last executing test programs: 1m0.081214763s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000100)='./file2\x00', 0x80, &(0x7f0000001140)={[{@bh}, {@errors_remount}], [{@subj_role={'subj_role', 0x3d, '-'}}, {@permit_directio}]}, 0x2, 0x564, &(0x7f0000001680)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0, 0x1be, &(0x7f0000000280)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(r0, &(0x7f0000000240)='./file2\x00', 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000380)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) statx(r1, 0x0, 0x0, 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x20000000009, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0cf42fb04d0000020000000005000000040001"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000006000740000000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000fd0000000000010c0002"], 0x58}}, 0x0) mount$cgroup(0x0, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840), 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000160000402505a1a4400001020301090264ed02010070000904000001020d0000052406000105240008000d240f010000000000000000ed0524"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) mlock(&(0x7f0000a1c000/0x1000)=nil, 0x1000) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) 56.998129582s ago: executing program 1 (id=22): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0xffffffff, 0x18}, 0x50) 56.918486964s ago: executing program 1 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) 56.060468917s ago: executing program 1 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x3c}, 0x94) recvmmsg(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000140, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'batadv_slave_1\x00', {0x2, 0x4e23, @private=0xa010102}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="48010000250033", @ANYRESOCT=r0], 0x148}}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='./bus\x00', 0x1010000, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'macroman'}}, {}, {@gid}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@errors_remount}]}, 0x4, 0x1536, &(0x7f0000001700)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000940)='dev/ttyUSB0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1070425, 0x0, 0x3, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000180)='dev/ttyUSB0\x00', &(0x7f0000002100), 0x404, &(0x7f0000001380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040214,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="21c037b941cacbea79e008f8118407ea54aa2c3cc9505bf9a5d3d2b6154940a6b115def77edddb12944985bc4f84025aae6fa397f998e95c"]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0\x00'}) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) 55.970434779s ago: executing program 1 (id=32): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000318000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$9p_tcp(0x0, 0x0, 0x0, 0x8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005"], 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, r0, 0xffffffffff000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) rename(&(0x7f0000000080)='./dev/kmsg\x00', &(0x7f0000000180)='./file1\x00') pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000005780)={0x2020}, 0x2020) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0xffffffffffffffe6, &(0x7f0000000100)=[{&(0x7f0000000300)="2b10fd923c01b48c1d56681f35d565c66bfbb052168bd4fcfdd3a454e685d7f3247aba039501fbe2c0f5e3fe9ace280525fd03209f4291649127d0010ecf2be65a506c95fd11f5a20ada021dc0272ed2286c36ebc8f866f1e652ddfe0c30e66a0cd2d8919afe2e38fb7d6fa11cf9d74b14ad03702d", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x40) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='overlay\x00', 0x40000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) 55.861677801s ago: executing program 32 (id=32): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000318000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$9p_tcp(0x0, 0x0, 0x0, 0x8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005"], 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, r0, 0xffffffffff000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) rename(&(0x7f0000000080)='./dev/kmsg\x00', &(0x7f0000000180)='./file1\x00') pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000005780)={0x2020}, 0x2020) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0xffffffffffffffe6, &(0x7f0000000100)=[{&(0x7f0000000300)="2b10fd923c01b48c1d56681f35d565c66bfbb052168bd4fcfdd3a454e685d7f3247aba039501fbe2c0f5e3fe9ace280525fd03209f4291649127d0010ecf2be65a506c95fd11f5a20ada021dc0272ed2286c36ebc8f866f1e652ddfe0c30e66a0cd2d8919afe2e38fb7d6fa11cf9d74b14ad03702d", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x40) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='overlay\x00', 0x40000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) 37.653246907s ago: executing program 5 (id=123): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000d80)={[{@block_validity}, {@errors_continue}, {@nodiscard}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsold}, {@nogrpid}, {@mb_optimize_scan}, {@norecovery}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@subj_type={'subj_type', 0x3d, '}/\xe7'}}]}, 0x3, 0x577, &(0x7f0000000640)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000110000002abd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="004000002000000005001100a40000000a0001000180b90a0730f5b2"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x5) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000300001045412341933da493600000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000200fe88000000000000000000000000010108000300", @ANYRES32=r3, @ANYBLOB], 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrquota}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r7, 0x400, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016180000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="0000000000000000660000000000010018000000000082d700000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)=""/68) close(r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010102, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c", 0x7f) 35.20345858s ago: executing program 5 (id=133): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000140)={{}, {0x0, 0x0}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x20000, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYRESDEC=r2]) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000800)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.195885942s ago: executing program 5 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x5) sendmmsg$unix(r3, &(0x7f00000000c0)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0), 0x0, &(0x7f0000001b40), 0x58, 0x90}}, {{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000006c0)="7683499521d971e2f747d5614dae36bc4ddfc88f13b904f87e40526dfb337dcb8ee182a92b7d2ae25431058caef5bbded8fbf1a2a1889afd8d8d", 0x3a}, {&(0x7f0000000700)="b07bb6748501b1738aa9ae71f808ea9a6d00f335a9ec38e9e31b9162d36b51211940aa0fca32fa0b18e5ca58bdb314c22d125abb1000938abb202d4ee705008ca601ae727366ad7b535c74538c6264170d2b4d7417f7c89f53ee4a6c2739d469592c5760abf64a17e13f2f63bda96678e35ec51c8d03ddce366121a6467f48c25a980fdcf931b403c7b6a11238f6a7a5c2c6ff49b72d0d6a171ffbafab0f91b9908732e9515bf8cb2a16d080128a88781001bb4f2703b280414cba0bfd3c292d65ea58b08cc5eb7f6688a7ac88bf1e6456bd39cb1adc61783690c62c9a69274211", 0xe1}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="0446", 0x2}, {&(0x7f0000001900)="71f2907e9b5b0c38bd7395d758fe5c07b69b592c0cb720efc2379e88900d11f4af023776413bb0d9364287229b3b5827d0fcd0783b8932f5c473f1c668c5b34f0b25d38afdd71bc8ecaed868b91b9edc1dd809c6dda7e2e46d99e22907e31b14337c4a12c900fb60dd34fd550ee3d2433afb9fa433772938db78f4dec51d3b0000", 0x81}], 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT, @ANYRES32=r3, @ANYRES32, @ANYBLOB="e37dcc36177a9d48d8c0c63bd2190422ae92e6678c4c2fb66fb468e35ce8411edde1762a0e3cf295f05a6f6f15a3f4c34879c423619f028fa9c496accf34f4537b8f371de0f66f0dd350f917736d528e06404e569070f5bac5b3e80c6a1f9ee87b02c2f84d77aff54ec8485bb1a448312d1364626222b8c022bd665b664d0d8b8306f6ad52c3a24c3af14eefc4f2e73c6c618103cb30a3eaee4639a857458397959bf1d6baa7c537e0a97a1bc213827fdd9ca6718e585c1540cf2de6595158e43d19d0fc5be300b594ae6e34d853689249b8122b711a8f3611a7ba5a0e48faddb7228a01ce28a49f1e9e677600d7a7017deb5e133f3ac0", @ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000010000000100"/29, @ANYRES32=r5, @ANYBLOB="6ef339fa54d9aea8bfbb46a32393b9ba9d448c6c2e98311218824dd07577780daf4fdd58acee9fe311b34042edaaa4abf6ccbf82a4c13914accf9dd01c0531a8acb7abc250e1e7772fa7df317e60075631b313abc285aa2cca6d5b9c01b999b6630cd6ea8631d1ab097cdb184abbe21a6b265ee00c87b4ddbb5e467849ba20959f32e82729b7b6c767420e513f4600b1e099de1372f0", @ANYBLOB="1c0000000000000f0100000002000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r6, @ANYRES8=r5], 0x80, 0x2404d094}}], 0x2, 0x2000c011) recvfrom$unix(r2, 0x0, 0x0, 0x12000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f505d7ff6240e3d4b3fc44ae0f467faba453394fa6a2af604a40f679e2ed699ed65ef0da0bc850371c679faf1df5f165fb96b48f6b909efc9a0e1269d43b6e20e1f768dc2d6aa21ff47cb39238a95eb016bf9378994c647c389326660eb6c8430600762d", @ANYRES32=0x0, @ANYBLOB="ba0a050023080700"], 0x20}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002a000000850000002a0000009500000000000000c6716cbde55f79594dec8881a4fc64ae128eb989df3a10205371784013f446bd23187959a0c6840480c4b76b55b17764bba4b066e3bed505ee6aecc0e90b1382f1f1a97a8fb4412822c30cf91961ae"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) chdir(&(0x7f0000000040)='./file0\x00') setreuid(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a40)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fe80000000000000000000000000003bee8000000000000000000000000000aa0000000000000c9cec80921f440a00b0303b0000004b418ee331e93c52db3fb217297013de2efd8eef3e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000007f0000000000000007000000000000000300000000000000fcfffffffffffffffdffffffffffffff0500000000000000fffffffffffffffffcffffff0000000000000000000000000000000000000000050000000000000000000000000000000101030000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80) 29.925162435s ago: executing program 5 (id=157): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f00000008c0)=ANY=[], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = dup2(r4, r5) getsockopt$packet_int(r6, 0x11, 0xe, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r9, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r8, 0x0, r7, 0x0, 0x20000005, 0xa) openat(r3, &(0x7f0000000240)='./file0\x00', 0x54042, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r11, &(0x7f0000001300)=[{0x0}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2, 0x5, 0x9) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xfffffffffffffec6, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04000000", @ANYRES16=r10, @ANYBLOB="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"/271], 0x28}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) syz_clone(0x80004000, &(0x7f00000010c0)="e49d3f13fa22e711ea957fb65498a3aca0b969d59191ce42da74d8d4f3e147", 0x1f, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="6b13403cd3b1978507bdded77547c0d72b3d30f4b15ab7d35e3745f00ef5c3a59150777c2834c8da4a9e2c8aea1e5212c8994a67332cd3fba86be3c34deff7a25e3301479556a9eb7a2ffe5c1f87522da591db79e8cd") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 28.398238094s ago: executing program 5 (id=168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) syz_usb_connect(0x0, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x3, 0xb7, 0xf, 0x8, 0x421, 0x4c9, 0xe922, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0xfc, 0x3, 0x0, 0x2, "", [{{0x9, 0x4, 0x39, 0x40, 0x3, 0x2, 0x2, 0xff, 0x4, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xf800, 0x0, 0x1}, [@acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0x5, 0xb9d29849fdbcedc2, 0x10, 0x6, 0x96, 0x1}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x9a, 0x2, 0xba}}]}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) 27.990796354s ago: executing program 5 (id=171): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016180000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000010018000000000082d700000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 27.931322566s ago: executing program 33 (id=171): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016180000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000010018000000000082d700000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 9.287528472s ago: executing program 6 (id=296): syz_emit_ethernet(0x7a, &(0x7f0000000980)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "0200", 0x44, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x6488, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0x4c289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1, 0x4}, 0x2, {0x200004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) socket(0x1, 0x3, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) setgroups(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x0}, 0x10) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r5, r5) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) inotify_init1(0x80000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.745830126s ago: executing program 6 (id=303): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000680)={0x40, 0x10, 0x1, "ec"}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 6.133021143s ago: executing program 0 (id=321): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000d80)={[{@block_validity}, {@errors_continue}, {@nodiscard}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsold}, {@nogrpid}, {@mb_optimize_scan}, {@norecovery}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@subj_type={'subj_type', 0x3d, '}/\xe7'}}]}, 0x3, 0x577, &(0x7f0000000640)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000110000002abd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="004000002000000005001100a40000000a0001000180b90a0730f5b2"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x5) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000300001045412341933da493600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000200fe88000000000000000000000000010108000300", @ANYRES32=r2, @ANYBLOB], 