last executing test programs: 5m51.300969595s ago: executing program 32 (id=693): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "ba2254c3"}, @main=@item_012={0x2, 0x0, 0x9, "deeb"}, @local=@item_012={0x2, 0x2, 0x2, "8fe0"}, @global=@item_4={0x3, 0x1, 0x0, "0800be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x1, "09037a31"}, @local=@item_4={0x3, 0x2, 0x5, "c7b83395"}]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 5m49.482931252s ago: executing program 33 (id=728): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 5m15.771087608s ago: executing program 34 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5m13.555827468s ago: executing program 35 (id=1610): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x15, 0x2, 0x0, 0x401, 0x8001, 0x1404}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 5m9.697972696s ago: executing program 36 (id=1694): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 5m1.497198849s ago: executing program 37 (id=1937): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 4m50.943102891s ago: executing program 38 (id=2150): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfff0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 4m46.406925067s ago: executing program 39 (id=1939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) flistxattr(0xffffffffffffffff, 0x0, 0x0) 4m39.123107647s ago: executing program 40 (id=2393): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00006c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa1400030000000002000000000000000000000001080001003e969d5909a68c39154d01757f", @ANYRES32=r2, @ANYBLOB="0400130014000300000000000000000000000000000000010400130006001200"], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 4m37.354899541s ago: executing program 41 (id=2432): syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x41, &(0x7f0000000200)=@string={0x41, 0x3, "bf52aca215e37089af66543a40c220186d5a6070c9fd585add0ff3519e96075214ad734dd1839c3d12037dda2b7c45a604e575560015d40421ec2ba7a47cb1"}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @const={0x6, {0xfffe, 0x0, 0x8000}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 4m31.195105724s ago: executing program 42 (id=2268): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000001240)=ANY=[]) 4m25.376713167s ago: executing program 43 (id=2765): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x2, &(0x7f0000001700)=0x0) r1 = eventfd2(0x0, 0x0) io_getevents(r0, 0x4, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0) io_submit(r0, 0x1, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) 4m22.27157445s ago: executing program 44 (id=2877): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 4m14.331663928s ago: executing program 45 (id=3083): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a8"], 0x0) 4m3.92715485s ago: executing program 46 (id=3346): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3m56.373116216s ago: executing program 47 (id=3553): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 3m24.621602436s ago: executing program 48 (id=4500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 53.243514004s ago: executing program 49 (id=7731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b9800000c00f3235000400000f3065f20f1b3c11c4c17d112666ba200066b864e366efdbf5c4e3255f750e0066ba2000ec66baf80cb83a8f688aef66bafc0cec9a007800001e01c4c3e121064d", 0x4d}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.706509693s ago: executing program 4 (id=7812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 50.654716146s ago: executing program 4 (id=7814): fsopen(0x0, 0x0) r0 = userfaultfd(0x80001) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_getevents(r1, 0x1, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000001080)) 50.545985663s ago: executing program 4 (id=7817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r2, 0x0, 0x0) 50.537759113s ago: executing program 4 (id=7819): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0xff, 0x6}) 50.306048827s ago: executing program 4 (id=7820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000000)) 49.710601182s ago: executing program 4 (id=7826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 49.673430584s ago: executing program 50 (id=7826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 25.873266086s ago: executing program 2 (id=8361): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 25.775054302s ago: executing program 2 (id=8364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 25.740446114s ago: executing program 2 (id=8367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000300)={0x4, 0xe, 0x3, 0x3, 0x6}) 25.667190378s ago: executing program 2 (id=8371): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f0000000100), 0x1, 0x769, &(0x7f0000000340)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000540)={[{@journal_checksum}, {@barrier}, {@data_writeback}, {@discard}, {@usrjquota}, {@noblock_validity}, {@barrier}, {@sysvgroups}]}, 0x1, 0x263, &(0x7f0000000600)="$eJzs3T+IHGUYBvBnZmcTN1kkaiMIKoiIHhyxE2zWRiEgRxARVIiI2CiJEBPscp2NhdYqqWyCpDNaSiyCjSJYRU1xNoIeCh4WWqzsn4O7vVXvbm935Ob3g92Zuftm3neYeb6phg3QWCeS9JK0kiwlaScptg64f/Q5Md683LlxJun3n/m1GI4bbY9s7nc8yWqSx5JcL4u8ViUXr72w9sfNpx5650L7wY+uPd9Z6EmOra/denrjw5W3Pzn16MWvv/15pUgv3W3ndfCKKX+riuTOeRT7nyiqujtgN06/dfW7Qe7vSvLAMP/tlBldvHfPH7neziMf/NO+7/3yzT2L7BU4eP1+e/AMXO0DjVMm6aYol5OM1sv25tzwfetY+fq5828uvXruwtlX6p2ngIPTTW49+dnRT49P5P+nVlkuL9fdHTBPg/w/e/rKD4P1jVbd3QCLNMj/0kuXHo78Q+PIPxwOK/vYp9uTf2gqz384ZHq7Hyr/0FzyD80l/9Bc/5b/L2rqCVgMz39ort3l/8hCewIWY2v+AYBm6R+t+w1koC51zz8AAAAAAAAAAAAAAAAAAMBOlzs3zmx+5l+tGH5/+X6y/kSSqphSvzX8PeLktuH3sd+LVBNHqPZadnX75ov37f8Mpvptb8M/rvnt69t/rLf+V/fOuUBrYjnh0tlcHa6crKqd918xvv/2747/+H/75RkLzOjx5+qt/9eVGotXyambyeeD+efk1vmvMx5Q5u7hcvr80x1cvxlbeOPPGQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwvwdAAD//yidbmk=") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000000b00), &(0x7f0000000ac0)='./file1\x00', 0x4c31, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x11c3049, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, &(0x7f0000000b00)='usr\xf7\xff\x00\x00\x00a=\xeb\x8a~\xa3\xeewI\xb9!5\x15\x9a\xa24\x06\x10\x162\xef(\x15\xa5') 25.425813123s ago: executing program 2 (id=8383): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000001c00)="77690500000000430120000000000000899c88410a1828bf308696448fcac274e993e4cf0b0231f33027c5066426ea92656a6c3d6ff4e800", 0x38}], 0x1, 0xc) close(r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 25.198980556s ago: executing program 2 (id=8394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x141202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x3, 0x8, 0x0, 0x0, 0x2, 0x2, 0x1e, 0xfe, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x34, '\x00', 0x0, 0x8000000000002}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x8) 25.164119278s ago: executing program 51 (id=8394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x141202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x3, 0x8, 0x0, 0x0, 0x2, 0x2, 0x1e, 0xfe, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x34, '\x00', 0x0, 0x8000000000002}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x8) 22.870756313s ago: executing program 6 (id=8488): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 22.857969824s ago: executing program 6 (id=8489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) alarm(0x4cb174b9) 22.845937625s ago: executing program 6 (id=8490): openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 22.815267666s ago: executing program 6 (id=8492): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 22.773172589s ago: executing program 6 (id=8495): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 22.687183234s ago: executing program 6 (id=8497): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r0, 0xf3a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 22.659628016s ago: executing program 52 (id=8497): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r0, 0xf3a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 20.623128716s ago: executing program 8 (id=8594): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r1}, 0x4e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 14.726313913s ago: executing program 1 (id=8764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000000201010400000000000000000a000101180002801400018008000100ffffffff0800e100e00000020c0019"], 0x4c}, 0x1, 0x0, 0x0, 0x48804}, 0x80) 14.702546685s ago: executing program 1 (id=8765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ID={0x8}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}, @CTA_TUPLE_ORIG={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x902}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}]}, 0xac}}, 0x4) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 14.673575036s ago: executing program 1 (id=8766): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x1, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042700ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) 14.659972987s ago: executing program 1 (id=8768): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x82, &(0x7f0000000400)={[{@disable_roll_forward}, {}, {@acl}, {@compress_cache}, {@inline_xattr}, {@quota}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@whint_mode_fs}, {@atgc}, {@noacl}, {@noinline_dentry}]}, 0xfd, 0x551c, &(0x7f0000000500)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC5l1YMnTZNpyG6SKU2a1p48eBQP/iei4Mmjf4MHz97Eg+JNWMm8U926CmLTxG5/P5h55n1n8swzoRSemTABOLPm019/TsK1cCmEMBtCuBpCsZ2US2EthhdCCNdDCDOPLUk5/8fE+RDC5RDCtVHymDMpd31+c3hj9ae3fvnmuwvnrnzx9ffTu2pg2l4MIXS34/ZeN8a8FeODcr4+bBexuzIsY9zRuRj3d/M4v5dtFhn26o/K7PVivdyKx+fbu/1R3OrUG6PYam8V89u9eML+sHWYp/jAg/pOMW5mm0Vs9/Mitg5i9v2D+L/toD+IeZplvo+K9GEwOIxxPtvPYlXbD4vY6A3K+Zg3b2b7ozgsY3m60Mg7zaKOzf/8Nf/vvd3u7e6nw2yn38576Wq19lK1drtS28mb2SBbqdS7zdsr6UKrMzqsMsjq3bVWnrc6WbWRdxfThVajUanV0oU72Wa73ktrtepy9VZldbHcupm+fu+9tNNMF0bx1XZvd9Du9NOtfCeNn1hMl6rLLy+mN2rpO+sb6cb9u3fXN9794M77915Zf/O18qAnykoXlm4tLVVqtypLtcUzdP2flEWP8frhWJJpFwBw+uj/gWk4Tv/ffViOn+j/R+Od+5Po/4P+fyxOVf971vv/E7h+OBb9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAmfXD3JdvFBvzcXylnH+mnHquHCchhJkQwqO/MRvOH8k5W+aZ+4fj5/5Sw7dJKDKMznGhXC6HENbK5bdnT/pbAAAAgKfXVx9f/yx263E1P+2CmKR402bm6odjypeEEObmfxxTtpnR6vkxJSv+vs+F/TFlK25gXRxTsnjL7dy4sv0rs0fCxcdCEsPMRMsBAAAm4mgnMNkuBAAAgEn6dNoFMB1JOHyUefgsuPjl/Z8PBC8dGQEAAACnUDLtAgAAAIATV/T/3v8HAAAAT7f4/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5n535uEweiOAA/G7yw/7RotfdtZW9QxpaQY44RBaQJCsiBGtIANZBbSoggwuMQiDhE8thWou+TnMlY5scbBIeZkQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgSw/Vuoqbv7dtc3b7dvKMBgAAALhkW60X9T+z1P/e3P/Z3Prd9IuIKCPi0tx9FF/OMkdNTvX6/N3p89WbGu4j6oTDe0ya61tE/Guup19dfwoAAADweW2Wq3marac/s6ELok9p0ab88T9TXhER1ewxU1p5yPuTKaz+fo/jOlNavYA1zRSWltzGudLepf65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+XQ1dAMMo4mUr87gVOElNs7339awHAAAAfEDF0AUAAAAAnavn/z2d/7d3/h8AAAAMI53/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJe21XqxWa7mbXN2+3byjAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5nxe5qTgA4C/JZGqr4rjKHFZEwYNe7HRaW3sTD8riwT9BWLbTunbqj3YPthRxL95kz72IehMRlPXW/6HnFnqptx7mUEE8jiSTzKTtorNCk7T7+cDL+yaEvO9LYNlvXnYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR5dxEn2aY3i+Pi2M17Vzey/tYDfeb6zu3VrGVxVGfSj4eXqztRv7lEAAAAODiSsr4PIdxJd9eyPu7l9X9anpPV/N8/O4vLev7Bur/sy9o/a7//dvfF+UC92TjZRc9ujkfHHk6l8+hm2W7P/ecZnfzO5+9ekvyBxB9svzBJ8/sZfXvjxnvdPDxUR7YAwP9xtOyLoPx9KOuHTSYGwIHRqRTeZf2f9JrNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAOk+3wdBlHIYTVziLO3Lp3dWOv/vrO7dWynbp2bSd8vbhmdok0hHB2czw6Vuts2u3S5Svn18fj0cX6g1dCCE2N/k4x/fMfLXFyCI3cn/0Hf7cjjbYFcfGw25LP4xE0+EMJAIAnUlq0rK6/k+6uZceilRCmP9xf/79eicOS9f/dj0/drI5Vrf+Htc2w/QZbFz4fXLp85c3NC+vnRudGn751fPj28MTpkydPD/J3JQNvTAAAANi36XQ6ne90i1at/+OVh9f/j1TisGT9/8V3w6+qAyfq/z0tFv2azgQAAOBge/7Vv/6M9jgedbvhy/WtrYvD2Xa+f3y2bSDVfTtUtGr9n6w0nRUAAABQh8l2dN/6/5lKHJZc/3/mp5d+qV4zCSEcLtb/j258Nj5T33RarY4/J256jgAAADTrcNGq6/9p/v1/PP/kIQ4hvPHaLC7+DeC/1v9pUf8n73/zc3Ws6vf/J+qbYivF/dn9yPt+CJ1+0xkBAADwJHsqbz/m9f8f6e7aJ78e+bDr+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAuv0TAAD//wDuQQ4=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) stat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)) 14.419068561s ago: executing program 1 (id=8773): mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x20}}, 0x50) utimes(&(0x7f0000000280)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x3, {0x4, 0x101e020, 0x0, {0x6, 0x2, 0x80000000004, 0x75, 0xe, 0xabdf, 0xe2f20000, 0xff, 0x8, 0x4000, 0x3fe, r2, r3, 0xea, 0x27c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.10708161s ago: executing program 1 (id=8784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 14.106724679s ago: executing program 53 (id=8784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 9.466205223s ago: executing program 8 (id=8961): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$inet(r0, &(0x7f0000004c80)=[{{&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f00000004c0)="69548f1e", 0x4}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x48}}], 0x1, 0x1000) 9.465638183s ago: executing program 8 (id=8962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 9.464881593s ago: executing program 8 (id=8963): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 9.464020023s ago: executing program 8 (id=8964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 9.415115876s ago: executing program 8 (id=8965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 9.400296897s ago: executing program 54 (id=8965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 4.722865972s ago: executing program 0 (id=9050): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1000, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x0, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40, 0x3, 0x200, 0x2, 0x42, 0x8000, 0x0, r2, r3, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) 4.58258276s ago: executing program 0 (id=9053): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount$incfs(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 4.471951217s ago: executing program 0 (id=9057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4.397104221s ago: executing program 0 (id=9061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) 4.350088684s ago: executing program 0 (id=9064): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x70000031, 0x0, 0x3f00, 0x0, 0x0, 0x1000, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x3b) 4.275370618s ago: executing program 0 (id=9069): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xfffe, [0x200000, 0xffdfffff], 0x1}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12000, 0x0) 2.809766215s ago: executing program 3 (id=9130): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) 2.788295346s ago: executing program 3 (id=9131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002080)={{r0}, &(0x7f0000002000), &(0x7f0000002040)='%+9llu \x00'}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, 0x0, 0x0, 0xe7b, 0x0, 0x0) 2.755881108s ago: executing program 3 (id=9132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x81) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 756.183206ms ago: executing program 7 (id=9138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 674.360591ms ago: executing program 3 (id=9140): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 625.871554ms ago: executing program 7 (id=9143): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x1, 0x1000, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x300}}) 609.060225ms ago: executing program 7 (id=9145): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 572.699567ms ago: executing program 3 (id=9147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 572.222117ms ago: executing program 3 (id=9148): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 571.925097ms ago: executing program 7 (id=9149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) sendfile(r0, r1, &(0x7f0000000100), 0x8001) 558.949008ms ago: executing program 7 (id=9150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 527.048249ms ago: executing program 7 (id=9152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x2be, 0x0, 0x0) 291.520484ms