 0x7, &(0x7f0000007e80)=ANY=[@ANYRES64, @ANYBLOB="65ce12bd409e2f47aa5abf9d36b844aafe24cb168c8bf3", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRESHEX=r3, @ANYRES64, @ANYRES32, @ANYBLOB="a7adbf81fc2a7fdad7543472233db1be1c2bc4047a5236705dd1f13727fc1dfac9adb34b7b7590317013359a6b7e3bec7be2fd1dcaf3fc3f3f27fb70e444e4797d3c78de616f3d96a651e2b7c6a600a3e07f9d472e03e19ee8d10776221a90630a", @ANYRES32=r4, @ANYBLOB="000000001cad7735990000000000000000000000fa044b2c5e7c3a0be15825c9bf93d49ebc7a7b8c00af3c89e24cfc0318ca42ce1a2f329923aa3d89753fcb54", @ANYRES32=0x0, @ANYRES8=r5, @ANYRESDEC, @ANYRESOCT=r6], 0xa0}, 0x800) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000110000000000080000000009200", @ANYRES32=0x0, @ANYBLOB="8a043cbf", @ANYRES32=r2, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="da0156800c008400030000000000000087b2f02cc8c7b843ecee31130c2d1e79bb0b03090070a1534beaee6706000000309a90fec3cabf8305126fbb7279f2a66585fa4f96ec050200fd06bd465a9eb8e1bfa8938d4a93181cd69b439ea78bb874495000720d891bd74e51bf804a68b8aeb89104daddaf4ca208000c00", @ANYRESOCT=r5, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c597110e606ba7ea7d9370a898e71cb4221e5812adb4e9523a5ebc6fbc658f059046c3c0dd5113a2f11b9b31df04832500b95fba147ad27370100207d17ce4220f6088557280ce35d818943e3ce2a9e2e563798fe050ae7deb9a", @ANYRES32, @ANYRESOCT=r2, @ANYRESOCT, @ANYRES64], 0x200}, {&(0x7f0000001000)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0400290014007100fc0200ca82e5f700000000000000000000001400560020010000000000000000000000000000d2008a8008004200ac9a72ec5aa21ba522daf2fcc27017bafd21bec86546aece7aefdbdc4cc0ad89ffe947aa4300397befa9f24b4cd5f474f44ccec5ceba8a40075f6bf05e92b036239846c658f69ca1b14080a441dba06fba019f1cfec3a4b192b7b7c46b293778c20e4a12be569f44b0fb35a48ce26976", @ANYRES32=r5, @ANYRESOCT], 0x3b0}, {&(0x7f00000021c0)=ANY=[@ANYBLOB="6c01001b4971e6a35656afe75d074b437887acc9122b08edd78735e40b661dd47fc0f89658c722f59db7bd4dad9ca28901168208f4e73390249f56e14f14e985f9ba15ed68113473eaefae72d7912631fa71dd4501140025000000000000000000001000000000000108006d00"/124, @ANYRES32, @ANYBLOB="0d0007002f5d3a402dd34bcfd20000003c1334834595d3f4e4e63f5d3b7ad1c6d138330cf1e89df2bac44aede49d376ac1cad9609428c0a064dbce92af3f22b5e25004591bd045208ffebf1a54355ed0712aea727f932e35d97023a78656b8db0b82484b79a61ff29dd0fe1170231abbe632a75af5f43a85e41c401df58a7a2497e3b5231f5a37eee344adfcdd5181569d0a4a195af10d6dd8dcc234469e00b19feeb94b2f72d824e0a2b99e34aaf3d39af4105c4bd413e03a647da81523dfe9333f936010da3278a64a505cd104c8d4f7c41b904804c87e2de405f8f688acfd39991d58caf457dc03e97b2edb2492b32469a2a8228baeb7006114e6379fd0476cbceb1bec9b01babafbfd7d4bee5b76e8e1f42b39f9f84f555ae3a4cbc0f982dee80af161adf46506beeed0bbe67e9a067879a79767698917d6b39bf59332d43ec6b6ec1385182f776ca3d0956b05cbed"], 0x16c}], 0x4}, 0x0) syz_emit_ethernet(0xf2, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="6080ffea9078000301000000ed3bab295618f8213e7c27b8d6a78c541c24c1d7bcd42c4c536c8b8a48f61526fea3f781416640e3ce1dd4b116cbd98ab88de6ca0f93b660504caeab195efc5091c5f49149061390f75e774beed3cb082d45af77252742e430bed91716df0e1a05793eb17279fc282f7533534e75bcf1fca9ed1f2accbbc9f0b27b1a"], 0x0) syz_emit_ethernet(0x123a, &(0x7f0000003280)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "19088f", 0x1204, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x2f, 0x1, '\x00', [@ra={0x5, 0x2, 0x7ff}, @pad1, @ra={0x5, 0x2, 0x7}]}, @routing={0x3a, 0x2, 0x0, 0x8, 0x0, [@mcast2]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x5b, 0x1, [0xfff, 0x9], "eac6796d9a7898b63faca7c6cd8507a7f04d2a9e56afc77343b1380317fd5985806a7896e736e0f2cae99da2b53cd4f8f0bee1f9fc1fb87d23b829ce12faa8e8804b3ec61765a73d80708853b2026a4956eba4efd850ea4f8dae28"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x6], "07b243148bc8d3663a4c97524f130052286d3ddbd627b71e4f2cbd845cc2f850060fae94cd73d1a1239aa6f81c1e6f98f99bc34e9de548710971c95157aacf94beed51c4e970e45ecea918f5a519d4fed305dec82eca12b642f988cdaef075fd9792758c7fa02cc3783b58d5686ba5cd70cb1fca6d3b5d1080335d4d7348973b58aabbe19ac9dc489f29e6ae5471145508b32b64527fb44fcf155cd0c30f17ee34af82b76bb04a549e8d975a68"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x5], "cd2ba1dfc5c0a3a54bb75c15ef4116dcdd9e1a7c9d4f764b9daa3b4af6f59c1f31ef1d6402868cf08afe150b092e5c92a090ec60f1ea0e854f7c9ce8fe7c39eb00c4d1a2dcfe9c7d2459445042105f31294c6c4f58808dff6920dd28395deb8a54a0b84d786f9a8e32587f5fa1d91afa668188e83fc7a02b472aca7829f26713"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x5, 0x0, 0x1, 0x2, 0x3, 0x5}, 0x1, {0x1000000}}}, {0x8, 0x22eb, 0x3, {{0xc, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x2, {0x6, 0x98e, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "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"}}}}}}}, &(0x7f00000002c0)={0x1, 0x4, [0xf83, 0x7bb, 0x390, 0xa51]}) syz_emit_ethernet(0x13c, &(0x7f00000029c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4086dd6000000001060600fc020000000000000000000000000001fe8000000000000000000000000000aa08000400025006003a0500000000000007180000000104fdd6e303000000000000000008000000000000000100050203ff040107040100c2040000000100000000004e22", @ANYRES32=r2, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) syz_emit_ethernet(0xb1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1f7a4ab76be3183ecb0000000010008100460200000000000000069078e066955fb90000008204ca954e000000913e0011", @ANYRESDEC, @ANYRES32=r2, @ANYRESDEC=r6, @ANYRESOCT=r3], 0x0) syz_emit_ethernet(0x115, &(0x7f0000006840)={@multicast, @empty, @val={@val={0x9100, 0x1, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x2}], @ipv4=@tcp={{0xe, 0x4, 0x1, 0x13, 0xfb, 0x68, 0x0, 0x3, 0x6, 0x0, @local, @broadcast, {[@ssrr={0x89, 0x23, 0x4e, [@multicast2, @multicast1, @rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010101]}]}}, {{0x4e21, 0x4e24, r2, 0x41424344, 0x1, 0x0, 0x8, 0x4, 0x0, 0x0, 0xffff, {[@generic={0x3, 0x5, '(/A'}, @mptcp=@mp_join={0x1e, 0x3, 0x5}, @eol]}}, {"0ebfbdd980e7c96874767de11c1a0ff525b74c7fbe3bce99c9854c7e087408ea83b80025444f730a5e73ea908a156ca67f8401a6b256b65419aba27485ed4ab96f9fa512098b405e3b694fffb642b992eab87916d744a14b4bf986b5f255048d60c7309898fcc388ef7c617e669aa238ab457b8ece2063681aca995085bc6e400ca67dab2f10dd9d8b15983c1d281cb083a3491b4c63f0130a02a3d252647e38620ea7"}}}}}}}, &(0x7f0000006980)={0x0, 0x3, [0xa38, 0x77, 0xdb2, 0x112]}) syz_emit_ethernet(0x37f, &(0x7f0000001600)={@remote, @local, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "8192d7", 0x349, 0x6, 0xff, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x3b, 0x2, 0x4, 0x1, 0x0, 0x20, 0x2, [@dev={0xfe, 0x80, '\x00', 0x41}]}, @routing={0xc, 0x4, 0x0, 0x0, 0x0, [@empty, @mcast1]}, @fragment={0x2e, 0x0, 0x7, 0x1, 0x0, 0x4, 0x65}, @routing={0x2c, 0x6, 0x0, 0x8, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x17}, @loopback]}, @srh={0x89, 0x8, 0x4, 0x4, 0x7f, 0x50, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1]}, @dstopts={0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x80}]}, @dstopts={0x6, 0x26, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0xe5, 0x1, [0x5, 0x0, 0x1, 0x8ca, 0xfffffffffffffffb, 0xf]}}, @generic={0x9, 0xf6, "2c72e3db764a84007a9dd8246ad259a1361e200f91103b87c1514667c6f85fc9188dd3737031f38d466391acf5c3ee7cda063e2af69b8eee95b375e7ab2529a3edb65b4a2e10b825dfe73cc75cea024dd83e9a920b3366088ec96fa72d39c3785aec52b78737ba51a88e4f966b1d7169cf83d1281eefabd445ecc637f8cbb20a64f79f436d251d60d942813ba293137924b5df822e2f1353cd755f9887ac54ddb3d749d1a8d67a792139534cc874455568259accdc87e905280bf26ab59b68195e318d3c0ae95b2d4031b47d2b71469bdb05eda7dbc35a4c31b4a10879b01bdc29669ee99d86ac3686ac9e4319697a5e71898b502e96"}]}], {{0x4e20, 0x4e21, r2, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x3, 0x0, 0x1, {[@mptcp=@generic={0xd, 0xd, "5833c988248fd12d50add0"}, @fastopen={0x22, 0x7, "bf00e17605"}, @sack={0x5, 0x1e, [0x24af, 0x7, 0x9, 0xfffffffc, 0x7fff, 0x80000000, 0x5]}, @exp_fastopen={0xfe, 0xd, 0xf989, "6674aa69d65bcc9ad1"}, @sack_perm={0x4, 0x2}]}}, {"96a200c61194348b60c8fe11e0b705deb001c0571d3af05bfe1e375347963fe75167740f4082e47a1bfe6cb3f7a2baaa5969910802ac1e0f6de748f1a44e2ee65cd5854a481dd4a53de07222b77e77842080324f0d35e1d043c8126cbf836e0781233c4da7caeea3206e3175c145f7121639d12338c2fe8fe8cdce990e11627a0f053e9bea42ada618acd3b4d31f8230e07d6ff243992a62105cb16ed63cc17015a853f41c66e228bfc405b7ce001929991033d7d518a7bbc93d796957780196ab9342c092fda07ac532e0fc0c202734e52eb74dc0fe76bfb1"}}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xea, 0x5a2, 0x920, 0xdfc]}) syz_emit_ethernet(0x236, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0xe, 0x6, "9eda7f", 0x200, 0x6, 0xff, @private0, @mcast2, {[@routing={0x2, 0x8, 0x0, 0x6, 0x0, [@remote, @local, @local, @mcast2]}, @hopopts={0x87, 0x7, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @local}, @ra]}, @fragment={0x89, 0x0, 0x8, 0x0, 0x0, 0xe, 0x66}, @routing={0x4, 0x12, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @local, @mcast2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {{0x4e22, 0x4e21, r2, 0x41424344, 0x1, 0x0, 0x9, 0x1, 0x6, 0x0, 0xfbff, {[@eol, @mss={0x2, 0x4, 0x2}, @timestamp={0x8, 0xa, 0x8, 0x7}, @nop]}}, {"933a28bf945c53283494f2f395a877c879f105f9540f1b3e20137dc2123fb0b0abcfefc3bbb8fbe24756d492c61fa8788438c97c48a8ab3fe764642cd583d98e11a9f85c99f192223cb53dfd6b5707e7e4b825b1cfd654368c8e783e647a6441518afeb2dd68499e83226ea04e97e0c4408178647f704212578714c2cbd3f9f4f1c5e9adab9099639ea92f2a8a778bd6d6b626396bc6e2ee038446fb2fdaf8c7d2f6550797d0313c1eba45fe"}}}}}}}, 0x0) syz_emit_ethernet(0xf8, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @multicast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x3, 0x8, 0xea, 0x67, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, {[@rr={0x7, 0x17, 0x79, [@rand_addr=0x64010102, @remote, @broadcast, @loopback, @local]}]}}, {{0x4e20, 0x4e22, 0x41424344, r2, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x8, {[@nop]}}, {"9c45ef78ce3115e7eccab1de73d947fc063b829985d56d63a64e55acf466388f86279510cb163f5e0cfef573c4aa75d694e544ffedfbe6144bd81c1599e8985c1a2af033707f2e20c0837ccdf71fecfddbb5bef8003e34b920a7859cb34b8f1efa3bb8f4049045670ad48c1f319138b47dc108bf87349c3f7cd355b81c0bded3b573640294e7526b667cab03dbcde59714a95cafdd86fded8de832993044c9b9f545190b4f75"}}}}}}, &(0x7f0000000500)={0x0, 0x1, [0x48f, 0x58, 0xf86, 0xd42]}) syz_emit_ethernet(0x585, &(0x7f0000000200)={@random="b4cf4cbf402a", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@val={0x9100, 0x6, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}, {0x1000}], @ipv6=@tcp={0x0, 0x6, "9ce01c", 0x53f, 0x6, 0x1, @mcast2, @private1, {[@fragment={0x3c, 0x0, 0x78, 0x0, 0x0, 0x9, 0x64}, @hopopts={0x32, 0x55, '\x00', [@generic={0x20, 0x58, "27f5dc665020e2845e4e9fbc1d07b6b5820468659fed266984f5f913c9bbac52f76c3507eefca25899b834c74702c39fd6c33ea00aa01335be69ae09bcbb2c70e4aaf389284c5b8088fe65513f22649a34b32b28f9ed5d5b"}, @calipso={0x7, 0x30, {0x1, 0xa, 0xff, 0x3, [0x1, 0x726b, 0x7b6d, 0xfffffffffffffffe, 0x400]}}, @padn, @generic={0x95, 0x96, "1692e3e595183a12bd8b67093c9dd7a78d2694d31ee4aed1a28a9d28e581bbc06177ef01a78ad2200e3f6bd1bcd6f2d42617f4518ff32c9094ebc7806d67c15d09f09e149fb994b2f9022bc8a4579777f2d3a960f09259c3053c3bc76aeb8216e8f1135ad9ed23ce097c925b075e370df2477bb3d5f5970bda4720a0dccc5a0c1aed4e87b4a24cff653c9d98411ae196de968acc8d98"}, @generic={0x40, 0xb2, "4748a5b11f2f17ee2ef52f1af641d0eb7df71dd92a87b90d6b6641414b2440486fce930cbc2b21973e1f22eb081afd01da07e5c0fa00b01b0722ffb79b679184eb5b696398dbbc999335b96bb0f66407da5b740a9e3efbeaa759583bca3fb00dbf75c9c9a7d2474689d057116cd38768408b60f7686932f7f0d715a8799f54fb12d61a3feec0f7baf9aafc1953e1c4e9e6ddd8143cc04271b0b6eec0151b25aaf2fda1cf71932e342b00b6193edfba72d012"}, @generic={0x80, 0xcd, "dd9aec3b2e547bf076a55431a017ee293ff005a2e5a4e33b14c7c11fc0bfae2574fd36d4dbf3141089e3b7b6ff3df667539067ee5463a9faf1698908af92b3726f2f28bf58a78e2a5cd413626083523dfc88fd29dbf82d09fed9150b7d3e4fd7b37844e08c0885aed35c2ff01eac588caac6401d53112b7ae603286129863ac27b85c14fc548ddcb8596bd3f5025a836357504159b41a687da4742ce45c1df903af4ae5bb547fdbf0f3e526a24e494b6b498bf9e0461f796a202ab7d5902ebf9da6687001ca4efd4325c7696e6"}]}, @srh={0x1d, 0x4, 0x4, 0x2, 0x3, 0x38, 0x93e, [@mcast2, @empty]}, @hopopts={0x6c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @routing={0x21, 0x0, 0x2, 0x80}, @fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x4, 0x66}, @dstopts={0x4, 0x19, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x0, 0xbd, "e7c1f7294c5e54480e90221dbaa994df3b1386bf374a7a388b4d676d2566bf8e0466737f3fc3e94064d8c738d986bae133bad77bee7f500061a851c6fcf9f4792c87929b2a6eff79029aa575608ec2d85bbda0a2e5a4df6897132e9e133ea0feea4bebb75ce4e758a7095e31fd3af0f9867bc499d9ad64d6e996f85fd68a25d601d8d8070dd3f40353ce2442bb7925d602f46488db238aafcf330c929e080117ac9448dd7e74fe7cc3d2586584fee46a0a121ae8cde7c536ea64a2f19c"}]}, @srh={0x21, 0x8, 0x4, 0x4, 0x1, 0x20, 0x80, [@private0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x22}]}], {{0x4e23, 0x4e21, r1, r2, 0x1, 0x0, 0x9, 0x4, 0x2, 0x0, 0x20, {[@generic={0x8, 0xb, "14281353e9cdc15691"}, @sack_perm={0x4, 0x2}]}}, {"88a9201f2855f231b45a704bc971341f948a2a5852d9477894bd64429bfb1753dc12f94ff948b9e06fafd7163f6833482fbd494d1bad11abb217cf10b14c39f7786e61b8a7365fb24eddf2ea26d939e243f42d702b8f9cf60181505a9bddbeecc7c593a106c34b83231daa5fab717796a4199f6457043af54959d100333597a415251b17e5ac8689a5f2e3303a7fd2dd8439c5c4a680007944fc36e0f75b0f51a480f0cfd41a3e7a5d5b41b2771f0cb919212b786d02f8bacfc246ba4762b5d0d3bae6004ab919b493b72adf7f8ab321bd71869a0fca2e6ed038295eec803b85a546e1"}}}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x45, 0x0, 0x1, 0x80ffffff}, {}, {0x6}]}, 0x10) shutdown(r8, 0x0) kernel console output (not intermixed with test programs): oduct=ffff, bcdDevice= 0.00 [ 186.550098][ T3951] loop1: detected capacity change from 0 to 1024 [ 186.558939][ T3154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.571003][ T3154] usb 3-1: config 0 descriptor?? [ 186.619999][ T3951] EXT4-fs (loop1): Ignoring removed nobh option [ 186.626270][ T3951] EXT4-fs (loop1): Ignoring removed orlov option [ 186.640949][ T3951] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,abort,block_validity,init_itable=0x0000000000000006,block_validity,max_dir_size_kb=0x00000000000007b1,nobh,block_validity,orlov,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 186.910445][ T3951] overlayfs: './file1' not a directory [ 186.929675][ T825] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 187.050330][ T3154] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 187.058326][ T3154] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 187.067001][ T3154] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 187.189554][ T316] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 187.319585][ T825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.330393][ T825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.330635][ T3154] usb 3-1: USB disconnect, device number 23 [ 187.340289][ T825] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 187.356222][ T825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.364688][ T825] usb 5-1: config 0 descriptor?? [ 187.550470][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.562036][ T316] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.571189][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.579493][ T316] usb 2-1: config 0 descriptor?? [ 187.809872][ T30] audit: type=1400 audit(2000000066.910:1727): avc: denied { getopt } for pid=3968 comm="syz.0.