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrquota}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r6, 0x400, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016180000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="0000000000000000660000000000010018000000000082d700000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 4.404499417s ago: executing program 0 (id=326): syz_emit_ethernet(0x7a, &(0x7f0000000980)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "0200", 0x44, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x6488, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0x4c289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1, 0x4}, 0x2, {0x200004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) socket(0x1, 0x3, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) setgroups(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x0}, 0x10) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r5, r5) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) inotify_init1(0x80000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.182823313s ago: executing program 2 (id=330): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002140)='net/ip6_flowlabel\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 4.182610793s ago: executing program 2 (id=331): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)="0021000000000306000000fe00000000aaa6721d000000", 0x17}], 0x1, 0x73a, 0x3) 4.127714185s ago: executing program 2 (id=332): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000d80)={[{@block_validity}, {@errors_continue}, {@nodiscard}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsold}, {@nogrpid}, {@mb_optimize_scan}, {@norecovery}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@subj_type={'subj_type', 0x3d, '}/\xe7'}}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000110000002abd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="004000002000000005001100a40000000a0001000180b90a0730f5b2"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x5) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000300001045412341933da493600000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000200fe88000000000000000000000000010108000300", @ANYRES32=r3, @ANYBLOB], 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrquota}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016180000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="0000000000000000660000000000010018000000000082d700000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)=""/68) close(r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010102, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c", 0x7f) 3.944954759s ago: executing program 6 (id=334): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000480)=0xffffffffffffffff) 3.89565166s ago: executing program 6 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r8, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r4, 0x25, 0x0, @val=@tcx={@void, @value=r7}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000680)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa5e438, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 3.89533032s ago: executing program 6 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) write$char_usb(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000080)="44c0e48530", 0x5) 3.862236711s ago: executing program 0 (id=337): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000d80)={[{@block_validity}, {@errors_continue}, {@nodiscard}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsold}, {@nogrpid}, {@mb_optimize_scan}, {@norecovery}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@subj_type={'subj_type', 0x3d, '}/\xe7'}}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000110000002abd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="004000002000000005001100a40000000a0001000180b90a0730f5b2"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x5) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000300001045412341933da493600000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000200fe88000000000000000000000000010108000300", @ANYRES32=r3, @ANYBLOB], 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrquota}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016180000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="0000000000000000660000000000010018000000000082d700000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)=""/68) close(r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010102, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c", 0x7f) 2.890123256s ago: executing program 6 (id=338): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f00000001c0)) r1 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x53bb, 0x40, 0x2, 0x191}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) splice(r2, 0x0, r3, 0x0, 0x80, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0), 0x0, 0x4) splice(r4, 0x0, r3, 0x0, 0xffffffffffff7fff, 0x9) close_range(r1, 0xffffffffffffffff, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES64], 0x1, 0x2de, &(0x7f0000000680)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040) r8 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000004880)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a000700000009040100000102b0000924010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.882292896s ago: executing program 2 (id=339): r0 = socket$key(0xf, 0x3, 0x2) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000001300000005000500000000000a00"/87], 0xa0}}, 0x4048080) 2.77330036s ago: executing program 2 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x3c}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000140, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'batadv_slave_1\x00', {0x2, 0x4e23, @private=0xa010102}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="48010000250033", @ANYRESOCT=r0], 0x148}}, 0x4000) 2.620840183s ago: executing program 0 (id=342): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 2.398826369s ago: executing program 0 (id=343): prctl$PR_GET_FP_MODE(0x2e) syz_usb_connect(0x2, 0x41, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xa0, 0x59, 0xa4, 0x40, 0x763, 0x1015, 0xfee6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0xa, 0x4, 0xe0, 0x2, "", [{{0x9, 0x4, 0x8, 0x8, 0x3, 0xff, 0x21, 0x9a, 0x5, [], [{{0x9, 0x5, 0x2, 0x10, 0x20, 0x7, 0x1, 0x8, [@generic={0x2, 0x61}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x7, 0x5, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x0, 0x13, 0x2}}]}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 1.866538222s ago: executing program 3 (id=347): syz_emit_ethernet(0x7a, &(0x7f0000000980)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "0200", 0x44, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x6488, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0x4c289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1, 0x4}, 0x2, {0x200004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) socket(0x1, 0x3, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) setgroups(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x0}, 0x10) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r5, r5) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) inotify_init1(0x80000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.760582775s ago: executing program 2 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) write$binfmt_aout(r4, 0x0, 0x20) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x807, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) removexattr(0x0, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 1.393523844s ago: executing program 4 (id=352): write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x7ffffffd, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x7, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="070000000000000000000000c661a4d88cc344c2fbef63a1328867a42f330844f2753fbf03bfa5e76380c2cc5a0a95350e34ad4f6e8dbf8da38a11291d1916a9e3ae855532957d9c6bbe4fb4f0a44ea02b12d7b42cd9fe0bc28994b086d602743afa7152a20de0fd", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="b0", 0x1}], 0x11}}], 0x2, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.308601517s ago: executing program 3 (id=353): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 1.226725619s ago: executing program 3 (id=354): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0xdb9303c4986513a7, 0x0, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x2, 0x70bd2b, 0x25dfdbfb, {0x2, 0x1, 0x2, r0, 0xffff, 0x9, 0x9, 0x5, 0x0, 0x8, 0x100}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x5, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000018110000", @ANYRES32=r4, @ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x8c) setsockopt$inet6_int(r7, 0x29, 0x14, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00)=r0, 0x12) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x4}}, @common=@unspec=@mac={{0x30}, {@random="16f9a936c886"}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 932.871086ms ago: executing program 4 (id=355): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 881.104108ms ago: executing program 4 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d04, 0x0, 0x8}]}) 880.687678ms ago: executing program 4 (id=357): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) pipe(&(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x7, 0xffffffffffff8000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 201.260365ms ago: executing program 4 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79e63}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e1c}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) r1 = syz_ublk_setup_io_uring(0x1b7d, &(0x7f00000000c0)={0x0, 0xc2ac, 0x20000, 0x2, 0x2e3}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000240)={r0, 0x3, 0x9, 0xc, 0x8}, 0x1) 175.471016ms ago: executing program 4 (id=359): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000012c0)={0x14, &(0x7f00000011c0)={0x0, 0x11, 0x2, {0x2, 0xa}}, 0x0}, &(0x7f00000015c0)={0x44, &(0x7f0000001300)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 96.435897ms ago: executing program 3 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd25, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4000000) 528.3µs ago: executing program 3 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000e00)='testhandle 2000000000 \\', 0x17) 406.47µs ago: executing program 3 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 0 (id=363): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 9.195347][ T105] udevd (105) used greatest stack depth: 22888 bytes left [ 15.446623][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 15.446637][ T30] audit: type=1400 audit(1785789024.894:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.456958][ T30] audit: type=1400 audit(1785789024.894:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.464135][ T30] audit: type=1400 audit(1785789024.904:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[14458]" dev="pipefs" ino=14458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.481949][ T30] audit: type=1400 audit(1785789024.904:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.500805][ T30] audit: type=1400 audit(1785789024.904:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.672819][ T231] scp (231) used greatest stack depth: 22184 bytes left Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 23.020379][ T30] audit: type=1400 audit(1785789032.474:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.023853][ T277] cgroup: Unknown subsys name 'net' [ 23.043158][ T30] audit: type=1400 audit(1785789032.474:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.070428][ T30] audit: type=1400 audit(1785789032.504:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.070947][ T277] cgroup: Unknown subsys name 'devices' [ 23.219317][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.224977][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.425844][ T30] audit: type=1400 audit(1785789032.874:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.449013][ T30] audit: type=1400 audit(1785789032.874:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.473710][ T30] audit: type=1400 audit(1785789032.874:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.498790][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.507687][ T30] audit: type=1400 audit(1785789032.964:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.533115][ T30] audit: type=1400 audit(1785789032.964:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.572589][ T30] audit: type=1400 audit(1785789033.024:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.573872][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.598132][ T30] audit: type=1400 audit(1785789033.024:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.175223][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.182332][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.189945][ T287] device bridge_slave_0 entered promiscuous mode [ 24.198494][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.205553][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.213190][ T287] device bridge_slave_1 entered promiscuous mode [ 24.269570][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.276738][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.284275][ T285] device bridge_slave_0 entered promiscuous mode [ 24.292902][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.300073][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.307505][ T285] device bridge_slave_1 entered promiscuous mode [ 24.349193][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.356267][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.363720][ T286] device bridge_slave_0 entered promiscuous mode [ 24.372047][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.379220][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.386587][ T286] device bridge_slave_1 entered promiscuous mode [ 