last executing test programs: 8.062858532s ago: executing program 1 (id=1685): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503", @ANYRES32=r0], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000440)={0x930a, 0x9, 0x200, 0x6, 0x14, "20fd9dad1f94f81a"}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000b1313cee00000300000000000000000010000000000000000000000000000000000000f100"/88], 0x58) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000100)='io\x00') pread64(r6, &(0x7f0000000180)=""/267, 0x10b, 0x0) dup(0xffffffffffffffff) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NHA_OIF={0x8, 0x5, r9}]}, 0x34}}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r10, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x80000001, 0x3}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x5b0}, 0x0) 7.114903408s ago: executing program 2 (id=1694): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002080)=ANY=[@ANYBLOB="795ae072a952c1af261099c959b76bd40997f1164f608216cdd1b5e83022327dd31775f65a67f338122c85e6a6af2d61cf8c1e4824e46668fd90d6fa09bc7459186095c05dc481637acd85c6b35a6bae9a2fe95a49c89ff99b67448846d0562e7d26e7a04f093035fe3a1e4f1ad1c936f24fff9f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_type(r1, &(0x7f0000002000), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000002040), 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x1, &(0x7f0000001480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000014c0)='syzkaller\x00', 0x100, 0xea, &(0x7f0000001500)=""/234, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001640)={0x5, 0x201}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000016c0)=[{0x4, 0x2, 0x0, 0x8}, {0x2, 0x5, 0xc}], 0x10, 0x8}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002200)={r7, 0x58, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000002140)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002440)={0x1b4, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe00}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'threaded\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xec}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(\'\xba:!{\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'*^\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44880}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000002280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002240)={&(0x7f0000000140)={0x10a0, 0x12, 0xf, 0x801, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x1084, 0x0, 0x0, 0x1, [@generic="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", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x6c, 0xb0, 0x0, 0x0, @binary="c54465ae059e5bf2f96a6916329c375a63f3771245f1be173d2f3686a7df931f42e2d388e037f340338e7cdef5b10400560c943e7cb21a029020de5d4bf31a4e314dca3b6708cd3edf0d2395fb701de6c0720e0702f92cb5ac7a3599946dd4bc04ae89f30eee30f4"}]}]}, 0x10a0}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000012000103000000000000000000000000462400000000000000000000000000000000000080000000000000000000000000000000431d955dd955b21e210a596247da4ba3ec8e0e98c93861d860fc8a23641920ea5f50793a0e6386ed591f99239243a51b6bb37ced820a9236b60ddcd6c0e97008310976edd0b41c1b14f1771e2f6b58ca91b972349ee43fb85a6c1ed12a802f3ba2ba96c4fd66e39aa8b8a1a1b625cf8eb651ced6e038f9714f1debb9cf2465839a1dc00b172ac2c49d918aa35d8213305dade616722a21250a095ede50d6f540b8df4598be237714d9ad15d494be2e12412b4881375ef31cb5f650eb9b47", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x4c}}, 0x0) 6.126071706s ago: executing program 2 (id=1703): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x9, 0x1, 0x4, 0x9, 0x6, [{0x5, 0xc8e1, 0x401, '\x00', 0x300}, {0x6, 0xffffffffffffffff, 0x10000, '\x00', 0x887}, {0x7, 0x5, 0x400, '\x00', 0x1000}, {0x3f, 0xc4f5, 0xa4e7, '\x00', 0x2108}, {0x80000001, 0x5, 0xe2b2, '\x00', 0x200}, {0x1, 0x3, 0x6f, '\x00', 0x2004}]}) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYRES16=r1, @ANYRESOCT=r0], 0x0) 5.800682909s ago: executing program 1 (id=1706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0xffff8000}]}) 5.542338908s ago: executing program 1 (id=1706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0xffff8000}]}) 5.517167919s ago: executing program 1 (id=1707): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x30}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r3, 0x0) shutdown(r3, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140), 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)={0xa, 0x0, [{0xd000, 0x9d, &(0x7f0000000180)=""/157}, {0x1, 0x23, &(0x7f0000000040)=""/35}, {0x0, 0xfc, &(0x7f0000000380)=""/252}, {0x5000, 0x16, &(0x7f0000000080)=""/22}, {0xd000, 0x85, &(0x7f0000000480)=""/133}, {0x2, 0x57, &(0x7f0000000540)=""/87}, {0x3000, 0x7e, &(0x7f0000000640)=""/126}, {0xf000, 0xb, &(0x7f0000000280)=""/11}, {0x1804, 0x6f, &(0x7f00000006c0)=""/111}, {0x100000, 0x2a, &(0x7f0000000300)=""/42}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x200000000622c, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0xa1, 0x0, 0x0, 0x599}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 4.549152256s ago: executing program 2 (id=1715): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400e001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810310000000000904010000020d00000904010102020d0000090582020002000000090503020002000000049a5c184648c0edcef4146f2b87f5bf556f60537422fb542014a4c63a9a305c06e3ac09dc987fcaf5df1643f2da8ea42d7824c73ac35b3f4f6cf5378661c8ff4e52ab42173c80d2577c8810bdc0fb2c6592b04595fe98cce294d938069e1758e1cdf068ed1d376837c46a5de1f95e451c0f5a0eed3cdf15106db42c3f5eae119da663551d961b148222"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20}, [@RTA_DST={0x8, 0x1, @remote}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x1000000}, 0x90) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) setresgid(0x0, 0x0, 0xee01) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4096) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r9}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x5540, &(0x7f0000002140)="$eJzs3L1vG2UYAPDnkqbuFyVCDGw9qUJKpNqq0w/BFqAVH6JVVWBgAsd2Lbe2L4pdN2RiYEQM/CcIJCZG/gYGZjbEAGJDAvnuTJsCghLHSdvfTzo/d6/fe+55rarScxddAE+t5fTXn5M4HccjYjEiTkXk+0m55daL8EJEnImIhQe2pBz/c+BoRJyIiNNxbHp6Un71+bnx2Us/vfXLN99Vjpz84uvvD2TBwKHwYkT0N4v9e/0iZp0i3i7HG+NuHvsXx2UsvujfKY+zIt5rb+QZ7jWm8xp5vNAp5mebd4eTeKvXaE5ip3srH98cFBccjjvTPPkJtxtb+XGrvZHH7jDLY2enqGt7p/j/cmc4iqhEbLbKfB/l6WM0msZivL3dLtazeSePzcGoHC/yZq329iSOy1heLppZr5XXsbG33/owe7s7uLudjttbw242SC/V6i/V6per9a2s1R61L1Yb/dbli+lKpzeZVh21G/31TpZ1eu1aM+uvpiudZrNar6crV9ob3cYgrddrF2rnq5dWy71z6evX30t7rXRlEl/tDu6Our1heivbSoszVtO12oWXV9Oz9fSdazfSGzevXr12490Prrx//ZVrb75WTvpLWenK2vm1tWr9fHWtvvoUrf+TsugZrh/2JHm06ZX9qgPgMbKP/X/EcpFT/w88bP/6/62bEfvb/68vFTHv/0P/vxeHqv+thP5/zuuHPXnE/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCfHD0tfvpHvLBfHJ8vxZ8qh58rjJCIWIuL3v7EYR3flXCzzLP3D/KWHavg2iTzD5BqVcjsREevl9tuz+/0rAAAAwJPrq4/PfFZ068XH8kEXxDwVN20WTn04o3xJRCwt/zijbAuTj+dnlCz/930ktmeULb+BdWxGyYpbbkdmle0/WdwVjj0QkiIszLUcAABgLnZ3AvPtQgAAAJinTw+6AA5GEtNHmdNnwflf3t9/IHh81xEAAABwkCr/77Rk1nUAAAAAh07e///r+/+S+/cJvP8PAAAAHj/F+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g507ylEaiOMA/G9LBUUjMT6aeBR9g2N4BB99NBzAS3AEvIIX4Az45hEMbOh0ybJhN7vptOxuvi9ph2mGHzMEHmYmGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD79rdeL3z8//+qas9t3k2c0AAAAwDnber1oXsxSfdo+f9c++tDWi4goI+Lc3L2KVyeZVUR8ioj6jvb1rT78iWgSDp8xbq83EfG1vf6/7/tbAAAAgJdrs1zN02w93WaX7hBDSos25dtvmfKKiKhn/zKllYe8j5nCmt/3KH5kSmsWsCaZwtKS2yhX2oM0f/fjqt3kRlGkorz//dnGDgAADKg6KYadhQAAADCk74fbl0v3gu6qxzUv4nor87gVOE5Fu733+qQGAAAAPEPFpTsAAAAA9K6Z//d1/t/U+X8AAADwJKTz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjTtl4vNsvVvGvObt9NntEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBX7844CIRAGYbB3fWcy9z+sNGhqalIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPUQbEMBiF0TuTzFTfKsvo9rp/6ifVJVQ5h/DJJQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4kfWKzzx3tIotSU/yrfjV9Ujyr6liqani2JM25oN9PPgjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOdu7ft40qDgD4O5/PSQsIE5CHIEQ3Jpq6paUbYgBFDPwJSFHqllCXH20GWlVIWdhQ5i4IRoSQQGHr/9C5lbqUrYOHIjEX3fmueU4tYaC9s5PPR3r3vj493/u+sxTl63cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMGH0/n6c5ofuOG6V5+4+urmZ9/cO9Lnbu/dX85bHSZ1JL4Y34hdJL3qxXH8yAAAAHDLr00+nVX0fQniQ7RWjWt2i/s+qMXnN/8NL47iq5w/W/VVf1f55+/23h689mag7nie/6MWt4eDU06m0n9FKF87L/ziiXdz54ruXtPhAWh/tvDrKivuZfHfnzgedIlyqI1sA4L84WfVlUP0+lPf9JhMD4MhoR4V3Vf+n3WZzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjDaCe8UMVJCGG1vR/n7j26uTmtv717f7Vq527d2o2vmV8iCyFc3BoOToXlGlcz365dv3F5YzgcXK0/eDOE0NTs75XLv/zJDINDeE5pnGjozh+xoFV+2POSz2IEDf5QAgDgUMrKltf1D7K99fxcshLC4x8n6/+3ojjMWP8//PTc3XiuuP7v17bC+be2feXLtWvXb7y9dWXj0uDS4PN3Tvff7Z85f/bs+bXiu5Lxsek0AQAAWGCdssX1f2vl6f3/41EcZqz/v/q+/008V6r+n2p/06/pTAAAAI62V0789Wcy5XzS6YSvN7a3r/bHxyevT4+PDaT6ry2VLa7/05WmswIAAADqMNpJJvb/L0RxmHH//8WfXv8lvmYaQjhW7v+f3PxieKG+5cy1//EXwqE949ubXiMAAAD1enzgQYZjZYv3/7Pi+f9WOXJpYnz5bwBnqv/TD7/9OX5v/Pz/mee3xIXQ6o3vR9H3Qmj3ms4IAACAw2y5aN2i/v8j21v/7NfjH3c8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt78DAAD//38LPW8=") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 3.721078628s ago: executing program 3 (id=1718): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5594, &(0x7f000000cf80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1817c1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x61}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x9, 0x40, 0xc, 0x940, r0, 0xff, '\x00', 0x0, r1, 0x0, 0x2, 0x3, 0x4}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r6, 0xc06855c8, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000000), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702c900b6347aafb703000008000000b7040000000000008500000003000000950000000000000015724d806fb20ce5bb7092cbbf6c70ce81e8d8e276aceea104e38891bdc5ad6d0cc0f73a0a59ff115be78c24a109a4613f6da5f7dc9500d77389b0422d338cc9b48d8cf840ae0cd89ba13d21c2221913166818480b8e40ea7647"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) close(0x4) 3.172623588s ago: executing program 0 (id=1722): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0) 3.086434842s ago: executing program 0 (id=1723): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x20000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 3.019561185s ago: executing program 0 (id=1724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1, 0x552e, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x25, 0x10, 0x8a, 0x20, 0x2304, 0x248, 0x6baf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x0, 0x2a, 0x4c, 0x4a}}, {{0x9, 0x4, 0x3, 0x0, 0x0, 0xf4, 0xf8, 0x96}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xf4, 0xff}}]}}]}}, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fd) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x100000000) 2.836144421s ago: executing program 3 (id=1725): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x0, 0x4}) (rerun: 64) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b508020000000000db8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff06ffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x10, &(0x7f0000001e00)=""/4087}, 0x90) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000040)=@nameseq={0x1e, 0x2, 0x0, {0x42}}, 0x10, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='map_files\x00') getdents64(r3, &(0x7f00000035c0)=""/4084, 0xff4) (async) getdents(r3, 0x0, 0x0) (async) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x3f) (async) sendfile(r4, r4, 0x0, 0x3) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000000d0601020000000000000000030000000500010007000087cc8948ab7dba0a683a6e657400000000"], 0x2c}}, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents(r3, &(0x7f0000000500)=""/4096, 0x1000) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r4, 0x0) (async) pwritev(r4, &(0x7f0000003980)=[{0x0}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343750800490000380000000000069078ac1e0001ac1e0101070f0b7f000001ac1414aaac1414bb004e220000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5001000090000000"], 0x0) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r7 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESHEX=r7, @ANYRES8], 0x1, 0x522, &(0x7f0000000a80)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@filename='./file0\x00', r7, &(0x7f0000000040)='./file0\x00') (async, rerun: 32) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000180)=0x4) (rerun: 32) 2.445587727s ago: executing program 3 (id=1726): syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f165d1", 0x0, 0x2f, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}]}}}}}}}, 0x0) 2.271632643s ago: executing program 3 (id=1727): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f0000000a80), 0x1, 0x5ba, &(0x7f0000001bc0)="$eJzs3c1vVFUbAPDnTD8olPdtIUbFhTQxBhKlpQUMMS5gTxr8iBs3VloIUqChNVo0sSS4MTFujDFx5UL8L5TIlpWuXLhxZUiIGpYmjrkzc0tb7rS0THsr9/dLht57zlzOczt9eu6cnnMngMoayv6pReyLiJkUMZAWFuu6o1U51Hzevb8+OpM9UtTrr/+RIrXK8uen1tf+1sF9EfHTjyn2dj3Y7uz81QsT09NTV1r7I3MXZ0Zm568eOn9x4tzUualLYy+NHT929Njx0cMdO9dT1999f+DT8be+/frvNPrdr+MpTsTuVt3S8+iUoRhqfk92LC/Pvq/HO91YSbpa57P0JU7dJQbEuuSvX09EPBUD0RX3X7yB+OTVUoMDNlU9RdSBikryHyoqvw7I39uvfB9cK+WqBNgKd082BwAezP/u5thg9DXGBnbdS7F0WCdFRCdG5rI2bt8av3721vj12KRxOKDYwrWIeLoo/1MjNwcbo/hZ/teW5X92XXC69TUrf22D7Q+t2Jf/sHWa+d+3ofx/e0n+v7PB9uU/AAAAAAAAdM7NkxHxYtHf/2uL83+iYP5Pf0Sc6ED7a//9r3anA80ABe6ejHilcP5vLZ/9O9jV2vpfYz5ATzp7fnrqcET8PyIORs+ObH90lTYOfbb3q3Z1+fy//JG1f7s1F7AVx53uFetnJyfmJh71vIGIu9cinimc/5sW+/9U0P9nvw9mHrKNvc/fON2ubu38BzZL/ZuIA4X9f1p8Tlr9/hwjjeuBkfyq4EHPfvj59+3al/9Qnqz/37V6/g+mpffrmV1/G0fmu+vt6jZ6/d+b3mjccqa3VfbBxNzcldGI3nSqKytdVj62/pjhcZTnQ54vWf4ffG718b+i6/+dEbGw4v9Ofy5fU5x78p/+39rFo/+H8mT5P7mu/n/9G2M3Bn9o1/7D9f9HG339wVaJ8T9o+jJP097l5QXp2F1UtdXxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjoBYRuyPVhhe3a7Xh4Yj+iHgidtWmL8/OvXD28nuXJrO6xuf/1/JP+h1o7qf88/8Hl+yPrdg/EhF7IuKLrp2N/eEzl6cnyz55AAAAAAAAAAAAAAAAAAAA2Cb626z/z/zeVXZ0wKbrLjsAoDQF+f9zGXEAW0//D9Ul/6G65D9Ul/yH6pL/UF3yH6pL/kN1yX8AAAAAAHis7Nl/85cUEQsv72w8Mr2tup5SIwM2W63sAIDSuMUPVJepP1Bd3uMDaY36vrYHrXXkambOPMLBAAAAAAAAAAAAAFA5B/ZZ/w9VZf0/VJf1/1Bd+fr//SXHAWw97/GBWGMlf+H6/zWPAgAAAAAAAAAAAAA6aXb+6oWJ6empKzbe3B5hbOVGvV7/OPsp2C7x/Mc38qnw2yWeR9oo9/cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw378BAAD//2QiJqY=") (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @empty}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.271077523s ago: executing program 3 (id=1728): socket(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x140, 0x88) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x16) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), 0x0}, 0x20) syz_read_part_table(0x1059, &(0x7f0000001a40)="$eJzsz79tAjEcx9GvrcSXqzJCLnWGyBS3QCaJGIWSWZiDDaiNLNCJCYDivcbyH32sX3iu/ywtH9t2PyVzWpJekpo578nfcfk5p4z7mrc61nLf6LfDzW87tWu9993U21dGdrz5rmv/HF+U0VgPjxkSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF7bJQAA//9ayg3y") r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendfile(r3, r2, 0x0, 0x10001) socket(0x2b, 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x140, 0x88) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x16) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), 0x0}, 0x20) (async) syz_read_part_table(0x1059, &(0x7f0000001a40)="$eJzsz79tAjEcx9GvrcSXqzJCLnWGyBS3QCaJGIWSWZiDDaiNLNCJCYDivcbyH32sX3iu/ywtH9t2PyVzWpJekpo578nfcfk5p4z7mrc61nLf6LfDzW87tWu9993U21dGdrz5rmv/HF+U0VgPjxkSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF7bJQAA//9ayg3y") (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) sendfile(r3, r2, 0x0, 0x10001) (async) 2.206473285s ago: executing program 3 (id=1729): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, "ffff052000000000201b14700c1e0ac74f000000001200000000000900"}) syz_usb_connect$cdc_ecm(0x2, 0x150, &(0x7f0000000040)=ANY=[], 0x0) 1.725256594s ago: executing program 1 (id=1732): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e00)={'ip6tnl0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1}}) 1.686453276s ago: executing program 1 (id=1734): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000e800000000000000850000006d000000850000007d0000009500030000008000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173}, 0x80) open(&(0x7f0000000940)='./file0\x00', 0x599080, 0xac) r2 = syz_usb_connect$cdc_ecm(0x2, 0x73, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x3f, 0x4682e663e1f997bb, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x9, 0x24, 0x6, 0x0, 0x0, "167026b1"}, {0x5, 0x24, 0x0, 0x6b5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x3, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x5d, 0x7f, 0x8, 0xc7, 0x9a}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x22}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x42}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0xc1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xd8, 0x6, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xf8, 0x8}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x0, 0x3, 0x40, 0x1}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0x6, 0x1}]}, 0x5, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x280a}}, {0x9e, &(0x7f0000000480)=@string={0x9e, 0x3, "85d995f3b8e51d39a4d1819399cd464247da67e83fb303abea845147022389f1a6c895aa2922add000ecc26f1a699294a9667e4c9d0c4b0fc7575a52bf41b7834ce9cc303d108af82b770af760d036fc0c6bfd26111107bdae173a6424df1ac3189ac453b1761d618867275972e90df024aa639002831bba6aac926e5e8248eefacd574a54b7b71769ed47ba09b2ea5572becf49c7d20b17b20e85f5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1004}}, {0x46, &(0x7f0000000540)=@string={0x46, 0x3, "fe408251f244f478ac31c88ed7141003d9988b308d70ba72ebe255db8773d4a0917e40a198b86e342ddd0e26f0ce48f05ce410171163e525fa0be0722274dcc23b0edfb8"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000700)={0x14, &(0x7f0000000680)={0x20, 0x31, 0x37, {0x37, 0x3, "2564b7596d870390315565aac8983cee82c892bb57fcf21326f4ce844eae91591ca6b6a2448f1b791bb9a865c727919d382b53b80b"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000740)={0x40, 0x10, 0xcb, "47be67a6acffa71981907cba82139b149638c30894125b67d84d94f6860bd444ed0310afc2fd813e01bc7acfc3aefac2331523d79b0dea6a08e8fe37c5d4614365651661f8bf20623ad011d76dab8361eadcb743c7fbe8f14a26e4533bad39a7386091e49e6da23d11059d51119c71cb17ae8995ada90874db27d3d12fa9fbedbd7968e3152c2187729eb0c8e523936823be412ba6b1a0827bfd437349ba2b70e25ae822abec1c9c3fd0ac671bcdefd4c59e21822ce710eafca2c791d7ab6b05a02ea71e4c0b62887a9a88"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x81}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000900), 0x880) 1.376882557s ago: executing program 2 (id=1735): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5594, &(0x7f000000cf80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1817c1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x61}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x9, 0x40, 0xc, 0x940, r0, 0xff, '\x00', 0x0, r1, 0x0, 0x2, 0x3, 0x4}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r6, 0xc06855c8, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000000), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702c900b6347aafb703000008000000b7040000000000008500000003000000950000000000000015724d806fb20ce5bb7092cbbf6c70ce81e8d8e276aceea104e38891bdc5ad6d0cc0f73a0a59ff115be78c24a109a4613f6da5f7dc9500d77389b0422d338cc9b48d8cf840ae0cd89ba13d21c2221913166818480b8e40ea7647"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) 727.332662ms ago: executing program 0 (id=1738): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0x6, 0x0, 0x0, @private2}, 0x1c) 680.758354ms ago: executing program 4 (id=1739): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x40) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2, 0xa1, 0x7f, 0x3, 0x10, @empty, @remote, 0x20, 0x20, 0x1, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x20, 0x9, 0x0, @private2, @local, 0x7f00, 0x20, 0x10000, 0x6}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xcc, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000800) r5 = open(&(0x7f0000000440)='./file0\x00', 0x8000, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@delneigh={0x40, 0x1d, 0x2, 0x70bd28, 0x25dfdbff, {0x1c, 0x0, 0x0, r4, 0x2, 0x52, 0xa}, [@NDA_MASTER={0x8, 0x9, 0xd5}, @NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_PROTOCOL={0x5, 0xc, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000680)=[{&(0x7f00000005c0)="c08447e1f857850b6e68e5d70ff6f412eee2a89acc40f937e0", 0x19}, {&(0x7f0000000600)="fce33866365e7f89607ac77093df7f498bc2df9d34869427399f29224b469904419c14b1bf30673e4e16df332591908fed86716f23018c6dc961286ace8e8f33743ecb3a9ff0ac4b2bbdd947693b", 0x4e}], 0x2}, 0x800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000700)={0x2, 0x0, 0x7fff, 0x3, 0x800}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x22, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x2, 0x4, 0x2, 0x5, 0x100, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb7c}, @ldst={0x2, 0x3, 0x3, 0x7, 0x4, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7fff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x14, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x8, 0xfc, 0xffff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000940)=[{0x5, 0x3, 0x2, 0x9}, {0x3, 0x3, 0xb, 0xc}, {0x1, 0x2, 0xc, 0x2}], 0x10, 0x4}, 0x90) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000a40)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000bc0)={r0, &(0x7f0000000a80)="31369d4d4406f9849d41", &(0x7f0000000ac0)=""/234}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d00)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x4, 0x5, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x79b}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}]}, &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x1f, r0, 0x8, &(0x7f0000000c80)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x1, 0x9, 0x8e7f, 0x8}, 0x10, r6, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000d40)=[{0x5, 0x2, 0x6, 0x6}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0xb5f}, 0x90) accept$packet(r0, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e80)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffffa}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c000}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000010c0)={&(0x7f0000000fc0), 0xc, &(0x7f0000001080)={&(0x7f0000001000)=@gettfilter={0x5c, 0x2e, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x9}, {0xd, 0xa}, {0xffe0, 0x5}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xec2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x30040090}, 0x10) io_setup(0x3ff, &(0x7f0000001100)) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001180), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xd8, r8, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc5f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd4c000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0xd8}}, 0x4040000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001340)=0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001380)={{{@in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0xb4, r3, r9}, {0x8, 0xd911, 0xff, 0x3, 0x3a, 0x7, 0x9, 0x2}, {0x4, 0x6, 0x1f, 0x10001}, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@loopback, 0x4d4, 0x3c}, 0xa, @in6=@local, 0x3502, 0x1, 0x3, 0x9f, 0xe8de, 0x7, 0x1}}, 0xe8) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001480)={'veth1_vlan\x00', 0x8000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000015c0)={'tunl0\x00', &(0x7f0000001540)={'tunl0\x00', r3, 0x40, 0x8, 0x5, 0x401, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x65, 0x0, 0x1, 0x29, 0x0, @remote, @empty, {[@rr={0x7, 0xf, 0x76, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ra={0x94, 0x4, 0x6}, @rr={0x7, 0x7, 0x28, [@multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000001700)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0xa0, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40d0}, 0x4010) sendmsg$inet(r11, &(0x7f0000002d40)={&(0x7f0000001740)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000001780)="851ca21bef06e8b2694ecff4489a479ac0bba8086f87f6c3ba42833bcc08b44eb245c079da8ab00f8829e0937aa424b0372601be7d8ffedf5bd9caccb9473d7094ff5ae02ac89639785feffefba2ee8100cc8ca4f97779bb052db5d8b37337e9b1e9a662e6230fee46f3f6d3886f100e421e8f98e85792b3219e921f53d0556a25ac49abeceef05548922bec45d605ac52d242ff125a3b318f81c34344f66cdcf3dc57904d3f5f2a71d2336e6584274349d934e190349d6261c7ce087c859f638a4601edc4d53b4068ee3a4a812ec8be7b11c050c624f3a0cdd99a7cfa5de3308b8c4470ae93a2a0161c36a451918e43", 0xf0}, {&(0x7f0000001880)="7f4cc20c194f90ff3a318daab6cb5b6a86da06f16135ca3d70c03668070601bbfa6f38fe55b98e81c2d207a2277d113d99f2a02329cbc5819adcb2ea159a2f873650816163fde6ffbb2d17004b526038a21cd45a9bb127d8832fa67196fcc7588f28c032abbfbb200d164cdecdb8c69c7f2d68d440ffed8d052ef3ad871098af4e88261b3e3e1d4ce1b5f62639f41bdf964464673fd042045fd5c1217f0956b0c9d8b81d6f45e0dabc190e5bc1cb26365e84767a4b784a7694189a2f31586d890772d8af1ae41c78866bf242b14476da9664d224148fc38b8e70803c33f4284b9bc3b13a7db9c464cfc4604ed04d4175ac6b3a5ea7566535f18e9a6a34580279893e912e6f7d808ed1c61b6b17a347f9164cf6ac1bd387e781faf319f3cc0b7da0fee1862f03436bf0611c77d8b6da9e8c1702fb512474af4f4d8d5d9b8dda4c95bdf1f0039cfc3a5f95541231977168204997171e025649421c6c8858bc9b0182ab514a828f8f359ebf4097f7b29ee2489611739cf98faf69a85ee79f8960ce0c06232c8e8383285a0ee3415fcdd11289d93936a3681fb0c685daa65d5ff5d95d254243c3189a0fbea71332b67f6436db916ff195ce35dfd55f07905b8d58ca2fd6fe3280792e2229085084e11affcf702a81c6f60edbf000f57b0084cfd30fc3eef68646b322e2de5ec6ea61df3ed3388ab4068210e5b1aaa6ca0da0a38f408806a76cee2819a87ae8fb765e10b093c6c89ebc9f42b1eff356ed5eb4f1d828894ae9590ee3a29063079a56a33acdf842763a21ee1e3e8eed1e2adaf3ea772a65b00aa3c82bbff0aaad31bde928d24afb2860920720d3a08cf1249747404cf1b5e355b067af02917bd0c62253b32722dc889cb2804dcd00f6d427479df86e99518094672c2a7b5181704a8565b1c6fac0ac2a4df854041d050cf9f8db8e5407620b3b9c338a68daddde8625f9bd9898f63180def5eaf01d3e6518a92e7dd8f35f9bc41ab050ef42f5223ed448222ad7f898aa3e326e0634511cb5d8947ac94d589746c004135abda5f61bb4f59faf6a532755365689b782b89f8045f3b89008abf0a7234c63eaa1cab9018bd8c7d9eec5ff81f2e5389faec114172ccfcb9ab7059e78b9a0bcba375ae6989ea22bcb6f8d5c6ffee9d16e3000e443cd4bcc8669bcf3b0b8dab3820d524e6dfa2734602396a00fb1fa2d61b07f44186515eba15c898d56cf1088aea566a75d3c3b8e3a633dab8f7184ee96848c6feabaef5e31c820bd0fccb6c3b8be62124c00fe7897fab0547be68ba0dacb9e0fcee6133ffe5bb7b29d2eeaf48e64b3591e2a904df77551f922599f89d4abf74966dee294bf1a43477c036e85208edd7efc105ccd602089700f60143f0058ea5409dd5da9f036de1cc539c1b5966042345e15a5668c532791cdea2824c321437f9d7814ea780c8f966b184ef1987529ccd136c557ef6b991be23cf28142c001d1495d19309209c5c331026b135ac8b61199f946ce9b0be287646ec77cacbb2dd5e71d6e763a8f5d84e2b6b10bb44c8fc6cea5ad8a9fbef370fa33c8bf652db31c5b0e9db775e82a3d0dfeda14d6dc997bbb7676c67e68242849f512c277a2fc5406112d13b7c3ad27059e54277ffa8b26c68ef4bc57733e5bdffeeaf551a6dc8ced3feb75a3fcabbbf844114b918478d0ccb70ee68af9831745a54ebe951b56d7f1666bdd3fac58a6aa8a08a11b4f7bbd6cb99209b69ba3e0fafc503b86176305c69a08ca66b1a11ed83c8a909182c935d96f8f23a3b1e3086abd8dc6d39c6d3c2d39a3fa6def5e622e017490ffa1ffc9a59636ac826f3e107560033e0ed6db427600b39d4b4f075e36928ce1c438e23fa6917f44078aa26f0263707247abe56bea2e73101cf4a229476981213952b2488adcbc1de08eb6b3ba393f688e6cec0f0cc25e3d924baf9a944696b3612fe6b5a833d577a63ae7ac30f23679c297f1b0a78a42107d84069ce1eab1ccf9d18895f3a93df88345201d25ee6fc2577fdecff4115a7a261367ef13bab16d03a4f44a8614734b993a9cbb6cf37273fc11c99035e2a3af421387d9e7562dfd63fbc3b3132df5a5407d58e8182f799f25a7be66775b18c3d2d759b2adb1c009f9e829af05c5129fc517061d0464dd645b3091971bedae8e7f5a63813754b21c2a86f68b66bd869b6fbfe981bccd8a483bf6eb65a7882bf5c6c6b7ba13e3e624cdeb55d752d2ce13bed4bf16be4bd28c3aaf8cec1d043a6f7ae5a767a9c41807d28ae043808f94ff6343857013708d45437cd14fc19ec6352a702421cc082ad7deb739be46d11a4da82c6691d786c8d97363012f12c26367816bfe18af9c06914278a98aa9ee58dd1b600c6b0aa9665e8827a76fb2611f7887e0c902d3d6f9230fe746ad74a19cf93819846223dc79169ab7c14f5824cce833c478a9b94607484f958c8406aba82217673bd0cffa18a49f5f4fc9c54040ac69eda45d866c56f89ab1ce84f46b186f37103339b098a612afd67416eef03bb69c71d2ff6116af6ee9d3005e4f29d339880272a92686124738805ee7f1d29ac547c865940bc56ea697b7b3571f3a92e19169a7b1b6631f6c3b30f11c725b9d35c55ff3985249db640e03e5665bad28dd215eee1124378aeca43fc60d7d248a02efc1a6b47187008ce6424577e6f74b49a468809982d04738aebafaafbffa6f659cb08a9c2463688d1255a2a7c092066af223db017c200e4e3d27e493b81dfe75d2be8a54d58ccba0b03a6f314c6f7f00063e94843c123f8890fcf7536fd2de2e44e8b418a8ba8fdb46816c6a822e9c72231a71a89cefc0c9e04046340f48bc26a61e041dbb81c7117628f443730239c3f2890bca4bf62fae787880c2964ee53f839f0046f36205aab6a420fb2b613cd4f0392c3ff2d38aab80b2633540f2d9164c0fdc5aff53837643fb347214e677da439fb17ec38464944d561d2ab337fd64b9eb1c5463776c195465dff6e185fa624ccc7cf7fc2fae3694a09b00530a3ba73884e02565d654b5729acb2dca03c0f9c1d8426281fcd03c82d1a7ed0011ed12105c23937d69f5152403914d818d0e2d3a5cc649e7f7f0a23d9e42c0abfb028150998a85c59428e1d91d6b65234d1c61b8582e9dc463d20e1c828931d012a4aa712a60618d66e91e3fc9ba3d248920875aab7a8b9f7193023e47b07f2ce6951dde22332045a38102428acaef226826d887b38a0fc622df4f381d98a7a4937ac1a4bb8cdea045193f96be26f56432471e58080123226d79a06178f3791ff74a6f9968e3e585f91cd9400d376ae1e914f17d88e0ab5417f823d592c5f9b25593e1c8e7fc38eb1a7cfe451cdb1196cca73575ec24cdec0a891cf0c97bcee71c3b97d31fccde0eab9e970a94feeb2a2743c3a9ab2d06ab781d8c35d182bdff65c907c2276c4d27f0a268f43629c72792f37f7cb70ddaf79cd53046151f04a81fc2d48c2df41993c35bffa622049d6ed4d823e03eaaaebc4f80cc219f2ae88aae4f0b235e0ca025c5efb85062f970291b5c4912f1c4e232d59f97d83a797a3793efbd38e4489eef07ffa558e1ef711133518840b923af4153f1be2a261e830d20ddf89611075f9b92c28f89a84ee416249380ff3940c8f1e0cdaa3b8d1195c743618c070d20aaddb248c021cde276a7bc6a6e8a0a1080d546c3fd1a864146b29d0fbb1081a69b2d1c296e4bcad538fbec19856ad3b1482e1ac9f577c6de725f7c0b2bd57533172ff2b440c011c4a73023f12bd0005ebfb298561f4a6eca3fdd043d90d286052c5a2fee6087694397a4773f0ca774a530d28b85f0be1161dcfe25f6ac6a980c715163b62a95260c0089a3810fa10925f04941f9efa0412358a8a97b11a7c06410851005f366edcdf5ec4aa810e465c18d9cf501728af850fa81162d6da53585414c27eac49b6a87fb0746c12a19ff2e2f95e0a93c449aa29b6c13b4a121ca3fe9446935cadb958c42d029829650c5afccc26da0df1213da1ff7bace04ab5f9bcd2edbff0d74f6cb361fe8cabb388198c01c71b58708d24d0f5c3dd94891bd2b552356480587e57663afd975976f9a906dbd0d6b628ce3717acb76adbe41f7b2528e485a5fb39dbb43a5a79b6333d7995684a99315b8b38ae49e7b938a93b3e5e4b9ce72962c82d8ab28f2f6bb18b3325a435352c3f34c63f6ec385907f4a4ac904a4f8aca0c9a23f7a8a55b6c998e65f97bda80a6f311f4f41dc53a552f6de7349ce8d904849e2c4e7feb6d25bcd5c71088a39d3ac5e8aacd5ab5516a3850b3e87d3f5df5a9b3bf788c7595a924b30f7dde215830d9ba6f2f1aca1a4e580e18c1f3f1e04f5f4938106f453695e0cb79fb39c436566a067d16f01f35a5f55c66d491b226f0420c84033a5304e1f67042cda2cd73d847ed7003ca0fa503a0801f88c71b170d69f7435e42adc51902b56d6da91415722ca56883848dd20ca876fa2cff809cf50bdac8879f5ef7adf881bfa3335bf395edc53383860634a27154827708cd69b5e39b2a31a009e91d95a433bb2a7ccc8c1d6ec98b4938ae063cbf4e5f766dc29d8ec9845fe206bdc3dba6ecdbab14440191eb0c8374b3d031e2cca695eb2f1a40b7b7b924170ef00a558d2c99cdf20724724fdd0a53bd7b40abc102223f760425a408804e459ac2f9dedd80867403301c070a90bd9e8322ff42312461e1944cee56e6bbf8d29cd9bb577dff6203ede1809183a1e0baeb56de5545dbff0c3eb89c4337fc69619830190bb6ea03c99325b1e99306051a68c0a9177cb28ff48d910e42cee978498b39bf02ceb0b56871585ba80b93af72f74fe6e3419eb1d7dedff107b9e739ad072323d15743bc9a9f5faf08e5fabf426e63a30d934eee7f3269678cb9fb536b51c16c230a149ee9bd55718730ab866e79527adbc1fa57127382537293d27865becf1da0cd2c0b6ce2cf4e81ff4450d590c5ffba8ef97a230574f89f4c2eb12a0f1704087b232b3f7f45d3f4419c589fab9984be3b72e6683f8934a64afa06fd497894f3dd1c4675913af87108ff6d869ea2b79d8b6ecbd5fece3cb62a023863faefbb8ea82aa03b613a3fff4bdad9be0cf108293eb29b4addf1661ebed121cc271012b31d5564a2aa797d85ee04571fb302686abf9f68422789ce64a80b927baf12e55d27f991b04cbd6bc9b2fd034364d991ce1a90a3a748c1b8a4e01c02f5a88d30b25d3dd7760d3549f785cfd759e2ac197f382cd46fc090a2bb8ce83513464f5a135060f1bcf20bb055fdbcc662115461ed4392dbba00cbbe69cb8fee3434935430482ea46c27e5aef8da17560537ca78949af92b8c09d7da294987e3afcc3ebd807a322cd6169b61bdd2d0b4b75fb288588af32bf8a934286f1e733c6189c82e29f2f79d6234cca6a26fd6433eac4fb553413c93b3372fc8c1f667e17344617e5d896619e01a005f28c3ad76ec342bd188343d16cf56a1f1f7b96ff2e8ae17479656d87f8e520163b5fcc924de4768bbd4b53f95daa6cf1d86053c4af1e2ace146ea45136b734391d8f566aa159daf54168288db25fc3b145285abd09f1d1f310fcd7d939088c8533b46c1d6ed4b86e3758e5c4a152faa7981f4ef316f89fcb8d06a3bf66894717935c192029dd4f067d6c6df557e4e004e7f3e7606529cd156309df9fb4d125c73cafc7b01e5831a7796cefa05834b18ed68e013c45d295a9cd0d75794cbebb8e0bf2309c95112704b50cf68b15f3f7e281bb9263c0579cbd6936c29dde94e1bbc591aa4e2b6b304a4ef23", 0x1000}, {&(0x7f0000002880)="e4883e3a74e83b020dc9f082804da975", 0x10}, {&(0x7f00000028c0)="c806473c7238431c0c5604891f54129fac5674d8860438334dab5f7d95152a963393110f9d8133d682093c41bf1886a8aeb002c66e56dc5b98f0fbb527159e40268572c3e89499496db4b61b1239affabbda2ecaa405583efc4122c43c603c3b5f2c5e69dc91264970c169c77081eee7110d678dfefd5d3a00cbf2fff48eac3067864b0fe472f266776fd37e1df262d62241530eb2b0ba4d8ed05790a23cb9ca007c42b96a2b2d9f71c040a0440ecb0054", 0xb1}, {&(0x7f0000002980)="aa73b4ccd4d4a67012b895107337b86da70a42dad5fcacc7545b8e736ca8581c0fa16c849bb0c124a36af0d325d77f894d5adab8192648e3ddb40d8487e808d916490834ed1ec7b530f693801951cbed72cd865e8a7cabd9b24c5caffa4feaf609b0f6c4963e83dba0bbb6cf727c0b2c", 0x70}, {&(0x7f0000002a00)="91be41d75826ca3d99b4a6d0729966b05cc97aa69e758bbf291785f34072bd0b309dd584aeed56de60378d67e6074912f7d3d3ce96351298d8bd69511afecfd6e1723a57f21bde5233f4cf1f4617f4d8bc9f4841f81a72e5a3e4db3245d566b932ef3f60cda5c3ac3336a4d03df190543951bd833ef161833bcb89eb69ab6204d0cf17ab7d8ddd500c4fab4de2", 0x8d}, {&(0x7f0000002ac0)="3d6dee53d1280d61074615bdedbb3056295b311ebc9fbc321704626928f6a3c3124410f2155bc6d5c334ffabf6f0ff08434a7b063f72a4b86f129cddd2251fb00b56122195f63a28d88103eaee5d30c09f03e7234a0149e4fb612d1628", 0x5d}], 0x7, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @broadcast}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x88}, @lsrr={0x83, 0x13, 0xc7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0xd6, [@rand_addr=0x64010101]}, @generic={0x82, 0x5, "42d81e"}, @cipso={0x86, 0x46, 0x0, [{0x2, 0xa, "dfbcc84bcb5bc6db"}, {0x6, 0xd, "e6a2a09cb1c25223ebf587"}, {0x7, 0x8, "b8d18bdac1ee"}, {0x6, 0x11, "16fa53906e04a10112f2dbe8ddc918"}, {0x2, 0x8, "d3cdfed7b6c4"}, {0x5, 0x4, "bceb"}, {0x1, 0x4, "9be9"}]}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xba, 0x3, 0x9, [{@private=0xa010101, 0x100}, {@loopback, 0x2}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x2}]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0x9, [0xfffffffe]}, @lsrr={0x83, 0x27, 0x9e, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @multicast2, @multicast1, @loopback, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @multicast2}}}], 0x150}, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) 511.66534ms ago: executing program 4 (id=1740): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x2000000, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 471.787732ms ago: executing program 2 (id=1741): syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f4000400000000000000"], 0x1c, 0x0) 462.523062ms ago: executing program 4 (id=1742): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x0, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x2}, @encap={0x1c, 0x15, {0x0, 0x4e23, 0x0, @in=@loopback}}]}, 0x15c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 362.081586ms ago: executing program 0 (id=1743): r0 = syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000980)=ANY=[], 0x1, 0x1df, &(0x7f0000000b40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x20000000000003}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) fcntl$setstatus(r2, 0x4, 0x2000) listen(r2, 0x0) r3 = epoll_create(0x4) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000016481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000000c0)=ANY=[@ANYBLOB='max=-', @ANYRES64, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r0]) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000001100)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) utimensat(r7, 0x0, 0x0, 0x0) 353.102666ms ago: executing program 4 (id=1744): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000900)={0x8, 0x0, 0x0, 0x9007, 0x0, "010004000416df00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541e, &(0x7f00000006c0)=0x16) 349.081216ms ago: executing program 0 (id=1745): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x2000000000000122, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb582) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x3ff, 0x80, 0x1, 0x2b88, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x102}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000340)=ANY=[]) r8 = inotify_init() ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close(r9) inotify_init1(0x0) read(r9, 0x0, 0x7ffffffff000) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x0, 0x4}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0xfffffffffffffe92}}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r9) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002dbd7000fddbdf25010000000800090003000000080008000200000008000400ac14142e08000500ac1e000108000100", @ANYRES32=r2, @ANYBLOB="15130800feccb9e43aa6f59c01008000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x10004000) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdc9435e3ffe46", 0x3840, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 265.124729ms ago: executing program 4 (id=1746): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x258, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x73, 0xd3}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x208, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x60, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x18c, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_connmark={0xd0, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffe}}}]}, {0x65, 0x6, "66396e73dfd00bd4ca2cf6729e00b590a592c571fa73ca19ec269ea927df7162b385d80fe15ca7f5cb6b4d958bd18714cd4f89f48d039d7da0010095f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976"}, {0xc}, {0xc}}}]}]}}]}, 0x258}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x2}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 264.873759ms ago: executing program 4 (id=1747): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000001c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@usrjquota}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x8000, 0x117) fallocate(r1, 0x0, 0x0, 0x1000f4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x0, 0x0, 0x1a00) 0s ago: executing program 2 (id=1748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24490a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e63e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1fcff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969cc1595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074ebff322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff8a5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2eaa6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000100000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed90868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e104b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40bc96fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373eaea36546791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000be52f93972fb7fadb8dca6dad81a737764ed53c24ae3ade56738b75c393e9a5e80429400904bd31cb243432c098469e29ffb000000000000000000000000004bfd671bf6f4cb7d3f18bb6ceafba78ff55268fb1e4d28f9b4f25125757689bc0889a3a37f48bde3f2c96c8f93f567861d92811b16507da6fc37ca7856b5d159403d62a8b3f993277d5df6238a4287eef4c1f09bc92855ce5de0a48f8b2a842ff43a81d7cf02a967257809"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000300)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x1, 0xa, 0xa, 0x100, 0xdaab553dfbaa3e36}, @generic={0x40, 0xa, 0x0, 0x1, 0x40}, @alu={0x7, 0x1, 0xf, 0x9, 0x0, 0x6, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x35, &(0x7f0000000480)=""/53, 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r2, r2], &(0x7f00000005c0)=[{0x5, 0x4, 0x80, 0x5}, {0x1, 0x4, 0x2, 0x4}, {0x3, 0x3, 0xd, 0x8}], 0x10, 0x120}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000006c0)='mlxsw_sp_acl_tcam_vregion_migrate_end\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f000068b000/0x2000)=nil, 0x2000, 0x9) dup3(r7, r6, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): id+0x258/0x258 [ 158.752171][ T4989] ? __alloc_pages_nodemask+0x393/0x840 [ 158.757550][ T4989] should_fail+0x71f/0x880 [ 158.761812][ T4989] ? setup_fault_attr+0x3d0/0x3d0 [ 158.766663][ T4989] ? _raw_spin_lock+0xa4/0x1b0 [ 158.771253][ T4989] ? __anon_vma_prepare+0x4e/0x420 [ 158.776201][ T4989] should_failslab+0x5/0x20 [ 158.780547][ T4989] kmem_cache_alloc+0x28/0x250 [ 158.785139][ T4989] __anon_vma_prepare+0x4e/0x420 [ 158.789932][ T4989] ? _raw_spin_unlock+0x49/0x60 [ 158.794598][ T4989] ? __pte_alloc+0x145/0x1c0 [ 158.799029][ T4989] handle_mm_fault+0x46df/0x4990 [ 158.803810][ T4989] ? finish_fault+0x230/0x230 [ 158.808320][ T4989] ? down_read_trylock+0x179/0x1d0 [ 158.813267][ T4989] ? check_preemption_disabled+0x9f/0x320 [ 158.818814][ T4989] ? vmacache_update+0x9f/0xf0 [ 158.823416][ T4989] __do_page_fault+0x509/0xbb0 [ 158.828023][ T4989] page_fault+0x2f/0x40 [ 158.832017][ T4989] RIP: 0010:__put_user_4+0x1c/0x30 [ 158.836955][ T4989] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 80 8d 02 00 48 8b 9b 98 0b 00 00 48 83 eb 03 48 39 d9 73 3f 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 158.838269][ T449] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 158.856399][ T4989] RSP: 0018:ffff8881e0147a98 EFLAGS: 00050293 [ 158.856410][ T4989] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000a40 [ 158.856417][ T4989] RDX: 1ffff1103c028f60 RSI: ffffffff860e7d40 RDI: 0000000000004b3b [ 158.856424][ T4989] RBP: ffff8881e0147c68 R08: 0000000000000005 R09: ffffffff827731aa [ 158.856431][ T4989] R10: ffff8881d5588fc0 R11: 0000000000000039 R12: ffff8881ef514000 [ 158.856438][ T4989] R13: 0000000000004b3b R14: ffff8881f5c1a178 R15: 1ffff1103eb8342f [ 158.856458][ T4989] ? vt_ioctl+0x1ca/0x28f0 [ 158.856471][ T4989] vt_ioctl+0x13d3/0x28f0 [ 158.856489][ T4989] ? vt_waitactive+0x760/0x760 [ 158.865436][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.871242][ T4989] ? get_pid_task+0xde/0x130 [ 158.871260][ T4989] ? tty_jobctrl_ioctl+0x23f/0xac0 [ 158.871272][ T4989] tty_ioctl+0x8c6/0xcb0 [ 158.871290][ T4989] ? tty_do_resize+0x180/0x180 [ 158.949269][ T4989] do_vfs_ioctl+0x742/0x1720 [ 158.953694][ T4989] ? ioctl_preallocate+0x250/0x250 [ 158.958643][ T4989] ? __fget+0x407/0x490 [ 158.962632][ T4989] ? fget_many+0x20/0x20 [ 158.966709][ T4989] ? debug_smp_processor_id+0x20/0x20 [ 158.971918][ T4989] ? security_file_ioctl+0x7d/0xa0 [ 158.976862][ T4989] __x64_sys_ioctl+0xd4/0x110 [ 158.981377][ T4989] do_syscall_64+0xca/0x1c0 [ 158.985715][ T4989] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 158.991445][ T4989] RIP: 0033:0x7f525c4c6b99 [ 158.995697][ T4989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.015147][ T4989] RSP: 002b:00007f525b748048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.023467][ T4989] RAX: ffffffffffffffda RBX: 00007f525c654fa0 RCX: 00007f525c4c6b99 [ 159.031279][ T4989] RDX: 0000000020000a40 RSI: 0000000000004b3b RDI: 0000000000000003 [ 159.039091][ T4989] RBP: 00007f525b7480a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.046901][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.054803][ T4989] R13: 000000000000000b R14: 00007f525c654fa0 R15: 00007ffee8a99788 [ 159.070747][ T449] usb 5-1: config 0 descriptor?? [ 159.108663][ T449] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 159.116408][ T449] usb 5-1: Detected FT-X [ 159.175817][ T4982] F2FS-fs (loop3): invalid crc value [ 159.187253][ T4980] F2FS-fs (loop2): invalid crc value [ 159.193347][ T4982] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.225785][ T4980] F2FS-fs (loop2): Found nat_bits in checkpoint [ 159.293478][ T4982] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.321883][ T4980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 159.322023][ T23] audit: type=1400 audit(1719798339.740:518): avc: denied { rename } for pid=4981 comm="syz.3.1347" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.353453][ T4650] attempt to access beyond end of device [ 159.353453][ T4650] loop3: rw=2049, want=45104, limit=40427 [ 159.416119][ T23] audit: type=1400 audit(1719798339.800:519): avc: denied { create } for pid=4979 comm="syz.2.1348" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.444509][ T4700] attempt to access beyond end of device [ 159.444509][ T4700] loop2: rw=2049, want=45104, limit=40427 [ 159.456276][ T23] audit: type=1400 audit(1719798339.800:520): avc: denied { read write open } for pid=4979 comm="syz.2.1348" path="/root/syzkaller.ilCF4g/14/file0/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.481688][ T449] ftdi_sio ttyUSB0: Unable to read latency timer: -5 [ 159.528245][ T23] audit: type=1400 audit(1719798339.820:521): avc: denied { map } for pid=4979 comm="syz.2.1348" path="/root/syzkaller.ilCF4g/14/file0/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.555621][ T23] audit: type=1400 audit(1719798339.860:522): avc: denied { ioctl } for pid=4979 comm="syz.2.1348" path="/root/syzkaller.ilCF4g/14/file0/bus" dev="loop2" ino=10 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.581675][ T23] audit: type=1400 audit(1719798339.880:523): avc: denied { ioctl } for pid=4966 comm="syz.4.1343" path="/dev/raw-gadget" dev="devtmpfs" ino=9261 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.928903][ T449] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 159.969993][ T449] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 159.982071][ T449] usb 5-1: USB disconnect, device number 25 [ 159.989951][ T449] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 159.999558][ T449] ftdi_sio 5-1:0.0: device disconnected [ 160.026626][ T5016] F2FS-fs (loop0): invalid crc value [ 160.064715][ T5016] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.084918][ T342] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 160.102428][ T5022] EXT4-fs (loop3): unsupported inode size: 8 [ 160.113906][ T342] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 160.122488][ T5031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1358'. [ 160.131338][ T5022] EXT4-fs (loop3): blocksize: 1024 [ 160.151052][ T342] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 160.168509][ T5016] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.224559][ T5031] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 160.292777][ T3214] attempt to access beyond end of device [ 160.292777][ T3214] loop0: rw=524288, want=45072, limit=40427 [ 160.304497][ T3214] attempt to access beyond end of device [ 160.304497][ T3214] loop0: rw=0, want=45072, limit=40427 [ 160.350335][ T5042] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2930: inode #16: comm syz.3.1362: corrupted xattr block 8 [ 160.368989][ T179] attempt to access beyond end of device [ 160.368989][ T179] loop0: rw=2049, want=40992, limit=40427 [ 160.380293][ T5042] EXT4-fs warning (device loop3): ext4_evict_inode:321: xattr delete (err -117) [ 160.390558][ T5042] EXT4-fs (loop3): 1 orphan inode deleted [ 160.396130][ T5042] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 160.405119][ T5042] ext4 filesystem being mounted at /root/syzkaller.rF1LZK/19/bus supports timestamps until 2038 (0x7fffffff) [ 160.469230][ T389] tipc: Disabling bearer [ 160.474972][ T389] tipc: Left network mode [ 160.680004][ T5058] EXT4-fs (loop3): orphan cleanup on readonly fs [ 160.687283][ T5058] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2930: inode #16: comm syz.3.1366: corrupted xattr block 8 [ 160.699755][ T5058] EXT4-fs warning (device loop3): ext4_evict_inode:321: xattr delete (err -117) [ 160.719427][ T5058] EXT4-fs (loop3): 1 orphan inode deleted [ 160.728167][ T121] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 160.729201][ T5058] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 160.748546][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 160.983064][ T5031] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 160.992636][ T5031] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 161.001312][ T5031] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 161.009307][ T121] usb 2-1: device descriptor read/64, error 18 [ 161.016979][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 161.045661][ T23] kauditd_printk_skb: 7 callbacks suppressed [ 161.045673][ T23] audit: type=1400 audit(1719798341.470:531): avc: denied { listen } for pid=5066 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.088727][ T5065] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.095649][ T5065] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.114923][ T5065] device bridge_slave_0 entered promiscuous mode [ 161.128845][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.128920][ T5065] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.165839][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.174714][ T5065] device bridge_slave_1 entered promiscuous mode [ 161.181050][ T449] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 161.189592][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1372'. [ 161.198982][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 161.228307][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.237384][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.260638][ T24] usb 5-1: SerialNumber: syz [ 161.399964][ T121] usb 2-1: device descriptor read/64, error 18 [ 161.400780][ T389] device bridge_slave_1 left promiscuous mode [ 161.412499][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.419875][ T389] device bridge_slave_0 left promiscuous mode [ 161.425791][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.438246][ T449] usb 4-1: Using ep0 maxpacket: 16 [ 161.558656][ T449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 161.580754][ T449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 161.592765][ T449] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 161.603055][ T449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.675869][ T449] usb 4-1: config 0 descriptor?? [ 161.811901][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.819453][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.829788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.838052][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.845993][ T121] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 161.853604][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.860452][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.868496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.877264][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.885595][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.893639][ T513] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.900645][ T513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.918953][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.927332][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.942741][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.951286][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.968917][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.977125][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.988861][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.996651][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.008662][ T24] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 162.016657][ T24] usb 5-1: USB disconnect, device number 26 [ 162.026849][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.035385][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.048407][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.056675][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.066732][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.075227][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.109718][ T5088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1369'. [ 162.154664][ T5062] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.181599][ T449] hid-generic 0003:0158:0100.001A: unknown main item tag 0x1 [ 162.199587][ T121] usb 2-1: device descriptor read/64, error 18 [ 162.213018][ T449] hid-generic 0003:0158:0100.001A: unexpected long global item [ 162.220631][ T5099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1378'. [ 162.241064][ T449] hid-generic: probe of 0003:0158:0100.001A failed with error -22 [ 162.392433][ T449] usb 4-1: USB disconnect, device number 27 [ 162.518176][ T695] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 162.648275][ T121] usb 2-1: device descriptor read/64, error 18 [ 162.687835][ T23] audit: type=1400 audit(1719798343.110:532): avc: denied { create } for pid=5108 comm="syz.4.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 162.768335][ T121] usb usb2-port1: attempt power cycle [ 162.878496][ T695] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 162.889853][ T695] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 162.899502][ T695] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 162.909162][ T695] usb 1-1: config 1 interface 0 has no altsetting 0 [ 163.068359][ T695] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.078918][ T695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.086884][ T695] usb 1-1: Product: Т [ 163.090996][ T695] usb 1-1: Manufacturer: ఁ [ 163.110127][ T5118] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 163.132132][ T5117] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 163.146773][ T5117] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 163.148005][ T695] usb 1-1: SerialNumber: ࠐ [ 163.168748][ T5117] EXT4-fs (loop3): This should not happen!! Data will be lost [ 163.168748][ T5117] [ 163.178451][ T5117] EXT4-fs (loop3): Total free blocks count 0 [ 163.188640][ T5117] EXT4-fs (loop3): Free/Dirty block details [ 163.191731][ T5098] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 163.194580][ T5117] EXT4-fs (loop3): free_blocks=2415919104 [ 163.206444][ T5098] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 163.206752][ T5117] EXT4-fs (loop3): dirty_blocks=32 [ 163.218480][ T121] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 163.219633][ T5117] EXT4-fs (loop3): Block reservation details [ 163.232034][ T5117] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 163.248816][ T5126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5126 comm=syz.2.1387 [ 163.361852][ T23] audit: type=1400 audit(1719798343.790:533): avc: denied { unmount } for pid=4564 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 163.368442][ T121] usb 2-1: device descriptor read/8, error -71 [ 163.728389][ T121] usb 2-1: device descriptor read/8, error -71 [ 163.734508][ T695] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 163.743753][ T695] usb 1-1: USB disconnect, device number 25 [ 164.250106][ T5161] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,inode_readahead_blks=0x0000000000000800,noquota,,errors=continue [ 164.264050][ T5161] ext4 filesystem being mounted at /root/syzkaller.rF1LZK/27/bus supports timestamps until 2038 (0x7fffffff) [ 164.340459][ T5173] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 164.368141][ T121] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 164.371136][ T5173] overlayfs: conflicting lowerdir path [ 164.589172][ T121] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.639192][ T5192] FAT-fs (loop2): Unrecognized mount option "ioch`arset=iso8859-4" or missing value [ 164.688779][ T121] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.697799][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.712175][ T121] usb 2-1: SerialNumber: syz [ 165.145517][ T695] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 165.388198][ T695] usb 5-1: Using ep0 maxpacket: 32 [ 165.393541][ T5209] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 165.437682][ T5209] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 165.483910][ T5209] F2FS-fs (loop2): invalid crc_offset: 5705724 [ 165.499937][ T5209] F2FS-fs (loop2): Found nat_bits in checkpoint [ 165.674538][ T5209] F2FS-fs (loop2): recover fsync data on readonly fs [ 165.681681][ T5209] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 165.689421][ T5209] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 165.768368][ T695] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 165.778674][ T121] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 165.788005][ T121] usb 2-1: USB disconnect, device number 30 [ 165.794360][ T695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.804974][ T695] usb 5-1: config 0 descriptor?? [ 165.827577][ T5219] incfs: Can't find or create .incomplete dir in ./file0 [ 165.839015][ T5219] incfs: mount failed -28 [ 165.859000][ T695] rndis_host: probe of 5-1:0.0 failed with error -22 [ 165.949832][ T5224] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,max_dir_size_kb=0x00000000000007ff,min_batch_time=0x0000000000000001,,errors=continue [ 166.059786][ T449] usb 5-1: USB disconnect, device number 27 [ 166.108260][ T13] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 166.179072][ T5229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5229 comm=syz.3.1414 [ 166.244544][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 166.248171][ T5] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 166.257631][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 166.274267][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 166.617480][ T23] audit: type=1400 audit(1719798347.040:534): avc: denied { ioctl } for pid=5241 comm="syz.4.1419" path="socket:[46640]" dev="sockfs" ino=46640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.645191][ T5242] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1419'. [ 166.929976][ T13] usb 1-1: device descriptor read/64, error 18 [ 167.068158][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 167.169987][ T5249] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 167.178061][ T5249] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 167.194151][ T5249] F2FS-fs (loop4): invalid crc_offset: 5705724 [ 167.201841][ T5249] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.208654][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 167.228322][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 167.248222][ T5] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 167.251793][ T5249] F2FS-fs (loop4): recover fsync data on readonly fs [ 167.264240][ T5249] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 167.267231][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.271707][ T5249] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 167.295956][ T5] usb 3-1: config 0 descriptor?? [ 167.368209][ T13] usb 1-1: device descriptor read/64, error 18 [ 167.558173][ T695] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 167.785599][ T5224] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 167.842363][ T5] hid-generic 0003:0158:0100.001B: unknown main item tag 0x1 [ 167.849618][ T13] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 167.858172][ T5] hid-generic 0003:0158:0100.001B: unexpected long global item [ 167.865895][ T5] hid-generic: probe of 0003:0158:0100.001B failed with error -22 [ 168.003932][ T342] usb 3-1: USB disconnect, device number 23 [ 168.136413][ T695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.136459][ T695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.136552][ T695] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 168.136628][ T695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.138855][ T13] usb 1-1: device descriptor read/64, error 18 [ 168.235788][ T695] usb 2-1: config 0 descriptor?? [ 168.528181][ T13] usb 1-1: device descriptor read/64, error 18 [ 168.633984][ T5273] 9pnet: Insufficient options for proto=fd [ 168.649484][ T13] usb usb1-port1: attempt power cycle [ 168.688318][ T5] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 168.710468][ T5277] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 168.719447][ T5277] ext4 filesystem being mounted at /root/syzkaller.ilCF4g/36/file0 supports timestamps until 2038 (0x7fffffff) [ 168.724091][ T695] sunplus 0003:04FC:05D8.001C: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 168.764745][ T5277] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #4: block 16: comm syz.2.1430: lblock 0 mapped to illegal pblock 16 (length 1) [ 168.779594][ T5277] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 1 [ 168.788575][ T23] audit: type=1400 audit(1719798349.190:535): avc: denied { mounton } for pid=5276 comm="syz.2.1430" path="/root/syzkaller.ilCF4g/36/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.800043][ T5277] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 60928 [ 168.886290][ T4700] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 169.014520][ T4782] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 169.025785][ T4782] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 169.368281][ T5] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.408509][ T5286] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 169.410190][ T502] usb 2-1: USB disconnect, device number 31 [ 169.442417][ T5286] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 169.454433][ T5286] F2FS-fs (loop0): invalid crc_offset: 5705724 [ 169.458395][ T5] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.463032][ T5286] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.472840][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.483270][ T5] usb 5-1: SerialNumber: syz [ 169.517811][ T5286] F2FS-fs (loop0): recover fsync data on readonly fs [ 169.524773][ T5286] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 169.531927][ T5286] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.577537][ T5293] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.584715][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.592497][ T5293] device bridge_slave_0 entered promiscuous mode [ 169.602484][ T5293] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.609818][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.617109][ T5293] device bridge_slave_1 entered promiscuous mode [ 169.685741][ T5293] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.692697][ T5293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.699849][ T5293] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.706764][ T5293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.752097][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.761145][ T502] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.773095][ T502] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.789908][ T5299] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,max_dir_size_kb=0x00000000000007ff,min_batch_time=0x0000000000000001,,errors=continue [ 169.817181][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.825786][ T695] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.832649][ T695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.845990][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.857454][ T695] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.864323][ T695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.896584][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.906356][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.935127][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.938295][ T5310] EXT4-fs (loop0): Ignoring removed nobh option [ 169.943605][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.960588][ T5310] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,nobh,usrquota,inode_readahead_blks=0x0000000000010000,max_dir_size_kb=0x00000000000007b1,nogrpid,min_batch_time=0x000000000000088d,delalloc,discard,nojournal_checksum,,errors=continue [ 169.992205][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.015746][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.029876][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.110387][ T389] device bridge_slave_1 left promiscuous mode [ 170.116366][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.123915][ T389] device bridge_slave_0 left promiscuous mode [ 170.130010][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.175826][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 170.448186][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 170.589443][ T5] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 170.605602][ T5] usb 5-1: USB disconnect, device number 28 [ 170.608785][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 170.638300][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 170.647968][ T24] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 170.657699][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.683016][ T24] usb 4-1: config 0 descriptor?? [ 170.785988][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.793052][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.801238][ T5327] device bridge_slave_0 entered promiscuous mode [ 170.808733][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.815783][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.823562][ T5327] device bridge_slave_1 entered promiscuous mode [ 170.903504][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.910377][ T5327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.917529][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.924400][ T5327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.975532][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.983489][ T695] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.991314][ T695] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.006952][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.016409][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.023260][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.037748][ T5326] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 171.053542][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.061806][ T5326] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 171.070427][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.077366][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.088746][ T5326] F2FS-fs (loop1): invalid crc_offset: 5705724 [ 171.105322][ T5326] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.116533][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.292497][ T5338] EXT4-fs (loop4): Ignoring removed orlov option [ 171.349913][ T5338] EXT4-fs (loop4): can't mount with dioread_nolock if block size != PAGE_SIZE [ 171.370946][ T5299] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.403804][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.412102][ T5326] F2FS-fs (loop1): recover fsync data on readonly fs [ 171.419124][ T5326] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 171.426136][ T5326] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 171.444636][ T24] hid-generic 0003:0158:0100.001D: unknown main item tag 0x1 [ 171.456062][ T24] hid-generic 0003:0158:0100.001D: unexpected long global item [ 171.464933][ T24] hid-generic: probe of 0003:0158:0100.001D failed with error -22 [ 171.468995][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.489683][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.511195][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.525590][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.536119][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.632777][ T23] audit: type=1400 audit(1719798352.060:536): avc: denied { bind } for pid=5344 comm="syz.0.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.669578][ T5347] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 6, please upgrade kernel version [ 171.694549][ T379] usb 4-1: USB disconnect, device number 28 [ 171.774037][ T5355] fuse: Bad value for 'fd' [ 171.829217][ T389] device bridge_slave_1 left promiscuous mode [ 171.837478][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.865789][ T389] device bridge_slave_0 left promiscuous mode [ 171.871873][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.211687][ T5362] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24) [ 172.293928][ T5362] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 172.376942][ T5362] F2FS-fs (loop4): invalid crc value [ 172.384218][ T5362] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.468394][ T5362] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 172.475326][ T5362] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.488427][ T5362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1457'. [ 172.513818][ T4582] attempt to access beyond end of device [ 172.513818][ T4582] loop4: rw=2049, want=45104, limit=40427 [ 172.742756][ T5412] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 172.773485][ T5399] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.848186][ T5399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.938209][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 173.308261][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.308685][ T5432] syz.1.1466[5432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.308754][ T5432] syz.1.1466[5432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.408254][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.443680][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.459999][ T24] usb 1-1: SerialNumber: syz [ 173.650280][ T4564] attempt to access beyond end of device [ 173.650280][ T4564] loop1: rw=2049, want=45112, limit=40427 [ 173.780061][ T5440] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 173.790014][ T5440] ext4 filesystem being mounted at /root/syzkaller.rF1LZK/35/file0 supports timestamps until 2038 (0x7fffffff) [ 173.826150][ T5440] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 173.837922][ T5440] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 173.850524][ T23] audit: type=1400 audit(1719798354.280:537): avc: denied { rename } for pid=5439 comm="syz.3.1479" name="file0" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 173.934093][ T5445] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,max_dir_size_kb=0x00000000000007ff,min_batch_time=0x0000000000000001,,errors=continue [ 174.218264][ T24] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 174.225600][ T24] usb 1-1: USB disconnect, device number 29 [ 174.258176][ T5] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 174.421773][ T5485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 174.498155][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 174.618348][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 174.629180][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 174.639045][ T5] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 174.647913][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.656638][ T5] usb 2-1: config 0 descriptor?? [ 175.058252][ T695] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 175.068566][ T5498] EXT4-fs (loop4): Test dummy encryption mode enabled [ 175.080301][ T5498] EXT4-fs error (device loop4): ext4_quota_enable:6056: comm syz.4.1496: inode #16777216: comm syz.4.1496: iget: illegal inode # [ 175.094196][ T5498] EXT4-fs error (device loop4): ext4_quota_enable:6059: comm syz.4.1496: Bad quota inode: 16777216, type: 2 [ 175.106141][ T5498] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 175.122006][ T5498] EXT4-fs (loop4): mount failed [ 175.131863][ T5445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 175.152373][ T5] hid-generic 0003:0158:0100.001E: unknown main item tag 0x1 [ 175.159696][ T5] hid-generic 0003:0158:0100.001E: unexpected long global item [ 175.167265][ T5] hid-generic: probe of 0003:0158:0100.001E failed with error -22 [ 175.220206][ T5498] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 175.549668][ T371] usb 2-1: USB disconnect, device number 32 [ 175.568252][ T695] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 175.728256][ T695] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 175.737265][ T695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.745036][ T695] usb 1-1: Product: syz [ 175.749114][ T695] usb 1-1: Manufacturer: syz [ 175.753523][ T695] usb 1-1: SerialNumber: syz [ 175.764027][ T695] usb 1-1: config 0 descriptor?? [ 175.798447][ T5492] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 176.044181][ T695] usb 1-1: USB disconnect, device number 30 [ 176.107760][ T3933] udevd[3933]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.208984][ T5522] fuse: Bad value for 'rootmode' [ 176.597197][ T5] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 176.838200][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 176.851153][ T5535] F2FS-fs (loop3): invalid crc value [ 176.857946][ T5535] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.897859][ T5535] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 176.958240][ T5] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 176.969006][ T5] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 176.978069][ T5] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 176.987580][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.997111][ T5] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 177.007774][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 177.021044][ T5557] EXT4-fs (loop1): Test dummy encryption mode enabled [ 177.027887][ T5] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 177.036955][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.046036][ T5] usb 5-1: config 0 descriptor?? [ 177.052983][ T5557] EXT4-fs error (device loop1): ext4_quota_enable:6056: comm syz.1.1511: inode #16777216: comm syz.1.1511: iget: illegal inode # [ 177.066422][ T5557] EXT4-fs error (device loop1): ext4_quota_enable:6059: comm syz.1.1511: Bad quota inode: 16777216, type: 2 [ 177.078074][ T5557] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 177.096425][ T5557] EXT4-fs (loop1): mount failed [ 177.109184][ T4650] attempt to access beyond end of device [ 177.109184][ T4650] loop3: rw=2049, want=45104, limit=40427 [ 177.232979][ T5557] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 177.353966][ T5563] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 177.392139][ T5563] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.628558][ T5568] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1513'. [ 177.697018][ T23] audit: type=1400 audit(1719798358.120:538): avc: denied { ioctl } for pid=5567 comm="syz.3.1513" path="socket:[48932]" dev="sockfs" ino=48932 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.873843][ T5575] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,max_dir_size_kb=0x00000000000007ff,min_batch_time=0x0000000000000001,,errors=continue [ 178.068169][ T379] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 178.093931][ T5] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 178.107094][ T5] usb 5-1: USB disconnect, device number 29 [ 178.114079][ T5] usblp0: removed [ 178.152938][ T5578] F2FS-fs (loop3): Invalid log sectors per block(31) log sectorsize(9) [ 178.168285][ T5578] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 178.182884][ T5578] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x2010) [ 178.191037][ T5578] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 178.198193][ T513] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 178.212703][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 178.381321][ T23] audit: type=1400 audit(1719798358.810:539): avc: denied { bind } for pid=5596 comm="syz.3.