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.837508][ T3971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1045'. [ 187.860638][ T3971] loop0: detected capacity change from 0 to 512 [ 187.914918][ T3971] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.921853][ T825] magicmouse 0003:05AC:0269.0022: item fetching failed at offset 6/7 [ 187.935192][ T825] magicmouse 0003:05AC:0269.0022: magicmouse hid parse failed [ 187.943085][ T825] magicmouse: probe of 0003:05AC:0269.0022 failed with error -22 [ 187.945623][ T3971] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038 (0x7fffffff) [ 188.311874][ T20] usb 5-1: USB disconnect, device number 19 [ 188.339992][ T316] usbhid 2-1:0.0: can't add hid device: -71 [ 188.345890][ T316] usbhid: probe of 2-1:0.0 failed with error -71 [ 188.353081][ T316] usb 2-1: USB disconnect, device number 25 [ 188.689709][ T3980] loop0: detected capacity change from 0 to 512 [ 188.765497][ T3980] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 188.790635][ T3980] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 188.798370][ T3980] System zones: 0-2, 18-18, 34-34 [ 188.804694][ T3980] EXT4-fs (loop0): 1 orphan inode deleted [ 188.810523][ T3980] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback. [ 188.838155][ T3980] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038 (0x7fffffff) [ 188.886244][ T3982] loop1: detected capacity change from 0 to 40427 [ 188.921824][ T3990] loop4: detected capacity change from 0 to 1024 [ 188.929576][ T3982] F2FS-fs (loop1): invalid crc value [ 188.951319][ T3982] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.992935][ T3990] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.013401][ T30] audit: type=1400 audit(2000000068.110:1728): avc: denied { write } for pid=3987 comm="syz.4.1050" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.013479][ T3990] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 189.050486][ T316] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 189.058993][ T3982] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 189.080371][ T3990] xt_TCPMSS: Only works on TCP SYN packets [ 189.489523][ T20] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 189.526225][ T4006] loop3: detected capacity change from 0 to 256 [ 189.593310][ T316] usb 3-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 189.605866][ T316] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 189.616699][ T316] usb 3-1: config 16 has no interfaces? [ 189.622825][ T316] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 189.632499][ T2234] attempt to access beyond end of device [ 189.632499][ T2234] loop1: rw=2049, want=45104, limit=40427 [ 189.632657][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.675477][ T30] audit: type=1400 audit(2000000068.770:1729): avc: denied { mounton } for pid=4005 comm="syz.3.1053" path="/13/file1/file0" dev="loop3" ino=1048700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 189.739503][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 191.070768][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.089705][ T20] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.142873][ T3984] UDC core: couldn't find an available UDC or it's busy: -16 [ 191.150478][ T3984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.168862][ T4020] netem: change failed [ 191.269603][ T20] usb 1-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 191.278488][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.286987][ T20] usb 1-1: Product: syz [ 191.291182][ T20] usb 1-1: Manufacturer: syz [ 191.295694][ T20] usb 1-1: SerialNumber: syz [ 191.296457][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.300977][ T20] usb 1-1: config 0 descriptor?? [ 191.313004][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.320821][ T4026] device bridge_slave_0 entered promiscuous mode [ 191.329922][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.336945][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.344313][ T4026] device bridge_slave_1 entered promiscuous mode [ 191.358875][ T3984] UDC core: couldn't find an available UDC or it's busy: -16 [ 191.366281][ T3984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.401559][ T4032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1064'. [ 191.419678][ T39] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 191.438600][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.445478][ T4026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.452610][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.459805][ T4026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.507617][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.515963][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.524589][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.544009][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.552493][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.559487][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.567396][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.575948][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.583287][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.600646][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.608940][ T20] usb 1-1: USB disconnect, device number 24 [ 191.619680][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.628617][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.656414][ T4026] device veth0_vlan entered promiscuous mode [ 191.662815][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.670994][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.678338][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.686864][ T8] device bridge_slave_1 left promiscuous mode [ 191.692914][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 191.696279][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.705692][ T8] device bridge_slave_0 left promiscuous mode [ 191.712326][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.721297][ T8] device veth1_macvtap left promiscuous mode [ 191.727240][ T8] device veth0_vlan left promiscuous mode [ 191.868555][ T4026] device veth1_macvtap entered promiscuous mode [ 191.875724][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.889680][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.898490][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.029844][ T39] usb 2-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 192.038712][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.046787][ T39] usb 2-1: Product: syz [ 192.046830][ T4038] loop4: detected capacity change from 0 to 40427 [ 192.051060][ T39] usb 2-1: Manufacturer: syz [ 192.061598][ T39] usb 2-1: SerialNumber: syz [ 192.069992][ T39] usb 2-1: config 0 descriptor?? [ 192.301004][ T39] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 192.305030][ T3984] UDC core: couldn't find an available UDC or it's busy: -16 [ 192.316315][ T4038] F2FS-fs (loop4): invalid crc value [ 192.326912][ T3984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 192.333392][ T4038] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.370672][ T4038] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 192.400007][ T20] usb 3-1: USB disconnect, device number 24 [ 193.544762][ T2407] attempt to access beyond end of device [ 193.544762][ T2407] loop4: rw=2049, want=45104, limit=40427 [ 193.565985][ T316] usb 2-1: USB disconnect, device number 26 [ 193.733403][ T4064] loop3: detected capacity change from 0 to 512 [ 193.746591][ T4064] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.772997][ T4064] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1071: casefold flag without casefold feature [ 193.787330][ T4064] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1071: missing EA_INODE flag [ 193.795292][ T4068] loop2: detected capacity change from 0 to 2048 [ 193.812270][ T4064] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1071: error while reading EA inode 12 err=-117 [ 193.827451][ T4064] EXT4-fs (loop3): 1 orphan inode deleted [ 193.833132][ T4064] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 193.870124][ T4068] EXT4-fs (loop2): Ignoring removed orlov option [ 193.881676][ T4068] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 193.953200][ T3154] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 194.273204][ T4080] loop1: detected capacity change from 0 to 1024 [ 194.287690][ T4082] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1075'. [ 194.301979][ T4080] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.1076: casefold flag without casefold feature [ 194.316100][ T4080] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 194.326199][ T4080] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.326844][ T4086] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 194.469917][ T3154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.480971][ T3154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.490953][ T3154] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 194.499938][ T3154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.508785][ T3154] usb 1-1: config 0 descriptor?? [ 194.642135][ T2206] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 194.657044][ T2206] EXT4-fs (loop2): Remounting filesystem read-only [ 194.663627][ T20] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 194.674920][ T345] tipc: Left network mode [ 194.709609][ T825] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 194.757499][ T4093] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.764409][ T4093] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.771620][ T4093] device bridge_slave_0 entered promiscuous mode [ 194.778381][ T4093] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.785370][ T4093] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.792498][ T4093] device bridge_slave_1 entered promiscuous mode [ 194.856256][ T4093] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.863138][ T4093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.870256][ T4093] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.877098][ T4093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.932071][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.938912][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.946553][ T4100] device bridge_slave_0 entered promiscuous mode [ 194.956119][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.963186][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.971088][ T4100] device bridge_slave_1 entered promiscuous mode [ 194.988080][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.995805][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.003037][ T3154] hid (null): unknown global tag 0xe [ 195.009110][ T3154] logitech-hidpp-device 0003:046D:C086.0023: unknown main item tag 0x0 [ 195.017546][ T3154] logitech-hidpp-device 0003:046D:C086.0023: unknown main item tag 0x0 [ 195.017637][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.033013][ T3154] logitech-hidpp-device 0003:046D:C086.0023: unknown main item tag 0x0 [ 195.041249][ T3154] logitech-hidpp-device 0003:046D:C086.0023: unknown global tag 0xe [ 195.049050][ T3154] logitech-hidpp-device 0003:046D:C086.0023: item 0 1 1 14 parsing failed [ 195.057578][ T20] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 195.067759][ T20] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.078825][ T20] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 195.089265][ T3154] logitech-hidpp-device 0003:046D:C086.0023: hidpp_probe:parse failed [ 195.094407][ T825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.097418][ T3154] logitech-hidpp-device: probe of 0003:046D:C086.0023 failed with error -22 [ 195.108488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.117445][ T20] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.126376][ T825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.140236][ T20] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.152223][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.157195][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.164212][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.179916][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.187895][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.194781][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.208562][ T316] usb 1-1: USB disconnect, device number 25 [ 195.224471][ T20] usb 4-1: invalid MIDI out EP 0 [ 195.230547][ T20] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 195.244907][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.252784][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.266461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.274930][ T825] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 195.284214][ T825] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 195.292411][ T825] usb 2-1: Product: syz [ 195.297306][ T825] usb 2-1: config 0 descriptor?? [ 195.311821][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.319984][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.327160][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.338393][ T4093] device veth0_vlan entered promiscuous mode [ 195.346054][ T345] device bridge_slave_0 left promiscuous mode [ 195.352373][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.360526][ T345] device veth1_macvtap left promiscuous mode [ 195.453949][ T39] usb 4-1: USB disconnect, device number 24 [ 195.480421][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.491916][ T4093] device veth1_macvtap entered promiscuous mode [ 195.504610][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.519414][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.560691][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.570799][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.579405][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.586436][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.594067][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.602781][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.609905][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.617204][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.625088][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.633487][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.645810][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.656752][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.664987][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.672617][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.682542][ T4100] device veth0_vlan entered promiscuous mode [ 195.694359][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.702323][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.712056][ T4100] device veth1_macvtap entered promiscuous mode [ 195.724403][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.732999][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.741432][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.755008][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.763203][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.780669][ T825] konepure 0003:1E7D:2DB4.0024: item fetching failed at offset 10/11 [ 195.790347][ T345] tipc: Left network mode [ 195.798153][ T825] konepure 0003:1E7D:2DB4.0024: parse failed [ 195.804317][ T825] konepure: probe of 0003:1E7D:2DB4.0024 failed with error -22 [ 195.805407][ T30] audit: type=1400 audit(2000000074.900:1730): avc: denied { transfer } for pid=4109 comm="syz.2.