ago: executing program 9 (id=9170): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = dup2(r0, r0) write$tun(r3, 0x0, 0x46) 275.475314ms ago: executing program 9 (id=9171): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 203.127688ms ago: executing program 9 (id=9173): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x8000041, 0x0, 0x0, 0xfffffff5}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f00000004c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) 202.726458ms ago: executing program 9 (id=9174): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xa2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 188.520889ms ago: executing program 9 (id=9178): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 123.150023ms ago: executing program 9 (id=9179): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000d80)) read$hidraw(r0, 0x0, 0x49) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 69.462046ms ago: executing program 5 (id=9182): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60142, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/104, 0x68) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x34, 0x2) 45.321748ms ago: executing program 5 (id=9183): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x32}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80) 44.597138ms ago: executing program 5 (id=9184): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='de']) 1.27943ms ago: executing program 5 (id=9185): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='\rZ', 0x2}], 0x1) 859.66µs ago: executing program 5 (id=9186): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x33, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000180)=@tcp6=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)="f8", &(0x7f0000000140)=@udp6=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f00000002c0), 0x0}, 0x20) 0s ago: executing program 5 (id=9196): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) kernel console output (not intermixed with test programs): out journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 329.487583][T17559] loop4: detected capacity change from 0 to 512 [ 329.494146][T17552] ext4 filesystem being mounted at /798/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.527575][T17559] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.7244: casefold flag without casefold feature [ 329.540574][T17559] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.7244: couldn't read orphan inode 15 (err -117) [ 329.552492][T17559] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 329.601205][T17564] loop1: detected capacity change from 0 to 512 [ 329.619703][T17564] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 329.646161][T17564] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #17: comm syz.1.7247: iget: bad i_size value: -6917529027641081756 [ 329.659824][T17564] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.7247: couldn't read orphan inode 17 (err -117) [ 329.672159][T17564] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 329.687070][T17564] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 13: comm syz.1.7247: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0 [ 329.709173][T17579] tmpfs: Unknown parameter 'r' [ 329.759170][T17585] bridge0: port 4(vlan3) entered blocking state [ 329.765316][T17585] bridge0: port 4(vlan3) entered disabled state [ 329.866047][T17602] tipc: New replicast peer: 255.255.255.255 [ 329.872367][T17602] tipc: Enabled bearer , priority 10 [ 330.163571][ T306] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 330.302616][ T737] tipc: Node number set to 1 [ 330.420275][ T306] usb 2-1: Using ep0 maxpacket: 32 [ 330.548491][ T306] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.556340][ T306] usb 2-1: config 0 has no interface number 0 [ 330.562356][ T306] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.573612][ T306] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.583308][ T306] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 330.592513][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.601802][ T306] usb 2-1: config 0 descriptor?? [ 331.180091][T17669] loop4: detected capacity change from 0 to 512 [ 331.190433][T17667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17667 comm=syz.5.7291 [ 331.212271][T17669] EXT4-fs (loop4): Ignoring removed bh option [ 331.218355][T17669] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 331.228451][T17669] EXT4-fs (loop4): 1 truncate cleaned up [ 331.234226][T17669] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback. [ 331.275059][T17677] Non-string source [ 331.372580][ T306] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0034/input/input71 [ 331.385847][ T306] uclogic 0003:28BD:0094.0034: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 331.587329][ T737] usb 2-1: USB disconnect, device number 23 [ 331.732106][T17719] loop4: detected capacity change from 0 to 512 [ 331.778439][T17719] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 331.790520][T17719] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #17: comm syz.4.7314: iget: bad i_size value: -6917529027641081756 [ 331.803714][T17719] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.7314: couldn't read orphan inode 17 (err -117) [ 331.815956][T17719] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 331.829973][T17719] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 13: comm syz.4.7314: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0 [ 332.162550][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 332.162566][ T30] audit: type=1326 audit(2000004506.856:13854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15f93169 code=0x7ffc0000 [ 332.192787][ T30] audit: type=1326 audit(2000004506.856:13855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15f93169 code=0x7ffc0000 [ 332.217597][ T30] audit: type=1326 audit(2000004506.866:13856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f15f93169 code=0x7ffc0000 [ 332.241588][ T30] audit: type=1326 audit(2000004506.884:13857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15f93169 code=0x7ffc0000 [ 332.267190][ T30] audit: type=1326 audit(2000004506.894:13858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f15f93169 code=0x7ffc0000 [ 332.292338][ T30] audit: type=1326 audit(2000004506.912:13859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15f93169 code=0x7ffc0000 [ 332.317527][ T30] audit: type=1326 audit(2000004506.912:13860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2f15f93169 code=0x7ffc0000 [ 332.341120][ T30] audit: type=1326 audit(2000004506.912:13861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15f93169 code=0x7ffc0000 [ 332.375420][ T30] audit: type=1326 audit(2000004506.912:13862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2f15f93169 code=0x7ffc0000 [ 332.425892][ T30] audit: type=1326 audit(2000004506.912:13863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17732 comm="syz.1.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15f93169 code=0x7ffc0000 [ 332.841008][T17765] 9pnet: p9_errstr2errno: server reported unknown error @΂(QM8,0-fF+/$<[`Q;!LJg+ [ 333.019055][T17780] raw_sendmsg: syz.4.7340 forgot to set AF_INET. Fix it! [ 333.332799][T17802] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 333.425700][T17816] loop7: detected capacity change from 0 to 16384 [ 333.691456][T17819] loop_set_status: loop7 () has still dirty pages (nrpages=104) [ 333.792382][T17828] loop3: detected capacity change from 0 to 256 [ 333.842560][T17828] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.853138][T17828] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 333.864239][T17828] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 333.917639][T17830] loop7: detected capacity change from 0 to 40427 [ 333.949265][T17830] F2FS-fs (loop7): fault_injection options not supported [ 333.957705][T17830] F2FS-fs (loop7): invalid crc value [ 333.967728][T17830] F2FS-fs (loop7): Found nat_bits in checkpoint [ 334.014197][T17830] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 334.040582][T17830] attempt to access beyond end of device [ 334.040582][T17830] loop7: rw=2049, want=77960, limit=40427 [ 334.053740][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7369'. [ 334.063257][T17830] attempt to access beyond end of device [ 334.063257][T17830] loop7: rw=2049, want=45104, limit=40427 [ 334.096457][T17850] tmpfs: Unknown parameter 'nolazyt+>eR0-~^~1"VIY' [ 334.104379][ T3979] attempt to access beyond end of device [ 334.104379][ T3979] loop7: rw=2049, want=45112, limit=40427 [ 334.185160][T17855] loop4: detected capacity change from 0 to 512 [ 334.247482][T17855] EXT4-fs (loop4): 1 orphan inode deleted [ 334.258465][T17855] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 334.270146][T17855] ext4 filesystem being mounted at /807/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.344344][T17870] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7378'. [ 334.448746][T17890] device pim6reg1 entered promiscuous mode [ 334.562018][T17909] syz.5.7397[17909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.562099][T17909] syz.5.7397[17909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.805236][T17945] syz.5.7414[17945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.834282][T17945] syz.5.7414[17945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.996978][T17936] loop7: detected capacity change from 0 to 40427 [ 335.050161][T17936] F2FS-fs (loop7): Invalid segment/section count (31 != 24 * 1) [ 335.064781][T17936] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 335.074888][T17936] F2FS-fs (loop7): invalid crc value [ 335.091711][T17936] F2FS-fs (loop7): Found nat_bits in checkpoint [ 335.155633][T17936] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 335.164794][T17936] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 335.178704][T17987] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7432'. [ 335.230365][T17973] loop3: detected capacity change from 0 to 40427 [ 335.249386][T17936] attempt to access beyond end of device [ 335.249386][T17936] loop7: rw=2049, want=53256, limit=40427 [ 335.263960][T17973] F2FS-fs (loop3): invalid crc value [ 335.275112][T17973] F2FS-fs (loop3): Found nat_bits in checkpoint [ 335.306902][T17998] xt_bpf: check failed: parse error [ 335.317222][ T3979] attempt to access beyond end of device [ 335.317222][ T3979] loop7: rw=2049, want=45104, limit=40427 [ 335.325829][T17973] F2FS-fs (loop3): Start checkpoint disabled! [ 335.343573][T17973] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 335.354960][T18003] loop4: detected capacity change from 0 to 2048 [ 335.365719][T18005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7441'. [ 335.374842][T18005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7441'. [ 335.414679][T18003] Alternate GPT is invalid, using primary GPT. [ 335.425359][T18003] loop4: p1 p2 p3 [ 335.441842][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7444'. [ 335.538667][ T746] attempt to access beyond end of device [ 335.538667][ T746] loop3: rw=2049, want=40984, limit=40427 [ 335.586277][T18025] xt_bpf: check failed: parse error [ 336.043344][ T306] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 336.436925][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.471160][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.492550][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.526062][ T306] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.545957][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.567542][ T306] usb 4-1: config 0 descriptor?? [ 336.640518][T18065] loop7: detected capacity change from 0 to 40427 [ 336.674683][T18065] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 336.682352][T18065] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 336.691461][T18065] F2FS-fs (loop7): invalid crc value [ 336.698058][T18065] F2FS-fs (loop7): Found nat_bits in checkpoint [ 336.727125][T18065] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 336.734290][T18065] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 337.030900][T18085] attempt to access beyond end of device [ 337.030900][T18085] loop7: rw=2049, want=40432, limit=40427 [ 337.081725][ T306] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 337.099087][T18093] overlayfs: failed to clone upperpath [ 337.105529][ T306] plantronics 0003:047F:FFFF.0035: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 337.141133][ T8] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 337.151077][ T8] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 339.099399][ T30] kauditd_printk_skb: 277 callbacks suppressed [ 339.099416][ T30] audit: type=1400 audit(2000004513.348:14141): avc: denied { ioctl } for pid=18134 comm="syz.1.7498" path="socket:[87320]" dev="sockfs" ino=87320 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 339.131848][ T30] audit: type=1400 audit(2000004513.357:14142): avc: denied { remount } for pid=18137 comm="syz.5.7499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 339.195995][ T30] audit: type=1400 audit(2000004513.432:14143): avc: denied { read } for pid=18147 comm="syz.7.7505" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 339.230314][T18150] loop1: detected capacity change from 0 to 2048 [ 339.244811][ T30] audit: type=1400 audit(2000004513.470:14144): avc: denied { open } for pid=18147 comm="syz.7.7505" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 339.248046][T18158] syz.5.7509[18158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.271408][ T30] audit: type=1400 audit(2000004513.470:14145): avc: denied { ioctl } for pid=18147 comm="syz.7.7505" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 339.282663][T18158] syz.5.7509[18158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.308611][ T30] audit: type=1400 audit(2000004513.470:14146): avc: denied { set_context_mgr } for pid=18147 comm="syz.7.7505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 339.309808][T18150] Alternate GPT is invalid, using primary GPT. [ 339.382790][ T30] audit: type=1400 audit(2000004513.619:14147): avc: denied { mount } for pid=18161 comm="syz.5.7511" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 339.434274][T18150] loop1: p1 p2 p3 [ 339.464808][ T737] usb 4-1: USB disconnect, device number 22 [ 339.501536][T18142] loop3: detected capacity change from 0 to 40427 [ 339.522337][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7516'. [ 339.532300][T18142] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 339.541412][T18142] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 339.546975][ T30] audit: type=1400 audit(2000004513.769:14148): avc: denied { create } for pid=18175 comm="syz.7.7517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 339.551109][T18142] F2FS-fs (loop3): invalid crc value [ 339.575496][ T30] audit: type=1400 audit(2000004513.797:14149): avc: denied { write } for pid=18175 comm="syz.7.7517" path="socket:[88266]" dev="sockfs" ino=88266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 339.601430][T18142] F2FS-fs (loop3): Found nat_bits in checkpoint [ 339.628489][ T30] audit: type=1400 audit(2000004513.797:14150): avc: denied { nlmsg_read } for pid=18175 comm="syz.7.7517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 339.665051][T18142] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 339.672255][T18142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 339.761867][T18190] syz.1.7522[18190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.761946][T18190] syz.1.7522[18190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.810417][T18183] loop7: detected capacity change from 0 to 40427 [ 339.871453][T18183] F2FS-fs (loop7): fault_injection options not supported [ 339.882288][T18183] F2FS-fs (loop7): invalid crc value [ 339.900989][T18183] F2FS-fs (loop7): Found nat_bits in checkpoint [ 339.965766][T18201] loop1: detected capacity change from 0 to 8192 [ 339.972281][T18183] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 340.014010][T18192] loop4: detected capacity change from 0 to 40427 [ 340.020878][ T3979] attempt to access beyond end of device [ 