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.415272][ T5591] FAT-fs (loop4): Directory bread(block 64) failed [ 178.421895][ T5591] FAT-fs (loop4): Directory bread(block 65) failed [ 178.428292][ T5591] FAT-fs (loop4): Directory bread(block 66) failed [ 178.434552][ T5591] FAT-fs (loop4): Directory bread(block 67) failed [ 178.441073][ T5591] FAT-fs (loop4): Directory bread(block 68) failed [ 178.447332][ T5591] FAT-fs (loop4): Directory bread(block 69) failed [ 178.453927][ T5591] FAT-fs (loop4): Directory bread(block 70) failed [ 178.460289][ T5591] FAT-fs (loop4): Directory bread(block 71) failed [ 178.466627][ T5591] FAT-fs (loop4): Directory bread(block 72) failed [ 178.472969][ T5591] FAT-fs (loop4): Directory bread(block 73) failed [ 178.508215][ T513] usb 3-1: Using ep0 maxpacket: 16 [ 178.518208][ T379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.661054][ T379] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.670954][ T513] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 178.681726][ T379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.689907][ T513] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 178.699503][ T379] usb 1-1: SerialNumber: syz [ 178.704248][ T513] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 178.713479][ T513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.722571][ T513] usb 3-1: config 0 descriptor?? [ 178.748652][ T379] usb 1-1: bad CDC descriptors [ 178.841384][ T5616] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 178.874353][ T5625] 9pnet: Insufficient options for proto=fd [ 178.878308][ T5616] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 178.913506][ T5623] EXT4-fs (loop3): Test dummy encryption mode enabled [ 178.930454][ T5623] EXT4-fs error (device loop3): ext4_quota_enable:6056: comm syz.3.1529: inode #16777216: comm syz.3.1529: iget: illegal inode # [ 178.944279][ T5623] EXT4-fs error (device loop3): ext4_quota_enable:6059: comm syz.3.1529: Bad quota inode: 16777216, type: 2 [ 178.956324][ T5623] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 178.959425][ T342] usb 1-1: USB disconnect, device number 31 [ 178.973302][ T5623] EXT4-fs (loop3): mount failed [ 179.054679][ T5623] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 179.202648][ T5575] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 179.502365][ T513] hid-generic 0003:0158:0100.001F: unknown main item tag 0x1 [ 179.509739][ T513] hid-generic 0003:0158:0100.001F: unexpected long global item [ 179.517410][ T513] hid-generic: probe of 0003:0158:0100.001F failed with error -22 [ 179.533130][ T513] usb 3-1: USB disconnect, device number 24 [ 179.556276][ T5644] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 179.571888][ T5644] ext4 filesystem being mounted at /root/syzkaller.PxmzR6/64/file1 supports timestamps until 2038 (0x7fffffff) [ 179.591257][ T23] audit: type=1400 audit(1719798360.020:540): avc: denied { read } for pid=5643 comm="syz.1.1534" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.614189][ T23] audit: type=1400 audit(1719798360.020:541): avc: denied { open } for pid=5643 comm="syz.1.1534" path="/root/syzkaller.PxmzR6/64/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.988141][ T342] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 180.207455][ T5682] EXT4-fs (loop2): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 180.248165][ T342] usb 5-1: Using ep0 maxpacket: 8 [ 180.368247][ T342] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 180.380400][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.402450][ T342] usb 5-1: config 0 descriptor?? [ 180.560434][ T5685] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 180.575618][ T5685] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 180.584180][ T5685] F2FS-fs (loop2): Unrecognized mount option "quot"" or missing value [ 180.888397][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 180.914657][ T5699] overlayfs: missing 'lowerdir' [ 180.971088][ T5705] EXT4-fs (loop3): Test dummy encryption mode enabled [ 180.990245][ T5705] EXT4-fs error (device loop3): ext4_quota_enable:6056: comm syz.3.1553: inode #16777216: comm syz.3.1553: iget: illegal inode # [ 181.003641][ T5705] EXT4-fs error (device loop3): ext4_quota_enable:6059: comm syz.3.1553: Bad quota inode: 16777216, type: 2 [ 181.015408][ T5705] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 181.030739][ T5705] EXT4-fs (loop3): mount failed [ 181.128237][ T513] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 181.242231][ T5705] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 181.248267][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.261908][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.329570][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.350700][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.359776][ T24] usb 1-1: config 0 descriptor?? [ 181.378211][ T513] usb 3-1: Using ep0 maxpacket: 16 [ 181.558232][ T513] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.569588][ T513] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.581522][ T513] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.595180][ T513] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.614262][ T513] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 181.624384][ T513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.730285][ T513] usb 3-1: config 0 descriptor?? [ 181.862354][ T5716] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 181.871317][ T5716] ext4 filesystem being mounted at /root/syzkaller.PxmzR6/68/file0 supports timestamps until 2038 (0x7fffffff) [ 181.923236][ T5716] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 13: comm syz.1.1555: lblock 0 mapped to illegal pblock 13 (length 1) [ 181.958384][ T5716] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 182.009592][ T5738] ------------[ cut here ]------------ [ 182.015027][ T5738] WARNING: CPU: 0 PID: 5738 at fs/overlayfs/file.c:62 ovl_change_flags+0x25f/0x2d0 [ 182.024203][ T5738] Modules linked in: [ 182.027941][ T5738] CPU: 0 PID: 5738 Comm: syz.3.1556 Tainted: G W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 182.038957][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 182.048884][ T5738] RIP: 0010:ovl_change_flags+0x25f/0x2d0 [ 182.054341][ T5738] Code: ff e8 d5 91 6a 02 31 db eb 0a e8 ec ae 7d ff bb ea ff ff ff 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d1 ae 7d ff <0f> 0b bb fb ff ff ff eb e1 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c ee [ 182.073942][ T5738] RSP: 0018:ffff8881cff57e50 EFLAGS: 00010287 [ 182.079837][ T5738] RAX: ffffffff81e68a2f RBX: dffffc0000000000 RCX: 0000000000040000 [ 182.087652][ T5738] RDX: ffffc90003fb5000 RSI: 0000000000000017 RDI: 0000000000000018 [ 182.095465][ T5738] RBP: 0000000000002000 R08: ffffffff81e6884b R09: ffffed1039feafc9 [ 182.103271][ T5738] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000002a002 [ 182.111088][ T5738] R13: 0000000004068002 R14: ffff8881d44d79b8 R15: ffff8881ed6bfc80 [ 182.118900][ T5738] FS: 00007f5483d3f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 182.127667][ T5738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.134081][ T5738] CR2: 00007f5484c690e0 CR3: 00000001e92d6000 CR4: 00000000003406b0 [ 182.141901][ T5738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.149704][ T5738] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.157515][ T5738] Call Trace: [ 182.160652][ T5738] ? __warn+0x162/0x250 [ 182.164639][ T5738] ? report_bug+0x3a1/0x4e0 [ 182.168978][ T5738] ? ovl_change_flags+0x25f/0x2d0 [ 182.173841][ T5738] ? ovl_change_flags+0x25f/0x2d0 [ 182.178701][ T5738] ? do_invalid_op+0x6e/0x110 [ 182.183215][ T5738] ? invalid_op+0x1e/0x30 [ 182.187380][ T5738] ? ovl_change_flags+0x7b/0x2d0 [ 182.192146][ T5738] ? ovl_change_flags+0x25f/0x2d0 [ 182.197015][ T5738] ? ovl_change_flags+0x25f/0x2d0 [ 182.201883][ T5738] ovl_fsync+0x29b/0x310 [ 182.205951][ T5738] ? ovl_release+0x40/0x40 [ 182.210206][ T5738] __x64_sys_fdatasync+0xb1/0x130 [ 182.215065][ T5738] do_syscall_64+0xca/0x1c0 [ 182.219407][ T5738] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 182.225134][ T5738] RIP: 0033:0x7f5484adeb99 [ 182.229384][ T5738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.248825][ T5738] RSP: 002b:00007f5483d3f048 EFLAGS: 00000246 ORIG_RAX: 000000000000004b [ 182.257129][ T5738] RAX: ffffffffffffffda RBX: 00007f5484c6d078 RCX: 00007f5484adeb99 [ 182.264972][ T5738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 182.272776][ T5738] RBP: 00007f5484b5f77e R08: 0000000000000000 R09: 0000000000000000 [ 182.280587][ T5738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.288402][ T5738] R13: 000000000000006e R14: 00007f5484c6d078 R15: 00007ffc6e2de5d8 [ 182.296223][ T5738] ---[ end trace ccc06a6f2398f296 ]--- [ 182.349833][ T24] plantronics 0003:047F:FFFF.0020: collection stack underflow [ 182.359161][ T24] plantronics 0003:047F:FFFF.0020: item 0 4 0 12 parsing failed [ 182.366989][ T24] plantronics 0003:047F:FFFF.0020: parse failed [ 182.374276][ T4564] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 182.409759][ T5739] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1549'. [ 182.418421][ T24] plantronics: probe of 0003:047F:FFFF.0020 failed with error -22 [ 182.437872][ T4564] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 182.472993][ T4564] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 182.743112][ T5722] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 182.769571][ T5722] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 182.798337][ T342] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 182.821274][ T342] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336: ffffffb9 [ 182.856658][ T342] asix: probe of 5-1:0.0 failed with error -71 [ 182.875122][ T5722] EXT4-fs (loop3): 1 truncate cleaned up [ 182.879258][ T342] usb 5-1: USB disconnect, device number 30 [ 182.901406][ T5722] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 182.928261][ T5722] ext4 filesystem being mounted at /root/syzkaller.rF1LZK/59/bus/file0 supports timestamps until 2038 (0x7fffffff) [ 183.105244][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.130098][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.152077][ T5746] device bridge_slave_0 entered promiscuous mode [ 183.181296][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.202815][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.224858][ T5746] device bridge_slave_1 entered promiscuous mode [ 183.246897][ T7] device bridge_slave_1 left promiscuous mode [ 183.254081][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.287008][ T7] device bridge_slave_0 left promiscuous mode [ 183.310730][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.796242][ T502] usb 1-1: USB disconnect, device number 32 [ 183.886719][ T5751] loop3: p1 p3 < p5 p6 > [ 183.903275][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.919345][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.937627][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.945919][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.954473][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.961420][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.968788][ T513] usbhid 3-1:0.0: can't add hid device: -71 [ 183.974558][ T513] usbhid: probe of 3-1:0.0 failed with error -71 [ 183.982190][ T513] usb 3-1: USB disconnect, device number 25 [ 183.988606][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.997415][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.005658][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.012519][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.035542][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.043513][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.058506][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.059341][ T5765] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 184.076164][ T5759] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 184.087106][ T5759] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 184.112442][ T5759] F2FS-fs (loop4): invalid crc value [ 184.118035][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.130407][ T5759] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.148301][ T23] audit: type=1400 audit(1719798364.570:542): avc: denied { append } for pid=5764 comm="syz.2.1565" path="/root/syzkaller.INkojR/15/file0/blkio.bfq.avg_queue_size" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 184.192514][ T5776] veth1_macvtap: mtu greater than device maximum [ 184.234573][ T5759] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 184.249506][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.261535][ T5759] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 184.268536][ T5759] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 184.289734][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.294044][ T3934] udevd[3934]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 184.296054][ T3936] udevd[3936]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 184.298002][ T5759] attempt to access beyond end of device [ 184.298002][ T5759] loop4: rw=10241, want=53256, limit=40427 [ 184.298703][ T418] udevd[418]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 184.300531][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300552][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300572][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300590][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300609][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300627][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300658][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300682][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300699][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300723][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300739][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300756][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300772][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300789][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300806][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300823][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300839][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300855][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300870][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300887][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300903][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300919][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300936][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300953][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.300969][ T502] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 184.301837][ T502] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 184.330111][ T3933] udevd[3933]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 184.332760][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.333100][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.341259][ T3934] udevd[3934]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 184.343106][ T3936] udevd[3936]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 184.344886][ T418] udevd[418]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 184.345273][ T3933] udevd[3933]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 184.348669][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.648187][ T502] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 184.650513][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.687638][ T5762] F2FS-fs (loop0): invalid crc value [ 184.726452][ T5785] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 184.743589][ T5785] ------------[ cut here ]------------ [ 184.749078][ T5785] WARNING: CPU: 1 PID: 5785 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 184.758260][ T5785] Modules linked in: [ 184.761997][ T5785] CPU: 1 PID: 5785 Comm: syz.3.1569 Tainted: G W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 184.773013][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 184.782922][ T5785] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 184.788379][ T5785] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 184.807821][ T5785] RSP: 0018:ffff8881e2c37a48 EFLAGS: 00010283 [ 184.811892][ T5762] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.813723][ T5785] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 184.827608][ T5785] RDX: ffffc90003db4000 RSI: 0000000000006f06 RDI: 0000000000006f07 [ 184.835423][ T5785] RBP: ffff8881d71a3550 R08: ffffffff81e5e076 R09: ffffed103d1db160 [ 184.843229][ T5785] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 184.851047][ T5785] R13: ffff8881e8ed8a58 R14: ffff8881e8ed8aa8 R15: ffff8881d71a3580 [ 184.858857][ T5785] FS: 00007f5483d606c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 184.867621][ T5785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.874039][ T5785] CR2: 00007ffe223871c8 CR3: 00000001ce4c4000 CR4: 00000000003406a0 [ 184.881854][ T5785] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.889663][ T5785] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.897465][ T5785] Call Trace: [ 184.900609][ T5785] ? __warn+0x162/0x250 [ 184.904592][ T5785] ? report_bug+0x3a1/0x4e0 [ 184.909017][ T5785] ? ovl_dir_modified+0x45c/0x570 [ 184.913878][ T5785] ? ovl_dir_modified+0x45c/0x570 [ 184.918740][ T5785] ? do_invalid_op+0x6e/0x110 [ 184.923254][ T5785] ? invalid_op+0x1e/0x30 [ 184.927420][ T5785] ? ovl_dir_modified+0x1e6/0x570 [ 184.932278][ T5785] ? ovl_dir_modified+0x45c/0x570 [ 184.937259][ T5785] ? ovl_dir_modified+0x45c/0x570 [ 184.942106][ T5785] ? ovl_dir_modified+0x45c/0x570 [ 184.947059][ T5785] ? ovl_path_type+0x18e/0x2f0 [ 184.951656][ T5785] ovl_do_remove+0x6f0/0xc80 [ 184.956085][ T5785] ? ovl_set_redirect+0x5f0/0x5f0 [ 184.960941][ T5785] ? security_inode_rmdir+0xca/0x110 [ 184.966061][ T5785] vfs_rmdir+0x285/0x3c0 [ 184.970150][ T5785] incfs_kill_sb+0x105/0x200 [ 184.974567][ T5785] deactivate_locked_super+0xa8/0x110 [ 184.979775][ T5785] vfs_get_tree+0x1b9/0x260 [ 184.984113][ T5785] do_new_mount+0x292/0x570 [ 184.988457][ T5785] ? do_move_mount_old+0x160/0x160 [ 184.993402][ T5785] ? security_capable+0x86/0xb0 [ 184.998086][ T5785] do_mount+0x688/0xe10 [ 185.002106][ T5785] ? copy_mount_string+0x30/0x30 [ 185.006952][ T5785] ? copy_mount_options+0x29a/0x300 [ 185.011974][ T5785] ksys_mount+0xc2/0xf0 [ 185.015967][ T5785] __x64_sys_mount+0xb1/0xc0 [ 185.020397][ T5785] do_syscall_64+0xca/0x1c0 [ 185.024734][ T5785] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 185.030458][ T5785] RIP: 0033:0x7f5484adeb99 [ 185.034736][ T5785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.054149][ T5785] RSP: 002b:00007f5483d60048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.062397][ T5785] RAX: ffffffffffffffda RBX: 00007f5484c6cfa0 RCX: 00007f5484adeb99 [ 185.070204][ T5785] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 185.078033][ T5785] RBP: 00007f5484b5f77e R08: 0000000020000dc0 R09: 0000000000000000 [ 185.085832][ T5785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.093644][ T5785] R13: 000000000000000b R14: 00007f5484c6cfa0 R15: 00007ffc6e2de5d8 [ 185.101547][ T5785] ---[ end trace ccc06a6f2398f297 ]--- [ 185.111328][ T5785] ------------[ cut here ]------------ [ 185.116625][ T5785] WARNING: CPU: 1 PID: 5785 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 185.125803][ T5785] Modules linked in: [ 185.129548][ T5785] CPU: 1 PID: 5785 Comm: syz.3.1569 Tainted: G W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 185.140563][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 185.150464][ T5785] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 185.155929][ T5785] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 185.175373][ T5785] RSP: 0018:ffff8881e2c37a48 EFLAGS: 00010287 [ 185.181269][ T5785] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 185.189082][ T5785] RDX: ffffc90003db4000 RSI: 0000000000025255 RDI: 0000000000025256 [ 185.196895][ T5785] RBP: ffff8881d71a3550 R08: ffffffff81e5e076 R09: ffffed103d1db160 [ 185.204705][ T5785] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 185.212515][ T5785] R13: ffff8881e8ed8a58 R14: ffff8881e8ed8aa8 R15: ffff8881d71a3580 [ 185.220329][ T5785] FS: 00007f5483d606c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 185.229284][ T5785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.235689][ T5785] CR2: 00007f5483d3fd58 CR3: 00000001ce4c4000 CR4: 00000000003406a0 [ 185.243506][ T5785] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.251320][ T5785] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.259126][ T5785] Call Trace: [ 185.262257][ T5785] ? __warn+0x162/0x250 [ 185.266344][ T5785] ? report_bug+0x3a1/0x4e0 [ 185.270680][ T5785] ? ovl_dir_modified+0x45c/0x570 [ 185.275550][ T5785] ? ovl_dir_modified+0x45c/0x570 [ 185.280399][ T5785] ? do_invalid_op+0x6e/0x110 [ 185.284915][ T5785] ? invalid_op+0x1e/0x30 [ 185.289167][ T5785] ? ovl_dir_modified+0x1e6/0x570 [ 185.294028][ T5785] ? ovl_dir_modified+0x45c/0x570 [ 185.298888][ T5785] ? ovl_dir_modified+0x45c/0x570 [ 185.303747][ T5785] ? ovl_dir_modified+0x45c/0x570 [ 185.308608][ T5785] ? ovl_path_type+0x18e/0x2f0 [ 185.313215][ T5785] ovl_do_remove+0x6f0/0xc80 [ 185.317646][ T5785] ? ovl_set_redirect+0x5f0/0x5f0 [ 185.322496][ T5785] ? security_inode_rmdir+0xca/0x110 [ 185.327617][ T5785] vfs_rmdir+0x285/0x3c0 [ 185.331698][ T5785] incfs_kill_sb+0x18d/0x200 [ 185.336120][ T5785] deactivate_locked_super+0xa8/0x110 [ 185.341329][ T5785] vfs_get_tree+0x1b9/0x260 [ 185.345673][ T5785] do_new_mount+0x292/0x570 [ 185.350011][ T5785] ? do_move_mount_old+0x160/0x160 [ 185.354957][ T5785] ? security_capable+0x86/0xb0 [ 185.359644][ T5785] do_mount+0x688/0xe10 [ 185.363636][ T5785] ? copy_mount_string+0x30/0x30 [ 185.368405][ T5785] ? copy_mount_options+0x29a/0x300 [ 185.373439][ T5785] ksys_mount+0xc2/0xf0 [ 185.377435][ T5785] __x64_sys_mount+0xb1/0xc0 [ 185.381862][ T5785] do_syscall_64+0xca/0x1c0 [ 185.386212][ T5785] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 185.391927][ T5785] RIP: 0033:0x7f5484adeb99 [ 185.396180][ T5785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.415615][ T5785] RSP: 002b:00007f5483d60048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.423866][ T5785] RAX: ffffffffffffffda RBX: 00007f5484c6cfa0 RCX: 00007f5484adeb99 [ 185.431673][ T5785] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 185.439581][ T5785] RBP: 00007f5484b5f77e R08: 0000000020000dc0 R09: 0000000000000000 [ 185.447395][ T5785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.455207][ T5785] R13: 000000000000000b R14: 00007f5484c6cfa0 R15: 00007ffc6e2de5d8 [ 185.463026][ T5785] ---[ end trace ccc06a6f2398f298 ]--- [ 185.650928][ T5762] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 185.653084][ T23] audit: type=1400 audit(1719798366.080:543): avc: denied { bind } for pid=5787 comm="syz.1.