24.452584][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.459712][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.467260][ T288] device bridge_slave_0 entered promiscuous mode [ 24.473932][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.481031][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.488553][ T289] device bridge_slave_0 entered promiscuous mode [ 24.496894][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.503989][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.511446][ T289] device bridge_slave_1 entered promiscuous mode [ 24.520217][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.527319][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.534692][ T288] device bridge_slave_1 entered promiscuous mode [ 24.630090][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.637197][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.644497][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.651559][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.712560][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.719894][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.728861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.736304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.747382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.755799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.764136][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.771210][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.778727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.787095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.795486][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.802557][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.832218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.839894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.848438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.869962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.877823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.885281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.893607][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.900644][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.908218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.916385][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.923455][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.958941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.967826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.975886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.983601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.991871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.000062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.008464][ T287] device veth0_vlan entered promiscuous mode [ 25.024830][ T285] device veth0_vlan entered promiscuous mode [ 25.040325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.048927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.057582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.065676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.073392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.081297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.089657][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.096708][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.104351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.112602][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.119672][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.127269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.139696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.159734][ T287] device veth1_macvtap entered promiscuous mode [ 25.171379][ T285] device veth1_macvtap entered promiscuous mode [ 25.178704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.188167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.196342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.204246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.212630][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.219702][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.227482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.235631][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.242855][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.250549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.258604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.266899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.287353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.295510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.303816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.311960][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.320310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.328724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.344723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.353345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.361783][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.368838][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.376416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.384948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.393780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.401720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.409941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.417801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.425812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.436381][ T286] device veth0_vlan entered promiscuous mode [ 25.447868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.456341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.464677][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.471716][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.479217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.487643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.503455][ T286] device veth1_macvtap entered promiscuous mode [ 25.513068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.521682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.530596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.539116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.547814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.556070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.564668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.573272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.581509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.589246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.597382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.605347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.613630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.639116][ T289] device veth0_vlan entered promiscuous mode [ 25.645687][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.658532][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 25.661075][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.675670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.683787][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.702103][ T289] device veth1_macvtap entered promiscuous mode [ 25.728063][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.738545][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.751187][ T315] loop4: detected capacity change from 0 to 512 [ 25.757600][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.765959][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.775549][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.783643][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.792063][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.800563][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.809267][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.817613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.825808][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.833608][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.842385][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.864642][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.873848][ T315] EXT4-fs (loop4): 1 truncate cleaned up [ 25.879591][ T315] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 25.892200][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.900821][ T288] device veth0_vlan entered promiscuous mode [ 25.930648][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.949152][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.013117][ T288] device veth1_macvtap entered promiscuous mode [ 26.023187][ T320] loop2: detected capacity change from 0 to 256 [ 26.037555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.046128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.055228][ T323] mmap: syz.4.5 (323) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 26.077787][ T320] ======================================================= [ 26.077787][ T320] WARNING: The mand mount option has been deprecated and [ 26.077787][ T320] and is ignored by this kernel. Remove the mand [ 26.077787][ T320] option from the mount to silence this warning. [ 26.077787][ T320] ======================================================= [ 26.113402][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.148405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.156712][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.167063][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.178659][ T320] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 26.189437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.198332][ T320] exFAT-fs (loop2): Filesystem has been set read-only [ 26.205241][ T320] exFAT-fs (loop2): failed to load upcase table [ 26.317259][ T320] exFAT-fs (loop2): failed to recognize exfat type [ 26.567370][ T331] loop1: detected capacity change from 0 to 512 [ 26.610625][ T331] EXT4-fs (loop1): Ignoring removed bh option [ 26.626844][ T331] EXT4-fs (loop1): Unrecognized mount option "subj_role=-" or missing value [ 26.658979][ T336] loop2: detected capacity change from 0 to 2048 [ 26.705100][ T331] loop1: detected capacity change from 0 to 128 [ 26.728937][ T331] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 26.747860][ T336] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.774493][ T331] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 26.793301][ T336] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 26.809094][ T336] EXT4-fs error (device loop2) in ext4_setattr:5676: error 28 [ 26.836721][ T336] fuseblk: Unknown parameter 'gËXÒ¢h™`˜9µB{Þ)NO>Ðmº®¢qÏàÙq˜š;Â9«H3W1Ù}°ÂRH2&Kâz<ñ–ÝÏHôÇ­zE5åÀ绢Y˜àzR‡Ô(d!³ÏÃ"y"Æ ›8Ô·ËUrÉíÓÿÛŽrŽŠÔ9£æ00000000000000000000' [ 26.861074][ T335] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 26.880479][ T335] EXT4-fs (loop2): This should not happen!! Data will be lost [ 26.880479][ T335] [ 26.897590][ T335] EXT4-fs (loop2): Total free blocks count 0 [ 26.907349][ T335] EXT4-fs (loop2): Free/Dirty block details [ 26.913283][ T335] EXT4-fs (loop2): free_blocks=4096 [ 26.941588][ T335] EXT4-fs (loop2): dirty_blocks=512 [ 26.946935][ T335] EXT4-fs (loop2): Block reservation details [ 26.953033][ T335] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 26.965444][ T329] loop0: detected capacity change from 0 to 40427 [ 26.972794][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 26.991722][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 26.991722][ T10] [ 27.012924][ T329] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 27.020659][ T329] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 27.030277][ T329] F2FS-fs (loop0): invalid crc value [ 27.036856][ T329] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 27.093708][ T329] F2FS-fs (loop0): Start checkpoint disabled! [ 27.100911][ T329] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 27.109039][ T329] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 27.146014][ T344] loop3: detected capacity change from 0 to 2048 [ 27.197219][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.204807][ T293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.211537][ T316] bridge0: port 3(syz_tun) entered blocking state [ 27.218857][ T316] bridge0: port 3(syz_tun) entered disabled state [ 27.225699][ T316] device syz_tun entered promiscuous mode [ 27.231786][ T316] bridge0: port 3(syz_tun) entered blocking state [ 27.238292][ T316] bridge0: port 3(syz_tun) entered listening state [ 27.250333][ T316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.336465][ T355] loop3: detected capacity change from 0 to 512 [ 27.427574][ T357] loop0: detected capacity change from 0 to 128 [ 27.437563][ T357] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 27.458245][ T355] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 27.476627][ T355] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.500384][ T355] capability: warning: `syz.3.12' uses 32-bit capabilities (legacy support in use) [ 27.522382][ T355] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.12: iget: bad i_size value: 2533274857506816 [ 27.617281][ T6] usb 2-1: config index 0 descriptor too short (expected 60772, got 100) [ 27.625772][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.636156][ T293] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 27.644293][ T293] usb 5-1: config 1 has no interface number 0 [ 27.650672][ T293] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 27.720477][ T369] netlink: 308 bytes leftover after parsing attributes in process `syz.0.15'. [ 27.746488][ T369] loop0: detected capacity change from 0 to 256 [ 27.778487][ T369] exfat: Deprecated parameter 'utf8' [ 27.796737][ T369] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 27.946646][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 27.955622][ T293] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 27.966204][ T6] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.979219][ T293] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 28.167199][ T308] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.167836][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.478255][ T293] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 