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 195.829711][ T4110] binder: transaction release 20 bad object at offset 536871168, size 72 [ 195.831890][ T20] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 195.843937][ T4111] loop0: detected capacity change from 0 to 512 [ 195.860478][ T4113] loop2: detected capacity change from 0 to 256 [ 195.892943][ T4111] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.006831][ T4111] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1087: casefold flag without casefold feature [ 196.257365][ T4111] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.1087: missing EA_INODE flag [ 196.270960][ T4111] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1087: error while reading EA inode 12 err=-117 [ 196.285179][ T4111] EXT4-fs (loop0): 1 orphan inode deleted [ 196.286424][ T6] usb 2-1: USB disconnect, device number 27 [ 196.290891][ T4111] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 196.334808][ T4125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4125 comm=syz.3.1091 [ 196.396391][ T4127] loop3: detected capacity change from 0 to 2048 [ 196.419643][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.430614][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.441978][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.454795][ T20] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.463791][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.473021][ T20] usb 5-1: config 0 descriptor?? [ 196.501596][ T4127] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: none. [ 196.517585][ T4127] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 196.544460][ T30] audit: type=1400 audit(2000000075.640:1731): avc: denied { ioctl } for pid=4126 comm="syz.3.1092" path="/9/file0/file0/file0" dev="loop3" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 196.581535][ T345] device bridge_slave_0 left promiscuous mode [ 196.587536][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.598193][ T345] device veth1_macvtap left promiscuous mode [ 196.656678][ T30] audit: type=1400 audit(2000000075.750:1732): avc: denied { create } for pid=4133 comm="syz.0.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.676295][ T30] audit: type=1400 audit(2000000075.750:1733): avc: denied { connect } for pid=4133 comm="syz.0.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.692433][ T4137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1095'. [ 196.833535][ T30] audit: type=1400 audit(2000000075.750:1734): avc: denied { write } for pid=4133 comm="syz.0.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.854217][ T4137] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 197.069380][ T4105] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1083'. [ 197.070151][ T30] audit: type=1400 audit(2000000076.160:1735): avc: denied { setopt } for pid=4104 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.098108][ T30] audit: type=1400 audit(2000000076.180:1736): avc: denied { nlmsg_write } for pid=4142 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 197.115326][ T4147] loop1: detected capacity change from 0 to 512 [ 197.138043][ T4147] EXT4-fs (loop1): Test dummy encryption mode enabled [ 197.143983][ T4151] loop0: detected capacity change from 0 to 512 [ 197.147040][ T4147] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1100: inline data xattr refers to an external xattr inode [ 197.166350][ T4147] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1100: couldn't read orphan inode 12 (err -117) [ 197.178296][ T4147] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 197.191570][ T4151] EXT4-fs (loop0): 1 orphan inode deleted [ 197.213777][ T4151] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 197.237690][ T4151] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038 (0x7fffffff) [ 197.709576][ T30] audit: type=1326 audit(2000000076.800:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 197.737906][ T30] audit: type=1326 audit(2000000076.800:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 197.764606][ T30] audit: type=1326 audit(2000000076.800:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 198.054772][ T4175] Illegal XDP return value 4294967274, expect packet loss! [ 198.089545][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 198.095430][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 198.109706][ T20] usb 5-1: USB disconnect, device number 20 [ 198.125851][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.137015][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.146344][ T4168] device bridge_slave_0 entered promiscuous mode [ 198.165462][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.199755][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.207100][ T4168] device bridge_slave_1 entered promiscuous mode [ 198.391455][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.399486][ T26] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 198.408205][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.439621][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.450704][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.462194][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.469295][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.478675][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.486772][ T20] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 198.495490][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.505308][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.512227][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.536441][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.546972][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.557167][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.601279][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.625122][ T4168] device veth0_vlan entered promiscuous mode [ 198.638751][ T4190] loop3: detected capacity change from 0 to 512 [ 198.647489][ T345] device bridge_slave_1 left promiscuous mode [ 198.653601][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.660940][ T345] device bridge_slave_0 left promiscuous mode [ 198.666936][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.674478][ T345] device veth1_macvtap left promiscuous mode [ 198.680439][ T345] device veth0_vlan left promiscuous mode [ 198.692760][ T4190] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1114: inline data xattr refers to an external xattr inode [ 198.707618][ T4190] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1114: couldn't read orphan inode 12 (err -117) [ 198.719832][ T4190] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.789577][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.800844][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.810907][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.824068][ T26] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 198.833197][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.841449][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.849227][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.856892][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.864288][ T26] usb 2-1: config 0 descriptor?? [ 198.876398][ T4168] device veth1_macvtap entered promiscuous mode [ 198.886711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.949248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.063154][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.073341][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.084097][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.169838][ T20] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 199.178872][ T20] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 199.186637][ T20] usb 5-1: Product: syz [ 199.191126][ T20] usb 5-1: config 0 descriptor?? [ 199.304690][ T4207] loop2: detected capacity change from 0 to 2048 [ 199.349874][ T4207] loop2: p3 < > p4 < > [ 199.351520][ T26] holtek_mouse 0003:04D9:A070.0025: item fetching failed at offset 1/5 [ 199.353957][ T4207] loop2: partition table partially beyond EOD, truncated [ 199.363536][ T26] holtek_mouse 0003:04D9:A070.0025: hid parse failed: -22 [ 199.369020][ T4207] loop2: p3 start 4284289 is beyond EOD, truncated [ 199.377055][ T26] holtek_mouse: probe of 0003:04D9:A070.0025 failed with error -22 [ 199.521333][ T841] udevd[841]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 199.537023][ T841] udevd[841]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 199.539393][ T4211] loop3: detected capacity change from 0 to 256 [ 199.554220][ T4211] exfat: Deprecated parameter 'utf8' [ 199.559857][ T4211] exfat: Deprecated parameter 'utf8' [ 199.560978][ T3154] usb 2-1: USB disconnect, device number 28 [ 199.571818][ T4211] exfat: Deprecated parameter 'utf8' [ 199.576924][ T4211] exfat: Deprecated parameter 'utf8' [ 199.605892][ T4212] loop2: detected capacity change from 0 to 8192 [ 199.622978][ T4211] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 199.645987][ T4212] loop2: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 199.646166][ T4212] loop2: p1 start 4177526784 is beyond EOD, truncated [ 199.741939][ T4212] loop2: p2 start 8388612 is beyond EOD, truncated [ 199.748771][ T4212] loop2: p4 size 32937 extends beyond EOD, truncated [ 199.750577][ T20] konepure 0003:1E7D:2DB4.0026: item fetching failed at offset 10/11 [ 199.760541][ T4212] loop2: p5 start 4177526784 is beyond EOD, truncated [ 199.773949][ T20] konepure 0003:1E7D:2DB4.0026: parse failed [ 199.775259][ T4212] loop2: p6 start 8388612 is beyond EOD, truncated [ 199.781061][ T20] konepure: probe of 0003:1E7D:2DB4.0026 failed with error -22 [ 199.788756][ T4212] loop2: p7 size 32937 extends beyond EOD, truncated [ 199.804888][ T4212] loop2: p8 start 4177526784 is beyond EOD, truncated [ 199.811622][ T4212] loop2: p9 start 8388612 is beyond EOD, truncated [ 199.818150][ T4212] loop2: p10 size 32937 extends beyond EOD, truncated [ 199.826245][ T4212] loop2: p11 start 4177526784 is beyond EOD, truncated [ 199.833546][ T4212] loop2: p12 start 8388612 is beyond EOD, truncated [ 199.840423][ T4212] loop2: p13 size 32937 extends beyond EOD, truncated [ 199.847855][ T4212] loop2: p14 start 4177526784 is beyond EOD, truncated [ 199.855509][ T4212] loop2: p15 start 8388612 is beyond EOD, truncated [ 199.862012][ T4212] loop2: p16 size 32937 extends beyond EOD, truncated [ 199.876069][ T4212] loop2: p17 start 4177526784 is beyond EOD, truncated [ 199.883142][ T4212] loop2: p18 start 8388612 is beyond EOD, truncated [ 199.889909][ T4212] loop2: p19 size 32937 extends beyond EOD, truncated [ 199.897378][ T4212] loop2: p20 start 4177526784 is beyond EOD, truncated [ 199.904244][ T4212] loop2: p21 start 8388612 is beyond EOD, truncated [ 199.910756][ T4212] loop2: p22 size 32937 extends beyond EOD, truncated [ 199.917748][ T4212] loop2: p23 start 4177526784 is beyond EOD, truncated [ 199.924576][ T4212] loop2: p24 start 8388612 is beyond EOD, truncated [ 199.930959][ T4212] loop2: p25 size 32937 extends beyond EOD, truncated [ 199.938033][ T4212] loop2: p26 start 4177526784 is beyond EOD, truncated [ 199.945102][ T4212] loop2: p27 start 8388612 is beyond EOD, truncated [ 199.951736][ T4212] loop2: p28 size 32937 extends beyond EOD, truncated [ 199.967626][ T4212] loop2: p29 start 4177526784 is beyond EOD, truncated [ 199.976524][ T4212] loop2: p30 start 8388612 is beyond EOD, truncated [ 199.984044][ T4212] loop2: p31 size 32937 extends beyond EOD, truncated [ 200.043336][ T4212] loop2: p32 start 4177526784 is beyond EOD, truncated [ 200.075322][ T4212] loop2: p33 start 8388612 is beyond EOD, truncated [ 200.108146][ T4212] loop2: p34 size 32937 extends beyond EOD, truncated [ 200.257707][ T4212] loop2: p35 start 4177526784 is beyond EOD, truncated [ 200.318302][ T4212] loop2: p36 start 8388612 is beyond EOD, truncated [ 200.451404][ T4212] loop2: p37 size 32937 extends beyond EOD, truncated [ 200.470778][ T4212] loop2: p38 start 4177526784 is beyond EOD, truncated [ 200.479500][ T4212] loop2: p39 start 8388612 is beyond EOD, truncated [ 200.485957][ T4212] loop2: p40 size 32937 extends beyond EOD, truncated [ 200.486288][ T825] usb 5-1: USB disconnect, device number 21 [ 200.513424][ T4212] loop2: p41 start 4177526784 is beyond EOD, truncated [ 200.595925][ T4212] loop2: p42 start 8388612 is beyond EOD, truncated [ 200.739677][ T4212] loop2: p43 size 32937 extends beyond EOD, truncated [ 200.748316][ T4212] loop2: p44 start 4177526784 is beyond EOD, truncated [ 200.755390][ T4212] loop2: p45 start 8388612 is beyond EOD, truncated [ 200.763323][ T4212] loop2: p46 size 32937 extends beyond EOD, truncated [ 200.771672][ T4212] loop2: p47 start 4177526784 is beyond EOD, truncated [ 200.778283][ T4225] loop3: detected capacity change from 0 to 1024 [ 200.778740][ T4212] loop2: p48 start 8388612 is beyond EOD, truncated [ 200.795773][ T4212] loop2: p49 size 32937 extends beyond EOD, truncated [ 200.803477][ T4212] loop2: p50 start 4177526784 is beyond EOD, truncated [ 200.810429][ T4225] EXT4-fs (loop3): Ignoring removed orlov option [ 200.810491][ T4212] loop2: p51 start 8388612 is beyond EOD, truncated [ 200.816861][ T4225] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 200.823099][ T4212] loop2: p52 size 32937 extends beyond EOD, truncated [ 200.839328][ T4212] loop2: p53 start 4177526784 is beyond EOD, truncated [ 200.846311][ T4212] loop2: p54 start 8388612 is beyond EOD, truncated [ 200.853055][ T4212] loop2: p55 size 32937 extends beyond EOD, truncated [ 200.861089][ T4212] loop2: p56 start 4177526784 is beyond EOD, truncated [ 200.867778][ T4212] loop2: p57 start 8388612 is beyond EOD, truncated [ 200.874575][ T4212] loop2: p58 size 32937 extends beyond EOD, truncated [ 200.881889][ T4212] loop2: p59 start 4177526784 is beyond EOD, truncated [ 200.888909][ T4212] loop2: p60 start 8388612 is beyond EOD, truncated [ 200.895401][ T4212] loop2: p61 size 32937 extends beyond EOD, truncated [ 200.907199][ T4212] loop2: p62 start 4177526784 is beyond EOD, truncated [ 200.914439][ T4212] loop2: p63 start 8388612 is beyond EOD, truncated [ 200.921012][ T4212] loop2: p64 size 32937 extends beyond EOD, truncated [ 200.928462][ T4212] loop2: p65 start 4177526784 is beyond EOD, truncated [ 200.935543][ T4212] loop2: p66 start 8388612 is beyond EOD, truncated [ 200.947531][ T4212] loop2: p67 size 32937 extends beyond EOD, truncated [ 200.956403][ T4212] loop2: p68 start 4177526784 is beyond EOD, truncated [ 200.963140][ T4212] loop2: p69 start 8388612 is beyond EOD, truncated [ 200.969786][ T4212] loop2: p70 size 32937 extends beyond EOD, truncated [ 200.976897][ T4212] loop2: p71 start 4177526784 is beyond EOD, truncated [ 200.983621][ T4212] loop2: p72 start 8388612 is beyond EOD, truncated [ 200.990707][ T4212] loop2: p73 size 32937 extends beyond EOD, truncated [ 201.000956][ T4212] loop2: p74 start 4177526784 is beyond EOD, truncated [ 201.007672][ T4212] loop2: p75 start 8388612 is beyond EOD, truncated [ 201.014928][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 201.014940][ T30] audit: type=1326 audit(2000000080.110:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 201.015189][ T4212] loop2: p76 size 32937 extends beyond EOD, [ 201.028099][ T30] audit: type=1326 audit(2000000080.120:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 201.044787][ T4212] truncated [ 201.073958][ T30] audit: type=1326 audit(2000000080.150:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 201.100497][ T4212] loop2: p77 start 4177526784 is beyond EOD, truncated [ 201.107262][ T4212] loop2: p78 start 8388612 is beyond EOD, truncated [ 201.107521][ T30] audit: type=1326 audit(2000000080.200:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 201.119524][ T4212] loop2: p79 size 32937 extends beyond EOD, [ 201.137239][ T30] audit: type=1326 audit(2000000080.200:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 201.144052][ T4212] truncated [ 201.170751][ T4212] loop2: p80 start 4177526784 is beyond EOD, truncated [ 201.177603][ T4212] loop2: p81 start 8388612 is beyond EOD, truncated [ 201.184917][ T30] audit: type=1326 audit(2000000080.280:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 201.208545][ T30] audit: type=1326 audit(2000000080.280:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 201.223194][ T4212] loop2: p82 size 32937 extends beyond EOD, truncated [ 201.245529][ T4212] loop2: p83 start 4177526784 is beyond EOD, truncated [ 201.252888][ T4212] loop2: p84 start 8388612 is beyond EOD, truncated [ 201.260300][ T4212] loop2: p85 size 32937 extends beyond EOD, truncated [ 201.267403][ T4212] loop2: p86 start 4177526784 is beyond EOD, truncated [ 201.270987][ T30] audit: type=1326 audit(2000000080.280:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 201.297710][ T4212] loop2: p87 start 8388612 is beyond EOD, truncated [ 201.302238][ T30] audit: type=1326 audit(2000000080.340:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 201.304470][ T4212] loop2: p88 size 32937 extends beyond EOD, truncated [ 201.328279][ T30] audit: type=1326 audit(2000000080.340:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 201.335536][ T4212] loop2: p89 start 4177526784 is beyond EOD, truncated [ 201.365889][ T4212] loop2: p90 start 8388612 is beyond EOD, truncated [ 201.372724][ T4212] loop2: p91 size 32937 extends beyond EOD, truncated [ 201.379918][ T4212] loop2: p92 start 4177526784 is beyond EOD, truncated [ 201.386637][ T4212] loop2: p93 start 8388612 is beyond EOD, truncated [ 201.393501][ T4212] loop2: p94 size 32937 extends beyond EOD, truncated [ 201.400664][ T4212] loop2: p95 start 4177526784 is beyond EOD, truncated [ 201.407325][ T4212] loop2: p96 start 8388612 is beyond EOD, truncated [ 201.413790][ T4212] loop2: p97 size 32937 extends beyond EOD, truncated [ 201.420824][ T4212] loop2: p98 start 4177526784 is beyond EOD, truncated [ 201.427566][ T4212] loop2: p99 start 8388612 is beyond EOD, truncated [ 201.434052][ T4212] loop2: p100 size 32937 extends beyond EOD, truncated [ 201.441218][ T4212] loop2: p101 start 4177526784 is beyond EOD, truncated [ 201.447974][ T4212] loop2: p102 start 8388612 is beyond EOD, truncated [ 201.454709][ T4212] loop2: p103 size 32937 extends beyond EOD, truncated [ 201.461864][ T4212] loop2: p104 start 4177526784 is beyond EOD, truncated [ 201.468788][ T4212] loop2: p105 start 8388612 is beyond EOD, truncated [ 201.475683][ T4212] loop2: p106 size 32937 extends beyond EOD, truncated [ 201.483141][ T4212] loop2: p107 start 4177526784 is beyond EOD, truncated [ 201.490201][ T4212] loop2: p108 start 8388612 is beyond EOD, truncated [ 201.496663][ T4212] loop2: p109 size 32937 extends beyond EOD, truncated [ 201.503861][ T4212] loop2: p110 start 4177526784 is beyond EOD, truncated [ 201.510655][ T4212] loop2: p111 start 8388612 is beyond EOD, truncated [ 201.517121][ T4212] loop2: p112 size 32937 extends beyond EOD, truncated [ 201.524332][ T4212] loop2: p113 start 4177526784 is beyond EOD, truncated [ 201.531119][ T4212] loop2: p114 start 8388612 is beyond EOD, truncated [ 201.537759][ T4212] loop2: p115 size 32937 extends beyond EOD, truncated [ 201.545625][ T4212] loop2: p116 start 4177526784 is beyond EOD, truncated [ 201.552684][ T4212] loop2: p117 start 8388612 is beyond EOD, truncated [ 201.559404][ T4212] loop2: p118 size 32937 extends beyond EOD, truncated [ 201.566632][ T4212] loop2: p119 start 4177526784 is beyond EOD, truncated [ 201.573531][ T4212] loop2: p120 start 8388612 is beyond EOD, truncated [ 201.580011][ T4212] loop2: p121 size 32937 extends beyond EOD, truncated [ 201.587110][ T4212] loop2: p122 start 4177526784 is beyond EOD, truncated [ 201.594051][ T4212] loop2: p123 start 8388612 is beyond EOD, truncated [ 201.600473][ T4212] loop2: p124 size 32937 extends beyond EOD, truncated [ 201.607605][ T4212] loop2: p125 start 4177526784 is beyond EOD, truncated [ 201.614434][ T4212] loop2: p126 start 8388612 is beyond EOD, truncated [ 201.620887][ T4212] loop2: p127 size 32937 extends beyond EOD, truncated [ 201.628031][ T4212] loop2: p128 start 4177526784 is beyond EOD, truncated [ 201.634855][ T4212] loop2: p129 start 8388612 is beyond EOD, truncated [ 201.641429][ T4212] loop2: p130 size 32937 extends beyond EOD, truncated [ 201.661053][ T4212] loop2: p131 start 4177526784 is beyond EOD, truncated [ 201.661488][ T4235] loop1: detected capacity change from 0 to 512 [ 201.668099][ T4212] loop2: p132 start 8388612 is beyond EOD, truncated [ 201.674962][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 201.681051][ T4212] loop2: p133 size 32937 extends beyond EOD, truncated [ 201.697226][ T4237] loop0: detected capacity change from 0 to 16 [ 201.711663][ T4212] loop2: p134 start 4177526784 is beyond EOD, truncated [ 201.718679][ T4212] loop2: p135 start 8388612 is beyond EOD, truncated [ 201.729088][ T4212] loop2: p136 size 32937 extends beyond EOD, truncated [ 201.736519][ T4212] loop2: p137 start 4177526784 is beyond EOD, truncated [ 201.744467][ T4235] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.755877][ T4235] ext4 filesystem being mounted at /95/bus supports timestamps until 2038 (0x7fffffff) [ 201.763844][ T4237] erofs: (device loop0): mounted with root inode @ nid 36. [ 201.776812][ T4212] loop2: p138 start 8388612 is beyond EOD, truncated [ 201.783950][ T4212] loop2: p139 size 32937 extends beyond EOD, truncated [ 201.792110][ T4212] loop2: p140 start 4177526784 is beyond EOD, truncated [ 201.799325][ T4212] loop2: p141 start 8388612 is beyond EOD, truncated [ 201.806331][ T4212] loop2: p142 size 32937 extends beyond EOD, truncated [ 201.813730][ T4212] loop2: p143 start 4177526784 is beyond EOD, truncated [ 201.820769][ T4212] loop2: p144 start 8388612 is beyond EOD, truncated [ 201.869720][ T4212] loop2: p145 size 32937 extends beyond EOD, truncated [ 201.888104][ T4212] loop2: p146 start 4177526784 is beyond EOD, truncated [ 201.895221][ T4212] loop2: p147 start 8388612 is beyond EOD, truncated [ 201.902227][ T4212] loop2: p148 size 32937 extends beyond EOD, truncated [ 203.191874][ T4212] loop2: p149 start 4177526784 is beyond EOD, truncated [ 203.236889][ T4212] loop2: p150 start 8388612 is beyond EOD, truncated [ 203.244152][ T4212] loop2: p151 size 32937 extends beyond EOD, truncated [ 203.257611][ T4212] loop2: p152 start 4177526784 is beyond EOD, truncated [ 203.265039][ T4212] loop2: p153 start 8388612 is beyond EOD, truncated [ 203.271840][ T4212] loop2: p154 size 32937 extends beyond EOD, truncated [ 203.279282][ T4212] loop2: p155 start 4177526784 is beyond EOD, truncated [ 203.286167][ T4212] loop2: p156 start 8388612 is beyond EOD, truncated [ 203.293845][ T4212] loop2: p157 size 32937 extends beyond EOD, truncated [ 203.301428][ T4212] loop2: p158 start 4177526784 is beyond EOD, truncated [ 203.308311][ T4212] loop2: p159 start 8388612 is beyond EOD, truncated [ 203.316910][ T4212] loop2: p160 size 32937 extends beyond EOD, truncated [ 203.324434][ T4212] loop2: p161 start 4177526784 is beyond EOD, truncated [ 203.331414][ T4212] loop2: p162 start 8388612 is beyond EOD, truncated [ 203.338270][ T4212] loop2: p163 size 32937 extends beyond EOD, truncated [ 203.345781][ T4212] loop2: p164 start 4177526784 is beyond EOD, truncated [ 203.352972][ T4212] loop2: p165 start 8388612 is beyond EOD, truncated [ 203.359972][ T4212] loop2: p166 size 32937 extends beyond EOD, truncated [ 203.367947][ T4212] loop2: p167 start 4177526784 is beyond EOD, truncated [ 203.375320][ T4212] loop2: p168 start 8388612 is beyond EOD, truncated [ 203.383567][ T4212] loop2: p169 size 32937 extends beyond EOD, truncated [ 203.390992][ T4212] loop2: p170 start 4177526784 is beyond EOD, truncated [ 203.398120][ T4212] loop2: p171 start 8388612 is beyond EOD, truncated [ 203.405178][ T4212] loop2: p172 size 32937 extends beyond EOD, truncated [ 203.413062][ T4212] loop2: p173 start 4177526784 is beyond EOD, truncated [ 203.420045][ T4212] loop2: p174 start 8388612 is beyond EOD, truncated [ 203.426623][ T4212] loop2: p175 size 32937 extends beyond EOD, truncated [ 203.435259][ T4212] loop2: p176 start 4177526784 is beyond EOD, truncated [ 203.442981][ T4212] loop2: p177 start 8388612 is beyond EOD, truncated [ 203.450951][ T4212] loop2: p178 size 32937 extends beyond EOD, truncated [ 203.458286][ T4212] loop2: p179 start 4177526784 is beyond EOD, truncated [ 203.466955][ T4212] loop2: p180 start 8388612 is beyond EOD, truncated [ 203.474053][ T4212] loop2: p181 size 32937 extends beyond EOD, truncated [ 203.481608][ T4212] loop2: p182 start 4177526784 is beyond EOD, truncated [ 203.488478][ T4212] loop2: p183 start 8388612 is beyond EOD, truncated [ 203.495546][ T4212] loop2: p184 size 32937 extends beyond EOD, truncated [ 203.504879][ T4212] loop2: p185 start 4177526784 is beyond EOD, truncated [ 203.512021][ T4212] loop2: p186 start 8388612 is beyond EOD, truncated [ 203.518645][ T4212] loop2: p187 size 32937 extends beyond EOD, truncated [ 203.526205][ T4212] loop2: p188 start 4177526784 is beyond EOD, truncated [ 203.529511][ T825] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 203.539691][ T20] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 203.540710][ T4212] loop2: p189 start 8388612 is beyond EOD, truncated [ 203.555770][ T4212] loop2: p190 size 32937 extends beyond EOD, truncated [ 203.566231][ T4212] loop2: p191 start 4177526784 is beyond EOD, truncated [ 203.573392][ T4212] loop2: p192 start 8388612 is beyond EOD, truncated [ 203.580669][ T4212] loop2: p193 size 32937 extends beyond EOD, truncated [ 203.588348][ T4212] loop2: p194 start 4177526784 is beyond EOD, truncated [ 203.595492][ T4212] loop2: p195 start 8388612 is beyond EOD, truncated [ 203.614694][ T4212] loop2: p196 size 32937 extends beyond EOD, truncated [ 203.623137][ T4212] loop2: p197 start 4177526784 is beyond EOD, truncated [ 203.630650][ T4212] loop2: p198 start 8388612 is beyond EOD, truncated [ 203.637518][ T4212] loop2: p199 size 32937 extends beyond EOD, truncated [ 203.645230][ T4212] loop2: p200 start 4177526784 is beyond EOD, truncated [ 203.652714][ T4212] loop2: p201 start 8388612 is beyond EOD, truncated [ 203.659347][ T4212] loop2: p202 size 32937 extends beyond EOD, truncated [ 203.666690][ T4212] loop2: p203 start 4177526784 is beyond EOD, truncated [ 203.673636][ T4212] loop2: p204 start 8388612 is beyond EOD, truncated [ 203.680246][ T4212] loop2: p205 size 32937 extends beyond EOD, truncated [ 203.687570][ T4212] loop2: p206 start 4177526784 is beyond EOD, truncated [ 203.694528][ T4212] loop2: p207 start 8388612 is beyond EOD, truncated [ 203.701246][ T4212] loop2: p208 size 32937 extends beyond EOD, truncated [ 203.709838][ T4212] loop2: p209 start 4177526784 is beyond EOD, truncated [ 203.716663][ T4212] loop2: p210 start 8388612 is beyond EOD, truncated [ 203.723304][ T4212] loop2: p211 size 32937 extends beyond EOD, truncated [ 203.730577][ T4212] loop2: p212 start 4177526784 is beyond EOD, truncated [ 203.737537][ T4212] loop2: p213 start 8388612 is beyond EOD, truncated [ 203.751414][ T4212] loop2: p214 size 32937 extends beyond EOD, truncated [ 203.765834][ T4212] loop2: p215 start 4177526784 is beyond EOD, truncated [ 203.772911][ T4212] loop2: p216 start 8388612 is beyond EOD, truncated [ 203.779578][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 203.784637][ T4212] loop2: p217 size 32937 extends beyond EOD, truncated [ 203.792299][ T4212] loop2: p218 start 4177526784 is beyond EOD, truncated [ 203.799306][ T4212] loop2: p219 start 8388612 is beyond EOD, truncated [ 203.806175][ T4212] loop2: p220 size 32937 extends beyond EOD, truncated [ 203.813550][ T4212] loop2: p221 start 4177526784 is beyond EOD, truncated [ 203.820492][ T4212] loop2: p222 start 8388612 is beyond EOD, truncated [ 203.827163][ T4212] loop2: p223 size 32937 extends beyond EOD, truncated [ 203.834317][ T4212] loop2: p224 start 4177526784 is beyond EOD, truncated [ 203.841214][ T4212] loop2: p225 start 8388612 is beyond EOD, truncated [ 203.847753][ T4212] loop2: p226 size 32937 extends beyond EOD, truncated [ 203.854959][ T4212] loop2: p227 start 4177526784 is beyond EOD, truncated [ 203.861868][ T4212] loop2: p228 start 8388612 is beyond EOD, truncated [ 203.868461][ T4212] loop2: p229 size 32937 extends beyond EOD, truncated [ 203.876060][ T4212] loop2: p230 start 4177526784 