340.020878][ T3979] loop7: rw=2049, want=45104, limit=40427 [ 340.093431][T18192] F2FS-fs (loop4): Found nat_bits in checkpoint [ 340.191160][T18192] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 340.317616][T18192] attempt to access beyond end of device [ 340.317616][T18192] loop4: rw=2049, want=45104, limit=40427 [ 340.366862][T18233] loop7: detected capacity change from 0 to 256 [ 340.417728][ T746] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 340.427758][T18233] FAT-fs (loop7): bogus number of FAT sectors [ 340.433651][T18233] FAT-fs (loop7): Can't find a valid FAT filesystem [ 340.458980][ T746] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 340.689577][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7548'. [ 340.702805][T18257] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.7547'. [ 340.730091][T18259] loop7: detected capacity change from 0 to 1024 [ 340.770707][T18259] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.784074][T18259] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 340.801310][T18259] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 340.892332][T18270] loop3: detected capacity change from 0 to 40427 [ 340.940425][T18270] F2FS-fs (loop3): fault_injection options not supported [ 340.948239][T18270] F2FS-fs (loop3): invalid crc value [ 340.954884][T18270] F2FS-fs (loop3): Found nat_bits in checkpoint [ 340.986086][T18270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 341.027973][ T7607] attempt to access beyond end of device [ 341.027973][ T7607] loop3: rw=2049, want=45104, limit=40427 [ 341.131504][T18280] loop7: detected capacity change from 0 to 40427 [ 341.176144][T18280] F2FS-fs (loop7): fault_injection options not supported [ 341.184129][T18280] F2FS-fs (loop7): invalid crc value [ 341.191291][T18280] F2FS-fs (loop7): Found nat_bits in checkpoint [ 341.231535][T18280] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 341.268035][T18288] tipc: Bearer : already 2 bearers with priority 10 [ 341.280626][T18288] tipc: Bearer : trying with adjusted priority [ 341.288059][ T3979] attempt to access beyond end of device [ 341.288059][ T3979] loop7: rw=2049, want=45112, limit=40427 [ 341.288088][T18288] tipc: Enabled bearer , priority 9 [ 341.428385][T18298] loop7: detected capacity change from 0 to 8192 [ 341.454007][T18298] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 341.909077][T18369] loop4: detected capacity change from 0 to 512 [ 341.998827][T18369] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 342.018704][T18355] loop3: detected capacity change from 0 to 40427 [ 342.019447][T18369] ext4 filesystem being mounted at /841/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.042667][T18355] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 342.050329][T18355] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 342.071711][T18355] F2FS-fs (loop3): Found nat_bits in checkpoint [ 342.093774][T18369] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #19: comm syz.4.7595: corrupted inode contents [ 342.115675][T18369] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #19: comm syz.4.7595: mark_inode_dirty error [ 342.127670][T18369] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #19: comm syz.4.7595: corrupted inode contents [ 342.140200][T18355] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 342.147357][T18369] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2961: inode #19: comm syz.4.7595: mark_inode_dirty error [ 342.159526][T18355] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 342.169727][T18369] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2964: inode #19: comm syz.4.7595: mark inode dirty (error -117) [ 342.191632][T18369] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 342.225811][T18400] 9pnet: p9_errstr2errno: server reported unknown error sŧ"EgW4w5 [ 342.339470][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7612'. [ 342.389008][T18416] loop7: detected capacity change from 0 to 1024 [ 342.416890][T18416] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.439353][ T2286] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 342.455059][ T2286] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 342.478390][ T2286] EXT4-fs (loop7): This should not happen!! Data will be lost [ 342.478390][ T2286] [ 342.497228][ T2286] EXT4-fs (loop7): Total free blocks count 0 [ 342.508709][ T2286] EXT4-fs (loop7): Free/Dirty block details [ 342.520323][ T2286] EXT4-fs (loop7): free_blocks=68451041280 [ 342.531968][ T2286] EXT4-fs (loop7): dirty_blocks=16 [ 342.543220][ T2286] EXT4-fs (loop7): Block reservation details [ 342.549145][ T2286] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 342.574632][T18420] loop3: detected capacity change from 0 to 40427 [ 342.608900][T18420] F2FS-fs (loop3): invalid crc value [ 342.636374][T18420] F2FS-fs (loop3): Found nat_bits in checkpoint [ 342.683558][T18420] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 342.690383][T18420] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 342.733101][ T7607] attempt to access beyond end of device [ 342.733101][ T7607] loop3: rw=2049, want=45104, limit=40427 [ 342.813130][T18427] loop7: detected capacity change from 0 to 40427 [ 342.832856][T18427] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 342.840401][T18427] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 342.853301][T18427] F2FS-fs (loop7): Found nat_bits in checkpoint [ 342.915845][T18446] loop3: detected capacity change from 0 to 1024 [ 342.922754][T18427] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 342.929985][T18427] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 342.966643][T18446] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 342.987381][T18446] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 343.067782][T18459] incfs: Error accessing: ./file0. [ 343.072835][T18459] incfs: mount failed -20 [ 343.116626][T18471] loop1: detected capacity change from 0 to 16 [ 343.133829][T18471] erofs: (device loop1): mounted with root inode @ nid 36. [ 343.164085][T18471] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 343.179904][T18471] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 343.201879][T18471] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 343.281185][T18492] loop1: detected capacity change from 0 to 512 [ 343.365158][T18492] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 343.389183][T18492] ext4 filesystem being mounted at /855/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.700402][T18544] netlink: 'syz.4.7666': attribute type 4 has an invalid length. [ 343.708049][T18544] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.7666'. [ 343.765295][T18553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18553 comm=syz.4.7670 [ 343.779713][T18553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18553 comm=syz.4.7670 [ 343.986249][T18581] loop4: detected capacity change from 0 to 512 [ 344.051974][T18581] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.068741][T18581] ext4 filesystem being mounted at /860/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.112134][T18581] overlayfs: invalid origin (000000790062757300000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 344.468191][ T30] kauditd_printk_skb: 227 callbacks suppressed [ 344.468208][ T30] audit: type=1326 audit(2000004518.380:14378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.7689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f873eda11f7 code=0x7ffc0000 [ 344.469903][T18599] loop4: detected capacity change from 0 to 40427 [ 344.474294][ T30] audit: type=1326 audit(2000004518.380:14379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.7689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f873ed9fad0 code=0x7ffc0000 [ 344.527117][ T30] audit: type=1326 audit(2000004518.380:14380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.7689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f873eda0d6b code=0x7ffc0000 [ 344.551224][ T30] audit: type=1326 audit(2000004518.408:14381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.7689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f873ed9fdca code=0x7ffc0000 [ 344.574812][ T30] audit: type=1326 audit(2000004518.408:14382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.7689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f873ed9fdca code=0x7ffc0000 [ 344.600207][T18599] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 344.608674][ T30] audit: type=1326 audit(2000004518.502:14383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.7689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f873ed9f9d7 code=0x7ffc0000 [ 344.632473][T18599] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 344.642455][ T30] audit: type=1326 audit(2000004518.502:14384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.7689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f873eda290a code=0x7ffc0000 [ 344.646337][T18599] F2FS-fs (loop4): Found nat_bits in checkpoint [ 344.701859][T18599] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 344.708853][T18599] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 344.717194][ T30] audit: type=1326 audit(2000004518.605:14385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.7689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f873ed9fad0 code=0x7ffc0000 [ 344.740940][ T30] audit: type=1326 audit(2000004518.605:14386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.7689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f873ed9feb7 code=0x7ffc0000 [ 344.764405][ T30] audit: type=1326 audit(2000004518.605:14387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.7689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f873ed9fad0 code=0x7ffc0000 [ 344.857463][T18615] loop4: detected capacity change from 0 to 256 [ 345.109838][T18621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7696'. [ 345.306413][T18636] tipc: Started in network mode [ 345.311110][T18636] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 345.324079][T18636] tipc: Enabled bearer , priority 10 [ 345.792416][T18671] loop1: detected capacity change from 0 to 2048 [ 345.816246][T18671] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 345.816246][T18671] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 345.816246][T18671] [ 345.853623][T18671] EXT4-fs (loop1): Ignoring removed nobh option [ 345.878392][T18671] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,resuid=0x0000000000000000,nouser_xattr,resuid=0x000000000000ee01,discard,noblock_validity,nobh,,errors=continue. Quota mode: writeback. [ 345.945185][T18671] EXT4-fs (loop1): shut down requested (2) [ 345.994542][T18685] loop3: detected capacity change from 0 to 1024 [ 346.034312][T18687] loop1: detected capacity change from 0 to 512 [ 346.041792][T18685] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 346.095766][ T7607] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 346.114513][ T7607] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 346.136774][ T7607] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 346.149335][T18687] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,i_version,. Quota mode: writeback. [ 346.164798][ T7607] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 346.172199][T18687] ext4 filesystem being mounted at /889/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.175752][ T7607] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 346.203001][ T7607] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 346.216010][ T7607] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 346.237542][ T7607] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 346.248260][ T7607] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 346.259677][ T7607] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 346.307809][ T7607] bridge0: port 3(syz_tun) entered disabled state [ 346.326486][ T7607] device syz_tun left promiscuous mode [ 346.336062][ T7607] bridge0: port 3(syz_tun) entered disabled state [ 346.362574][ T746] tipc: Disabling bearer [ 346.367556][ T746] tipc: Disabling bearer [ 346.379245][ T746] tipc: Disabling bearer [ 346.402794][ T746] tipc: Left network mode [ 346.520316][ T7813] tipc: Node number set to 10005162 [ 346.604380][T18698] loop1: detected capacity change from 0 to 40427 [ 346.627897][T18703] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.635202][T18703] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.644857][T18703] device bridge_slave_0 entered promiscuous mode [ 346.653908][T18698] F2FS-fs (loop1): fault_injection options not supported [ 346.659304][T18703] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.673052][T18698] F2FS-fs (loop1): invalid crc value [ 346.678464][T18703] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.686187][T18703] device bridge_slave_1 entered promiscuous mode [ 346.693127][T18698] F2FS-fs (loop1): Found nat_bits in checkpoint [ 346.762281][T18698] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 346.810124][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.820704][T18703] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.821913][T18726] loop4: detected capacity change from 0 to 1024 [ 346.827582][T18703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.834281][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.840913][T18703] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.848339][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.854830][T18703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.870318][ T8762] attempt to access beyond end of device [ 346.870318][ T8762] loop1: rw=2049, want=45112, limit=40427 [ 346.881614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.882949][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.896818][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.903886][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.911495][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.918535][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.925801][T18726] EXT4-fs (loop4): can't mount with commit=3, fs mounted w/o journal [ 346.933959][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.941354][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.950843][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.958060][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.965598][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.965760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.972978][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.987954][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 346.993414][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.995589][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.002004][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.011971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.016580][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.031488][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.038879][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.039200][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.046364][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.052995][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.067461][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.077770][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.085057][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.092385][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.099890][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.100626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.107082][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.122015][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.127961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.129214][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.150464][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.151310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.157878][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.172933][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.180153][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.187487][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.188523][T18703] device