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.677574][ T5798] fuse: Bad value for 'fd' [ 185.686316][ T5762] attempt to access beyond end of device [ 185.686316][ T5762] loop0: rw=2049, want=77944, limit=40427 [ 185.703306][ T5327] attempt to access beyond end of device [ 185.703306][ T5327] loop0: rw=2049, want=45104, limit=40427 [ 185.838155][ T502] usb 5-1: Using ep0 maxpacket: 16 [ 185.978267][ T502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 186.018166][ T502] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 186.040199][ T5816] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 186.047308][ T502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.049117][ T5816] ext4 filesystem being mounted at /root/syzkaller.rF1LZK/66/file0 supports timestamps until 2038 (0x7fffffff) [ 186.058046][ T502] usb 5-1: config 0 descriptor?? [ 186.135818][ T5816] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 3: comm syz.3.1577: lblock 8 mapped to illegal pblock 3 (length 26) [ 186.202279][ T5808] loop1: p1 p3 < > [ 186.316561][ T3933] udevd[3933]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 186.324326][ T5827] FAT-fs (loop0): Directory bread(block 64) failed [ 186.327448][ T5759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 186.332944][ T5827] FAT-fs (loop0): Directory bread(block 65) failed [ 186.346526][ T5827] FAT-fs (loop0): Directory bread(block 66) failed [ 186.349482][ T5759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 186.353439][ T5827] FAT-fs (loop0): Directory bread(block 67) failed [ 186.366683][ T5827] FAT-fs (loop0): Directory bread(block 68) failed [ 186.378135][ T5804] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 186.385674][ T5804] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 186.396906][ T3936] udevd[3936]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 186.400093][ T5827] FAT-fs (loop0): Directory bread(block 69) failed [ 186.421492][ T5804] F2FS-fs (loop2): invalid crc value [ 186.428954][ T5804] F2FS-fs (loop2): invalid crc value [ 186.434758][ T23] audit: type=1400 audit(1719798366.860:544): avc: denied { mounton } for pid=5826 comm="syz.0.1580" path="/root/syzkaller.uFYMhY/17/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 186.435331][ T5828] devpts: called with bogus options [ 186.458793][ T5827] FAT-fs (loop0): Directory bread(block 70) failed [ 186.465747][ T5804] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 186.476070][ T5827] FAT-fs (loop0): Directory bread(block 71) failed [ 186.483257][ T502] usbhid 5-1:0.0: can't add hid device: -71 [ 186.483897][ T5827] FAT-fs (loop0): Directory bread(block 72) failed [ 186.489250][ T502] usbhid: probe of 5-1:0.0 failed with error -71 [ 186.496523][ T5827] FAT-fs (loop0): Directory bread(block 73) failed [ 186.503569][ T502] usb 5-1: USB disconnect, device number 31 [ 186.524164][ T5832] EXT4-fs (loop3): Ignoring removed orlov option [ 186.538307][ T5832] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 186.546824][ T23] audit: type=1400 audit(1719798366.970:545): avc: denied { map } for pid=5835 comm="syz.1.1579" path="socket:[49826]" dev="sockfs" ino=49826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 186.576112][ T23] audit: type=1400 audit(1719798367.000:546): avc: denied { accept } for pid=5835 comm="syz.1.1579" path="socket:[49826]" dev="sockfs" ino=49826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 186.601610][ T5832] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 186.749291][ T5832] EXT4-fs error (device loop3): ext4_generic_delete_entry:2620: inode #2: block 16: comm syz.3.1581: bad entry in directory: rec_len is too small for name_len - offset=44, inode=12, rec_len=16, size=1024 fake=0 [ 186.770241][ T5832] EXT4-fs error (device loop3) in ext4_delete_entry:2679: Corrupt filesystem [ 186.911246][ T4582] attempt to access beyond end of device [ 186.911246][ T4582] loop4: rw=2049, want=45112, limit=40427 [ 186.922104][ T5852] netlink: 'syz.2.1586': attribute type 48 has an invalid length. [ 186.931038][ T5852] netlink: 18314 bytes leftover after parsing attributes in process `syz.2.1586'. [ 186.940643][ T5850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5850 comm=syz.0.1584 [ 186.958764][ T5852] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 187.059018][ T5866] debugfs: Directory 'vcpu0' with parent '5866-5' already present! [ 187.362882][ T5886] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1587'. [ 187.408160][ T449] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 187.570542][ T5876] F2FS-fs (loop3): invalid crc value [ 187.577098][ T5876] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.609591][ T5876] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.658175][ T449] usb 1-1: Using ep0 maxpacket: 16 [ 187.696967][ T5886] F2FS-fs (loop4): invalid crc value [ 187.702307][ T5879] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 187.710469][ T5879] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 187.731660][ T5886] F2FS-fs (loop4): Found nat_bits in checkpoint [ 187.744177][ T5876] attempt to access beyond end of device [ 187.744177][ T5876] loop3: rw=2049, want=45104, limit=40427 [ 187.764945][ T5879] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.774922][ T4650] attempt to access beyond end of device [ 187.774922][ T4650] loop3: rw=2049, want=45112, limit=40427 [ 187.798354][ T449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.828454][ T449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.838030][ T449] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 187.875126][ T5879] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 187.877158][ T5886] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 187.890201][ T449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.913442][ T5879] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 187.914863][ T449] usb 1-1: config 0 descriptor?? [ 187.928357][ T5879] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.938337][ T5886] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.201392][ T5903] F2FS-fs (loop1): invalid crc value [ 188.229371][ T5903] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.337966][ T5903] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.364448][ T5911] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 188.375556][ T23] audit: type=1400 audit(1719798368.800:547): avc: denied { create } for pid=5902 comm="syz.1.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.409869][ T449] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 188.416659][ T449] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 188.423834][ T449] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 188.424006][ T5911] EXT4-fs (loop3): 1 truncate cleaned up [ 188.438205][ T449] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 188.445126][ T449] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 188.448600][ T5911] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,max_dir_size_kb=0x0000000000000003,,errors=continue [ 188.477731][ T449] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 188.537383][ T5918] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 188.579296][ T5918] attempt to access beyond end of device [ 188.579296][ T5918] loop2: rw=0, want=48, limit=16 [ 188.624689][ T23] audit: type=1326 audit(1719798369.030:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.1.1600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1271fab99 code=0x0 [ 188.658276][ T449] cp2112 0003:10C4:EA90.0022: Part Number: 0x00 Device Version: 0x00 [ 188.907379][ T5929] futex_wake_op: syz.2.1605 tries to shift op by 144; fix this program [ 188.946761][ T449] cp2112 0003:10C4:EA90.0022: error requesting SMBus config [ 188.954684][ T5746] attempt to access beyond end of device [ 188.954684][ T5746] loop1: rw=2049, want=45104, limit=40427 [ 188.967144][ T449] cp2112: probe of 0003:10C4:EA90.0022 failed with error -71 [ 188.976047][ T449] usb 1-1: USB disconnect, device number 33 [ 189.298259][ T4582] attempt to access beyond end of device [ 189.298259][ T4582] loop4: rw=2049, want=45104, limit=40427 [ 189.493407][ T5951] netlink: 'syz.0.1613': attribute type 4 has an invalid length. [ 189.523916][ T23] audit: type=1400 audit(1719798369.950:549): avc: denied { mount } for pid=5950 comm="syz.0.1613" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 189.526166][ T5951] overlayfs: missing 'lowerdir' [ 189.571177][ T23] audit: type=1400 audit(1719798369.950:550): avc: denied { remount } for pid=5950 comm="syz.0.1613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 189.728483][ T23] audit: type=1400 audit(1719798370.160:551): avc: denied { unmount } for pid=5327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 189.757020][ T5961] overlayfs: unrecognized mount option "async" or missing value [ 189.969979][ T5984] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1623'. [ 189.990429][ T5986] xt_hashlimit: max too large, truncated to 1048576 [ 189.996305][ T5984] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 190.148362][ T5984] fuse: Bad value for 'fd' [ 190.216348][ T5996] futex_wake_op: syz.4.1626 tries to shift op by 144; fix this program [ 190.228186][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 190.329354][ T23] audit: type=1400 audit(1719798370.760:552): avc: denied { connect } for pid=6001 comm="syz.1.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.403221][ T5991] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 190.421537][ T5991] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 190.435404][ T5991] F2FS-fs (loop2): invalid crc value [ 190.442221][ T5991] F2FS-fs (loop2): Found nat_bits in checkpoint [ 190.468590][ T342] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 190.480561][ T5991] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 190.487423][ T5991] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 190.518814][ T5991] overlayfs: statfs failed on './file0' [ 190.525903][ T5991] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 190.534671][ T5991] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.550615][ T5293] F2FS-fs (loop2): access invalid blkaddr:2048 [ 190.557430][ T5293] CPU: 0 PID: 5293 Comm: syz-executor Tainted: G W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 190.568592][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 190.578484][ T5293] Call Trace: [ 190.581617][ T5293] dump_stack+0x1d8/0x241 [ 190.585779][ T5293] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 190.591422][ T5293] ? f2fs_lookup_extent_cache+0x16b/0xc30 [ 190.596977][ T5293] f2fs_is_valid_blkaddr+0xc79/0x1380 [ 190.598318][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.602191][ T5293] f2fs_map_blocks+0xbe7/0x2a30 [ 190.602212][ T5293] ? f2fs_force_buffered_io+0x4e0/0x4e0 [ 190.613167][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 190.617736][ T5293] ? bio_add_page+0x2b3/0x450 [ 190.617755][ T5293] f2fs_mpage_readpages+0x1206/0x2730 [ 190.642568][ T5293] ? f2fs_update_iostat+0x240/0x240 [ 190.647592][ T5293] ? should_fail+0x1ad/0x880 [ 190.652016][ T5293] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 190.658002][ T5293] ? f2fs_read_data_pages+0xc3/0x2a0 [ 190.663218][ T5293] ? f2fs_set_data_page_dirty+0x740/0x740 [ 190.668874][ T5293] read_pages+0x119/0x400 [ 190.673127][ T5293] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 190.678857][ T5293] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 190.684061][ T5293] ? filename_lookup+0x50e/0x6e0 [ 190.688856][ T5293] __do_page_cache_readahead+0x448/0x4f0 [ 190.694302][ T5293] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 190.700642][ T5293] f2fs_readdir+0x417/0xaf0 [ 190.704980][ T5293] ? f2fs_fill_dentries+0xe10/0xe10 [ 190.710012][ T5293] ? down_read_killable+0x101/0x220 [ 190.715041][ T5293] ? __fsnotify_parent+0x310/0x310 [ 190.719993][ T5293] ? security_file_permission+0x1dc/0x2f0 [ 190.725548][ T5293] iterate_dir+0x266/0x4e0 [ 190.729804][ T5293] ? f2fs_fill_dentries+0xe10/0xe10 [ 190.734833][ T5293] ksys_getdents64+0x21b/0x4c0 [ 190.739436][ T5293] ? __ia32_sys_getdents+0x80/0x80 [ 190.744377][ T5293] ? ksys_getdents64+0x4c0/0x4c0 [ 190.749156][ T5293] ? __do_page_fault+0x725/0xbb0 [ 190.753928][ T5293] __x64_sys_getdents64+0x76/0x80 [ 190.758786][ T5293] do_syscall_64+0xca/0x1c0 [ 190.763137][ T5293] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 190.768856][ T5293] RIP: 0033:0x7f034cb8cc33 [ 190.773193][ T5293] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 02 45 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 190.792720][ T5293] RSP: 002b:00007ffe223850a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 190.800966][ T5293] RAX: ffffffffffffffda RBX: 00005555558bb4e0 RCX: 00007f034cb8cc33 [ 190.808774][ T5293] RDX: 0000000000008000 RSI: 00005555558bb4e0 RDI: 0000000000000005 [ 190.816585][ T5293] RBP: 00005555558bb4b4 R08: 0000000000000000 R09: 0000000000000000 [ 190.824398][ T5293] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 190.832210][ T5293] R13: 0000000000000010 R14: 00005555558bb4b0 R15: 00007ffe22387380 [ 190.841015][ T5293] attempt to access beyond end of device [ 190.841015][ T5293] loop2: rw=524288, want=45072, limit=40427 [ 190.852465][ T5293] attempt to access beyond end of device [ 190.852465][ T5293] loop2: rw=0, want=45072, limit=40427 [ 190.908208][ T695] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 190.944638][ T5293] attempt to access beyond end of device [ 190.944638][ T5293] loop2: rw=2049, want=45128, limit=40427 [ 190.981484][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.000141][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.008414][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.019957][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.029864][ T24] usb 4-1: Product: syz [ 191.034003][ T24] usb 4-1: Manufacturer: syz [ 191.038568][ T342] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 191.047469][ T24] usb 4-1: SerialNumber: syz [ 191.052420][ T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.062972][ T342] usb 1-1: config 0 descriptor?? [ 191.158177][ T695] usb 2-1: Using ep0 maxpacket: 16 [ 191.175467][ T6019] xt_hashlimit: max too large, truncated to 1048576 [ 191.209129][ T6021] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1637'. [ 191.278903][ T695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.300536][ T695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.311349][ T695] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 191.320759][ T695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.329793][ T695] usb 2-1: config 0 descriptor?? [ 191.354569][ T5978] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 191.398363][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.405244][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.412954][ T6026] device bridge_slave_0 entered promiscuous mode [ 191.419866][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.426684][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.434133][ T6026] device bridge_slave_1 entered promiscuous mode [ 191.491311][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.498197][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.505274][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.508148][ T513] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 191.512079][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.520305][ T5995] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.539672][ T342] holtek 0003:1241:5015.0023: unknown main item tag 0x0 [ 191.551729][ T342] holtek 0003:1241:5015.0023: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 191.560136][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.562967][ T342] holtek 0003:1241:5015.0023: no inputs found [ 191.575863][ T502] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.583664][ T502] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.609257][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.617232][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.624077][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.632366][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.640442][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.647264][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.654683][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.662531][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.678246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.690914][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.706156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.721799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.730860][ T179] device bridge_slave_1 left promiscuous mode [ 191.736810][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.744419][ T179] device bridge_slave_0 left promiscuous mode [ 191.750595][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.753393][ T449] usb 1-1: USB disconnect, device number 34 [ 191.819642][ T695] logitech 0003:046D:C29C.0024: unknown main item tag 0x0 [ 191.827706][ T695] logitech 0003:046D:C29C.0024: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 191.865378][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.909333][ T513] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.919871][ T513] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.926684][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 191.929026][ T513] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.946819][ T513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.955750][ T513] usb 5-1: config 0 descriptor?? [ 192.008553][ T5978] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 192.108205][ T695] logitech 0003:046D:C29C.0024: no inputs found [ 192.118681][ T695] usb 2-1: USB disconnect, device number 33 [ 192.228171][ T830] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 192.248327][ T24] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 192.254670][ T24] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 192.261959][ T24] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 192.317785][ T6044] debugfs: Directory 'vcpu0' with parent '6043-7' already