28.487411][ T293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.495466][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.503561][ T293] usb 5-1: Product: syz [ 28.507935][ T293] usb 5-1: Manufacturer: syz [ 28.512585][ T6] usb 2-1: Product: syz [ 28.516788][ T293] usb 5-1: SerialNumber: syz [ 28.521452][ T6] usb 2-1: Manufacturer: syz [ 28.526645][ T6] usb 2-1: SerialNumber: syz [ 28.539919][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 28.539932][ T30] audit: type=1400 audit(1785789037.994:158): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.567830][ T342] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 28.593641][ T6] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 28.606108][ T378] FAULT_INJECTION: forcing a failure. [ 28.606108][ T378] name failslab, interval 1, probability 0, space 0, times 1 [ 28.606149][ T378] CPU: 0 PID: 378 Comm: syz.0.19 Not tainted syzkaller #0 [ 28.606169][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.606191][ T378] Call Trace: [ 28.606196][ T378] [ 28.606203][ T378] __dump_stack+0x21/0x30 [ 28.606234][ T378] dump_stack_lvl+0x110/0x170 [ 28.606261][ T378] ? show_regs_print_info+0x20/0x20 [ 28.606281][ T378] ? hide_cursor+0x350/0x350 [ 28.606303][ T378] dump_stack+0x15/0x20 [ 28.606319][ T378] should_fail+0x3ab/0x500 [ 28.606340][ T378] __should_failslab+0xa4/0xe0 [ 28.606363][ T378] should_failslab+0x9/0x20 [ 28.606382][ T378] slab_pre_alloc_hook+0x39/0xd0 [ 28.606404][ T378] __kmalloc+0x6d/0x2c0 [ 28.606425][ T378] ? del_timer+0x8a/0xb0 [ 28.606445][ T378] ? set_selection_kernel+0xdbe/0x17a0 [ 28.606465][ T378] set_selection_kernel+0xdbe/0x17a0 [ 28.606487][ T378] set_selection_user+0xc1/0x100 [ 28.606507][ T378] ? sel_loadlut+0x110/0x110 [ 28.606524][ T378] ? security_capable+0x87/0xb0 [ 28.606546][ T378] tioclinux+0x109/0x370 [ 28.606566][ T378] vt_ioctl+0x444/0x1a80 [ 28.606583][ T378] ? __vt_event_wait+0x250/0x250 [ 28.606601][ T378] ? selinux_file_ioctl+0x3ad/0x4c0 [ 28.606624][ T378] ? selinux_file_alloc_security+0x120/0x120 [ 28.606644][ T378] ? mutex_unlock+0x8f/0x230 [ 28.606663][ T378] ? __mutex_lock_slowpath+0x10/0x10 [ 28.606687][ T378] tty_ioctl+0x847/0xc60 [ 28.606706][ T378] ? tty_get_icount+0xa0/0xa0 [ 28.606723][ T378] __se_sys_ioctl+0x121/0x1a0 [ 28.606746][ T378] __x64_sys_ioctl+0x7b/0x90 [ 28.606768][ T378] x64_sys_call+0x2f/0x9a0 [ 28.606787][ T378] do_syscall_64+0x4c/0xa0 [ 28.606805][ T378] ? clear_bhb_loop+0x50/0xa0 [ 28.606825][ T378] ? clear_bhb_loop+0x50/0xa0 [ 28.606843][ T378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.606864][ T378] RIP: 0033:0x7fd13a506019 [ 28.606879][ T378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.606896][ T378] RSP: 002b:00007fd138f5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.606917][ T378] RAX: ffffffffffffffda RBX: 00007fd13a78dfa0 RCX: 00007fd13a506019 [ 28.606932][ T378] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000004 [ 28.606944][ T378] RBP: 00007fd138f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 28.606956][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 28.606968][ T378] R13: 00007fd13a78e038 R14: 00007fd13a78dfa0 R15: 00007fff64a087c8 [ 28.606985][ T378] [ 28.606992][ T378] selection: kmalloc() failed [ 28.607338][ T6] cdc_ncm 2-1:1.0: bind() failure [ 28.690413][ T308] usb 4-1: Using ep0 maxpacket: 16 [ 28.807739][ T308] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 28.839455][ T293] usb 5-1: USB disconnect, device number 2 [ 28.844764][ T308] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.918096][ T308] usb 4-1: config 0 has no interface number 0 [ 28.924442][ T26] usb 2-1: USB disconnect, device number 2 [ 28.969541][ T380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'. [ 28.988432][ T376] syz.2.18 (376) used greatest stack depth: 20480 bytes left [ 29.002449][ T30] audit: type=1400 audit(1785789038.454:159): avc: denied { read } for pid=382 comm="syz.2.21" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.023469][ T30] audit: type=1400 audit(1785789038.454:160): avc: denied { open } for pid=382 comm="syz.2.21" path="net:[4026532302]" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.046111][ T384] tipc: Started in network mode [ 29.047338][ T30] audit: type=1400 audit(1785789038.454:161): avc: denied { create } for pid=382 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.071041][ T384] tipc: Node identity 1e5534b9539d, cluster identity 4711 [ 29.071529][ T30] audit: type=1400 audit(1785789038.474:162): avc: denied { bind } for pid=379 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.097918][ T30] audit: type=1400 audit(1785789038.474:163): avc: denied { write } for pid=379 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.118742][ T384] tipc: Enabled bearer , priority 10 [ 29.129735][ T387] netlink: 5924 bytes leftover after parsing attributes in process `syz.2.21'. [ 29.139424][ T308] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 29.148883][ T30] audit: type=1400 audit(1785789038.574:164): avc: denied { mount } for pid=382 comm="syz.2.21" name="/" dev="configfs" ino=13735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 29.173242][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.184937][ T308] usb 4-1: Product: syz [ 29.189409][ T308] usb 4-1: Manufacturer: syz [ 29.194219][ T308] usb 4-1: SerialNumber: syz [ 29.201278][ T30] audit: type=1400 audit(1785789038.574:165): avc: denied { search } for pid=382 comm="syz.2.21" name="/" dev="configfs" ino=13735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 29.229176][ T308] usb 4-1: config 0 descriptor?? [ 29.236235][ T30] audit: type=1400 audit(1785789038.584:166): avc: denied { write } for pid=382 comm="syz.2.21" name="usb_gadget" dev="configfs" ino=13736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 29.259701][ T30] audit: type=1400 audit(1785789038.584:167): avc: denied { add_name } for pid=382 comm="syz.2.21" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 29.280788][ T308] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 29.288118][ T308] usb 4-1: No valid video chain found. [ 29.485010][ T389] EXT4-fs (loop4): Test dummy encryption mode enabled [ 29.498364][ T389] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_nolock,,errors=continue. Quota mode: writeback. [ 29.510817][ T394] EXT4-fs (loop1): Ignoring removed bh option [ 29.527911][ T389] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #15: comm syz.4.23: corrupted inode contents [ 29.540132][ T389] EXT4-fs error (device loop4): ext4_dirty_inode:6108: inode #15: comm syz.4.23: mark_inode_dirty error [ 29.553347][ T308] usb 4-1: USB disconnect, device number 2 [ 29.559851][ T394] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 29.585090][ T389] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #15: comm syz.4.23: corrupted inode contents [ 29.598111][ T389] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.23: mark_inode_dirty error [ 29.609814][ T389] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #15: comm syz.4.23: corrupted inode contents [ 29.622606][ T389] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.23: mark_inode_dirty error [ 29.634859][ T389] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #15: comm syz.4.23: corrupted inode contents [ 29.647354][ T394] loop_set_status: loop1 () has still dirty pages (nrpages=2) [ 29.655094][ T389] EXT4-fs error (device loop4): ext4_truncate:4317: inode #15: comm syz.4.23: mark_inode_dirty error [ 29.655262][ T389] EXT4-fs error (device loop4) in ext4_setattr:5676: Corrupt filesystem [ 29.746859][ T400] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 29.787674][ T379] tipc: Resetting bearer [ 29.795247][ T379] tipc: Disabling bearer [ 30.151538][ T406] EXT4-fs (loop2): Test dummy encryption mode enabled [ 30.159123][ T406] EXT4-fs (loop2): Ignoring removed orlov option [ 30.174626][ T406] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000006,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 30.213136][ T406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=406 comm=syz.2.25 [ 30.230573][ T412] EXT4-fs (loop0): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 30.250321][ T406] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 30.377898][ T416] EXT4-fs (loop3): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 30.423742][ T412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27'. [ 30.475031][ T412] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.490194][ T416] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28'. [ 30.505910][ T412] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.522805][ T412] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.537109][ T412] EXT4-fs (loop0): 1 truncate cleaned up [ 30.542828][ T412] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 30.638913][ T416] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.669395][ T416] EXT4-fs (loop3): 1 truncate cleaned up [ 30.688707][ T416] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 31.020708][ T431] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 31.945972][ T444] xt_hashlimit: size too large, truncated to 1048576 [ 31.961407][ T431] netlink: 60 bytes leftover after parsing attributes in process `syz.4.36'. [ 31.975880][ T445] set_capacity_and_notify: 8 callbacks suppressed [ 31.975896][ T445] loop4: detected capacity change from 0 to 512 [ 31.998509][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.015741][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.024875][ T426] device bridge_slave_0 entered promiscuous mode [ 32.029160][ T445] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.060682][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.077188][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.088174][ T426] device bridge_slave_1 entered promiscuous mode [ 32.148007][ T445] EXT4-fs (loop4): 1 truncate cleaned up [ 32.162950][ T309] device bridge_slave_1 left promiscuous mode [ 32.176801][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.186717][ T449] loop3: detected capacity change from 0 to 1024 [ 32.202041][ T445] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 32.222413][ T309] device bridge_slave_0 left promiscuous mode [ 32.243596][ T449] EXT4-fs (loop3): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 32.262520][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.279966][ T309] device veth1_macvtap left promiscuous mode [ 32.292668][ T309] device veth0_vlan left promiscuous mode [ 32.455643][ T450] loop3: detected capacity change from 0 to 512 [ 32.497707][ T450] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.517793][ T449] netlink: 60 bytes leftover after parsing attributes in process `syz.3.39'. [ 32.536483][ T450] EXT4-fs (loop3): 1 truncate cleaned up [ 32.542535][ T450] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 32.637890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.645845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.662121][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.678219][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.688256][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.695322][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.703193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.711891][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.720978][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.728241][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.766313][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.907487][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.915761][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.945225][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.964857][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.975938][ T455] loop0: detected capacity change from 0 to 4096 [ 32.976584][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.990695][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.999273][ T426] device veth0_vlan entered promiscuous mode [ 33.013428][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.023583][ T426] device veth1_macvtap entered promiscuous mode [ 33.034971][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.043769][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.055363][ T455] EXT4-fs (loop0): Unrecognized mount option "fsname=:" or missing value [ 33.094558][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.113278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.304010][ T462] loop3: detected capacity change from 0 to 128 [ 33.336816][ T462] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 33.374648][ T463] loop5: detected capacity change from 0 to 1024 [ 33.440382][ T462] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.451179][ T462] ext2 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.537878][ T469] loop2: detected capacity change from 0 to 512 [ 33.575376][ T479] loop3: detected capacity change from 0 to 128 [ 33.582551][ T469] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 33.594522][ T469] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.609794][ T479] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.633390][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 33.648866][ T479] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.690466][ T479] netlink: 36 bytes leftover after parsing attributes in process `syz.3.47'. [ 33.792762][ T492] device syzkaller0 entered promiscuous mode [ 33.836020][ T475] loop4: detected capacity change from 0 to 1024 [ 33.880445][ T475] EXT4-fs (loop4): Ignoring removed nobh option [ 33.888241][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 33.888257][ T30] audit: type=1400 audit(1785789043.344:201): avc: denied { setopt } for pid=496 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.926790][ T475] EXT4-fs (loop4): Ignoring removed bh option [ 33.954293][ T500] loop0: detected capacity change from 0 to 128 [ 33.983523][ T475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 33.992627][ T500] EXT4-fs (loop0): Ignoring removed orlov option [ 33.993852][ T30] audit: type=1400 audit(1785789043.444:202): avc: denied { ioctl } for pid=502 comm="syz.2.52" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.999587][ T500] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.028087][ T475] System zones: 0-1, 3-12 [ 34.038622][ T475] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0xffffffffffffffff,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000006,bh,debug,. Quota mode: none. [ 34.064812][ T500] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,test_dummy_encryption,,errors=continue. Quota mode: none. [ 34.079583][ T500] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.092305][ T507] EXT4-fs (loop2): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 35.291350][ T507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.53'. [ 35.319293][ T507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.337499][ T519] capability: warning: `syz.0.57' uses deprecated v2 capabilities in a way that may be insecure [ 35.348823][ T507] EXT4-fs (loop2): 1 truncate cleaned up [ 35.354559][ T507] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 35.359201][ T30] audit: type=1400 audit(1785789044.814:203): avc: denied { create } for pid=518 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.399915][ T519] Zero length message leads to an empty skb [ 35.463932][ T30] audit: type=1400 audit(1785789044.914:204): avc: denied { connect } for pid=518 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.518714][ T30] audit: type=1400 audit(1785789044.974:205): avc: denied { bind } for pid=522 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.781804][ T487] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.055880][ T529] FAULT_INJECTION: forcing a failure. [ 36.055880][ T529] name failslab, interval 1, probability 0, space 0, times 0 [ 36.068719][ T529] CPU: 1 PID: 529 Comm: syz.3.58 Not tainted syzkaller #0 [ 36.075863][ T529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.085930][ T529] Call Trace: [ 36.089221][ T529] [ 36.092167][ T529] __dump_stack+0x21/0x30 [ 36.096518][ T529] dump_stack_lvl+0x110/0x170 [ 36.101215][ T529] ? show_regs_print_info+0x20/0x20 [ 36.106430][ T529] ? __schedule+0xbd7/0x14a0 [ 36.111058][ T529] dump_stack+0x15/0x20 [ 36.115227][ T529] should_fail+0x3ab/0x500 [ 36.119667][ T529] __should_failslab+0xa4/0xe0 [ 36.124458][ T529] should_failslab+0x9/0x20 [ 36.128982][ T529] slab_pre_alloc_hook+0x39/0xd0 [ 36.133958][ T529] __kmalloc+0x6d/0x2c0 [ 36.138305][ T529] ? kvmalloc_node+0x211/0x320 [ 36.143091][ T529] kvmalloc_node+0x211/0x320 [ 36.147699][ T529] ? asm_sysvec_call_function_single+0x1b/0x20 [ 36.153879][ T529] ? vm_mmap+0xb0/0xb0 [ 36.157967][ T529] ? map_update_elem+0x2f7/0x780 [ 36.162929][ T529] map_update_elem+0x312/0x780 [ 36.167715][ T529] __sys_bpf+0x456/0x7d0 [ 36.171977][ T529] ? bpf_link_show_fdinfo+0x330/0x330 [ 36.177374][ T529] __x64_sys_bpf+0x7c/0x90 [ 36.181815][ T529] x64_sys_call+0x4b9/0x9a0 [ 36.186340][ T529] do_syscall_64+0x4c/0xa0 [ 36.190773][ T529] ? clear_bhb_loop+0x50/0xa0 [ 36.195470][ T529] ? clear_bhb_loop+0x50/0xa0 [ 36.200166][ T529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.206077][ T529] RIP: 0033:0x7f565de53019 [ 36.210507][ T529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.230131][ T529] RSP: 002b:00007f565c86a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.238570][ T529] RAX: ffffffffffffffda RBX: 00007f565e0db180 RCX: 00007f565de53019 [ 36.246567][ T529] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002 [ 36.254578][ T529] RBP: 00007f565c86a090 R08: 0000000000000000 R09: 0000000000000000 [ 36.262566][ T529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.270569][ T529] R13: 00007f565e0db218 R14: 00007f565e0db180 R15: 00007ffcb0c61fc8 [ 36.278577][ T529] [ 36.308059][ T30] audit: type=1400 audit(1785789045.764:206): avc: denied { mmap_zero } for pid=530 comm="syz.5.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 36.353623][ T30] audit: type=1400 audit(1785789045.764:207): avc: denied { getopt } for pid=530 comm="syz.5.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.803610][ T487] usb 5-1: Using ep0 maxpacket: 16 [ 37.109115][ T30] audit: type=1400 audit(1785789046.564:208): avc: denied { read } for pid=536 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.432378][ T548] set_capacity_and_notify: 4 callbacks suppressed [ 37.432396][ T548] loop2: detected capacity change from 0 to 1024 [ 37.568864][ T556] loop3: detected capacity change from 0 to 512 [ 37.575248][ T30] audit: type=1326 audit(1785789047.014:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=555 comm="syz.3.69" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565de53019 code=0x7ffc0000 [ 37.607383][ T548] EXT4-fs (loop2): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 37.619931][ T30] audit: type=1326 audit(1785789047.014:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=555 comm="syz.3.69" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565de53019 code=0x7ffc0000 [ 38.106711][ T561] loop5: detected capacity change from 0 to 256 [ 38.268425][ T561] FAT-fs (loop5): Directory bread(block 64) failed [ 38.275633][ T561] FAT-fs (loop5): Directory bread(block 65) failed [ 38.283745][ T561] FAT-fs (loop5): Directory bread(block 66) failed [ 38.290930][ T561] FAT-fs (loop5): Directory bread(block 67) failed [ 38.298790][ T561] FAT-fs (loop5): Directory bread(block 68) failed [ 38.305883][ T561] FAT-fs (loop5): Directory bread(block 69) failed [ 38.313724][ T561] FAT-fs (loop5): Directory bread(block 70) failed [ 38.321165][ T561] FAT-fs (loop5): Directory bread(block 71) failed [ 38.329417][ T561] FAT-fs (loop5): Directory bread(block 72) failed [ 38.655551][ T561] FAT-fs (loop5): Directory bread(block 73) failed [ 38.697783][ T561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.70'. [ 38.774136][ T563] loop0: detected capacity change from 0 to 1024 [ 38.815510][ T563] EXT4-fs (loop0): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 38.864099][ T567] loop3: detected capacity change from 0 to 2048 [ 38.948836][ T567] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,lazytime,errors=remount-ro,mb_optimize_scan=0x0000000000000001,. Quota mode: none. [ 39.000095][ T573] loop4: detected capacity change from 0 to 256 [ 39.006630][ T567] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 39.041317][ T567] EXT4-fs (loop3): Remounting filesystem read-only [ 39.043585][ T487] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 39.055511][ T487] usb 5-1: can't read configurations, error -71 [ 39.065961][ T573] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.076930][ T573] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 39.095297][ T573] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 39.113857][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 39.113875][ T30] audit: type=1400 audit(1785789048.564:229): avc: denied { wake_alarm } for pid=576 comm="syz.5.75" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.148977][ T548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.64'. [ 39.151732][ T30] audit: type=1400 audit(1785789048.594:230): avc: denied { write } for pid=572 comm="syz.4.74" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.182455][ T548] loop2: detected capacity change from 0 to 512 [ 39.189830][ T30] audit: type=1400 audit(1785789048.594:231): avc: denied { add_name } for pid=572 comm="syz.4.74" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.218428][ T563] netlink: 60 bytes leftover after parsing attributes in process `syz.0.71'. [ 39.227525][ T548] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.249374][ T563] loop0: detected capacity change from 0 to 512 [ 39.288377][ T563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.309050][ T548] EXT4-fs (loop2): 1 truncate cleaned up [ 39.314776][ T548] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 39.322455][ T582] loop5: detected capacity change from 0 to 4096 [ 39.360514][ T30] audit: type=1400 audit(1785789048.594:232): avc: denied { associate } for pid=572 comm="syz.4.74" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.369619][ T563] EXT4-fs (loop0): 1 truncate cleaned up [ 39.397222][ T582] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 39.397222][ T582] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 39.397222][ T582] [ 39.416139][ T582] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 39.423538][ T582] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 39.432763][ T582] EXT4-fs (loop5): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 39.506008][ T30] audit: type=1400 audit(1785789048.734:233): avc: denied { read write open } for pid=572 comm="syz.4.74" path="/14/bus/file1" dev="loop4" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.597028][ T30] audit: type=1400 audit(1785789048.744:234): avc: denied { map } for pid=572 comm="syz.4.74" path="/14/bus/file1" dev="loop4" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.625375][ T563] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 40.372294][ T30] audit: type=1400 audit(1785789049.824:235): avc: denied { create } for pid=592 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.411941][ T30] audit: type=1400 audit(1785789049.854:236): avc: denied { bind } for pid=592 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.461641][ T30] audit: type=1400 audit(1785789049.854:237): avc: denied { name_bind } for pid=592 comm="syz.4.78" src=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 40.490311][ T30] audit: type=1400 audit(1785789049.854:238): avc: denied { node_bind } for pid=592 comm="syz.4.78" src=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 40.526791][ T606] netlink: 'syz.0.80': attribute type 4 has an invalid length. [ 40.626678][ T603] loop4: detected capacity change from 0 to 4096 [ 40.682581][ T603] EXT4-fs (loop4): Test dummy encryption mode enabled [ 40.695623][ T603] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 40.709104][ T603] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (22283!=55237) [ 40.718876][ T603] EXT4-fs (loop4): group descriptors corrupted! [ 40.912314][ T617] netlink: 308 bytes leftover after parsing attributes in process `syz.2.84'. [ 40.955016][ T617] exfat: Deprecated parameter 'utf8' [ 41.897124][ C0] sched: RT throttling activated [ 42.006681][ T617] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 42.053564][ T627] raw_sendmsg: syz.0.89 forgot to set AF_INET. Fix it! [ 42.106370][ T630] ip_tables: iptables: counters copy to user failed while replacing table [ 42.258851][ T622] overlayfs: missing 'lowerdir' [ 42.272490][ T632] netlink: 'syz.2.91': attribute type 3 has an invalid length. [ 42.287159][ C0] bridge0: port 3(syz_tun) entered learning state [ 42.324317][ T636] binder: 635:636 ioctl 4018620d 0 returned -22 [ 42.428706][ T636] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.497884][ T643] netlink: 308 bytes leftover after parsing attributes in process `syz.2.94'. [ 42.519853][ T643] set_capacity_and_notify: 3 callbacks suppressed [ 42.519880][ T643] loop2: detected capacity change from 0 to 256 [ 42.549792][ T643] exfat: Deprecated parameter 'utf8' [ 42.560079][ T636] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.578376][ T643] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 42.726769][ T636] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: comm syz.3.92: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.745870][ T636] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 42.758248][ T636] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.758248][ T636] [ 42.771854][ T636] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.92: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.803694][ T649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.96'. [ 42.901598][ T652] loop5: detected capacity change from 0 to 256 [ 42.914044][ T654] loop3: detected capacity change from 0 to 512 [ 43.052963][ T652] process 'syz.5.99' launched './file0' with NULL argv: empty string added [ 43.778637][ T660] loop2: detected capacity change from 0 to 1024 [ 43.800007][ T667] loop3: detected capacity change from 0 to 512 [ 43.827691][ T660] EXT4-fs (loop2): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 43.883144][ T671] incfs: Options parsing error. -22 [ 43.897504][ T671] incfs: mount failed -22 [ 43.933486][ T679] loop5: detected capacity change from 0 to 512 [ 43.997680][ T660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.101'. [ 44.029703][ T660] loop2: detected capacity change from 0 to 512 [ 44.077826][ T660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.140614][ T660] EXT4-fs (loop2): 1 truncate cleaned up [ 44.181303][ T660] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 44.245895][ T690] netlink: 308 bytes leftover after parsing attributes in process `syz.0.111'. [ 44.531350][ T667] overlayfs: missing 'lowerdir' [ 48.307428][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 48.307588][ T30] audit: type=1400 audit(1785789056.414:256): avc: denied { create } for pid=707 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 48.732266][ T30] audit: type=1400 audit(1785789057.744:257): avc: denied { write } for pid=707 comm="syz.4.115" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.811138][ T721] loop5: detected capacity change from 0 to 1024 [ 48.829102][ T30] audit: type=1400 audit(1785789058.284:258): avc: denied { create } for pid=723 comm="syz.2.121" dev="anon_inodefs" ino=17936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.834508][ T728] loop4: detected capacity change from 0 to 512 [ 48.861429][ T30] audit: type=1400 audit(1785789058.314:259): avc: denied { ioctl } for pid=723 comm="syz.2.121" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17936 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.351190][ T721] EXT4-fs (loop5): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 50.472388][ T721] netlink: 60 bytes leftover after parsing attributes in process `syz.5.123'. [ 50.488631][ T30] audit: type=1400 audit(1785789059.944:260): avc: denied { setopt } for pid=734 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.517947][ T721] loop5: detected capacity change from 0 to 512 [ 50.557311][ T30] audit: type=1400 audit(1785789059.964:261): avc: denied { read } for pid=734 