veth0_vlan entered promiscuous mode [ 347.194890][ T7813] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 347.210412][ T746] device bridge_slave_1 left promiscuous mode [ 347.216483][ T7813] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz0 [ 347.226000][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.233674][ T746] bridge0: port 1(b) entered disabled state [ 347.242993][ T746] device veth1_macvtap left promiscuous mode [ 347.248955][ T746] device veth0_vlan left promiscuous mode [ 347.302161][T18740] loop4: detected capacity change from 0 to 256 [ 347.326658][T18740] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 347.366388][T18746] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7748'. [ 347.420288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.428214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.435946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.444524][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7745'. [ 347.466539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.474868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.484364][T18703] device veth1_macvtap entered promiscuous mode [ 347.495033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.498616][T18754] loop1: detected capacity change from 0 to 256 [ 347.502784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.517134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.536513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.547935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.723401][T18783] net_ratelimit: 1 callbacks suppressed [ 347.723420][T18783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.789050][T18795] loop1: detected capacity change from 0 to 512 [ 347.829474][T18795] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 347.852776][T18795] ext4 filesystem being mounted at /907/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.931765][T18795] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #19: comm syz.1.7770: corrupted inode contents [ 347.952925][T18815] : renamed from vlan1 [ 347.974171][T18795] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #19: comm syz.1.7770: mark_inode_dirty error [ 348.005868][T18795] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #19: comm syz.1.7770: corrupted inode contents [ 348.027430][T18795] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2961: inode #19: comm syz.1.7770: mark_inode_dirty error [ 348.040311][T18795] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2964: inode #19: comm syz.1.7770: mark inode dirty (error -117) [ 348.057786][T18795] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 348.071178][T18821] syz.5.7782[18821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.071261][T18821] syz.5.7782[18821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.450939][T18849] syz.5.7795[18849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.484026][T18849] syz.5.7795[18849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.794927][T18870] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 348.865788][T18870] syzkaller1: Refused to change device type [ 349.194316][T18899] loop7: detected capacity change from 0 to 512 [ 349.207543][T18901] loop4: detected capacity change from 0 to 1024 [ 349.311719][T18901] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 349.342697][T18899] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 349.363994][T18899] ext4 filesystem being mounted at /1046/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.418383][ T8259] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 349.457850][ T8259] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 349.476616][T18906] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #19: comm syz.7.7818: corrupted inode contents [ 349.501712][ T8259] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 349.514521][T18906] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #19: comm syz.7.7818: mark_inode_dirty error [ 349.542656][ T8259] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 349.568789][T18906] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #19: comm syz.7.7818: corrupted inode contents [ 349.591542][ T8259] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 349.624701][ T8259] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 349.635637][T18906] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2961: inode #19: comm syz.7.7818: mark_inode_dirty error [ 349.658421][ T8259] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 349.669159][T18906] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2964: inode #19: comm syz.7.7818: mark inode dirty (error -117) [ 349.692711][ T8259] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 349.703237][T18906] EXT4-fs warning (device loop7): ext4_evict_inode:303: xattr delete (err -117) [ 349.713648][ T8259] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 349.725322][ T8259] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 349.826422][ T30] kauditd_printk_skb: 272 callbacks suppressed [ 349.826439][ T30] audit: type=1326 audit(2000004523.385:14660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18910 comm="syz.0.7823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 349.922968][ T30] audit: type=1326 audit(2000004523.413:14661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18910 comm="syz.0.7823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 349.984114][ T30] audit: type=1326 audit(2000004523.413:14662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18910 comm="syz.0.7823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 350.011404][ T30] audit: type=1326 audit(2000004523.413:14663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18910 comm="syz.0.7823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 350.078323][ T30] audit: type=1326 audit(2000004523.413:14664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18910 comm="syz.0.7823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 350.152185][ T30] audit: type=1400 audit(2000004523.675:14665): avc: denied { audit_write } for pid=18922 comm="syz.0.7830" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 350.189608][T18925] loop7: detected capacity change from 0 to 2048 [ 350.214479][ T30] audit: type=1107 audit(2000004523.675:14666): pid=18922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='e' [ 350.230572][T18925] EXT4-fs (loop7): Ignoring removed bh option [ 350.305139][T18925] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 350.365674][T18925] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 350.417557][T18928] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.433600][T18925] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 350.467591][T18928] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.474978][T18928] device bridge_slave_0 entered promiscuous mode [ 350.485309][T18925] EXT4-fs (loop7): This should not happen!! Data will be lost [ 350.485309][T18925] [ 350.529537][T18925] EXT4-fs (loop7): Total free blocks count 0 [ 350.538570][T18928] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.552055][T18925] EXT4-fs (loop7): Free/Dirty block details [ 350.563461][T18928] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.586060][T18925] EXT4-fs (loop7): free_blocks=2415919104 [ 350.611428][T18928] device bridge_slave_1 entered promiscuous mode [ 350.618081][T18925] EXT4-fs (loop7): dirty_blocks=16 [ 350.638274][T18925] EXT4-fs (loop7): Block reservation details [ 350.674178][T18925] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 350.838528][T18959] 9pnet: p9_errstr2errno: server reported unknown error @ [ 350.889739][ T746] tipc: Disabling bearer [ 350.903453][ T746] tipc: Disabling bearer [ 350.928964][ T746] tipc: Left network mode [ 350.980583][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.988158][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.009191][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.028372][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.063976][ T2286] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.070860][ T2286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.121030][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.142806][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.170980][ T2286] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.178008][ T2286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.275382][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.300446][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.343760][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.388963][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.438845][ T30] audit: type=1400 audit(2000004524.900:14667): avc: denied { execute } for pid=18975 comm="syz.0.7851" path="/36/cpuacct.usage_percpu_user" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 351.454155][T18928] device veth0_vlan entered promiscuous mode [ 351.502414][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.511722][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.534360][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.543163][ T30] audit: type=1400 audit(2000004524.900:14668): avc: denied { create } for pid=18975 comm="syz.0.7851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 351.563209][ T30] audit: type=1400 audit(2000004524.900:14669): avc: denied { getopt } for pid=18975 comm="syz.0.7851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 351.590341][T18986] loop7: detected capacity change from 0 to 256 [ 351.602726][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.620900][T18928] device veth1_macvtap entered promiscuous mode [ 351.637071][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.646763][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.664951][T18986] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 351.681846][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.687368][T18986] exFAT-fs (loop7): hint_cluster is invalid (17) [ 351.703640][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.712236][T18986] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff) [ 351.730656][T18986] exFAT-fs (loop7): Filesystem has been set read-only [ 351.761131][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 351.777240][T18986] exFAT-fs (loop7): error, failed to bmap (inode : ffff8881280c9210 iblock : 24, err : -5) [ 351.790812][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 351.797599][T18986] exFAT-fs (loop7): error, failed to bmap (inode : ffff8881280c9210 iblock : 24, err : -5) [ 351.808077][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 351.821369][T18986] exFAT-fs (loop7): error, failed to bmap (inode : ffff8881280c9210 iblock : 24, err : -5) [ 351.844149][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 351.849976][T18986] exFAT-fs (loop7): error, failed to bmap (inode : ffff8881280c9210 iblock : 25, err : -5) [ 351.870751][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 351.881513][T18986] exFAT-fs (loop7): error, failed to bmap (inode : ffff8881280c9210 iblock : 26, err : -5) [ 351.891779][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 351.897797][T18986] exFAT-fs (loop7): error, failed to bmap (inode : ffff8881280c9210 iblock : 27, err : -5) [ 351.915613][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 351.943241][T18986] exFAT-fs (loop7): error, failed to bmap (inode : ffff8881280c9210 iblock : 28, err : -5) [ 351.954610][ T746] device bridge_slave_1 left promiscuous mode [ 351.963148][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.971453][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 351.980310][ T746] bridge0: port 1(b) entered disabled state [ 351.988481][T18986] exFAT-fs (loop7): error, failed to bmap (inode : ffff8881280c9210 iblock : 29, err : -5) [ 351.999567][ T746] device bridge0 left promiscuous mode [ 352.010415][ T746] device veth1_macvtap left promiscuous mode [ 352.016591][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.025699][ T746] device veth0_vlan left promiscuous mode [ 352.031398][T18986] exFAT-fs (loop7): error, failed to bmap (inode : ffff8881280c9210 iblock : 30, err : -5) [ 352.045662][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.057917][T18986] exFAT-fs (loop7): error, failed to bmap (inode : ffff8881280c9210 iblock : 31, err : -5) [ 352.073710][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.080194][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.086071][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.100175][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.107386][T19004] loop2: detected capacity change from 0 to 40427 [ 352.113851][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.119701][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.125568][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.131296][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.138318][T18986] exFAT-fs (loop7): error, broken FAT chain. [ 352.144783][T19004] F2FS-fs (loop2): Invalid segment/section count (31 != 24 * 1) [ 352.152261][T19004] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 352.160686][T19004] F2FS-fs (loop2): Unrecognized mount option "dlush_merge" or missing value [ 352.263877][T19024] loop7: detected capacity change from 0 to 512 [ 352.301057][T19024] EXT4-fs (loop7): orphan cleanup on readonly fs [ 352.313922][T19024] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #13: comm syz.7.7871: iget: bogus i_mode (0) [ 352.329121][T19024] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.7871: couldn't read orphan inode 13 (err -117) [ 352.347148][T19024] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 352.370390][T19024] EXT4-fs (loop7): Unrecognized mount option "./bus" or missing value [ 352.372347][T19036] loop1: detected capacity change from 0 to 128 [ 352.452711][T19041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7878'. [ 352.518932][T19046] loop1: detected capacity change from 0 to 2048 [ 352.541912][T19046] EXT4-fs (loop1): Ignoring removed bh option [ 352.574938][T19046] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 352.625397][T19046] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 352.640297][T19046] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 352.652468][T19046] EXT4-fs (loop1): This should not happen!! Data will be lost [ 352.652468][T19046] [ 352.662619][T19046] EXT4-fs (loop1): Total free blocks count 0 [ 352.668732][T19046] EXT4-fs (loop1): Free/Dirty block details [ 352.674490][T19046] EXT4-fs (loop1): free_blocks=2415919104 [ 352.680155][T19046] EXT4-fs (loop1): dirty_blocks=16 [ 352.685124][T19046] EXT4-fs (loop1): Block reservation details [ 352.691080][T19046] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 352.855017][T19097] loop2: detected capacity change from 0 to 2048 [ 352.868502][T19099] device batadv_slave_1 entered promiscuous mode [ 352.880413][T19098] device batadv_slave_1 left promiscuous mode [ 352.900694][T19097] EXT4-fs (loop2): Ignoring removed bh option [ 352.926729][T19097] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 352.978563][T19097] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 353.005259][T19097] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 353.017975][T19097] EXT4-fs (loop2): This should not happen!! Data will be lost [ 353.017975][T19097] [ 353.027470][T19097] EXT4-fs (loop2): Total free blocks count 0 [ 353.033317][T19097] EXT4-fs (loop2): Free/Dirty block details [ 353.039540][T19097] EXT4-fs (loop2): free_blocks=2415919104 [ 353.045139][T19097] EXT4-fs (loop2): dirty_blocks=16 [ 353.050338][T19097] EXT4-fs (loop2): Block reservation details [ 353.056225][T19097] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 353.285967][T19147] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 353.368839][T19161] loop2: detected capacity change from 0 to 512 [ 353.496025][T19161] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.7931: corrupted inode contents [ 353.508084][T19161] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #3: comm syz.2.7931: mark_inode_dirty error [ 353.519917][T19161] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.7931: corrupted inode contents [ 353.531865][T19161] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.7931: mark_inode_dirty error [ 353.544425][T19172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7935'. [ 353.553314][T19172] netem: unknown loss type 13 [ 353.553673][T19161] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.7931: Failed to acquire dquot type 0 [ 353.580046][T19161] EXT4-fs (loop2): 1 orphan inode deleted [ 353.589296][T19161] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.600547][T19161] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.711701][T19189] loop2: detected capacity change from 0 to 256 [ 353.749517][T19189] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 353.863517][T19207] loop2: detected capacity change from 0 to 4096 [ 353.887068][T19207] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 353.895913][T19207] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 353.916557][T19207] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #15: comm syz.2.7952: corrupted inode contents [ 353.928769][T19207] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #15: comm syz.2.7952: mark_inode_dirty error [ 353.940227][T19207] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #15: comm syz.2.7952: corrupted inode contents [ 353.952159][T19207] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.7952: mark_inode_dirty error [ 353.963576][T19207] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #15: comm syz.2.7952: corrupted inode contents [ 353.975718][T19207] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.7952: mark_inode_dirty error [ 353.986916][ T577] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 353.996621][T19207] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #15: comm syz.2.7952: corrupted inode contents [ 354.024231][T19207] EXT4-fs error (device loop2): ext4_truncate:4303: inode #15: comm syz.2.7952: mark_inode_dirty error [ 354.053059][T19207] EXT4-fs error (device loop2) in ext4_setattr:5609: Corrupt filesystem [ 354.064235][T19213] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #15: comm syz.2.7952: corrupted inode contents [ 354.096664][T18928] EXT4-fs warning (device loop2): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 354.106976][T19217] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 354.118138][T19217] SELinux: security_context_str_to_sid(system_u) failed for (dev fuse, type fuse) errno=-22 [ 354.191941][T19241] loop2: detected capacity change from 0 to 2048 [ 354.227214][T19241] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 354.395254][ T577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.406130][ T577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.415620][ T577] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 354.426967][ T577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.435525][ T577] usb 2-1: config 0 descriptor?? [ 354.958329][ T577] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 354.965384][ T577] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 354.972426][ T577] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 354.979515][ T577] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 354.986457][ T577] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 354.994293][ T577] hid-steam 0003:28DE:1142.0037: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 355.026962][T19297] loop7: detected capacity change from 0 to 16 [ 355.063818][T19297] erofs: (device loop7): mounted with root inode @ nid 36. [ 355.072583][T19297] overlayfs: failed to set xattr on upper [ 355.172136][ T306] usb 2-1: USB disconnect, device number 24 [ 355.265442][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 355.265456][ T30] audit: type=1326 audit(2000004528.494:14827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.2.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7948d05169 code=0x7ffc0000 [ 355.295612][ T30] audit: type=1326 audit(2000004528.494:14828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.2.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7948d05169 code=0x7ffc0000 [ 355.319295][ T30] audit: type=1326 audit(2000004528.494:14829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.2.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f7948d05169 code=0x7ffc0000 [ 355.343365][ T30] audit: type=1400 audit(2000004528.494:14830): avc: denied { getattr } for pid=19309 comm="syz.2.7998" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 355.365907][ T30] audit: type=1326 audit(2000004528.494:14831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.2.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7948d05169 code=0x7ffc0000 [ 355.389993][ T30] audit: type=1326 audit(2000004528.494:14832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.2.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7948d05169 code=0x7ffc0000 [ 355.562042][ T30] audit: type=1400 audit(2000004528.777:14833): avc: denied { mounton } for pid=19325 comm="syz.2.8005" path="/proc/67/cgroup" dev="proc" ino=92336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 355.650349][T19334] binfmt_misc: register: failed to install interpreter file ./file2 [ 355.772690][T19344] loop1: detected capacity change from 0 to 256 [ 355.787598][T19344] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 355.803206][ T30] audit: type=1400 audit(2000004528.993:14834): avc: denied { append } for pid=19343 comm="syz.1.8013" path="/941/file2/memory.events.local" dev="loop1" ino=1048955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 355.828289][ T30] audit: type=1400 audit(2000004528.993:14835): avc: denied { map } for pid=19343 comm="syz.1.8013" path="/941/file2/memory.events.local" dev="loop1" ino=1048955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 355.887006][T19346] serio: Serial port ptm0 [ 355.985874][ T306] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 355.997431][ T30] audit: type=1400 audit(2000004529.182:14836): avc: denied { create } for pid=19350 comm="syz.1.8016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 356.230735][T19386] loop1: detected capacity change from 0 to 512 [ 356.240400][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 356.274746][T19386] EXT4-fs (loop1): orphan cleanup on readonly fs [ 356.281610][T19386] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8033: bg 0: block 248: padding at end of block bitmap is not set [ 356.296328][T19386] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.8033: Failed to acquire dquot type 1 [ 356.308072][T19386] EXT4-fs (loop1): 1 truncate cleaned up [ 356.313795][T19386] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 356.329620][T19386] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 356.378349][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.389291][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.398859][ T306] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 356.414897][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.424703][ T306] usb 3-1: config 0 descriptor?? [ 356.485028][T19398] bridge: RTM_NEWNEIGH with invalid ether address [ 356.560241][T19411] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8044'. [ 356.593025][T19417] syz.1.8048[19417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.593095][T19417] syz.1.8048[19417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.931215][ T306] koneplus 0003:1E7D:2D51.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 357.378200][ T306] usb 3-1: USB disconnect, device number 10 [ 357.620227][T19457] overlayfs: failed to clone upperpath [ 357.768310][T19486] overlayfs: failed to clone upperpath [ 357.813172][T19492] netlink: 'syz.5.8082': attribute type 4 has an invalid length. [ 357.823491][T19492] netlink: 'syz.5.8082': attribute type 4 has an invalid length. [ 357.864057][T19496] incfs: Error accessing: ./file1. [ 357.869067][T19496] incfs: mount failed -2 [ 358.224321][ T386] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 358.519543][T19528] hub 9-0:1.0: USB hub found [ 358.524362][T19528] hub 9-0:1.0: 1 port detected [ 358.606006][ T386] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 358.786243][ T386] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.795266][ T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.803105][ T386] usb 3-1: Product: syz [ 358.807184][ T386] usb 3-1: Manufacturer: syz [ 358.811737][ T386] usb 3-1: SerialNumber: syz [ 358.949257][T19558] loop7: detected capacity change from 0 to 512 [ 358.979283][T19558] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 358.995228][T19558] ext4 filesystem being mounted at /1082/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.063118][T19504] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 359.246820][T19601] xt_bpf: check failed: parse error [ 359.254329][T19571] loop7: detected capacity change from 0 to 40427 [ 359.308042][T19571] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 359.320855][T19571] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 359.500605][T19571] F2FS-fs (loop7): Found nat_bits in checkpoint [ 359.564602][T19571] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 359.633242][T19571] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 359.645539][T19571] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 359.671182][T19571] attempt to access beyond end of device [ 359.671182][T19571] loop7: rw=2049, want=45184, limit=40427 [ 359.695109][T19571] attempt to access beyond end of device [ 359.695109][T19571] loop7: rw=2049, want=45312, limit=40427 [ 359.765724][T19504] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 360.016959][ T386] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 360.023238][ T386] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 360.113420][T19968] loop1: detected capacity change from 0 to 256 [ 360.158512][T19968] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 360.250428][ T386] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 360.274315][ T386] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 360.287189][ T386] usb 3-1: USB disconnect, device number 11 [ 360.293515][ T386] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 360.383299][T20003] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8159'. [ 360.500474][T20007] loop1: detected capacity change from 0 to 40427 [ 360.548321][T20007] F2FS-fs (loop1): fault_injection options not supported [ 360.555278][T20007] F2FS-fs (loop1): fault_type options not supported [ 360.562739][T20007] F2FS-fs (loop1): invalid crc value [ 360.569212][T20007] F2FS-fs (loop1): Found nat_bits in checkpoint [ 360.599833][T20007] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 360.622467][ T8762] attempt to access beyond end of device [ 360.622467][ T8762] loop1: rw=2049, want=45104, limit=40427 [ 360.639385][T20013] loop7: detected capacity change from 0 to 512 [ 360.702129][T20013] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 360.713137][T20013] ext4 filesystem being mounted at /1098/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.778576][ T30] kauditd_printk_skb: 201 callbacks suppressed [ 360.778594][ T30] audit: type=1326 audit(2000004533.678:15036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 360.814158][T20023] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 360.820952][ T30] audit: type=1326 audit(2000004533.678:15037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 360.844925][ T30] audit: type=1326 audit(2000004533.688:15038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 360.887350][ T30] audit: type=1326 audit(2000004533.688:15039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 360.913353][ T30] audit: type=1326 audit(2000004533.688:15040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 360.940354][ T30] audit: type=1326 audit(2000004533.688:15041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 360.964221][ T30] audit: type=1326 audit(2000004533.688:15042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 360.988164][ T30] audit: type=1326 audit(2000004533.688:15043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 361.013569][ T30] audit: type=1326 audit(2000004533.688:15044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 361.038090][ T30] audit: type=1326 audit(2000004533.725:15045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.8164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5cfd2169 code=0x7ffc0000 [ 361.103038][T20050] loop2: detected capacity change from 0 to 512 [ 361.185972][T20050] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 361.196924][T20050] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.461681][T20109] netlink: 'syz.5.8202': attribute type 32 has an invalid length. [ 361.479328][T20109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8202'. [ 361.497425][T20113] bridge0: port 3(syz_tun) entered blocking state [ 361.504775][T20113] bridge0: port 3(syz_tun) entered disabled state [ 361.513455][T20113] device syz_tun entered promiscuous mode [ 361.520613][T20113] bridge0: port 3(syz_tun) entered blocking state [ 361.526970][T20113] bridge0: port 3(syz_tun) entered forwarding state [ 361.886810][T20164] xt_bpf: check failed: parse error [ 361.907717][T20166] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 362.001706][T20178] 9pnet: p9_errstr2errno: server reported unknown error @΂(QNd [ 362.650329][T20212] input: syz0 as /devices/virtual/input/input72 [ 362.698232][T20217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8251'. [ 362.978587][ T969] Bluetooth: hci0: command 0x1003 tx timeout [ 362.984543][ T5918] Bluetooth: hci0: sending frame failed (-49) [ 365.185756][T13646] Bluetooth: hci0: command 0x1001 tx timeout [ 365.191598][ T5918] Bluetooth: hci0: sending frame failed (-49) [ 367.394263][T13646] Bluetooth: hci0: command 0x1009 tx timeout [ 371.826089][T20287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20287 comm=syz.0.8291 [ 371.842991][T20287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20287 comm=syz.0.8291 [ 371.859924][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 371.859939][ T30] audit: type=1326 audit(2000004544.123:15107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 371.892100][T20290] device wireguard0 entered promiscuous mode [ 371.922030][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8285'. [ 371.925148][ T30] audit: type=1326 audit(2000004544.123:15108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 371.954238][ T30] audit: type=1326 audit(2000004544.123:15109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 371.978388][ T30] audit: type=1326 audit(2000004544.123:15110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 372.003302][ T30] audit: type=1326 audit(2000004544.123:15111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 372.026831][ T30] audit: type=1326 audit(2000004544.123:15112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 372.053591][ T30] audit: type=1326 audit(2000004544.123:15113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 372.083816][ T30] audit: type=1326 audit(2000004544.123:15114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 372.113019][ T30] audit: type=1326 audit(2000004544.161:15115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 372.149083][ T30] audit: type=1326 audit(2000004544.161:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 372.172637][T20312] device wireguard0 entered promiscuous mode [ 372.201992][T20318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=20318 comm=syz.1.8293 [ 372.293317][T20335] xt_bpf: check failed: parse error [ 372.306042][T20338] syz.5.8303[20338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.306110][T20338] syz.5.8303[20338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.430633][T20364] device veth0_to_bond entered promiscuous mode [ 372.448557][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8316'. [ 372.459714][T20364] device veth0_to_bond left promiscuous mode [ 372.548356][T20370] 9pnet: p9_errstr2errno: server reported unknown error 00# [ 372.977870][T20408] loop1: detected capacity change from 0 to 40427 [ 373.034727][T20408] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 