present! [ 192.391701][ T6051] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 192.462492][ T24] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 192.471496][ T24] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 192.484224][ T24] usb 4-1: USB disconnect, device number 29 [ 192.490157][ T24] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 192.498514][ T23] audit: type=1400 audit(1719798372.930:553): avc: denied { read } for pid=201 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 192.508167][ T830] usb 3-1: Using ep0 maxpacket: 8 [ 192.668554][ T830] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 192.898247][ T830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 192.909424][ T830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.919210][ T830] usb 3-1: Product: syz [ 192.919837][ T695] usb 5-1: USB disconnect, device number 32 [ 192.923239][ T830] usb 3-1: Manufacturer: syz [ 192.939599][ T830] usb 3-1: SerialNumber: syz [ 193.198987][ T6090] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 193.265191][ T6090] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 193.313218][ T6090] F2FS-fs (loop4): Found nat_bits in checkpoint [ 193.382515][ T6090] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 193.389716][ T6090] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 193.422601][ T6107] 9pnet: Insufficient options for proto=fd [ 193.467918][ T6038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.485039][ T6107] EXT4-fs (loop0): Ignoring removed orlov option [ 193.506744][ T6107] EXT4-fs (loop0): Ignoring removed orlov option [ 193.537015][ T6107] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,orlov,init_itable,journal_dev=0x00000000000000e1,dioread_nolock,orlov,,errors=continue [ 193.601721][ T23] audit: type=1400 audit(1719798374.030:554): avc: denied { unlink } for pid=6037 comm="syz.2.1643" name="file0" dev="sda1" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 193.620280][ T502] usb 3-1: USB disconnect, device number 26 [ 193.794614][ T6112] EXT4-fs (loop1): orphan cleanup on readonly fs [ 193.808514][ T6112] EXT4-fs error (device loop1): ext4_quota_enable:6052: comm syz.1.1655: Bad quota inum: 11, type: 1 [ 193.849021][ T6112] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 193.888279][ T6112] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 193.894914][ T6112] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 194.102478][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.110205][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.117906][ T6121] device bridge_slave_0 entered promiscuous mode [ 194.132181][ T6118] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 194.141730][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.156156][ T6096] F2FS-fs (loop3): invalid crc value [ 194.166466][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.174367][ T6118] EXT4-fs error (device loop0): ext4_read_inode_bitmap:134: comm syz.0.1658: Invalid inode bitmap blk 7016996765293437281 in block_group 0 [ 194.182948][ T6121] device bridge_slave_1 entered promiscuous mode [ 194.216684][ T6118] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 16: comm syz.0.1658: lblock 0 mapped to illegal pblock 16 (length 1) [ 194.263205][ T6096] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 194.318282][ T502] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 194.367928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.380636][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.400028][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.408718][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.420716][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.427578][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.441085][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.449813][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.457986][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.464860][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.489094][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.512329][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.531619][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.540079][ T179] device bridge_slave_1 left promiscuous mode [ 194.546100][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.553560][ T179] device bridge_slave_0 left promiscuous mode [ 194.559869][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.588172][ T502] usb 2-1: Using ep0 maxpacket: 16 [ 194.625660][ T6118] EXT4-fs error (device loop0): ext4_search_dir:1509: inode #2: block 16: comm syz.0.1658: bad entry in directory: inode out of bounds - offset=44, inode=12, rec_len=16, size=1024 fake=0 [ 194.625698][ T6136] loop2: p1 < > p2 < > p3 < > [ 194.648944][ T371] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 194.660377][ T6136] loop2: partition table partially beyond EOD, truncated [ 194.665991][ T5327] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.uFYMhY/36/file1: bad entry in directory: inode out of bounds - offset=24, inode=11, rec_len=20, size=1024 fake=0 [ 194.689058][ T6136] loop2: p1 start 4177526784 is beyond EOD, truncated [ 194.698005][ T6136] loop2: p2 start 131072 is beyond EOD, truncated [ 194.700162][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.713377][ T5327] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6099: Out of memory [ 194.713625][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.745875][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.764797][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.772898][ T502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 194.784175][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.792917][ T502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 194.803755][ T502] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 194.812903][ T502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.822901][ T502] usb 2-1: config 0 descriptor?? [ 194.919308][ T3933] udevd[3933]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 194.928997][ T371] usb 4-1: Using ep0 maxpacket: 8 [ 195.054849][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.063731][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.078775][ T6145] device bridge_slave_0 entered promiscuous mode [ 195.082590][ T6122] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 195.093668][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.100817][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.108596][ T6145] device bridge_slave_1 entered promiscuous mode [ 195.128193][ T371] usb 4-1: config index 0 descriptor too short (expected 1033, got 27) [ 195.137148][ T6140] F2FS-fs (loop4): Unrecognized mount option "inline_xttr" or missing value [ 195.153567][ T371] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 195.163577][ T371] usb 4-1: config 0 has no interfaces? [ 195.197815][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.204684][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.211840][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.218675][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.229462][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.236679][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.243726][ T695] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 195.270153][ T6140] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 195.283377][ T6140] ext4 filesystem being mounted at /root/syzkaller.JsbQQu/0/file0 supports timestamps until 2038 (0x7fffffff) [ 195.293079][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.303027][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.303174][ T6122] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 195.319350][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.331187][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.339424][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.346268][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.351186][ T6122] EXT4-fs (loop1): Mount option "nojournal_checksum" incompatible with ext3 [ 195.354030][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.368220][ T371] usb 4-1: New USB device found, idVendor=6025, idProduct=a4a6, bcdDevice= 0.40 [ 195.370231][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.384067][ T371] usb 4-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 195.389581][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.401135][ T371] usb 4-1: Product: syz [ 195.401142][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.412475][ T371] usb 4-1: Manufacturer: 㺂쵙럼丄緼Ἡ뙀ﱹ遦ﱮ篹꿠챉憕鐘灠Ⱐ垄뻴뀍炼ᆰᡚ儰輸휂쨛᠛쾩⹂⡯솅둽릌 [ 195.412773][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.426353][ T371] usb 4-1: SerialNumber: ᦉ쀏텈ﳤ辎滵몄ꏠ궐Ɬ쿶␷唙嵠⟂숿箧ﴎ㩺ܢᱏ绲벡꿄糧牥施꼩鞻ῦ໊嶀㍠驳ꥄ钽醲햶䣨䒚꺂仩赯㙻倸ⱜ坶粽⸊悟ఒ뭺ꮨ貶쟏濪䋱䌲ɹ秈꠾ꟼܖ煬屮貄㹱㴣뷐䥨꺐ퟻΝ닭苵맳㌁ײ놄暮ꨭ醩蘱᡿䌓ퟲゑ [ 195.435346][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.472780][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.480987][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.488724][ T371] usb 4-1: config 0 descriptor?? [ 195.508213][ T695] usb 3-1: Using ep0 maxpacket: 8 [ 195.508390][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.523164][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.531421][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.539315][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.546998][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.555047][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.571993][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.580565][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.590643][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.601097][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.628233][ T695] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 195.637255][ T695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.646219][ T695] usb 3-1: config 0 descriptor?? [ 195.681314][ T6122] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 195.693669][ T6122] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 511999 of nid 36 [ 195.703982][ T6122] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 195.719202][ T502] hid (null): bogus close delimiter [ 195.731494][ T502] hid-generic 0003:0158:0100.0025: unknown main item tag 0x0 [ 195.738814][ T502] hid-generic 0003:0158:0100.0025: unknown main item tag 0x0 [ 195.746009][ T502] hid-generic 0003:0158:0100.0025: bogus close delimiter [ 195.753519][ T502] hid-generic 0003:0158:0100.0025: item 0 0 2 10 parsing failed [ 195.761834][ T502] hid-generic: probe of 0003:0158:0100.0025 failed with error -22 [ 195.770733][ T371] usb 4-1: USB disconnect, device number 30 [ 195.930177][ T13] usb 2-1: USB disconnect, device number 34 [ 195.990517][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 196.063121][ T6182] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 196.072440][ T502] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 196.264129][ T6185] FAT-fs (loop0): bogus sectors per cluster 0 [ 196.270297][ T6185] FAT-fs (loop0): Can't find a valid FAT filesystem [ 196.328227][ T502] usb 5-1: Using ep0 maxpacket: 16 [ 196.448256][ T502] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.465662][ T502] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.475660][ T502] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.488875][ T502] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.495366][ T502] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 196.504742][ T502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.526102][ T502] usb 5-1: config 0 descriptor?? [ 196.599352][ T6189] tipc: Enabling not permitted [ 196.604775][ T6189] tipc: Enabling of bearer rejected, failed to enable media [ 196.719716][ T6201] FAT-fs (loop0): Unrecognized mount option "errors=b~ntin" or missing value [ 196.765973][ T6205] fuse: Bad value for 'fd' [ 196.828002][ T6191] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 196.841965][ T6191] ext4 filesystem being mounted at /root/syzkaller.RYzN2j/18/bus supports timestamps until 2038 (0x7fffffff) [ 197.088269][ T449] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 197.139061][ T7] device bridge_slave_1 left promiscuous mode [ 197.146100][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.169087][ T7] device bridge_slave_0 left promiscuous mode [ 197.187465][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.248382][ T695] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 197.274061][ T695] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 197.314936][ T695] asix: probe of 3-1:0.0 failed with error -71 [ 197.341506][ T695] usb 3-1: USB disconnect, device number 27 [ 197.478246][ T449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.504258][ T449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.539002][ T449] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 197.557706][ T449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.575269][ T449] usb 4-1: config 0 descriptor?? [ 197.619004][ T449] usbhid 4-1:0.0: can't add hid device: -22 [ 197.624830][ T449] usbhid: probe of 4-1:0.0 failed with error -22 [ 197.652867][ T6219] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 197.666846][ T6219] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.676981][ T6219] F2FS-fs (loop0): invalid crc value [ 197.685503][ T6219] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.726518][ T6219] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 197.733491][ T6219] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.829396][ T449] usb 4-1: USB disconnect, device number 31 [ 197.879269][ T6238] FAT-fs (loop2): Unrecognized mount option "sh2="" or missing value [ 197.888203][ T6238] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1687'. [ 198.002395][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'. [ 198.037476][ T13] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 198.175125][ T6244] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 198.194887][ T6244] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e118, mo2=0000] [ 198.203545][ T6244] System zones: 0-1, 3-12 [ 198.209622][ T6244] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:455: comm syz.2.1688: Invalid block bitmap block 0 in block_group 0 [ 198.223564][ T6244] Quota error (device loop2): write_blk: dquota write failed [ 198.230861][ T6244] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 198.241233][ T6244] EXT4-fs error (device loop2): ext4_free_blocks:4799: comm syz.2.1688: Freeing blocks not in datazone - block = 0, count = 4096 [ 198.255718][ T6244] EXT4-fs error (device loop2): ext4_read_inode_bitmap:134: comm syz.2.1688: Invalid inode bitmap blk 0 in block_group 0 [ 198.268392][ T7] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 198.268399][ T6244] EXT4-fs error (device loop2) in ext4_free_inode:352: Corrupt filesystem [ 198.268487][ T6244] EXT4-fs (loop2): 1 orphan inode deleted [ 198.290741][ T6244] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; sysvgroups,debug,auto_da_alloc,jqfmt=vfsv0,journal_dev=0x0000000000000004,norecovery,max_dir_size_kb=0x0000000000000000,max_dir_size_kb=0x0000000000000009,,errors=continue [ 198.316142][ T6244] EXT4-fs error (device loop2): ext4_lookup:1814: inode #15: comm syz.2.1688: iget: bad extra_isize 65535 (inode size 256) [ 198.458320][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.472659][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 198.502656][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.516410][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.526172][ T13] usb 2-1: config 0 descriptor?? [ 198.582287][ T13] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 198.592205][ T23] audit: type=1400 audit(1719798379.020:555): avc: denied { read } for pid=6266 comm="syz.0.1689" name="file0" dev="sda1" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 198.707206][ T6248] F2FS-fs (loop3): invalid crc_offset: 16 [ 198.722266][ T6248] F2FS-fs (loop3): Found nat_bits in checkpoint [ 198.973971][ T6248] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 198.979616][ T13] usb 2-1: USB disconnect, device number 35 [ 198.994028][ T6277] attempt to access beyond end of device [ 198.994028][ T6277] loop3: rw=2049, want=45104, limit=40427 [ 199.038219][ T502] usbhid 5-1:0.0: can't add hid device: -71 [ 199.040795][ T6291] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 199.044210][ T502] usbhid: probe of 5-1:0.0 failed with error -71 [ 199.060428][ T502] usb 5-1: USB disconnect, device number 33 [ 199.337451][ T23] audit: type=1400 audit(1719798379.760:556): avc: denied { remount } for pid=6297 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 199.589916][ T6311] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 199.626367][ T6310] erofs: (device loop3): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 199.635789][ T6311] erofs: (device loop3): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 199.645267][ T6309] erofs: (device loop3): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 199.659085][ T6313] device syzkaller0 entered promiscuous mode [ 199.803635][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.810781][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.818225][ T6324] device bridge_slave_0 entered promiscuous mode [ 199.825144][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.832055][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.839672][ T6324] device bridge_slave_1 entered promiscuous mode [ 199.878143][ T371] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 199.904358][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.911306][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.918624][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.925445][ T6324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.952617][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.962355][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.970005][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.981570][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.989772][ T695] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.996600][ T695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.008266][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.008533][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 200.016503][ T695] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.030310][ T695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.054604][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.062674][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.076107][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.089430][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.104912][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.121502][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.132015][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.209074][ T7] device bridge_slave_1 left promiscuous mode [ 200.215117][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.222429][ T7] device bridge_slave_0 left promiscuous mode [ 200.228516][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.258302][ T371] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.268267][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 200.275841][ T371] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.358835][ T371] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.367916][ T371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.375718][ T371] usb 3-1: SerialNumber: syz [ 200.388228][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.428656][ T23] audit: type=1400 audit(1719798380.860:557): avc: denied { create } for pid=6335 comm="syz.4.