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.579168][ T721] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 50.597413][ T30] audit: type=1400 audit(1785789059.974:262): avc: denied { mount } for pid=736 comm="syz.0.126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.625463][ T30] audit: type=1400 audit(1785789059.974:263): avc: denied { search } for pid=736 comm="syz.0.126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.647264][ T30] audit: type=1400 audit(1785789059.974:264): avc: denied { read } for pid=736 comm="syz.0.126" name="enable" dev="tracefs" ino=11392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.651127][ T721] EXT4-fs (loop5): 1 truncate cleaned up [ 50.670439][ T30] audit: type=1400 audit(1785789059.974:265): avc: denied { open } for pid=736 comm="syz.0.126" path="/29/trace/events/mac80211/enable" dev="tracefs" ino=11392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.730656][ T721] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 51.274493][ T762] loop2: detected capacity change from 0 to 512 [ 51.308260][ T728] overlayfs: missing 'lowerdir' [ 51.321458][ T762] EXT4-fs (loop2): Ignoring removed orlov option [ 51.337241][ T762] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 51.358114][ T762] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #15: comm syz.2.134: corrupted in-inode xattr [ 51.385326][ T762] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.134: couldn't read orphan inode 15 (err -117) [ 51.398516][ T762] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,norecovery,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 51.491014][ T770] netlink: 'syz.4.135': attribute type 4 has an invalid length. [ 52.546770][ T799] loop4: detected capacity change from 0 to 1024 [ 52.673081][ T799] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 53.769505][ T802] loop2: detected capacity change from 0 to 512 [ 53.786889][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 53.786904][ T30] audit: type=1400 audit(1785789063.234:273): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.821062][ T799] netlink: 60 bytes leftover after parsing attributes in process `syz.4.144'. [ 53.853611][ T799] loop4: detected capacity change from 0 to 512 [ 53.868546][ T30] audit: type=1400 audit(1785789063.324:274): avc: denied { ioctl } for pid=803 comm="syz.3.146" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.899287][ T799] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.920935][ T799] EXT4-fs (loop4): 1 truncate cleaned up [ 53.926786][ T30] audit: type=1400 audit(1785789063.374:275): avc: denied { connect } for pid=803 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.946465][ T799] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 53.977714][ T30] audit: type=1400 audit(1785789063.374:276): avc: denied { ioctl } for pid=803 comm="syz.3.146" path="socket:[18205]" dev="sockfs" ino=18205 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.631082][ T815] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 54.809980][ T819] tipc: Started in network mode [ 54.814969][ T819] tipc: Node identity 4, cluster identity 4711 [ 54.821205][ T819] tipc: Node number set to 4 [ 55.172986][ T802] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 55.191072][ T802] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 56.187440][ T30] audit: type=1400 audit(1785789065.414:277): avc: denied { read } for pid=830 comm="syz.2.156" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.669625][ T30] audit: type=1400 audit(1785789065.414:278): avc: denied { open } for pid=830 comm="syz.2.156" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.695084][ T30] audit: type=1400 audit(1785789065.414:279): avc: denied { ioctl } for pid=830 comm="syz.2.156" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.723889][ T30] audit: type=1400 audit(1785789066.044:280): avc: denied { getopt } for pid=843 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.743551][ T30] audit: type=1400 audit(1785789066.044:281): avc: denied { unlink } for pid=843 comm="syz.0.160" name="#1" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.856259][ T857] SELinux: policydb version 0 does not match my version range 15-33 [ 56.881893][ T858] netlink: 308 bytes leftover after parsing attributes in process `syz.4.162'. [ 56.909361][ T858] loop4: detected capacity change from 0 to 256 [ 56.938464][ T858] exfat: Deprecated parameter 'utf8' [ 56.945343][ T30] audit: type=1400 audit(1785789066.304:282): avc: denied { load_policy } for pid=856 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 56.981671][ T858] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 57.129997][ T857] SELinux: failed to load policy [ 57.251234][ T839] loop5: detected capacity change from 0 to 40427 [ 57.267256][ T839] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 57.281153][ T839] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 57.330278][ T839] F2FS-fs (loop5): Found nat_bits in checkpoint [ 57.397091][ T839] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 57.404289][ T839] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 57.440006][ T855] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 57.477606][ T855] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 57.647135][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 57.653777][ C0] bridge0: topology change detected, propagating [ 58.000037][ T875] netlink: 'syz.0.167': attribute type 4 has an invalid length. [ 58.282032][ T881] loop2: detected capacity change from 0 to 1024 [ 58.359589][ T881] EXT4-fs (loop2): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 58.480541][ T881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.170'. [ 58.506944][ T881] loop2: detected capacity change from 0 to 512 [ 58.568002][ T881] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.587927][ T306] device bridge_slave_1 left promiscuous mode [ 58.594249][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.615311][ T881] EXT4-fs (loop2): 1 truncate cleaned up [ 58.634618][ T306] device bridge_slave_0 left promiscuous mode [ 58.640812][ T881] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 58.661174][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.678360][ T306] device veth1_macvtap left promiscuous mode [ 58.830792][ T890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.174'. [ 58.857210][ T307] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.755644][ T903] loop2: detected capacity change from 0 to 512 [ 59.773108][ T888] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.776631][ T905] loop3: detected capacity change from 0 to 128 [ 59.787148][ T888] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.807178][ T307] usb 5-1: Using ep0 maxpacket: 16 [ 59.809048][ T888] device bridge_slave_0 entered promiscuous mode [ 59.821851][ T888] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.829405][ T888] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.836992][ T888] device bridge_slave_1 entered promiscuous mode [ 59.878075][ T905] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.927212][ T905] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.937576][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.967157][ T307] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 59.984595][ T888] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.991795][ T888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.999114][ T888] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.006165][ T888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.027171][ T307] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.036253][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.044849][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.053042][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.061619][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.069561][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 60.069575][ T30] audit: type=1400 audit(1785789069.524:343): avc: denied { setopt } for pid=904 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.099942][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.114236][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.121387][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.139318][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.140743][ T307] usb 5-1: config 0 descriptor?? [ 60.148229][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.159439][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.184633][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.194303][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.203189][ T909] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.222088][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.237674][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.245904][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.253720][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.267901][ T888] device veth0_vlan entered promiscuous mode [ 60.281436][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.291995][ T888] device veth1_macvtap entered promiscuous mode [ 60.303181][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.324367][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.349239][ T30] audit: type=1400 audit(1785789069.804:344): avc: denied { mounton } for pid=888 comm="syz-executor" path="/root/syzkaller.Gt5OuC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.412970][ T903] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 60.421810][ T903] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 60.505901][ T914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 60.557350][ T30] audit: type=1400 audit(1785789070.004:345): avc: denied { append } for pid=913 comm="syz.0.183" name="event1" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.647704][ T918] loop2: detected capacity change from 0 to 40427 [ 60.657354][ T58] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.660286][ T307] microsoft 0003:045E:07DA.0001: unexpected long global item [ 60.665884][ T918] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 60.687434][ T307] microsoft 0003:045E:07DA.0001: parse failed [ 60.693562][ T307] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 60.702243][ T918] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 60.711457][ T918] F2FS-fs (loop2): invalid crc value [ 60.727633][ T918] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.770538][ T918] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 60.777892][ T918] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.828337][ T926] loop3: detected capacity change from 0 to 2048 [ 60.867701][ T926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.882970][ T926] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.947216][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 60.982143][ T935] loop3: detected capacity change from 0 to 1024 [ 60.999753][ T935] EXT4-fs (loop3): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 61.016778][ T935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.189'. [ 61.031114][ T935] loop3: detected capacity change from 0 to 512 [ 61.042985][ T935] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.074045][ T935] EXT4-fs (loop3): 1 truncate cleaned up [ 61.080101][ T935] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 61.087470][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.169372][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.179857][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.192876][ T58] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 61.202199][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.210863][ T58] usb 7-1: config 0 descriptor?? [ 61.484981][ T30] audit: type=1400 audit(1785789070.934:346): avc: denied { write } for pid=944 comm="syz.0.191" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.560641][ T951] FAULT_INJECTION: forcing a failure. [ 61.560641][ T951] name failslab, interval 1, probability 0, space 0, times 0 [ 61.573444][ T951] CPU: 0 PID: 951 Comm: syz.0.194 Not tainted syzkaller #0 [ 61.580660][ T951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.590838][ T951] Call Trace: [ 61.594189][ T951] [ 61.597127][ T951] __dump_stack+0x21/0x30 [ 61.601507][ T951] dump_stack_lvl+0x110/0x170 [ 61.606222][ T951] ? show_regs_print_info+0x20/0x20 [ 61.611444][ T951] ? avc_has_perm_noaudit+0x30a/0x490 [ 61.616856][ T951] dump_stack+0x15/0x20 [ 61.621040][ T951] should_fail+0x3ab/0x500 [ 61.625460][ T951] __should_failslab+0xa4/0xe0 [ 61.630272][ T951] should_failslab+0x9/0x20 [ 61.634795][ T951] slab_pre_alloc_hook+0x39/0xd0 [ 61.639774][ T951] __kmalloc+0x6d/0x2c0 [ 61.643951][ T951] ? __cgroup_bpf_run_filter_setsockopt+0x296/0xaa0 [ 61.650572][ T951] __cgroup_bpf_run_filter_setsockopt+0x296/0xaa0 [ 61.657006][ T951] ? proc_fail_nth_read+0x220/0x220 [ 61.662210][ T951] ? selinux_socket_setsockopt+0x282/0x360 [ 61.668128][ T951] ? vfs_write+0xc72/0xfd0 [ 61.672677][ T951] ? __cgroup_bpf_run_filter_sysctl+0x760/0x760 [ 61.678943][ T951] ? __fget_files+0x2e1/0x340 [ 61.683628][ T951] ? security_socket_setsockopt+0x82/0xa0 [ 61.689355][ T951] __sys_setsockopt+0x40e/0x470 [ 61.694221][ T951] ? __kasan_check_write+0x14/0x20 [ 61.699338][ T951] ? __ia32_sys_recv+0xb0/0xb0 [ 61.704099][ T951] ? ksys_write+0x1fa/0x260 [ 61.708606][ T951] ? __ia32_sys_read+0x90/0x90 [ 61.713368][ T951] __x64_sys_setsockopt+0xbf/0xd0 [ 61.718395][ T951] x64_sys_call+0x982/0x9a0 [ 61.722926][ T951] do_syscall_64+0x4c/0xa0 [ 61.727340][ T951] ? clear_bhb_loop+0x50/0xa0 [ 61.732022][ T951] ? clear_bhb_loop+0x50/0xa0 [ 61.736760][ T951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.741351][ T58] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 61.742802][ T951] RIP: 0033:0x7fd13a506019 [ 61.742824][ T951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.763803][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 61.774314][ T951] RSP: 002b:00007fd138f5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 61.774351][ T951] RAX: ffffffffffffffda RBX: 00007fd13a78dfa0 RCX: 00007fd13a506019 [ 61.774366][ T951] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000005 [ 61.774379][ T951] RBP: 