373.042327][T20408] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 373.051358][T20408] F2FS-fs (loop1): invalid crc value [ 373.058092][T20408] F2FS-fs (loop1): Found nat_bits in checkpoint [ 373.088989][T20408] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 373.095873][T20408] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 373.297470][T20433] loop7: detected capacity change from 0 to 512 [ 373.330443][T20437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8343'. [ 373.340293][T20433] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 373.356681][T20433] ext4 filesystem being mounted at /1130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.658205][T20450] loop1: detected capacity change from 0 to 40427 [ 373.714817][T20450] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 373.722443][T20450] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 373.747927][T20450] F2FS-fs (loop1): Found nat_bits in checkpoint [ 373.790434][T20450] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 373.797482][T20450] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 373.849756][T20475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20475 comm=syz.2.8361 [ 373.859716][T20450] attempt to access beyond end of device [ 373.859716][T20450] loop1: rw=10241, want=45104, limit=40427 [ 373.876340][T20450] attempt to access beyond end of device [ 373.876340][T20450] loop1: rw=2049, want=45104, limit=40427 [ 373.896938][T20475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20475 comm=syz.2.8361 [ 373.897288][ T8762] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 373.909859][ T8762] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 373.917673][ T8762] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 373.931616][ T8762] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 373.942967][ T8762] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 373.950858][ T8762] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 373.958309][ T8762] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 374.061350][T20497] loop2: detected capacity change from 0 to 2048 [ 374.138619][T20497] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.149458][T20497] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.170836][T20497] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 374.212099][T20497] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 374.236067][T20497] EXT4-fs (loop2): re-mounted. Opts: journal_checksum,barrier,data=writeback,discard,usrjquota=,noblock_validity,barrier,sysvgroups,. Quota mode: none. [ 374.269253][T20497] EXT4-fs (loop2): Unrecognized mount option "usr" or missing value [ 374.290016][T18928] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /74/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 374.343145][T18928] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 374.364723][T18928] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 374.481004][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8391'. [ 374.492806][T20541] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 374.575454][T20554] incfs: Options parsing error. -22 [ 374.581654][T20554] incfs: mount failed -22 [ 374.729228][T20566] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.737127][T20566] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.750562][T20566] device bridge_slave_0 entered promiscuous mode [ 374.761981][T20566] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.769204][T20566] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.776599][T20566] device bridge_slave_1 entered promiscuous mode [ 374.855562][T20566] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.862437][T20566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.869515][T20566] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.876335][T20566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.884260][T20596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8415'. [ 374.895273][T19897] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.902479][T19897] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.949833][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.965311][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.990463][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.005553][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.015487][T19897] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.022357][T19897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.029940][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 375.038472][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.046813][T19897] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.053678][T19897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.061908][T20610] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.084821][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.095090][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.113824][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.128030][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.158529][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 375.167194][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.181088][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 375.201014][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.215558][T20566] device veth0_vlan entered promiscuous mode [ 375.221699][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.235321][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.251925][T20566] device veth1_macvtap entered promiscuous mode [ 375.275438][T19826] device bridge_slave_1 left promiscuous mode [ 375.281939][T19826] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.295093][T19826] device bridge_slave_0 left promiscuous mode [ 375.305689][T19826] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.325998][T19826] device veth1_macvtap left promiscuous mode [ 375.337595][T19826] device veth0_vlan left promiscuous mode [ 375.412321][T20646] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 375.454950][T20646] EXT4-fs (loop1): unable to read superblock [ 375.576740][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 375.587283][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.604580][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 375.623194][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 375.638434][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 375.661062][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 375.673269][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.017746][T20694] loop1: detected capacity change from 0 to 40427 [ 376.063513][T20694] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 376.070667][T20694] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 376.080273][T20694] F2FS-fs (loop1): invalid crc value [ 376.086907][T20694] F2FS-fs (loop1): Found nat_bits in checkpoint [ 376.128445][T20694] F2FS-fs (loop1): Start checkpoint disabled! [ 376.143737][T20694] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 376.151331][T20694] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 376.198996][T20694] attempt to access beyond end of device [ 376.198996][T20694] loop1: rw=2049, want=53384, limit=40427 [ 376.233234][T19897] attempt to access beyond end of device [ 376.233234][T19897] loop1: rw=2049, want=40992, limit=40427 [ 376.403836][T20715] loop7: detected capacity change from 0 to 8192 [ 376.557550][T20732] loop1: detected capacity change from 0 to 512 [ 376.602633][T20732] EXT4-fs (loop1): too many log groups per flexible block group [ 376.611291][T20732] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 376.618090][T20732] EXT4-fs (loop1): mount failed [ 376.825103][T20761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20761 comm=syz.6.8484 [ 377.196823][T20789] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.204224][T20789] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.212881][T20789] device bridge_slave_0 entered promiscuous mode [ 377.220004][T20789] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.226921][T20789] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.234448][T20789] device bridge_slave_1 entered promiscuous mode [ 377.298251][T20809] bridge: RTM_NEWNEIGH with invalid ether address [ 377.332752][T20789] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.339657][T20789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.346702][T20789] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.353523][T20789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.363526][ T30] kauditd_printk_skb: 195 callbacks suppressed [ 377.363538][ T30] audit: type=1400 audit(2000004549.309:15312): avc: denied { mount } for pid=20815 comm="syz.5.8513" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 377.407050][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.415468][T19826] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.419030][T20820] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 [ 377.431541][T19826] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.457802][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.466428][T19826] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.473281][T19826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.480930][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.489075][T19826] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.495942][T19826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.521387][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.529438][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.548049][T20789] device veth0_vlan entered promiscuous mode [ 377.554904][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.563593][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.571514][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 377.579828][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 377.599118][T20789] device veth1_macvtap entered promiscuous mode [ 377.606102][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.627717][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.647816][T19826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.681468][ T30] audit: type=1326 audit(2000004549.610:15313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20841 comm="syz.5.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 377.717134][ T30] audit: type=1326 audit(2000004549.610:15314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20841 comm="syz.5.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 377.749597][ T30] audit: type=1326 audit(2000004549.610:15315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20841 comm="syz.5.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 377.774665][ T30] audit: type=1326 audit(2000004549.610:15316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20841 comm="syz.5.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 377.803616][ T30] audit: type=1326 audit(2000004549.610:15317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20841 comm="syz.5.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 377.835106][ T30] audit: type=1400 audit(2000004549.666:15318): avc: denied { create } for pid=20851 comm="syz.5.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 377.856254][ T30] audit: type=1400 audit(2000004549.666:15319): avc: denied { write } for pid=20851 comm="syz.5.8529" path="socket:[96482]" dev="sockfs" ino=96482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 377.880977][ T30] audit: type=1400 audit(2000004549.666:15320): avc: denied { nlmsg_read } for pid=20851 comm="syz.5.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 377.913218][T19897] device bridge_slave_1 left promiscuous mode [ 377.919262][T19897] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.955196][T19897] device bridge_slave_0 left promiscuous mode [ 377.963486][T19897] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.982402][T19897] device veth1_macvtap left promiscuous mode [ 377.989199][T20867] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 378.000742][T19897] device veth0_vlan left promiscuous mode [ 378.021752][T20867] FAT-fs (loop1): unable to read boot sector [ 378.074024][ T30] audit: type=1400 audit(2000004549.977:15321): avc: denied { ioctl } for pid=20876 comm="syz.5.8540" path="socket:[95880]" dev="sockfs" ino=95880 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.222960][T20901] device veth0_to_bond entered promiscuous mode [ 378.237126][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8552'. [ 378.248252][T20901] device veth0_to_bond left promiscuous mode [ 378.299757][T20913] xt_bpf: check failed: parse error [ 378.446234][T20938] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 378.499531][T20950] syz.5.8576[20950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.499611][T20950] syz.5.8576[20950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.690071][T20952] loop8: detected capacity change from 0 to 40427 [ 378.742068][T20952] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 378.749671][T20952] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 378.759059][T20952] F2FS-fs (loop8): invalid crc value [ 378.766397][T20952] F2FS-fs (loop8): Found nat_bits in checkpoint [ 378.808629][T20952] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 378.815932][ T737] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 378.823349][T20952] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 379.061422][T19897] Bluetooth: hci0: Frame reassembly failed (-84) [ 379.135964][T21005] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8599'. [ 379.145747][T21005] device gretap0 entered promiscuous mode [ 379.160046][T21005] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8599'. [ 379.169409][T21005] 0XD: renamed from gretap0 [ 379.174652][T21005] device 30XD left promiscuous mode [ 379.180711][T21005] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 379.198356][ T737] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 379.207347][ T737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.216256][ T737] usb 2-1: config 0 descriptor?? [ 380.665496][ T737] usb 2-1: Cannot set autoneg [ 380.670059][ T737] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 380.679133][ T737] usb 2-1: USB disconnect, device number 25 [ 381.220759][T21089] loop1: detected capacity change from 0 to 512 [ 381.250082][ T7813] Bluetooth: hci0: command 0x1003 tx timeout [ 381.256039][ T5918] Bluetooth: hci0: sending frame failed (-49) [ 381.282948][T21089] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.8639: bad orphan inode 15 [ 381.299804][T21089] ext4_test_bit(bit=14, block=5) = 0 [ 381.305734][T21089] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 381.410657][T21096] device wg2 left promiscuous mode [ 381.724025][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8667'. [ 381.739381][T21154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8667'. [ 381.754322][T21158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8671'. [ 382.136758][T21212] overlayfs: failed to clone upperpath [ 382.154771][T21214] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 382.235444][T21224] xt_bpf: check failed: parse error [ 382.370989][T21230] loop1: detected capacity change from 0 to 512 [ 382.412206][T21230] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.8702: inode #1: comm syz.1.8702: iget: illegal inode # [ 382.430745][T21230] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.8702: error while reading EA inode 1 err=-117 [ 382.449361][T21230] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.8702: inode #1: comm syz.1.8702: iget: illegal inode # [ 382.463896][T21230] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.8702: error while reading EA inode 1 err=-117 [ 382.476334][T21230] EXT4-fs (loop1): 1 orphan inode deleted [ 382.481938][T21230] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 382.721892][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 382.721910][ T30] audit: type=1326 audit(2000004554.341:15426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.7.