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 200.493187][ T6338] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 200.501336][ T6338] EXT4-fs (loop4): write access will be enabled during recovery [ 200.527777][ T6338] EXT4-fs (loop4): barriers disabled [ 200.534104][ T6338] JBD2: no valid journal superblock found [ 200.540152][ T6338] EXT4-fs (loop4): error loading journal [ 200.578227][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.587137][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.595176][ T24] usb 4-1: Product: syz [ 200.599205][ T24] usb 4-1: Manufacturer: syz [ 200.603576][ T24] usb 4-1: SerialNumber: syz [ 200.649775][ T371] usb 3-1: 0:2 : does not exist [ 200.666086][ T371] usb 3-1: USB disconnect, device number 28 [ 200.687196][ T3933] udevd[3933]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 200.789791][ T6348] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 200.868563][ T6359] 9pnet: Could not find request transport: rdma [ 201.069542][ T6322] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 201.202618][ T24] usb 4-1: USB disconnect, device number 32 [ 201.218183][ T13] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 201.428200][ T371] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 201.658275][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 201.658283][ T449] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 201.676238][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 201.788261][ T371] usb 3-1: config 1 interface 0 altsetting 224 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.799599][ T371] usb 3-1: config 1 interface 0 has no altsetting 0 [ 201.958290][ T371] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.968143][ T371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.976171][ T371] usb 3-1: Product: syz [ 201.981482][ T371] usb 3-1: Manufacturer: syz [ 201.985971][ T371] usb 3-1: SerialNumber: syz [ 202.030746][ T371] cdc_ncm 3-1:1.1: bind() failure [ 202.038204][ T449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.050128][ T449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.059721][ T449] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 202.068538][ T449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.081202][ T449] usb 1-1: config 0 descriptor?? [ 202.138638][ T6370] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 202.148073][ T6370] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 202.158864][ T6370] F2FS-fs (loop3): invalid crc value [ 202.165449][ T6370] F2FS-fs (loop3): Found nat_bits in checkpoint [ 202.197945][ T6370] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 202.205085][ T6370] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 202.451994][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 202.624252][ T6394] /dev/loop0: Can't open blockdev [ 202.678177][ T449] usbhid 1-1:0.0: can't add hid device: -71 [ 202.684040][ T449] usbhid: probe of 1-1:0.0 failed with error -71 [ 202.699406][ T449] usb 1-1: USB disconnect, device number 35 [ 202.911589][ T6396] F2FS-fs (loop0): invalid crc value [ 202.938362][ T6396] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.944956][ T6391] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 202.960819][ T6391] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 202.972717][ T6391] F2FS-fs (loop2): invalid crc value [ 202.977949][ T6391] F2FS-fs (loop2): invalid crc value [ 202.986030][ T6391] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 202.989829][ T6396] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 203.278148][ T121] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 203.444886][ T6417] loop3: p3 p4[EZD] [ 203.448838][ T6417] loop3: p3 start 458783 is beyond EOD, truncated [ 203.455155][ T6417] loop3: p4 start 16779520 is beyond EOD, truncated [ 203.475190][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 203.481411][ T6420] binder: 6416:6420 ioctl 40046207 0 returned -16 [ 203.518217][ T121] usb 1-1: Using ep0 maxpacket: 32 [ 203.638281][ T121] usb 1-1: config 0 has an invalid interface number: 197 but max is 2 [ 203.646342][ T121] usb 1-1: config 0 has an invalid interface number: 3 but max is 2 [ 203.654130][ T121] usb 1-1: config 0 has no interface number 1 [ 203.660041][ T121] usb 1-1: config 0 has no interface number 2 [ 203.818142][ T830] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 203.818240][ T121] usb 1-1: New USB device found, idVendor=2304, idProduct=0248, bcdDevice=6b.af [ 203.834502][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.842313][ T121] usb 1-1: Product: syz [ 203.846393][ T121] usb 1-1: Manufacturer: syz [ 203.850850][ T121] usb 1-1: SerialNumber: syz [ 203.856073][ T121] usb 1-1: config 0 descriptor?? [ 203.908237][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 203.917298][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.925694][ T13] usb 5-1: Product: ࠾ [ 203.930290][ T13] usb 5-1: Manufacturer: 罒싡铌㐊묁砵뱈흄혯鞏樢方퍾܀廔 [ 203.958192][ T13] usb 5-1: can't set config #1, error -71 [ 203.985586][ T13] usb 5-1: USB disconnect, device number 34 [ 204.108134][ T830] usb 4-1: device descriptor read/64, error 18 [ 204.120760][ T502] usb 1-1: USB disconnect, device number 36 [ 204.211773][ T6434] F2FS-fs (loop4): invalid crc value [ 204.219370][ T6434] F2FS-fs (loop4): Found nat_bits in checkpoint [ 204.254780][ T6434] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 204.279135][ T23] audit: type=1400 audit(1719798384.710:558): avc: denied { execute } for pid=6433 comm="syz.4.1733" path="/root/syzkaller.JsbQQu/16/file1/bus" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 204.303485][ T121] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 204.314093][ T449] usb 3-1: USB disconnect, device number 29 [ 204.322553][ T6121] attempt to access beyond end of device [ 204.322553][ T6121] loop4: rw=2049, want=45112, limit=40427 [ 204.508169][ T830] usb 4-1: device descriptor read/64, error 18 [ 204.540721][ T6446] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 204.549791][ T6446] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 204.560381][ T6446] F2FS-fs (loop2): invalid crc value [ 204.567049][ T6446] F2FS-fs (loop2): Found nat_bits in checkpoint [ 204.613866][ T6446] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 204.620747][ T6446] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 204.658319][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.678128][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.699687][ T121] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 204.712660][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.729592][ T121] usb 2-1: config 0 descriptor?? [ 204.788193][ T830] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 204.845434][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 204.990639][ T6145] attempt to access beyond end of device [ 204.990639][ T6145] loop0: rw=2049, want=45104, limit=40427 [ 205.138246][ T830] usb 4-1: device descriptor read/64, error 18 [ 205.282327][ T6469] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 205.300368][ T6469] netlink: 'syz.0.1743': attribute type 12 has an invalid length. [ 205.308819][ T23] audit: type=1400 audit(1719798385.740:559): avc: denied { nlmsg_write } for pid=6468 comm="syz.0.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 205.309209][ T6469] devpts: called with bogus options [ 205.353478][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.361690][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.369962][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.378020][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.391119][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.399392][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.407393][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.415989][ T6439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 205.423822][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.432702][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.441264][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.450939][ T121] logitech-djreceiver 0003:046D:C71B.0026: unknown main item tag 0x2 [ 205.452915][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.458878][ T121] logitech-djreceiver 0003:046D:C71B.0026: unknown main item tag 0x6 [ 205.467102][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.474986][ T121] logitech-djreceiver 0003:046D:C71B.0026: item fetching failed at offset 5/7 [ 205.483743][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.491661][ T121] logitech-djreceiver 0003:046D:C71B.0026: logi_dj_probe: parse failed [ 205.499263][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.507482][ T121] logitech-djreceiver: probe of 0003:046D:C71B.0026 failed with error -22 [ 205.525453][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.533672][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.541861][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.550033][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.558010][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.558268][ T830] usb 4-1: device descriptor read/64, error 18 [ 205.566763][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.572892][ T23] audit: type=1400 audit(1719798386.000:560): avc: denied { search } for pid=144 comm="syslogd" name="/" dev="tmpfs" ino=9285 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.580124][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.614225][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.622806][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.631446][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.639923][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.648716][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.661728][ T121] usb 2-1: USB disconnect, device number 36 [ 205.673092][ T6479] EXT4-fs (loop4): 1 orphan inode deleted [ 205.679305][ T6479] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,usrjquota=,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 205.698037][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.706536][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.714872][ T6479] ext4 filesystem being mounted at /root/syzkaller.JsbQQu/24/file1 supports timestamps until 2038 (0x7fffffff) [ 205.726700][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.738256][ T830] usb usb4-port1: attempt power cycle [ 205.740896][ T6479] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #3: block 9: comm syz.4.1747: lblock 0 mapped to illegal pblock 9 (length 1) [ 205.757766][ T6479] EXT4-fs (loop4): Remounting filesystem read-only [ 205.757922][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.764759][ T6479] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 205.782888][ T6479] ------------[ cut here ]------------ [ 205.788154][ T6479] kernel BUG at fs/ext4/ext4.h:2984! [ 205.793677][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 205.793818][ T6479] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 205.807544][ T6479] CPU: 0 PID: 6479 Comm: syz.4.1747 Tainted: G W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 205.818641][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 205.828555][ T6479] RIP: 0010:ext4_mb_find_by_goal+0xba1/0xbe0 [ 205.834358][ T6479] Code: fc ff ff 48 8b 4c 24 28 80 e1 07 80 c1 03 38 c1 0f 8c 22 fc ff ff 48 8b 7c 24 28 e8 89 74 c8 ff e9 13 fc ff ff e8 6f 8f 98 ff <0f> 0b e8 b8 44 6f ff e8 63 8f 98 ff 0f 0b e8 5c 8f 98 ff 0f 0b e8 [ 205.853794][ T6479] RSP: 0018:ffff8881ea02f400 EFLAGS: 00010283 [ 205.859695][ T6479] RAX: ffffffff81cba991 RBX: 0000000000000001 RCX: 0000000000040000 [ 205.867768][ T6479] RDX: ffffc900047b9000 RSI: 0000000000020af6 RDI: 0000000000020af7 [ 205.875581][ T6479] RBP: ffff8881ea02f510 R08: ffffffff81cb9f11 R09: ffffed103a30200b [ 205.883391][ T6479] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 205.891199][ T6479] R13: ffff8881e88ca3f0 R14: 0000000000000001 R15: 1ffff1103d11947e [ 205.899051][ T6479] FS: 00007ff281f716c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 205.907787][ T6479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.914199][ T6479] CR2: 000000002004007f CR3: 00000001e5c7c000 CR4: 00000000003406b0 [ 205.922013][ T6479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.929828][ T6479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.937635][ T6479] Call Trace: [ 205.940778][ T6479] ? __die+0xb4/0x100 [ 205.944607][ T6479] ? die+0x26/0x50 [ 205.948158][ T6479] ? do_trap+0x1e7/0x340 [ 205.952226][ T6479] ? ext4_mb_find_by_goal+0xba1/0xbe0 [ 205.957431][ T6479] ? ext4_mb_find_by_goal+0xba1/0xbe0 [ 205.962640][ T6479] ? do_invalid_op+0xfb/0x110 [ 205.967148][ T6479] ? ext4_mb_find_by_goal+0xba1/0xbe0 [ 205.972365][ T6479] ? invalid_op+0x1e/0x30 [ 205.976528][ T6479] ? ext4_mb_find_by_goal+0x121/0xbe0 [ 205.981730][ T6479] ? ext4_mb_find_by_goal+0xba1/0xbe0 [ 205.986937][ T6479] ? ext4_mb_find_by_goal+0xba1/0xbe0 [ 205.992355][ T6479] ? kmem_cache_alloc+0xd9/0x250 [ 205.997125][ T6479] ? ext4_mb_new_blocks+0x29f/0x2d10 [ 206.002246][ T6479] ? ext4_alloc_file_blocks+0x3b1/0xc20 [ 206.007629][ T6479] ? ext4_mb_use_inode_pa+0x4b0/0x4b0 [ 206.012837][ T6479] ext4_mb_regular_allocator+0x229/0x10d0 [ 206.018584][ T6479] ? ext4_mb_initialize_context+0x7bf/0xb80 [ 206.024285][ T6479] ? ext4_mb_normalize_request+0xf5/0x1250 [ 206.029915][ T6479] ? ext4_mb_normalize_request+0x1250/0x1250 [ 206.035732][ T6479] ext4_mb_new_blocks+0x59a/0x2d10 [ 206.040677][ T6479] ? memset+0x1f/0x40 [ 206.044489][ T6479] ? ext4_ext_check_overlap+0x180/0x5b0 [ 206.049874][ T6479] ? ext4_inode_to_goal_block+0x265/0x360 [ 206.055616][ T6479] ext4_ext_map_blocks+0x1e70/0x7450 [ 206.060736][ T6479] ? ___preempt_schedule+0x16/0x20 [ 206.065674][ T6479] ? try_to_wake_up+0x9d3/0x14f0 [ 206.070443][ T6479] ? ext4_ext_release+0x10/0x10 [ 206.075128][ T6479] ? check_preemption_disabled+0x9f/0x320 [ 206.080772][ T6479] ? plist_check_list+0x20d/0x220 [ 206.085627][ T6479] ? plist_del+0x3bf/0x3e0 [ 206.089881][ T6479] ? debug_smp_processor_id+0x20/0x20 [ 206.095093][ T6479] ? wake_up_q+0xa8/0xf0 [ 206.099169][ T6479] ? _raw_read_unlock+0x21/0x40 [ 206.103855][ T6479] ? ext4_es_lookup_extent+0x559/0x9d0 [ 206.109150][ T6479] ext4_map_blocks+0xa2f/0x1ba0 [ 206.113839][ T6479] ? ext4_issue_zeroout+0x150/0x150 [ 206.118872][ T6479] ? __ext4_journal_start_sb+0x295/0x460 [ 206.124340][ T6479] ext4_alloc_file_blocks+0x3b1/0xc20 [ 206.129551][ T6479] ? trace_ext4_fallocate_enter+0x1d0/0x1d0 [ 206.135280][ T6479] ? down_read_killable+0x220/0x220 [ 206.140311][ T6479] ? check_preemption_disabled+0x9f/0x320 [ 206.145873][ T6479] ? avc_policy_seqno+0x17/0x70 [ 206.150556][ T6479] ? debug_smp_processor_id+0x20/0x20 [ 206.155754][ T6479] ? selinux_file_permission+0x2be/0x530 [ 206.161225][ T6479] ? trace_ext4_fallocate_enter+0x26/0x1d0 [ 206.166865][ T6479] ? inode_newsize_ok+0x17c/0x1b0 [ 206.171727][ T6479] ext4_fallocate+0x3b5/0x570 [ 206.176243][ T6479] vfs_fallocate+0x551/0x6b0 [ 206.180667][ T6479] __x64_sys_fallocate+0xb9/0x100 [ 206.185525][ T6479] do_syscall_64+0xca/0x1c0 [ 206.189865][ T6479] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 206.195595][ T6479] RIP: 0033:0x7ff282cefb99 [ 206.199850][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.219284][ T6479] RSP: 002b:00007ff281f71048 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 206.227534][ T6479] RAX: ffffffffffffffda RBX: 00007ff282e7dfa0 RCX: 00007ff282cefb99 [ 206.235343][ T6479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 206.243155][ T6479] RBP: 00007ff282d7077e R08: 0000000000000000 R09: 0000000000000000 [ 206.250965][ T6479] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 206.258776][ T6479] R13: 000000000000000b R14: 00007ff282e7dfa0 R15: 00007ffc000b13f8 [ 206.266588][ T6479] Modules linked in: [ 206.270955][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.280323][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.288466][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.318598][ T6479] ---[ end trace ccc06a6f2398f299 ]--- [ 206.319594][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.323905][ T6479] RIP: 0010:ext4_mb_find_by_goal+0xba1/0xbe0 [ 206.341826][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.358712][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.375507][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.383495][ T6479] Code: fc ff ff 48 8b 4c 24 28 80 e1 07 80 c1 03 38 c1 0f 8c 22 fc ff ff 48 8b 7c 24 28 e8 89 74 c8 ff e9 13 fc ff ff e8 6f 8f 98 ff <0f> 0b e8 b8 44 6f ff e8 63 8f 98 ff 0f 0b e8 5c 8f 98 ff 0f 0b e8 [ 206.411934][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.426564][ T6479] RSP: 0018:ffff8881ea02f400 EFLAGS: 00010283 [ 206.434979][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.447195][ T6479] RAX: ffffffff81cba991 RBX: 0000000000000001 RCX: 0000000000040000 [ 206.459823][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.472038][ T6479] RDX: ffffc900047b9000 RSI: 0000000000020af6 RDI: 0000000000020af7 [ 206.484567][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.497889][ T6479] RBP: ffff8881ea02f510 R08: ffffffff81cb9f11 R09: ffffed103a30200b [ 206.509708][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.523007][ T6479] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 206.534448][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.547774][ T6479] R13: ffff8881e88ca3f0 R14: 0000000000000001 R15: 1ffff1103d11947e [ 206.559862][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.568793][ T6479] FS: 00007ff281f716c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 206.580613][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.589612][ T23] audit: type=1400 audit(1719798387.020:561): avc: denied { write } for pid=144 comm="syslogd" name="/" dev="tmpfs" ino=9285 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.590073][ T6479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.617834][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.626162][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.637269][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.645430][ T6479] CR2: 0000555555eeb008 CR3: 00000001e5c7c000 CR4: 00000000003406a0 [ 206.648546][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.658259][ T23] audit: type=1400 audit(1719798387.020:562): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=44865 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.661660][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.683820][ T6479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.692414][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.707797][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.712616][ T6479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.716245][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.731908][ T6145] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 206.734931][ T6479] Kernel panic - not syncing: Fatal exception [ 206.740017][ T23] audit: type=1400 audit(1719798387.020:563): avc: denied { add_name } for pid=144 comm="syslogd" name="messages.0" dev="tmpfs" ino=37126 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.768368][ T6479] Kernel Offset: disabled [ 206.772504][ T6479] Rebooting in 86400 seconds..