is beyond EOD, truncated [ 203.882968][ T4212] loop2: p231 start 8388612 is beyond EOD, truncated [ 203.889533][ T4212] loop2: p232 size 32937 extends beyond EOD, truncated [ 203.896819][ T4212] loop2: p233 start 4177526784 is beyond EOD, truncated [ 203.899577][ T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.903761][ T825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.924315][ T4212] loop2: p234 start 8388612 is beyond EOD, truncated [ 203.930844][ T4212] loop2: p235 size 32937 extends beyond EOD, truncated [ 203.938065][ T4212] loop2: p236 start 4177526784 is beyond EOD, truncated [ 203.944895][ T825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.954536][ T4212] loop2: p237 start 8388612 is beyond EOD, truncated [ 203.961199][ T825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.974024][ T4212] loop2: p238 size 32937 extends beyond EOD, truncated [ 203.981278][ T4212] loop2: p239 start 4177526784 is beyond EOD, truncated [ 203.988101][ T825] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.997032][ T4212] loop2: p240 start 8388612 is beyond EOD, truncated [ 204.003551][ T825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.011335][ T4212] loop2: p241 size 32937 extends beyond EOD, truncated [ 204.018766][ T825] usb 5-1: config 0 descriptor?? [ 204.024296][ T4212] loop2: p242 start 4177526784 is beyond EOD, truncated [ 204.031571][ T4212] loop2: p243 start 8388612 is beyond EOD, truncated [ 204.038166][ T4212] loop2: p244 size 32937 extends beyond EOD, truncated [ 204.045543][ T4212] loop2: p245 start 4177526784 is beyond EOD, truncated [ 204.052354][ T4212] loop2: p246 start 8388612 is beyond EOD, truncated [ 204.058933][ T4212] loop2: p247 size 32937 extends beyond EOD, truncated [ 204.067057][ T4212] loop2: p248 start 4177526784 is beyond EOD, truncated [ 204.073893][ T4212] loop2: p249 start 8388612 is beyond EOD, truncated [ 204.079615][ T20] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 204.080459][ T4212] loop2: p250 size 32937 extends beyond EOD, truncated [ 204.080952][ T4212] loop2: p251 start 4177526784 is beyond EOD, truncated [ 204.096259][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.102863][ T4212] loop2: p252 start 8388612 is beyond EOD, truncated [ 204.102888][ T4212] loop2: p253 size 32937 extends beyond EOD, truncated [ 204.103398][ T4212] loop2: p254 start 4177526784 is beyond EOD, truncated [ 204.129909][ T20] usb 2-1: Product: syz [ 204.130995][ T4212] loop2: p255 start 8388612 is beyond EOD, truncated [ 204.135277][ T20] usb 2-1: Manufacturer: syz [ 204.146564][ T20] usb 2-1: SerialNumber: syz [ 204.151794][ T20] usb 2-1: config 0 descriptor?? [ 204.169135][ T4277] loop3: detected capacity change from 0 to 512 [ 204.190869][ T20] usb 2-1: bad CDC descriptors [ 204.195665][ T20] usb 2-1: unsupported MDLM descriptors [ 204.201957][ T4277] EXT4-fs (loop3): Ignoring removed nobh option [ 204.208093][ T4277] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.255167][ T4277] EXT4-fs (loop3): 1 truncate cleaned up [ 204.265326][ T4277] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 204.381127][ T317] udevd[317]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 204.391875][ T841] udevd[841]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 204.404711][ T394] udevd[394]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 204.415743][ T407] udevd[407]: inotify_add_watch(7, /dev/loop2p10, 10) failed: No such file or directory [ 204.426530][ T420] udevd[420]: inotify_add_watch(7, /dev/loop2p13, 10) failed: No such file or directory [ 204.431462][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop2p19, 10) failed: No such file or directory [ 204.443735][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop2p22, 10) failed: No such file or directory [ 204.528674][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 204.586385][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 204.680054][ T4291] udevd[4291]: inotify_add_watch(7, /dev/loop2p28, 10) failed: No such file or directory [ 204.680133][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 204.687330][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop2p37, 10) failed: No such file or directory [ 204.693417][ T4293] udevd[4293]: inotify_add_watch(7, /dev/loop2p34, 10) failed: No such file or directory [ 204.722550][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop2p25, 10) failed: No such file or directory [ 204.734435][ T317] udevd[317]: inotify_add_watch(7, /dev/loop2p40, 10) failed: No such file or directory [ 204.745575][ T841] udevd[841]: inotify_add_watch(7, /dev/loop2p43, 10) failed: No such file or directory [ 204.750350][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop2p31, 10) failed: No such file or directory [ 204.756891][ T394] udevd[394]: inotify_add_watch(7, /dev/loop2p46, 10) failed: No such file or directory [ 204.774527][ T20] usb 2-1: USB disconnect, device number 29 [ 204.781928][ T407] udevd[407]: inotify_add_watch(7, /dev/loop2p52, 10) failed: No such file or directory [ 204.802170][ T4281] loop2: detected capacity change from 0 to 40427 [ 204.814110][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 204.821655][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 204.831096][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 204.839785][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 204.840871][ T4281] F2FS-fs (loop2): Found nat_bits in checkpoint [ 204.847082][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 204.889625][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 204.953409][ T4281] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 204.958974][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 204.987236][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 204.995084][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 205.002816][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 205.010195][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 205.017330][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 205.024583][ T825] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 205.032178][ T825] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 205.345845][ T825] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 205.376337][ T825] usb 5-1: USB disconnect, device number 22 [ 205.381749][ T4316] loop0: detected capacity change from 0 to 128 [ 205.412015][ T4316] EXT4-fs (loop0): Test dummy encryption mode enabled [ 205.667363][ T4316] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 205.679879][ T4316] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038 (0x7fffffff) [ 205.811621][ T4168] attempt to access beyond end of device [ 205.811621][ T4168] loop2: rw=2049, want=45104, limit=40427 [ 205.971450][ T4331] overlayfs: failed to resolve './file0': -2 [ 206.269560][ T825] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 206.352847][ T4336] loop2: detected capacity change from 0 to 40427 [ 206.445825][ T4344] loop0: detected capacity change from 0 to 512 [ 206.483152][ T4336] F2FS-fs (loop2): invalid crc value [ 206.492150][ T4336] F2FS-fs (loop2): Found nat_bits in checkpoint [ 206.499849][ T4344] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.519552][ T825] usb 5-1: Using ep0 maxpacket: 16 [ 206.521150][ T4344] EXT4-fs (loop0): 1 truncate cleaned up [ 206.530085][ T4344] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,debug_want_extra_isize=0x000000000000002e,,errors=continue. Quota mode: writeback. [ 206.564851][ T4344] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.1160: corrupted in-inode xattr [ 206.577817][ T4344] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1745: inode #15: comm syz.0.1160: unable to update i_inline_off [ 206.590287][ T4344] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.1160: corrupted in-inode xattr [ 206.658152][ T4336] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 206.964523][ T4354] input: syz0 as /devices/virtual/input/input34 [ 207.493971][ T4356] Bluetooth: hci0: Frame reassembly failed (-84) [ 207.528626][ T4355] attempt to access beyond end of device [ 207.528626][ T4355] loop2: rw=34817, want=77952, limit=40427 [ 208.475949][ T4359] loop4: detected capacity change from 0 to 2048 [ 208.482322][ T4168] attempt to access beyond end of device [ 208.482322][ T4168] loop2: rw=2049, want=45104, limit=40427 [ 208.500657][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 208.500810][ T30] audit: type=1400 audit(2000000087.600:1759): avc: denied { write } for pid=4360 comm="syz.1.1165" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 208.529575][ T825] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 208.554439][ T825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.560003][ T4359] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.565458][ T825] usb 5-1: Product: syz [ 208.656994][ T4359] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 208.673324][ T4359] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 208.685617][ T4359] EXT4-fs (loop4): This should not happen!! Data will be lost [ 208.685617][ T4359] [ 208.686252][ T825] usb 5-1: config 0 descriptor?? [ 208.695875][ T4359] EXT4-fs (loop4): Total free blocks count 0 [ 208.705823][ T4359] EXT4-fs (loop4): Free/Dirty block details [ 208.711832][ T4359] EXT4-fs (loop4): free_blocks=2415919104 [ 208.717545][ T4359] EXT4-fs (loop4): dirty_blocks=16 [ 208.723182][ T4359] EXT4-fs (loop4): Block reservation details [ 208.729074][ T4359] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 208.731110][ T825] usb 5-1: can't set config #0, error -71 [ 208.793533][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 208.980896][ T825] usb 5-1: USB disconnect, device number 23 [ 209.032671][ T30] audit: type=1400 audit(2000000088.130:1760): avc: denied { setattr } for pid=4381 comm="syz.2.1166" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.236061][ T30] audit: type=1400 audit(2000000088.330:1761): avc: denied { nlmsg_write } for pid=4404 comm="syz.1.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 209.681803][ T4416] loop1: detected capacity change from 0 to 40427 [ 209.706547][ T4419] loop2: detected capacity change from 0 to 40427 [ 209.750004][ T4419] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 209.757604][ T4419] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 209.766535][ T4416] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 209.774270][ T4416] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 209.783014][ T4419] F2FS-fs (loop2): invalid crc_offset: 12 [ 209.783576][ T4416] F2FS-fs (loop1): invalid crc value [ 209.788587][ T4419] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 209.801746][ T4416] F2FS-fs (loop1): Found nat_bits in checkpoint [ 209.809629][ T20] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 209.827864][ T4416] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 209.834864][ T4416] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 209.848812][ T4416] attempt to access beyond end of device [ 209.848812][ T4416] loop1: rw=2049, want=45224, limit=40427 [ 209.860879][ T4416] attempt to access beyond end of device [ 209.860879][ T4416] loop1: rw=34817, want=45224, limit=40427 [ 209.874039][ T4416] attempt to access beyond end of device [ 209.874039][ T4416] loop1: rw=2049, want=45224, limit=40427 [ 209.885553][ T4416] attempt to access beyond end of device [ 209.885553][ T4416] loop1: rw=2049, want=78240, limit=40427 [ 209.911453][ T1033] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 209.920740][ T1033] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 209.947193][ T4419] loop2: detected capacity change from 0 to 16 [ 209.970153][ T4419] erofs: (device loop2): mounted with root inode @ nid 36. [ 210.070354][ T4427] loop2: detected capacity change from 0 to 512 [ 210.121050][ T4427] EXT4-fs (loop2): Test dummy encryption mode enabled [ 210.140381][ T4427] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.1189: inline data xattr refers to an external xattr inode [ 210.169539][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.190638][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.200562][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.213870][ T20] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.230201][ T30] audit: type=1326 audit(2000000089.330:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 210.241939][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.265230][ T20] usb 1-1: config 0 descriptor?? [ 210.270455][ T4427] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1189: couldn't read orphan inode 12 (err -117) [ 210.282731][ T30] audit: type=1326 audit(2000000089.360:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 210.282756][ T4427] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 210.306357][ T30] audit: type=1326 audit(2000000089.360:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 210.585435][ T4446] loop3: detected capacity change from 0 to 128 [ 210.598818][ T30] audit: type=1326 audit(2000000089.370:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 210.623538][ T30] audit: type=1326 audit(2000000089.370:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 210.646880][ T30] audit: type=1326 audit(2000000089.440:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 210.670227][ T30] audit: type=1326 audit(2000000089.460:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e69ff69f9 code=0x7ffc0000 [ 210.782649][ T4446] EXT4-fs (loop3): Test dummy encryption mode enabled [ 210.791958][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 210.804796][ T4446] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038 (0x7fffffff) [ 211.097745][ T4456] overlayfs: failed to resolve './file0': -2 [ 211.487185][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.505323][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.527112][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.537509][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.545444][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.555676][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.563157][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.570731][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.578355][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.588533][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.596194][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.603628][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.611226][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.618506][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.625892][ T20] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 211.634154][ T20] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 211.643101][ T20] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 211.657154][ T20] usb 1-1: USB disconnect, device number 26 [ 211.759156][ T4475] loop3: detected capacity change from 0 to 256 [ 211.777249][ T4468] loop2: detected capacity change from 0 to 40427 [ 211.809254][ T4480] loop4: detected capacity change from 0 to 512 [ 211.871102][ T4468] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 211.880062][ T4468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 211.892042][ T4480] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.892792][ T4468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 211.907141][ T4480] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 212.126655][ T4480] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz.4.1205: corrupted inode contents [ 212.138815][ T4468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 212.149521][ T4468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 212.185249][ T4480] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz.4.1205: mark_inode_dirty error [ 212.209927][ T4480] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz.4.1205: corrupted inode contents [ 212.227379][ T4494] loop1: detected capacity change from 0 to 128 [ 212.241226][ T4480] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.1205: mark_inode_dirty error [ 212.255882][ T4494] EXT4-fs (loop1): Ignoring removed nobh option [ 212.267758][ T4494] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 212.281673][ T4496] 9pnet: Insufficient options for proto=fd [ 212.285539][ T4480] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 212.289583][ T4494] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038 (0x7fffffff) [ 212.634084][ T4496] attempt to access beyond end of device [ 212.634084][ T4496] loop2: rw=2049, want=79624, limit=40427 [ 212.662379][ T4468] attempt to access beyond end of device [ 212.662379][ T4468] loop2: rw=2049, want=81608, limit=40427 [ 212.682013][ T4168] attempt to access beyond end of device [ 212.682013][ T4168] loop2: rw=2049, want=40976, limit=40427 [ 212.730237][ T4506] loop1: detected capacity change from 0 to 512 [ 212.749415][ T4509] loop4: detected capacity change from 0 to 512 [ 212.751846][ T4506] EXT4-fs (loop1): orphan cleanup on readonly fs [ 212.762419][ T4506] EXT4-fs warning (device loop1): ext4_enable_quotas:6410: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 212.765575][ T4509] EXT4-fs (loop4): Test dummy encryption mode enabled [ 212.783936][ T4506] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 212.791342][ T4509] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.1212: inline data xattr refers to an external xattr inode [ 212.807263][ T4506] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1214: bg 0: block 64: padding at end of block bitmap is not set [ 212.821626][ T4509] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1212: couldn't read orphan inode 12 (err -117) [ 212.833529][ T4506] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 212.840558][ T4509] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 212.842859][ T4506] EXT4-fs (loop1): 1 orphan inode deleted [ 212.879624][ T4506] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.051005][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 214.051020][ T30] audit: type=1400 audit(2000000093.150:1792): avc: denied { wake_alarm } for pid=4531 comm="syz.3.1220" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 214.313485][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 214.322315][ T4544] tipc: Started in network mode [ 214.326985][ T4544] tipc: Node identity 1, cluster identity 4711 [ 214.333001][ T4544] tipc: Node number set to 1 [ 214.346951][ T39] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 214.399871][ T4546] loop1: detected capacity change from 0 to 512 [ 214.420494][ T4546] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.433567][ T4546] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1226: casefold flag without casefold feature [ 214.446261][ T4546] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1226: missing EA_INODE flag [ 214.457958][ T4546] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1226: error while reading EA inode 12 err=-117 [ 214.470842][ T4546] EXT4-fs (loop1): 1 orphan inode deleted [ 214.476558][ T4546] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 214.519528][ T3154] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 214.789704][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 214.802291][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.813306][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 214.825274][ T39] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 214.835868][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.864652][ T39] usb 1-1: config 0 descriptor?? [ 214.905841][ T4557] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 214.925917][ T39] usb 1-1: MIDIStreaming interface descriptor not found [ 214.950215][ T3154] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.964421][ T3154] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.996104][ T30] audit: type=1326 audit(2000000094.090:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ac4a9f9 code=0x7ffc0000 [ 215.021777][ T30] audit: type=1326 audit(2000000094.090:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ac4a9f9 code=0x7ffc0000 [ 215.050654][ T30] audit: type=1326 audit(2000000094.090:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ac4a9f9 code=0x7ffc0000 [ 215.074565][ T3154] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 215.076050][ T4565] loop3: detected capacity change from 0 to 512 [ 215.083761][ T30] audit: type=1326 audit(2000000094.090:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ac4a9f9 code=0x7ffc0000 [ 215.115872][ T30] audit: type=1326 audit(2000000094.090:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ac4a9f9 code=0x7ffc0000 [ 215.122400][ T3154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 215.144633][ T39] usb 1-1: USB disconnect, device number 27 [ 215.152715][ T30] audit: type=1326 audit(2000000094.090:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ac4a9f9 code=0x7ffc0000 [ 215.169214][ T4571] loop4: detected capacity change from 0 to 512 [ 215.178122][ T30] audit: type=1326 audit(2000000094.090:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ac4a9f9 code=0x7ffc0000 [ 215.183466][ T4565] EXT4-fs (loop3): Test dummy encryption mode enabled [ 215.205330][ T30] audit: type=1326 audit(2000000094.090:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ac4a9f9 code=0x7ffc0000 [ 215.214883][ T3154] usb 3-1: SerialNumber: syz [ 215.235485][ T30] audit: type=1326 audit(2000000094.090:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ac4a9f9 code=0x7ffc0000 [ 215.263675][ T4565] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1233: inline data xattr refers to an external xattr inode [ 215.278527][ T4565] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1233: couldn't read orphan inode 12 (err -117) [ 215.290398][ T4565] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 215.365607][ T4571] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.1236: casefold flag without casefold feature [ 215.380217][ T4571] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #3: comm syz.4.1236: corrupted inode contents [ 215.392744][ T4571] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #3: comm syz.4.1236: mark_inode_dirty error [ 215.404519][ T4571] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1236: bg 0: block 64: padding at end of block bitmap is not set [ 215.419612][ T4571] EXT4-fs (loop4): 1 truncate cleaned up [ 215.425405][ T4571] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.436540][ T4571] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 215.721549][ T4578] loop1: detected capacity change from 0 to 512 [ 215.733424][ T4571] EXT4-fs warning (device loop4): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 215.777125][ T3154] usb 3-1: 0:2 : does not exist [ 215.841957][ T4578] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 215.859129][ T4578] EXT4-fs (loop1): 1 truncate cleaned up [ 215.864962][ T4578] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 215.925990][ T4578] fscrypt (loop1, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 216.037245][ T4588] loop1: detected capacity change from 0 to 2048 [ 216.050746][ T4592] loop4: detected capacity change from 0 to 512 [ 216.100449][ T4588] EXT4-fs (loop1): Unrecognized mount option "measure" or missing value [ 216.114579][ T4592] EXT4-fs (loop4): orphan cleanup on readonly fs [ 216.124827][ T4592] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.1242: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 216.144257][ T4592] EXT4-fs error (device loop4): ext4_quota_enable:6369: comm syz.4.1242: Bad quota inode: 4, type: 1 [ 216.156155][ T4592] EXT4-fs warning (device loop4): ext4_enable_quotas:6410: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.171032][ T4592] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 216.181119][ T4592] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.196195][ T376] usb 3-1: USB disconnect, device number 25 [ 216.217517][ T4592] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 216.230843][ T4602] loop0: detected capacity change from 0 to 256 [ 216.311580][ T4602] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 216.848097][ T4592] EXT4-fs warning (device loop4): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 216.848097][ T4592] [ 217.257788][ T4622] loop3: detected capacity change from 0 to 512 [ 217.386219][ T4624] fuse: Bad value for 'fd' [ 217.426164][ T4624] loop4: detected capacity change from 0 to 512 [ 217.505234][ T4624] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 217.517108][ T4624] EXT4-fs (loop4): 1 orphan inode deleted [ 217.522799][ T4624] EXT4-fs (loop4): 1 truncate cleaned up [ 217.528201][ T4624] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 217.580309][ T4622] EXT4-fs (loop3): Test dummy encryption mode enabled [ 217.588938][ T4622] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1252: inline data xattr refers to an external xattr inode [ 217.604390][ T4622] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1252: couldn't read orphan inode 12 (err -117) [ 217.616962][ T4622] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 217.720794][ T4634] irq bypass consumer (token ffff8881233eb400) registration fails: -16 [ 218.399958][ T4640] loop1: detected capacity change from 0 to 40427 [ 218.730142][ T4640] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.763760][ T4647] loop3: detected capacity change from 0 to 40427 [ 218.780360][ T4640] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 218.807933][ T4647] F2FS-fs (loop3): invalid crc value [ 218.880566][ T4647] F2FS-fs (loop3): Found nat_bits in checkpoint [ 218.921263][ T4647] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 219.349630][ T2234] attempt to access beyond end of device [ 219.349630][ T2234] loop1: rw=2049, want=45104, limit=40427 [ 220.392353][ T4026] attempt to access beyond end of device [ 220.392353][ T4026] loop3: rw=524288, want=45072, limit=40427 [ 220.447780][ T4689] loop0: detected capacity change from 0 to 2048 [ 220.467349][ T4026] attempt to access beyond end of device [ 220.467349][ T4026] loop3: rw=0, want=45072, limit=40427 [ 220.498870][ T45] attempt to access beyond end of device [ 220.498870][ T45] loop3: rw=2049, want=41072, limit=40427 [ 220.553267][ T4693] loop4: detected capacity change from 0 to 512 [ 220.560087][ T4689] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.610253][ T4693] EXT4-fs (loop4): Test dummy encryption mode enabled [ 220.636280][ T4689] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038 (0x7fffffff) [ 220.653194][ T4693] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.1271: inline data xattr refers to an external xattr inode [ 220.668275][ T4689] fs-verity (loop0, inode 13): fs-verity keyring is empty, rejecting signed file! [ 220.692281][ T4693] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1271: couldn't read orphan inode 12 (err -117) [ 220.708749][ T4693] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 221.039820][ T4722] loop0: detected capacity change from 0 to 2048 [ 221.101488][ T4722] EXT4-fs (loop0): Unrecognized mount option "measure" or missing value [ 221.200564][ T45] device bridge_slave_1 left promiscuous mode [ 221.207327][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.241244][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 221.241260][ T30] audit: type=1400 audit(2000000100.340:1822): avc: denied { map } for pid=4725 comm="syz.0.1282" path="socket:[36597]" dev="sockfs" ino=36597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.271833][ T45] device bridge_slave_0 left promiscuous mode [ 221.280285][ T4720] loop2: detected capacity change from 0 to 40427 [ 221.283957][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.307218][ T45] device veth1_macvtap left promiscuous mode [ 221.319485][ T45] device veth0_vlan left promiscuous mode [ 221.326135][ T30] audit: type=1400 audit(2000000100.370:1823): avc: denied { read } for pid=4725 comm="syz.0.1282" path="socket:[36597]" dev="sockfs" ino=36597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.373327][ T4720] F2FS-fs (loop2): invalid crc value [ 221.446131][ T4720] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.511465][ T4720] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 221.829580][ T30] audit: type=1400 audit(2000000100.870:1824): avc: denied { link } for pid=4719 comm="syz.2.1281" name="#31" dev="loop2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 221.837419][ T4727] attempt to access beyond end of device [ 221.837419][ T4727] loop2: rw=2049, want=45120, limit=40427 [ 221.905682][ T4740] loop0: detected capacity change from 0 to 2048 [ 221.931405][ T4744] loop4: detected capacity change from 0 to 1024 [ 221.931458][ T4740] loop0: p1 < > p4 [ 221.948172][ T4740] loop0: p4 size 8388608 extends beyond EOD, truncated [ 221.980552][ T4744] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 222.000757][ T30] audit: type=1326 audit(2000000101.100:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed012b59f9 code=0x7ffc0000 [ 222.008792][ T4744] EXT4-fs (loop4): invalid journal inode [ 222.033592][ T30] audit: type=1326 audit(2000000101.130:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed012b59f9 code=0x7ffc0000 [ 222.057538][ T30] audit: type=1326 audit(2000000101.130:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fed012b59f9 code=0x7ffc0000 [ 222.062847][ T4168] attempt to access beyond end of device [ 222.062847][ T4168] loop2: rw=524288, want=45072, limit=40427 [ 222.081326][ T4744] EXT4-fs (loop4): can't get journal size [ 222.092775][ T4168] attempt to access beyond end of device [ 