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 382.753488][ T30] audit: type=1326 audit(2000004554.341:15427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.7.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 382.756579][T21248] loop7: detected capacity change from 0 to 512 [ 382.777588][ T30] audit: type=1326 audit(2000004554.379:15428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.7.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7984a94169 code=0x7ffc0000 [ 382.807002][ T30] audit: type=1326 audit(2000004554.379:15429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.7.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7984a941a3 code=0x7ffc0000 [ 382.831228][ T30] audit: type=1326 audit(2000004554.379:15430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.7.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7984a92c1f code=0x7ffc0000 [ 382.854706][ T30] audit: type=1326 audit(2000004554.379:15431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.7.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7984a941f7 code=0x7ffc0000 [ 382.882766][ T30] audit: type=1326 audit(2000004554.379:15432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.7.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7984a92ad0 code=0x7ffc0000 [ 382.907037][ T30] audit: type=1326 audit(2000004554.379:15433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.7.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7984a93d6b code=0x7ffc0000 [ 382.907053][T21248] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 382.940118][ T30] audit: type=1326 audit(2000004554.416:15434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.7.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7984a92dca code=0x7ffc0000 [ 382.963572][ T30] audit: type=1326 audit(2000004554.416:15435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.7.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7984a92dca code=0x7ffc0000 [ 382.988375][T21248] EXT4-fs (loop7): 1 truncate cleaned up [ 382.994198][T21248] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,block_validity,quota,. Quota mode: writeback. [ 383.118171][T21262] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8715'. [ 383.461861][ T60] Bluetooth: hci0: command 0x1001 tx timeout [ 383.467829][ T5918] Bluetooth: hci0: sending frame failed (-49) [ 383.547485][T21285] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 383.556915][T21285] 9pnet: Insufficient options for proto=fd [ 384.021048][T21297] loop1: detected capacity change from 0 to 512 [ 384.054005][T21297] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,dioread_lock,errors=remount-ro,max_batch_time=0x0000000000000080,. Quota mode: writeback. [ 384.072489][T21297] ext4 filesystem being mounted at /1085/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.085593][T21297] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.8732: path /1085/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 384.110394][T21297] EXT4-fs (loop1): Remounting filesystem read-only [ 384.116899][T21297] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.8732: path /1085/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 384.150218][T21297] EXT4-fs (loop1): Remounting filesystem read-only [ 384.159958][T21297] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.8732: path /1085/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 384.203753][T21297] EXT4-fs (loop1): Remounting filesystem read-only [ 384.211298][T21297] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.8732: path /1085/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 384.232212][T21297] EXT4-fs (loop1): Remounting filesystem read-only [ 384.238762][T21297] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.8732: path /1085/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 384.269988][T21297] EXT4-fs (loop1): Remounting filesystem read-only [ 384.276402][T21297] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.8732: path /1085/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 384.298962][T21297] EXT4-fs (loop1): Remounting filesystem read-only [ 384.308924][T21297] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 18: comm syz.1.8732: lblock 23 mapped to illegal pblock 18 (length 1) [ 384.330070][T21297] EXT4-fs (loop1): Remounting filesystem read-only [ 384.348136][T21297] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 19: comm syz.1.8732: path /1085/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 384.368824][T21297] EXT4-fs (loop1): Remounting filesystem read-only [ 384.375298][T21297] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 20: comm syz.1.8732: path /1085/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 384.395824][T21297] EXT4-fs (loop1): Remounting filesystem read-only [ 384.402296][T21297] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 21: comm syz.1.8732: path /1085/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 384.423778][T21297] EXT4-fs (loop1): Remounting filesystem read-only [ 384.456483][T21326] netlink: 9 bytes leftover after parsing attributes in process `syz.7.8743'. [ 384.479768][T21326] device gretap0 entered promiscuous mode [ 384.525924][T21326] netlink: 5 bytes leftover after parsing attributes in process `syz.7.8743'. [ 384.534819][T21326] 0XD: renamed from gretap0 [ 384.540594][T21326] device 30XD left promiscuous mode [ 384.546997][T21326] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 384.636350][T21338] device wireguard0 entered promiscuous mode [ 384.793330][T21352] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8755'. [ 384.997681][T21369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8764'. [ 385.022683][T21371] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 385.030186][T21371] SELinux: failed to load policy [ 385.073109][T21379] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 [ 385.195881][T21377] loop1: detected capacity change from 0 to 40427 [ 385.228855][T21377] F2FS-fs (loop1): invalid crc value [ 385.235305][T21377] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 385.260450][T21377] F2FS-fs (loop1): Start checkpoint disabled! [ 385.267186][T21377] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 385.294561][ T8762] attempt to access beyond end of device [ 385.294561][ T8762] loop1: rw=524288, want=45072, limit=40427 [ 385.306080][ T8762] attempt to access beyond end of device [ 385.306080][ T8762] loop1: rw=0, want=45072, limit=40427 [ 385.323194][T19769] attempt to access beyond end of device [ 385.323194][T19769] loop1: rw=2049, want=45120, limit=40427 [ 385.338978][ T8762] bridge0: port 3(syz_tun) entered disabled state [ 385.361447][ T8762] device syz_tun left promiscuous mode [ 385.367271][ T8762] bridge0: port 3(syz_tun) entered disabled state [ 385.465185][T21409] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8779'. [ 385.474817][T19826] tipc: Disabling bearer [ 385.480051][T19826] tipc: Left network mode [ 385.507042][T21414] loop7: detected capacity change from 0 to 128 [ 385.673862][ T60] Bluetooth: hci0: command 0x1009 tx timeout [ 385.683861][T21426] loop7: detected capacity change from 0 to 1024 [ 385.697964][T21422] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.704800][T21422] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.712152][T21422] device bridge_slave_0 entered promiscuous mode [ 385.718976][T21422] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.719731][T21426] EXT4-fs (loop7): Ignoring removed oldalloc option [ 385.725814][T21422] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.726434][T21422] device bridge_slave_1 entered promiscuous mode [ 385.732959][T21426] EXT4-fs (loop7): Ignoring removed bh option [ 385.753853][T21426] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 385.793125][T21426] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,i_version,oldalloc,grpid,data_err=ignore,mb_optimize_scan=0x0000000000000001,errors=remount-ro,bsdgroups,noquota,user_xattr,bh,dioread_nolock,. Quota mode: none. [ 385.826925][T21426] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3876: comm syz.7.8789: Allocating blocks 481-513 which overlap fs metadata [ 385.843666][T21426] EXT4-fs (loop7): Remounting filesystem read-only [ 385.875454][T21422] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.882349][T21422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.889481][T21422] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.896327][T21422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.927914][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.938179][T19897] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.945764][T19897] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.970630][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.978852][T19897] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.985715][T19897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.993531][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 386.001626][T19897] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.008488][T19897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.024326][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 386.045253][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.062631][T21422] device veth0_vlan entered promiscuous mode [ 386.069349][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.078168][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.085875][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.094038][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.113409][T19826] device bridge_slave_1 left promiscuous mode [ 386.119353][T19826] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.127303][T19826] bridge0: port 1(b) entered disabled state [ 386.134637][T19826] device veth1_macvtap left promiscuous mode [ 386.140503][T19826] device veth0_vlan left promiscuous mode [ 386.485931][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.495254][T21422] device veth1_macvtap entered promiscuous mode [ 386.506703][T21479] device veth1 entered promiscuous mode [ 386.512083][T21479] device macsec1 entered promiscuous mode [ 386.519836][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.528500][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.541821][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.554880][T19897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.849907][T21519] loop7: detected capacity change from 0 to 256 [ 387.025821][T21539] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8836'. [ 387.091120][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8840'. [ 387.099853][T21546] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8840'. [ 387.132083][T21552] syz.5.8842[21552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.132241][T21552] syz.5.8842[21552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.322171][T21576] netlink: 'syz.9.8854': attribute type 4 has an invalid length. [ 387.349211][T21576] netlink: 'syz.9.8854': attribute type 4 has an invalid length. [ 387.370630][T21581] tmpfs: Unknown parameter 'nolazytime' [ 387.818877][T21629] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8879'. [ 387.828321][T21629] netlink: 'syz.7.8879': attribute type 6 has an invalid length. [ 387.836181][T21629] netlink: 'syz.7.8879': attribute type 5 has an invalid length. [ 387.846215][T21629] netlink: 'syz.7.8879': attribute type 4 has an invalid length. [ 387.871309][T21635] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.882282][T21635] FAT-fs (loop15): unable to read boot sector [ 388.261439][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 388.261452][ T30] audit: type=1400 audit(2000004559.559:15619): avc: denied { nlmsg_write } for pid=21664 comm="syz.0.8896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 388.443464][ T969] hid-generic 0000:0003:0000.0039: unknown main item tag 0x0 [ 388.450794][ T969] hid-generic 0000:0003:0000.0039: unknown main item tag 0x0 [ 388.458578][ T969] hid-generic 0000:0003:0000.0039: hidraw0: HID v0.00 Device [syz0] on syz1 [ 388.533229][T21683] netlink: 'syz.9.8903': attribute type 4 has an invalid length. [ 388.653688][ T30] audit: type=1400 audit(2000004559.926:15620): avc: denied { ioctl } for pid=21694 comm="syz.9.8909" path="socket:[98956]" dev="sockfs" ino=98956 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 388.806463][ T30] audit: type=1326 audit(2000004560.067:15621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.5.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 388.830963][ T30] audit: type=1326 audit(2000004560.067:15622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.5.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 388.855121][ T30] audit: type=1326 audit(2000004560.095:15623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.5.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 388.878663][ T30] audit: type=1326 audit(2000004560.095:15624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.5.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 388.902460][ T30] audit: type=1326 audit(2000004560.095:15625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.5.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 388.926283][ T30] audit: type=1326 audit(2000004560.114:15626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.5.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 388.949884][ T30] audit: type=1326 audit(2000004560.114:15627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.5.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 388.973699][ T30] audit: type=1326 audit(2000004560.114:15628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.5.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581b4dd169 code=0x7ffc0000 [ 389.841735][T21801] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.861248][T21803] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.872053][T21803] FAT-fs (loop1): unable to read boot sector [ 390.385922][T21814] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.392874][T21814] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.400152][T21814] device bridge_slave_0 entered promiscuous mode [ 390.406984][T21814] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.414094][T21814] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.421677][T21814] device bridge_slave_1 entered promiscuous mode [ 390.435082][T21819] syz.7.8967[21819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.435157][T21819] syz.7.8967[21819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.544371][T21814] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.562439][T21814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.569587][T21814] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.576429][T21814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.672854][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 390.684637][T19782] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.699236][T19782] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.728994][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 390.748262][T21827] xt_hashlimit: max too large, truncated to 1048576 [ 390.764396][T19782] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.771269][T19782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.821378][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 390.844049][T19782] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.850903][T19782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.882136][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 390.901011][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.927095][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.958992][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.970544][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 390.987475][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 391.005031][T21814] device veth0_vlan entered promiscuous mode [ 391.037335][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 391.058585][T21814] device veth1_macvtap entered promiscuous mode [ 391.100312][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 391.119224][T19782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 391.175613][T21854] loop3: detected capacity change from 0 to 