00007fd138f5f090 R08: 0000000000000090 R09: 0000000000000000 [ 61.781989][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 61.790082][ T951] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 61.790104][ T951] R13: 00007fd13a78e038 R14: 00007fd13a78dfa0 R15: 00007fff64a087c8 [ 61.790123][ T951] [ 61.890272][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 61.898120][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 61.910860][ T307] usb 5-1: USB disconnect, device number 5 [ 61.912976][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 61.941465][ T952] tmpfs: Unknown parameter 'fs Yntext' [ 61.942608][ T954] xt_hashlimit: size too large, truncated to 1048576 [ 61.971850][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 62.163154][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 62.173009][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 62.181086][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 62.189284][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 62.196721][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 62.282930][ T970] netlink: 308 bytes leftover after parsing attributes in process `syz.2.200'. [ 62.311314][ T970] loop2: detected capacity change from 0 to 256 [ 62.492285][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 62.507431][ T970] exfat: Deprecated parameter 'utf8' [ 62.520024][ T970] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 62.675844][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 62.725042][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 62.763163][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 62.904893][ T58] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0002/input/input5 [ 62.968072][ T30] audit: type=1400 audit(1785789072.424:347): avc: denied { nlmsg_write } for pid=979 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 62.988802][ T980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1009 sclass=netlink_audit_socket pid=980 comm=syz.2.202 [ 63.002119][ T58] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 63.024274][ T30] audit: type=1400 audit(1785789072.444:348): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=789 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.081943][ T30] audit: type=1400 audit(1785789072.444:349): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=789 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.152502][ T30] audit: type=1400 audit(1785789072.444:350): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=789 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.159757][ T985] loop2: detected capacity change from 0 to 512 [ 63.238173][ T990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.208'. [ 63.347437][ T985] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 64.153823][ T486] usb 7-1: USB disconnect, device number 2 [ 64.199172][ T985] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 64.405079][ T985] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.703724][ T1003] netlink: 308 bytes leftover after parsing attributes in process `syz.6.209'. [ 64.715138][ T1003] loop6: detected capacity change from 0 to 256 [ 64.768863][ T1003] exfat: Deprecated parameter 'utf8' [ 64.785131][ T1003] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 64.983819][ T1007] loop3: detected capacity change from 0 to 1024 [ 65.028379][ T1007] EXT4-fs (loop3): Test dummy encryption mode enabled [ 65.058785][ T1017] xt_hashlimit: size too large, truncated to 1048576 [ 65.116604][ T1007] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,min_batch_time=0x0000000000000040,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 65.146267][ T30] audit: type=1400 audit(1785789074.594:351): avc: denied { read write } for pid=1014 comm="syz.0.217" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 65.176599][ T1019] loop4: detected capacity change from 0 to 1024 [ 65.213607][ T30] audit: type=1400 audit(1785789074.594:352): avc: denied { open } for pid=1014 comm="syz.0.217" path="/56/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 65.254323][ T30] audit: type=1400 audit(1785789074.634:353): avc: denied { ioctl } for pid=1006 comm="syz.3.212" path="socket:[19645]" dev="sockfs" ino=19645 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.289129][ T1019] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 66.274775][ T1019] netlink: 60 bytes leftover after parsing attributes in process `syz.4.215'. [ 66.290500][ T1030] loop6: detected capacity change from 0 to 512 [ 66.319970][ T1019] loop4: detected capacity change from 0 to 512 [ 66.361666][ T1019] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.378933][ T1030] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 66.395388][ T1030] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.414986][ T1030] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.220: bg 0: block 217: padding at end of block bitmap is not set [ 66.429683][ T1030] EXT4-fs (loop6): Remounting filesystem read-only [ 66.436242][ T1030] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 66.445220][ T1030] EXT4-fs (loop6): Remounting filesystem read-only [ 66.471320][ T1019] EXT4-fs (loop4): 1 truncate cleaned up [ 66.477059][ T1019] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 66.547451][ T1021] loop2: detected capacity change from 0 to 40427 [ 66.559556][ T1036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.221'. [ 66.569417][ T1021] F2FS-fs (loop2): fault_injection options not supported [ 66.576700][ T1021] F2FS-fs (loop2): fault_type options not supported [ 66.587785][ T1021] F2FS-fs (loop2): invalid crc value [ 66.620372][ T1021] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.695686][ T1021] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.718995][ T1021] attempt to access beyond end of device [ 66.718995][ T1021] loop2: rw=2049, want=45104, limit=40427 [ 66.816111][ T286] attempt to access beyond end of device [ 66.816111][ T286] loop2: rw=2049, want=45112, limit=40427 [ 67.074510][ T1049] loop4: detected capacity change from 0 to 512 [ 67.132621][ T1049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.165670][ T1049] EXT4-fs (loop4): 1 truncate cleaned up [ 67.185881][ T1049] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.218712][ T30] audit: type=1400 audit(1785789076.674:354): avc: denied { read } for pid=1059 comm="syz.6.229" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.306133][ T30] audit: type=1400 audit(1785789076.694:355): avc: denied { append } for pid=1048 comm="syz.4.223" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.329245][ T30] audit: type=1400 audit(1785789076.704:356): avc: denied { open } for pid=1059 comm="syz.6.229" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.352667][ T30] audit: type=1400 audit(1785789076.704:357): avc: denied { ioctl } for pid=1059 comm="syz.6.229" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.115063][ T30] audit: type=1326 audit(1785789077.564:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 68.177189][ T30] audit: type=1326 audit(1785789077.594:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 68.267192][ T30] audit: type=1326 audit(1785789077.594:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 68.557212][ T483] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.666638][ T1109] loop5: detected capacity change from 0 to 7 [ 68.707185][ T39] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 68.927264][ T483] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 68.937077][ T483] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 68.947030][ T483] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 68.956376][ T483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.057191][ T486] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 69.077238][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.097155][ T39] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 69.107731][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 69.277191][ T39] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 69.286273][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 69.297156][ T486] usb 5-1: Using ep0 maxpacket: 8 [ 69.302111][ T39] usb 1-1: Product: syz [ 69.306534][ T39] usb 1-1: Manufacturer: syz [ 69.311498][ T39] usb 1-1: SerialNumber: syz [ 69.319643][ T39] usb 1-1: config 0 descriptor?? [ 69.357700][ T39] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 69.447219][ T486] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 69.455397][ T486] usb 5-1: config 0 has no interface number 0 [ 69.461764][ T486] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 69.472465][ T486] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 69.483146][ T486] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.496171][ T486] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 69.505268][ T486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.522120][ T486] usb 5-1: config 0 descriptor?? [ 69.937183][ T486] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.127272][ T307] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.367186][ T307] usb 7-1: Using ep0 maxpacket: 16 [ 70.457231][ T486] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 70.466382][ T486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.474522][ T486] usb 4-1: Product: syz [ 70.478767][ T486] usb 4-1: Manufacturer: syz [ 70.483403][ T486] usb 4-1: SerialNumber: syz [ 70.488134][ T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.499358][ T307] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 70.508826][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.517529][ T307] usb 7-1: config 0 descriptor?? [ 70.998861][ T307] hid-generic 0003:04D8:00DD.0003: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 71.288113][ T39] usb 3-1: USB disconnect, device number 2 [ 71.304031][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 71.304047][ T30] audit: type=1400 audit(1785789080.754:418): avc: denied { mounton } for pid=1155 comm="syz.2.261" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 71.399242][ T486] usb 7-1: USB disconnect, device number 3 [ 71.442770][ T1168] kvm: apic: phys broadcast and lowest prio [ 71.458951][ T58] usb 1-1: USB disconnect, device number 2 [ 71.501332][ T1177] netlink: 'syz.2.269': attribute type 46 has an invalid length. [ 71.509253][ T1177] netlink: 'syz.2.269': attribute type 28 has an invalid length. [ 71.524876][ T30] audit: type=1400 audit(1785789080.974:419): avc: denied { read } for pid=1172 comm="syz.0.267" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.548357][ T30] audit: type=1400 audit(1785789080.974:420): avc: denied { open } for pid=1172 comm="syz.0.267" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.572102][ T30] audit: type=1400 audit(1785789081.004:421): avc: denied { ioctl } for pid=1172 comm="syz.0.267" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.799668][ T308] usb 5-1: USB disconnect, device number 6 [ 71.810389][ T483] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.840402][ T30] audit: type=1400 audit(1785789081.294:422): avc: denied { read write } for pid=1186 comm="syz.3.273" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.846338][ T486] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.871533][ T39] usb 4-1: USB disconnect, device number 3 [ 71.879603][ T30] audit: type=1400 audit(1785789081.294:423): avc: denied { open } for pid=1186 comm="syz.3.273" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.903835][ T486] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.983725][ T30] audit: type=1400 audit(1785789081.434:424): avc: denied { mounton } for pid=1194 comm="syz.6.276" path="/15/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 71.995462][ T1195] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 72.014732][ T1195] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 72.017399][ T58] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.059464][ T483] usb 3-1: Using ep0 maxpacket: 32 [ 72.177247][ T483] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 72.185509][ T308] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 72.193094][ T483] usb 3-1: config 0 has no interface number 0 [ 72.267176][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 72.347201][ T486] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.357371][ T483] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 72.366503][ T483] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.374963][ T26] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 72.382661][ T483] usb 3-1: Product: syz [ 72.386836][ T483] usb 3-1: Manufacturer: syz [ 72.391551][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.402562][ T58] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 72.411717][ T483] usb 3-1: SerialNumber: syz [ 72.416657][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.425004][ T483] usb 3-1: config 0 descriptor?? [ 72.430711][ T58] usb 1-1: config 0 descriptor?? [ 72.467782][ T483] smsc95xx v2.0.0 [ 72.547276][ T308] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 72.555365][ T308] usb 5-1: config 1 has no interface number 0 [ 72.597172][ T486] usb 7-1: Using ep0 maxpacket: 32 [ 72.717252][ T486] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 72.717284][ T308] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 72.728245][ T486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 72.737414][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.756350][ T308] usb 5-1: Product: syz [ 72.760626][ T26] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 72.760921][ T486] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 72.771854][ T308] usb 5-1: Manufacturer: syz [ 72.784904][ T486] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 72.789708][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.798567][ T486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.809689][ T308] usb 5-1: SerialNumber: syz [ 72.820214][ T486] usb 7-1: config 0 descriptor?? [ 72.826838][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.837052][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 72.850797][ T26] usb 4-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 