222.092775][ T4168] loop2: rw=0, want=45072, limit=40427 [ 222.110456][ T100] loop0: p1 < > p4 [ 222.112758][ T30] audit: type=1326 audit(2000000101.130:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed012b59f9 code=0x7ffc0000 [ 222.137723][ T100] loop0: p4 size 8388608 extends beyond EOD, truncated [ 222.138048][ T30] audit: type=1326 audit(2000000101.130:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed012b59f9 code=0x7ffc0000 [ 222.168761][ T4744] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback. [ 222.198067][ T4744] device bridge_slave_1 left promiscuous mode [ 222.204050][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.255967][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 222.269284][ T317] udevd[317]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 222.293932][ T317] udevd[317]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 222.297065][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 222.392230][ T4756] loop4: detected capacity change from 0 to 2048 [ 222.475799][ T4756] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.534652][ T4757] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.542354][ T4750] loop0: detected capacity change from 0 to 40427 [ 222.542512][ T4757] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.556955][ T4757] device bridge_slave_0 entered promiscuous mode [ 222.564774][ T4757] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.571872][ T4757] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.579401][ T4757] device bridge_slave_1 entered promiscuous mode [ 222.589025][ T4750] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 222.599671][ T4750] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 222.634734][ T4750] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.719015][ T4750] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 222.726219][ T4750] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.768025][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.776267][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.809935][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.818247][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.826963][ T4770] attempt to access beyond end of device [ 222.826963][ T4770] loop0: rw=2049, want=40968, limit=40427 [ 222.838613][ T3154] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.840537][ T4770] 9pnet: Insufficient options for proto=fd [ 222.845640][ T3154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.859133][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.867481][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.875752][ T3154] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.882883][ T3154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.890624][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.898563][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.907069][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.928807][ T4757] device veth0_vlan entered promiscuous mode [ 222.935402][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.944327][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.960362][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.967740][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.984709][ T4757] device veth1_macvtap entered promiscuous mode [ 222.991706][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.015022][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.024184][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.141878][ T4776] loop0: detected capacity change from 0 to 256 [ 223.390349][ T45] device bridge_slave_1 left promiscuous mode [ 223.396279][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.403694][ T45] device bridge_slave_0 left promiscuous mode [ 223.409721][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.417357][ T45] device veth1_macvtap left promiscuous mode [ 223.423386][ T45] device veth0_vlan left promiscuous mode [ 223.782548][ T4781] loop0: detected capacity change from 0 to 256 [ 223.809468][ T30] audit: type=1404 audit(2000000102.900:1830): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 223.826061][ T30] audit: type=1400 audit(2000000102.910:1831): avc: denied { integrity } for pid=4778 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=0 [ 223.865189][ T4781] FAT-fs (loop0): Directory bread(block 64) failed [ 223.871666][ T4781] FAT-fs (loop0): Directory bread(block 65) failed [ 223.878059][ T4781] FAT-fs (loop0): Directory bread(block 66) failed [ 223.884809][ T4781] FAT-fs (loop0): Directory bread(block 67) failed [ 223.892976][ T4781] FAT-fs (loop0): Directory bread(block 68) failed [ 223.899793][ T4781] FAT-fs (loop0): Directory bread(block 69) failed [ 223.906245][ T4781] FAT-fs (loop0): Directory bread(block 70) failed [ 223.914655][ T4781] FAT-fs (loop0): Directory bread(block 71) failed [ 223.921199][ T4781] FAT-fs (loop0): Directory bread(block 72) failed [ 223.928213][ T4781] FAT-fs (loop0): Directory bread(block 73) failed [ 224.684542][ T4796] loop0: detected capacity change from 0 to 16 [ 224.762249][ T4796] erofs: (device loop0): mounted with root inode @ nid 36. [ 224.814480][ T4796] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 224.824238][ T4796] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 224.921138][ T4792] loop4: detected capacity change from 0 to 40427 [ 224.960203][ T4792] F2FS-fs (loop4): invalid crc value [ 224.998878][ T4792] F2FS-fs (loop4): Found nat_bits in checkpoint [ 225.059791][ T4792] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 225.382125][ T4800] attempt to access beyond end of device [ 225.382125][ T4800] loop4: rw=2049, want=45120, limit=40427 [ 226.253579][ T4093] attempt to access beyond end of device [ 226.253579][ T4093] loop4: rw=524288, want=45072, limit=40427 [ 226.276020][ T4093] attempt to access beyond end of device [ 226.276020][ T4093] loop4: rw=0, want=45072, limit=40427 [ 226.288940][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 226.288956][ T30] audit: type=1400 audit(2000000105.370:1881): avc: denied { read write } for pid=4808 comm="syz.0.1302" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.326061][ T30] audit: type=1400 audit(2000000105.370:1882): avc: denied { open } for pid=4808 comm="syz.0.1302" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.349628][ T30] audit: type=1400 audit(2000000105.370:1883): avc: denied { ioctl } for pid=4808 comm="syz.0.1302" path="/dev/raw-gadget" dev="devtmpfs" ino=162 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.402744][ T45] tipc: Left network mode [ 226.512577][ T30] audit: type=1326 audit(2000000105.610:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6abc819f9 code=0x7ffc0000 [ 226.527977][ T4815] device syzkaller0 entered promiscuous mode [ 226.536006][ T26] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 226.570276][ T4820] loop1: detected capacity change from 0 to 256 [ 226.578960][ T30] audit: type=1326 audit(2000000105.610:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6abc819f9 code=0x7ffc0000 [ 226.606778][ T30] audit: type=1326 audit(2000000105.650:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fe6abc819f9 code=0x7ffc0000 [ 226.644225][ T30] audit: type=1326 audit(2000000105.650:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6abc819f9 code=0x7ffc0000 [ 226.667784][ T30] audit: type=1326 audit(2000000105.650:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6abc819f9 code=0x7ffc0000 [ 226.693499][ T30] audit: type=1326 audit(2000000105.660:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4819 comm="syz.1.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6abc819f9 code=0x7ffc0000 [ 226.716928][ T30] audit: type=1326 audit(2000000105.660:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4819 comm="syz.1.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6abc819f9 code=0x7ffc0000 [ 226.754775][ T4821] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.761894][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.771153][ T4821] device bridge_slave_0 entered promiscuous mode [ 226.780874][ T4821] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.787725][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.795056][ T4821] device bridge_slave_1 entered promiscuous mode [ 226.829528][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 226.840096][ T4821] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.847060][ T4821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.854207][ T4821] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.861068][ T4821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.888305][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.909954][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.917151][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.943364][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.951684][ T3154] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.958524][ T3154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.965773][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.973795][ T3154] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.980647][ T3154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.987869][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.995771][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.007769][ T4821] device veth0_vlan entered promiscuous mode [ 227.014131][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.023048][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.031042][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.038826][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.052840][ T4821] device veth1_macvtap entered promiscuous mode [ 227.060075][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.070844][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.084181][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.109657][ T26] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 227.118604][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.126857][ T26] usb 1-1: Product: syz [ 227.130886][ T26] usb 1-1: Manufacturer: syz [ 227.135790][ T26] usb 1-1: SerialNumber: syz [ 227.141779][ T26] usb 1-1: config 0 descriptor?? [ 227.159546][ T39] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 227.170077][ T45] device bridge_slave_0 left promiscuous mode [ 227.176017][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.180109][ T26] hub 1-1:0.0: bad descriptor, ignoring hub [ 227.188654][ T26] hub: probe of 1-1:0.0 failed with error -5 [ 227.194737][ T45] device veth1_macvtap left promiscuous mode [ 227.194958][ T26] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 227.200959][ T45] device veth0_vlan left promiscuous mode [ 227.519611][ T376] usb 1-1: USB disconnect, device number 28 [ 227.519612][ T39] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 227.519644][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.546762][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.556257][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 227.569091][ T39] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 227.577865][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.586372][ T39] usb 2-1: config 0 descriptor?? [ 227.731208][ T4829] loop2: detected capacity change from 0 to 1024 [ 227.810916][ T4829] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.070560][ T39] hid-picolcd 0003:04D8:C002.0029: unbalanced collection at end of report description [ 228.080261][ T39] hid-picolcd 0003:04D8:C002.0029: device report parse failed [ 228.087546][ T39] hid-picolcd: probe of 0003:04D8:C002.0029 failed with error -22 [ 228.282481][ T376] usb 2-1: USB disconnect, device number 30 [ 228.957654][ T4848] loop0: detected capacity change from 0 to 16 [ 229.017280][ T4850] input: syz0 as /devices/virtual/input/input36 [ 229.023791][ T4848] erofs: (device loop0): mounted with root inode @ nid 36. [ 230.307153][ T4861] loop2: detected capacity change from 0 to 256 [ 230.351962][ T4865] loop4: detected capacity change from 0 to 512 [ 230.398491][ T4865] EXT4-fs (loop4): Ignoring removed orlov option [ 230.405030][ T4865] EXT4-fs (loop4): Test dummy encryption mode enabled [ 230.427805][ T4865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 230.435845][ T4865] System zones: 1-12 [ 230.440651][ T4865] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1319: casefold flag without casefold feature [ 230.526387][ T4865] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1319: missing EA_INODE flag [ 230.538247][ T4865] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1319: error while reading EA inode 12 err=-117 [ 230.550668][ T4865] EXT4-fs (loop4): 1 orphan inode deleted [ 230.556582][ T4865] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,auto_da_alloc,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 231.816210][ T4874] loop1: detected capacity change from 0 to 1024 [ 231.860710][ T4874] EXT4-fs (loop1): blocks per group (0) and clusters per group (32) inconsistent [ 231.883031][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 231.883056][ T30] audit: type=1400 audit(2000000110.980:2025): avc: denied { unmount } for pid=4757 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 232.150293][ T30] audit: type=1400 audit(2000000111.110:2026): avc: denied { name_bind } for pid=4875 comm="syz.4.1322" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 232.171761][ T30] audit: type=1400 audit(2000000111.120:2027): avc: denied { create } for pid=4875 comm="syz.4.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 232.191500][ T30] audit: type=1400 audit(2000000111.140:2028): avc: denied { connect } for pid=4875 comm="syz.4.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 232.211821][ T30] audit: type=1400 audit(2000000111.150:2029): avc: denied { read } for pid=4875 comm="syz.4.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 232.280262][ T4874] loop1: detected capacity change from 0 to 40427 [ 232.320218][ T4874] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 232.327784][ T4874] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 232.337218][ T4874] F2FS-fs (loop1): invalid crc value [ 232.343665][ T4874] F2FS-fs (loop1): Found nat_bits in checkpoint [ 232.365738][ T4874] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 232.372700][ T4874] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 232.566392][ T30] audit: type=1400 audit(2000000111.650:2030): avc: denied { mounton } for pid=4873 comm="syz.1.1320" path="/142/file0/file0" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.394808][ T30] audit: type=1400 audit(2000000112.490:2031): avc: denied { getopt } for pid=4893 comm="syz.4.