512 [ 391.238131][T21854] EXT4-fs (loop3): Ignoring removed orlov option [ 391.263184][T21854] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.8966: casefold flag without casefold feature [ 391.280168][T21854] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.8966: couldn't read orphan inode 15 (err -117) [ 391.311960][T21854] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 391.440480][T21872] tmpfs: Unknown parameter 'h' [ 391.591413][T21909] input: syz0 as /devices/virtual/input/input73 [ 391.684668][T21926] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9015'. [ 391.805750][T21945] loop7: detected capacity change from 0 to 512 [ 391.837127][T21945] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.9024: casefold flag without casefold feature [ 391.849954][T21945] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.9024: couldn't read orphan inode 15 (err -117) [ 391.862096][T21945] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 393.594374][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 393.594392][ T30] audit: type=1326 audit(2000004564.569:15760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21929 comm="syz.3.9017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f877d433127 code=0x7fc00000 [ 393.660721][T21968] loop7: detected capacity change from 0 to 2048 [ 393.695498][ T577] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 394.773087][ T30] audit: type=1400 audit(2000004565.678:15761): avc: denied { setopt } for pid=21965 comm="syz.5.9032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 394.886374][ T30] audit: type=1326 audit(2000004565.772:15762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877d43c169 code=0x7ffc0000 [ 394.910057][ T577] usb 10-1: Using ep0 maxpacket: 16 [ 394.937367][ T30] audit: type=1326 audit(2000004565.772:15763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f877d43c169 code=0x7ffc0000 [ 394.983022][T22000] loop9: detected capacity change from 0 to 512 [ 394.983596][ T30] audit: type=1326 audit(2000004565.772:15764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877d43c169 code=0x7ffc0000 [ 395.012633][ T30] audit: type=1326 audit(2000004565.809:15765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877d43c169 code=0x7ffc0000 [ 395.014475][T22002] netlink: 165 bytes leftover after parsing attributes in process `syz.3.9049'. [ 395.036588][ T30] audit: type=1400 audit(2000004565.828:15766): avc: denied { setopt } for pid=21993 comm="syz.3.9044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 395.062378][T22002] netlink: 277 bytes leftover after parsing attributes in process `syz.3.9049'. [ 395.073474][ T577] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 395.081451][ T577] usb 10-1: can't read configurations, error -71 [ 395.092436][T22000] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 395.099413][T22000] EXT4-fs (loop9): Ignoring removed bh option [ 395.105464][T22000] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 395.133878][T22000] EXT4-fs (loop9): 1 truncate cleaned up [ 395.154139][T22000] EXT4-fs (loop9): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 395.215305][ T30] audit: type=1400 audit(2000004566.082:15767): avc: denied { map } for pid=21998 comm="syz.9.9047" path="/56/bus/memory.stat" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 395.258604][ T30] audit: type=1326 audit(2000004566.129:15768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22024 comm="syz.3.9058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877d43c169 code=0x7ffc0000 [ 395.282521][ T30] audit: type=1326 audit(2000004566.129:15769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22024 comm="syz.3.9058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f877d43c169 code=0x7ffc0000 [ 395.451967][T19769] Bluetooth: hci0: Frame reassembly failed (-84) [ 395.527812][T22062] tmpfs: Unknown parameter 'nolazytime' [ 395.580397][T19782] device bridge_slave_1 left promiscuous mode [ 395.586636][T19782] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.594938][T19782] device bridge_slave_0 left promiscuous mode [ 395.601212][T19782] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.609187][T19782] device veth1_macvtap left promiscuous mode [ 395.615474][T19782] device veth0_vlan left promiscuous mode [ 395.712644][T22083] loop7: detected capacity change from 0 to 256 [ 396.189329][T22122] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9101'. [ 396.403509][T22136] loop3: detected capacity change from 0 to 512 [ 396.404181][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9108'. [ 396.421403][T22139] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9108'. [ 396.462347][T22136] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.9107: bad orphan inode 15 [ 396.472716][T22136] ext4_test_bit(bit=14, block=5) = 0 [ 396.478155][T22136] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 396.670110][T22157] loop3: detected capacity change from 0 to 40427 [ 396.698380][T22157] F2FS-fs (loop3): invalid crc value [ 396.705183][T22157] F2FS-fs (loop3): Found nat_bits in checkpoint [ 396.711980][T22175] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9125'. [ 396.721405][T22175] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 396.729815][T22175] tipc: Enabled bearer , priority 10 [ 396.760574][T22157] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 396.779407][T21814] attempt to access beyond end of device [ 396.779407][T21814] loop3: rw=2049, want=45104, limit=40427 [ 398.910994][ T577] Bluetooth: hci0: command 0x1003 tx timeout [ 398.916867][ T5918] Bluetooth: hci0: sending frame failed (-49) [ 399.050506][T22209] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 399.074571][T22212] loop9: detected capacity change from 0 to 2048 [ 399.119880][T22212] Alternate GPT is invalid, using primary GPT. [ 399.126460][T22212] loop9: p2 p3 p7 [ 399.249554][T22247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9156'. [ 399.344220][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9165'. [ 399.353102][T22267] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9165'. [ 399.374717][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9176'. [ 399.432659][ T969] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 399.624392][T22302] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 399.674658][T22308] incfs: Options parsing error. -22 [ 399.679951][T22308] incfs: mount failed -22 [ 399.688441][ T969] usb 4-1: Using ep0 maxpacket: 16 [ 399.720584][ C1] ================================================================== [ 399.728461][ C1] BUG: KASAN: use-after-free in dev_map_generic_redirect+0xa0/0x6f0 [ 399.736274][ C1] Read of size 8 at addr ffff888110c6e080 by task kworker/u4:180/19782 [ 399.744343][ C1] [ 399.746515][ C1] CPU: 1 PID: 19782 Comm: kworker/u4:180 Tainted: G W 5.15.178-syzkaller-00013-g7d1f9b5c2ff5 #0 [ 399.758059][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 399.767955][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 399.774721][ C1] Call Trace: [ 399.777855][ C1] [ 399.780540][ C1] dump_stack_lvl+0x151/0x1c0 [ 399.785050][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 399.790515][ C1] ? panic+0x760/0x760 [ 399.794434][ C1] ? __netif_receive_skb_core+0x1706/0x3640 [ 399.800151][ C1] ? net_rx_action+0x47d/0xc50 [ 399.804752][ C1] ? handle_softirqs+0x25e/0x5c0 [ 399.809521][ C1] ? __do_softirq+0xb/0xd [ 399.813689][ C1] print_address_description+0x87/0x3b0 [ 399.815901][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.819155][ C1] ? worker_thread+0xad5/0x12a0 [ 399.819178][ C1] ? kthread+0x421/0x510 [ 399.830005][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.834540][ C1] kasan_report+0x179/0x1c0 [ 399.839142][ T969] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 399.848153][ C1] ? dev_map_generic_redirect+0xa0/0x6f0 [ 399.848182][ C1] ? dev_map_generic_redirect+0xa0/0x6f0 [ 399.848202][ C1] __asan_report_load8_noabort+0x14/0x20 [ 399.848226][ C1] dev_map_generic_redirect+0xa0/0x6f0 [ 399.852580][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.861345][ C1] ? bq_enqueue+0x3e0/0x3e0 [ 399.861370][ C1] ? bpf_prog_run_generic_xdp+0x965/0x1070 [ 399.861395][ C1] xdp_do_generic_redirect+0x42e/0xb40 [ 399.861417][ C1] do_xdp_generic+0x50b/0x7c0 [ 399.868245][ T969] usb 4-1: config 0 descriptor?? [ 399.872287][ C1] ? generic_xdp_tx+0x490/0x490 [ 399.872314][ C1] ? migrate_disable+0xd9/0x190 [ 399.872338][ C1] __netif_receive_skb_core+0x1706/0x3640 [ 399.930344][ C1] ? set_rps_cpu+0x5e0/0x5e0 [ 399.934764][ C1] ? update_load_avg+0x43a/0x1150 [ 399.939626][ C1] ? native_send_call_func_single_ipi+0x5f/0x70 [ 399.945702][ C1] ? enqueue_task_fair+0xd31/0x2650 [ 399.950734][ C1] __netif_receive_skb+0x11c/0x530 [ 399.955682][ C1] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 399.961070][ C1] ? __kasan_check_write+0x14/0x20 [ 399.966012][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 399.970611][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 399.975817][ C1] ? psi_task_change+0x22c/0x360 [ 399.980592][ C1] process_backlog+0x31c/0x650 [ 399.985201][ C1] __napi_poll+0xc4/0x5a0 [ 399.989367][ C1] net_rx_action+0x47d/0xc50 [ 399.993787][ C1] ? net_tx_action+0x550/0x550 [ 399.998386][ C1] ? __sched_clock_gtod_offset+0xa0/0x100 [ 400.003942][ C1] handle_softirqs+0x25e/0x5c0 [ 400.008543][ C1] __do_softirq+0xb/0xd [ 400.012531][ C1] do_softirq+0xf6/0x150 [ 400.016614][ C1] [ 400.019385][ C1] [ 400.022183][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 400.027204][ C1] __local_bh_enable_ip+0x75/0x80 [ 400.032068][ C1] _raw_read_unlock_bh+0x29/0x30 [ 400.036836][ C1] wg_socket_send_skb_to_peer+0x178/0x1d0 [ 400.042392][ C1] wg_socket_send_buffer_to_peer+0x11a/0x170 [ 400.048204][ C1] wg_packet_handshake_send_worker+0x1d4/0x240 [ 400.054193][ C1] ? wg_prev_queue_dequeue+0x260/0x260 [ 400.059484][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 400.065146][ C1] ? __kasan_check_read+0x11/0x20 [ 400.069987][ C1] ? read_word_at_a_time+0x12/0x20 [ 400.074934][ C1] ? strscpy+0x9c/0x260 [ 400.078928][ C1] process_one_work+0x6bb/0xc10 [ 400.083618][ C1] worker_thread+0xad5/0x12a0 [ 400.088130][ C1] kthread+0x421/0x510 [ 400.092033][ C1] ? worker_clr_flags+0x180/0x180 [ 400.096896][ C1] ? kthread_blkcg+0xd0/0xd0 [ 400.101320][ C1] ret_from_fork+0x1f/0x30 [ 400.105577][ C1] [ 400.108436][ C1] [ 400.110607][ C1] Allocated by task 306: [ 400.114695][ C1] ____kasan_kmalloc+0xdb/0x110 [ 400.119371][ C1] __kasan_kmalloc+0x9/0x10 [ 400.123710][ C1] kmem_cache_alloc_trace+0x11a/0x270 [ 400.128920][ C1] dst_cow_metrics_generic+0x55/0x1c0 [ 400.134133][ C1] icmp6_dst_alloc+0x385/0x560 [ 400.138726][ C1] mld_sendpack+0x4db/0xbb0 [ 400.143068][ C1] mld_dad_work+0x236/0x620 [ 400.147403][ C1] process_one_work+0x6bb/0xc10 [ 400.152090][ C1] worker_thread+0xad5/0x12a0 [ 400.156608][ C1] kthread+0x421/0x510 [ 400.160511][ C1] ret_from_fork+0x1f/0x30 [ 400.164813][ C1] [ 400.166966][ C1] Freed by task 0: [ 400.170501][ C1] kasan_set_track+0x4b/0x70 [ 400.174919][ C1] kasan_set_free_info+0x23/0x40 [ 400.179691][ C1] ____kasan_slab_free+0x126/0x160 [ 400.184643][ C1] __kasan_slab_free+0x11/0x20 [ 400.189239][ C1] slab_free_freelist_hook+0xbd/0x190 [ 400.194445][ C1] kfree+0xcc/0x270 [ 400.198090][ C1] ip6_dst_destroy+0x8d/0x450 [ 400.202607][ C1] dst_destroy+0xbe/0x280 [ 400.206773][ C1] dst_destroy_rcu+0x19/0x20 [ 400.211234][ C1] rcu_do_batch+0x57a/0xc10 [ 400.215540][ C1] rcu_core+0x517/0x1020 [ 400.219619][ C1] rcu_core_si+0x9/0x10 [ 400.223612][ C1] handle_softirqs+0x25e/0x5c0 [ 400.228209][ C1] __irq_exit_rcu+0x52/0xf0 [ 400.232548][ C1] irq_exit_rcu+0x9/0x10 [ 400.236632][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 400.242096][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 400.247912][ C1] [ 400.250081][ C1] Last potentially related work creation: [ 400.255637][ C1] kasan_save_stack+0x3b/0x60 [ 400.260147][ C1] __kasan_record_aux_stack+0xd3/0xf0 [ 400.265356][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 400.270996][ C1] call_rcu+0x123/0x10b0 [ 400.275077][ C1] rcu_sync_exit+0xd9/0x1e0 [ 400.279416][ C1] percpu_up_write+0x5f/0x1d0 [ 400.283931][ C1] mm_drop_all_locks+0x3b8/0x430 [ 400.288704][ C1] __mmu_notifier_register+0x3bd/0x4c0 [ 400.293999][ C1] mmu_notifier_register+0x73/0x100 [ 400.299044][ C1] kvm_dev_ioctl+0xe67/0x1b20 [ 400.303548][ C1] __se_sys_ioctl+0x114/0x190 [ 400.308059][ C1] __x64_sys_ioctl+0x7b/0x90 [ 400.312500][ C1] x64_sys_call+0x98/0x9a0 [ 400.316748][ C1] do_syscall_64+0x3b/0xb0 [ 400.320995][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.326725][ C1] [ 400.328890][ C1] The buggy address belongs to the object at ffff888110c6e080 [ 400.328890][ C1] which belongs to the cache kmalloc-96 of size 96 [ 400.342606][ C1] The buggy address is located 0 bytes inside of [ 400.342606][ C1] 96-byte region [ffff888110c6e080, ffff888110c6e0e0) [ 400.355451][ C1] The buggy address belongs to the page: [ 400.360930][ C1] page:ffffea0004431b80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110c6e [ 400.370982][ C1] flags: 0x4000000000000200(slab|zone=1) [ 400.376484][ C1] raw: 4000000000000200 ffffea0004b1e0c0 0000000b0000000b ffff888100042900 [ 400.384892][ C1] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 400.393290][ C1] page dumped because: kasan: bad access detected [ 400.399548][ C1] page_owner tracks the page as allocated [ 400.405092][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 113, ts 4252991440, free_ts 0 [ 400.419936][ C1] post_alloc_hook+0x1a3/0x1b0 [ 400.424536][ C1] prep_new_page+0x1b/0x110 [ 400.428873][ C1] get_page_from_freelist+0x3550/0x35d0 [ 400.434255][ C1] __alloc_pages+0x27e/0x8f0 [ 400.438680][ C1] new_slab+0x9a/0x4e0 [ 400.442588][ C1] ___slab_alloc+0x39e/0x830 [ 400.447013][ C1] __slab_alloc+0x4a/0x90 [ 400.451178][ C1] __kmalloc+0x172/0x2c0 [ 400.455260][ C1] kobject_get_path+0xbc/0x1f0 [ 400.459868][ C1] kobject_uevent_env+0x27f/0x700 [ 400.464722][ C1] kobject_synth_uevent+0x4eb/0xae0 [ 400.469755][ C1] uevent_store+0x25/0x60 [ 400.473920][ C1] dev_attr_store+0x5c/0x80 [ 400.478258][ C1] sysfs_kf_write+0x123/0x140 [ 400.482772][ C1] kernfs_fop_write_iter+0x2c4/0x410 [ 400.487892][ C1] vfs_write+0xd5d/0x1110 [ 400.492056][ C1] page_owner free stack trace missing [ 400.497270][ C1] [ 400.499435][ C1] Memory state around the buggy address: [ 400.504910][ C1] ffff888110c6df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.512812][ C1] ffff888110c6e000: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 400.520702][ C1] >ffff888110c6e080: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 400.528600][ C1] ^ [ 400.532511][ C1] ffff888110c6e100: 00 00 00 00 00 00 00 00 02 fc fc fc fc fc fc fc [ 400.540407][ C1] ffff888110c6e180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 400.548302][ C1] ================================================================== [ 400.556207][ C1] Disabling lock debugging due to kernel taint [ 400.807499][ T969] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.003A/input/input74 [ 400.892714][ T969] appleir 0003:05AC:8241.003A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 401.064921][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 401.064937][ T30] audit: type=1400 audit(2000004571.587:15803): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.092837][ T30] audit: type=1400 audit(2000004571.587:15804): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.115780][ T30] audit: type=1400 audit(2000004571.587:15805): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 401.115878][ T577] Bluetooth: hci0: command 0x1001 tx timeout [ 401.138291][ T30] audit: type=1400 audit(2000004571.587:15806): avc: denied { add_name } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.143724][ T5918] Bluetooth: hci0: sending frame failed (-49) [ 401.166656][ T30] audit: type=1400 audit(2000004571.587:15807): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 401.194285][ T30] audit: type=1400 audit(2000004571.587:15808): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 402.871847][ T577] usb 4-1: USB disconnect, device number 23 [ 403.382611][ T577] Bluetooth: hci0: command 0x1009 tx timeout