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 233.599507][ T376] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 233.859512][ T376] usb 1-1: Using ep0 maxpacket: 16 [ 233.989837][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.000555][ T376] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.013220][ T376] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.022181][ T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.030650][ T376] usb 1-1: config 0 descriptor?? [ 234.514059][ T376] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002A/input/input37 [ 234.590998][ T376] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 234.787814][ T2234] F2FS-fs (loop1): access invalid blkaddr:2048 [ 234.793855][ T2234] CPU: 0 PID: 2234 Comm: syz-executor Not tainted 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 234.803675][ T2234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 234.813698][ T2234] Call Trace: [ 234.816795][ T2234] [ 234.819570][ T2234] dump_stack_lvl+0x151/0x1b7 [ 234.824071][ T2234] ? io_uring_drop_tctx_refs+0x190/0x190 [ 234.829542][ T2234] dump_stack+0x15/0x17 [ 234.833534][ T2234] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 234.838740][ T2234] f2fs_map_blocks+0x1622/0x3ab0 [ 234.843525][ T2234] ? f2fs_do_map_lock+0x70/0x70 [ 234.848201][ T2234] f2fs_mpage_readpages+0xc9a/0x21a0 [ 234.853325][ T2234] ? dquot_release_reservation_block+0xa0/0xa0 [ 234.859308][ T2234] ? workingset_activation+0x3f0/0x3f0 [ 234.864609][ T2234] f2fs_readahead+0xfd/0x250 [ 234.869034][ T2234] ? blk_start_plug+0x5a/0x170 [ 234.873725][ T2234] read_pages+0x15e/0xb00 [ 234.877890][ T2234] ? lru_cache_add+0x279/0x540 [ 234.882487][ T2234] ? page_cache_ra_unbounded+0x920/0x920 [ 234.887978][ T2234] ? add_to_page_cache_lru+0x225/0x2c0 [ 234.893252][ T2234] ? add_to_page_cache_locked+0x40/0x40 [ 234.898630][ T2234] ? __stack_depot_save+0x34/0x470 [ 234.903588][ T2234] page_cache_ra_unbounded+0x6cb/0x920 [ 234.908875][ T2234] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 234.915211][ T2234] ? _raw_spin_unlock+0x4d/0x70 [ 234.919895][ T2234] ? wp_page_reuse+0xff/0x120 [ 234.924413][ T2234] ondemand_readahead+0x9c8/0xfa0 [ 234.929274][ T2234] ? handle_pte_fault+0x7c0/0x24d0 [ 234.934231][ T2234] ? page_cache_sync_ra+0x4d0/0x4d0 [ 234.939250][ T2234] ? fault_around_bytes_set+0xc0/0xc0 [ 234.944548][ T2234] page_cache_sync_ra+0x2e9/0x4d0 [ 234.949406][ T2234] ? force_page_cache_ra+0x420/0x420 [ 234.954527][ T2234] ? do_handle_mm_fault+0x1807/0x2400 [ 234.959735][ T2234] f2fs_readdir+0x52d/0xba0 [ 234.964076][ T2234] ? f2fs_fill_dentries+0xd60/0xd60 [ 234.969108][ T2234] ? avc_policy_seqno+0x1b/0x70 [ 234.973801][ T2234] ? __kasan_check_read+0x11/0x20 [ 234.978656][ T2234] ? security_file_permission+0x86/0xb0 [ 234.984035][ T2234] iterate_dir+0x265/0x610 [ 234.988287][ T2234] ? f2fs_fill_dentries+0xd60/0xd60 [ 234.993328][ T2234] __se_sys_getdents64+0x1c1/0x460 [ 234.998359][ T2234] ? __x64_sys_getdents64+0x90/0x90 [ 235.003391][ T2234] ? filldir+0x680/0x680 [ 235.007470][ T2234] __x64_sys_getdents64+0x7b/0x90 [ 235.012335][ T2234] do_syscall_64+0x3d/0xb0 [ 235.016589][ T2234] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 235.022331][ T2234] RIP: 0033:0x7fe6abcb3a93 [ 235.026575][ T2234] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 44 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 235.046098][ T2234] RSP: 002b:00007ffdce855f68 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 235.054344][ T2234] RAX: ffffffffffffffda RBX: 000055555728b4e0 RCX: 00007fe6abcb3a93 [ 235.062355][ T2234] RDX: 0000000000008000 RSI: 000055555728b4e0 RDI: 0000000000000005 [ 235.070177][ T2234] RBP: 000055555728b4b4 R08: 0000000000000000 R09: 0000000000000000 [ 235.077980][ T2234] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 235.085882][ T2234] R13: 0000000000000010 R14: 000055555728b4b0 R15: 00007ffdce858210 [ 235.093734][ T2234] [ 235.150752][ T39] usb 1-1: USB disconnect, device number 29 [ 235.233996][ T4904] loop2: detected capacity change from 0 to 40427 [ 235.239096][ T2234] attempt to access beyond end of device [ 235.239096][ T2234] loop1: rw=524288, want=45072, limit=40427 [ 235.251919][ T2234] attempt to access beyond end of device [ 235.251919][ T2234] loop1: rw=0, want=45072, limit=40427 [ 235.267964][ T2234] attempt to access beyond end of device [ 235.267964][ T2234] loop1: rw=2049, want=45104, limit=40427 [ 235.285089][ T4904] F2FS-fs (loop2): invalid crc value [ 235.298262][ T4904] F2FS-fs (loop2): Found nat_bits in checkpoint [ 235.323830][ T4904] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 235.350306][ T4757] attempt to access beyond end of device [ 235.350306][ T4757] loop2: rw=2049, want=45104, limit=40427 [ 235.509965][ T4914] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.516950][ T4914] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.524479][ T4914] device bridge_slave_0 entered promiscuous mode [ 235.531551][ T4914] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.539036][ T4914] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.547329][ T4914] device bridge_slave_1 entered promiscuous mode [ 235.591411][ T4914] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.598260][ T4914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.605446][ T4914] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.612291][ T4914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.632230][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.639812][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.646935][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.656366][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.664959][ T3154] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.671815][ T3154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.681751][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.689769][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.696614][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.715850][ T4914] device veth0_vlan entered promiscuous mode [ 235.723217][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.731610][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.739937][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.747237][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.754717][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.762728][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.775264][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.784488][ T4914] device veth1_macvtap entered promiscuous mode [ 235.795433][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.807055][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.271486][ T30] audit: type=1400 audit(2000000116.370:2032): avc: denied { create } for pid=4922 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.313875][ T4932] loop0: detected capacity change from 0 to 256 [ 237.334269][ T30] audit: type=1400 audit(2000000116.370:2033): avc: denied { create } for pid=4922 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.372990][ T30] audit: type=1400 audit(2000000116.390:2034): avc: denied { bind } for pid=4926 comm="syz.1.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.397748][ T30] audit: type=1400 audit(2000000116.390:2035): avc: denied { setopt } for pid=4926 comm="syz.1.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.453773][ T4929] loop4: detected capacity change from 0 to 40427 [ 237.480250][ T30] audit: type=1400 audit(2000000116.490:2036): avc: denied { mounton } for pid=4931 comm="syz.0.1334" path="/249/file0/file0" dev="loop0" ino=1048739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 237.504590][ T4929] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 237.512178][ T4929] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 237.520937][ T4929] F2FS-fs (loop4): invalid crc value [ 237.527378][ T4929] F2FS-fs (loop4): Found nat_bits in checkpoint [ 237.549711][ T4929] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 237.556644][ T4929] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 237.599749][ T298] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 237.630253][ T4942] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 237.640193][ T4942] FAT-fs (loop0): Filesystem has been set read-only [ 237.646741][ T4942] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 237.656756][ T4942] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 237.830240][ T30] audit: type=1400 audit(2000000116.930:2037): avc: denied { create } for pid=4928 comm="syz.4.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 237.936602][ T30] audit: type=1400 audit(2000000117.010:2038): avc: denied { create } for pid=4928 comm="syz.4.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 237.957820][ T30] audit: type=1400 audit(2000000117.030:2039): avc: denied { getopt } for pid=4928 comm="syz.4.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.069587][ T298] usb 3-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 238.079903][ T298] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.092992][ T298] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 238.101917][ T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.159742][ T30] audit: type=1326 audit(2000000117.260:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578f5e39f9 code=0x7fc00000 [ 238.186022][ T1175] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 238.194242][ T1175] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 238.295367][ T4948] loop1: detected capacity change from 0 to 512 [ 238.310610][ T8] tipc: Disabling bearer [ 238.316446][ T8] tipc: Left network mode [ 238.361312][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.365814][ T4948] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.368322][ T4949] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.379617][ T4948] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 238.387137][ T4949] device bridge_slave_0 entered promiscuous mode [ 238.405887][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.413382][ T4949] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.415260][ T4948] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.1337: corrupted inode contents [ 238.420841][ T4949] device bridge_slave_1 entered promiscuous mode [ 238.432427][ T4948] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz.1.1337: mark_inode_dirty error [ 238.449621][ T4948] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.1337: corrupted inode contents [ 238.461453][ T4948] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.1337: mark_inode_dirty error [ 238.489023][ T30] audit: type=1400 audit(2000000117.580:2041): avc: denied { remove_name } for pid=4947 comm="syz.1.1337" name="control" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.541873][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.548910][ T4949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.556273][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.563206][ T4949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.596774][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.615579][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.623549][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.650021][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.658023][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.664891][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.672262][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.680696][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.687529][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.768658][ T4959] loop2: detected capacity change from 0 to 16 [ 238.822727][ T4959] erofs: (device loop2): mounted with root inode @ nid 36. [ 238.848899][ T4959] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 238.859220][ T4959] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 238.872010][ T4959] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 238.906362][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.914731][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.923262][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.930590][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.937991][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.945932][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.957536][ T4949] device veth0_vlan entered promiscuous mode [ 238.968139][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.977544][ T4949] device veth1_macvtap entered promiscuous mode [ 238.988950][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.998913][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.010779][ T8] device veth1_macvtap left promiscuous mode [ 240.329606][ T298] usb 3-1: string descriptor 0 read error: -71 [ 240.336603][ T298] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 240.353845][ T4966] loop0: detected capacity change from 0 to 1024 [ 240.390456][ T298] usb 3-1: USB disconnect, device number 26 [ 240.421618][ T4966] EXT4-fs (loop0): Ignoring removed orlov option [ 240.427813][ T4966] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 1: Operation not permitted) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=3 req=1278 state=1 status=1 (errno 11: Resource temporarily unavailable) [ 240.480608][ T4966] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 240.549200][ T4978] netlink: 'syz.2.1344': attribute type 27 has an invalid length. [ 240.603264][ T4978] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.610364][ T4978] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.790195][ T8] device bridge_slave_1 left promiscuous mode [ 241.796118][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.803589][ T8] device bridge_slave_0 left promiscuous mode [ 241.809595][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.817535][ T8] device veth1_macvtap left promiscuous mode [ 241.823387][ T8] device veth0_vlan left promiscuous mode [ 243.390210][ T8] device bridge_slave_1 left promiscuous mode [ 243.396339][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.403577][ T8] device bridge_slave_0 left promiscuous mode [ 243.410137][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.417694][ T8] device bridge_slave_1 left promiscuous mode [ 243.423785][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.431112][ T8] device bridge_slave_0 left promiscuous mode [ 243.437152][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.444793][ T8] device bridge_slave_1 left promiscuous mode [ 243.451515][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.459541][ T8] device bridge_slave_0 left promiscuous mode [ 243.465813][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.473778][ T8] device veth1_macvtap left promiscuous mode [ 243.479923][ T8] device veth0_vlan left promiscuous mode [ 243.485534][ T8] device veth1_macvtap left promiscuous mode [ 243.491551][ T8] device veth0_vlan left promiscuous mode