72.859907][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.868961][ T26] usb 4-1: config 0 descriptor?? [ 72.908981][ T58] hid-generic 0003:04D8:00DD.0005: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 73.091815][ T58] usb 5-1: USB disconnect, device number 7 [ 73.308099][ T486] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 73.315183][ T486] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 73.315659][ T58] usb 1-1: USB disconnect, device number 3 [ 73.323432][ T486] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 73.335157][ T486] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 73.341561][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.342415][ T486] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 73.356542][ T486] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 73.362758][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.363976][ T486] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 73.378293][ T486] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 73.379221][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.385277][ T486] holtek 0003:1241:5015.0006: item fetching failed at offset 15/40 [ 73.385931][ T486] holtek 0003:1241:5015.0006: parse failed [ 73.393442][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.402353][ T486] holtek: probe of 0003:1241:5015.0006 failed with error -22 [ 73.406749][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.429843][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.437309][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.444804][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.452307][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.459835][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.467292][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.474741][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.482276][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.489877][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.497309][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.504711][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.512211][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.519734][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.527302][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.534785][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.542238][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.549792][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.557354][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.564776][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.572639][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.580308][ T486] usb 7-1: USB disconnect, device number 4 [ 73.580335][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.593604][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.601172][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.611561][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.619219][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.626951][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.634443][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.642864][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.651205][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.658915][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.666306][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.673750][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.681166][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.688598][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.695993][ T26] hid-generic 0003:05AC:0323.0007: unknown main item tag 0x0 [ 73.704246][ T26] hid-generic 0003:05AC:0323.0007: hidraw0: USB HID v0.06 Device [HID 05ac:0323] on usb-dummy_hcd.3-1/input0 [ 73.717831][ T26] usb 4-1: USB disconnect, device number 4 [ 73.738148][ T1208] fido_id[1208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 73.787245][ T483] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 73.798437][ T483] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 73.827351][ T483] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 73.838284][ T483] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 73.845972][ T483] usb 3-1: USB disconnect, device number 3 [ 73.917274][ T20] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 74.137240][ T58] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 74.157218][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 74.317532][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 74.387175][ T486] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 74.397479][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.407683][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.517233][ T58] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 74.525513][ T58] usb 1-1: config 0 has no interface number 0 [ 74.531708][ T58] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 74.542894][ T58] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 74.547335][ T307] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 74.567276][ T20] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 74.576378][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.584532][ T20] usb 5-1: Product: syz [ 74.588726][ T20] usb 5-1: Manufacturer: syz [ 74.593313][ T20] usb 5-1: SerialNumber: syz [ 74.667291][ T58] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 74.676496][ T58] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 74.684534][ T58] usb 1-1: Manufacturer: syz [ 74.689367][ T58] usb 1-1: SerialNumber: syz [ 74.694804][ T58] usb 1-1: config 0 descriptor?? [ 74.747240][ T486] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 74.756404][ T486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.765112][ T486] usb 7-1: config 0 descriptor?? [ 74.797233][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 74.917364][ T307] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 74.925544][ T307] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.935720][ T307] usb 3-1: config 0 has no interface number 0 [ 74.941954][ T307] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.957247][ T20] usb 5-1: 0:1 : does not exist [ 74.977318][ T20] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 74.986522][ T20] usb 5-1: USB disconnect, device number 8 [ 75.107214][ T307] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 75.116304][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.124521][ T307] usb 3-1: Product: syz [ 75.128756][ T307] usb 3-1: Manufacturer: syz [ 75.133364][ T307] usb 3-1: SerialNumber: syz [ 75.138956][ T307] usb 3-1: config 0 descriptor?? [ 75.177866][ T307] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 75.388758][ T1233] loop4: detected capacity change from 0 to 1024 [ 75.411954][ T1233] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 75.423747][ T1233] netlink: 60 bytes leftover after parsing attributes in process `syz.4.292'. [ 75.448184][ T1233] loop4: detected capacity change from 0 to 512 [ 75.456205][ T1233] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.468721][ T1233] EXT4-fs (loop4): 1 truncate cleaned up [ 75.474409][ T1233] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 76.465485][ T1244] netlink: 308 bytes leftover after parsing attributes in process `syz.4.293'. [ 76.875677][ T307] usb 1-1: USB disconnect, device number 4 [ 76.896563][ T1246] xt_hashlimit: size too large, truncated to 1048576 [ 77.129145][ T307] usb 7-1: USB disconnect, device number 5 [ 77.307690][ T58] usb 3-1: USB disconnect, device number 4 [ 77.368856][ T1259] loop3: detected capacity change from 0 to 40427 [ 77.410019][ T1259] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 77.424739][ T1259] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 77.441774][ T1259] F2FS-fs (loop3): fault_type options not supported [ 77.449869][ T1259] F2FS-fs (loop3): invalid crc value [ 77.456053][ T1259] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 77.488323][ T1259] F2FS-fs (loop3): Start checkpoint disabled! [ 77.495180][ T1259] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 77.502323][ T1259] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 77.534467][ T30] audit: type=1400 audit(1785789086.984:425): avc: denied { remount } for pid=1256 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.727147][ T58] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 77.774480][ T30] audit: type=1326 audit(1785789087.224:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.0.305" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 77.810808][ T30] audit: type=1326 audit(1785789087.254:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.0.305" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 77.845693][ T30] audit: type=1326 audit(1785789087.254:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.0.305" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 77.887161][ T30] audit: type=1326 audit(1785789087.254:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.0.305" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 77.927151][ T30] audit: type=1326 audit(1785789087.254:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.0.305" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 77.957184][ T26] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.977146][ T30] audit: type=1326 audit(1785789087.254:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.0.305" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 78.014072][ T1274] loop3: detected capacity change from 0 to 40427 [ 78.020817][ T30] audit: type=1326 audit(1785789087.254:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.0.305" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 78.055200][ T1274] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 78.067163][ T1274] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.075919][ T30] audit: type=1326 audit(1785789087.254:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.0.305" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 78.100808][ T30] audit: type=1326 audit(1785789087.254:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.0.305" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd13a506019 code=0x7ffc0000 [ 78.145689][ T1274] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.215859][ T1274] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 78.223630][ T58] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.235191][ T26] usb 7-1: Using ep0 maxpacket: 16 [ 78.236995][ T1274] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.307697][ T1278] tipc: Enabling of bearer rejected, media not registered [ 78.397578][ T26] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 78.397615][ T58] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.416084][ T58] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.431576][ T1289] netlink: 308 bytes leftover after parsing attributes in process `syz.4.308'. [ 78.492711][ T26] usb 7-1: config 0 has no interface number 0 [ 78.542955][ T26] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 78.598317][ T26] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 78.637812][ T58] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 78.648205][ T1287] attempt to access beyond end of device [ 78.648205][ T1287] loop3: rw=2049, want=45104, limit=40427 [ 78.678782][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.716263][ T58] usb 3-1: Product: syz [ 78.720757][ T58] usb 3-1: Manufacturer: syz [ 78.725396][ T58] usb 3-1: SerialNumber: syz [ 78.798366][ T26] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 78.807884][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.815954][ T26] usb 7-1: Product: syz [ 78.820559][ T26] usb 7-1: Manufacturer: syz [ 78.825227][ T26] usb 7-1: SerialNumber: syz [ 78.830823][ T26] usb 7-1: config 0 descriptor?? [ 78.847232][ T1268] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 78.849406][ T58] usb 3-1: selecting invalid altsetting 1 [ 78.854915][ T1268] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 78.867317][ T58] usb 3-1: unit 6 not found! [ 78.937053][ T1297] netlink: 308 bytes leftover after parsing attributes in process `syz.0.310'. [ 79.210205][ T1268] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 79.231680][ T1268] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 79.487342][ T26] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 79.517219][ T370] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 79.757187][ T370] usb 5-1: Using ep0 maxpacket: 16 [ 79.877224][ T370] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.887549][ T370] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 79.900618][ T370] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 79.909723][ T370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.918439][ T370] usb 5-1: config 0 descriptor?? [ 79.957710][ T370] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 80.137167][ T486] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.179363][ T307] usb 5-1: USB disconnect, device number 9 [ 80.303098][ T1328] netlink: 60 bytes leftover after parsing attributes in process `syz.0.321'. [ 80.727216][ T486] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.737456][ T486] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.748415][ T486] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.896118][ T58] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 80.917235][ T486] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.930038][ T486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.938396][ T486] usb 4-1: Product: syz [ 80.942699][ T486] usb 4-1: Manufacturer: syz [ 80.947363][ T486] usb 4-1: SerialNumber: syz [ 80.994135][ T26] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 81.120801][ T58] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 81.128496][ T26] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 81.139518][ T1342] netlink: 308 bytes leftover after parsing attributes in process `syz.4.322'. [ 82.005632][ T1341] netlink: 308 bytes leftover after parsing attributes in process `syz.2.325'. [ 82.030087][ T486] cdc_mbim 4-1:1.0: skipping garbage [ 82.089944][ T26] asix: probe of 7-1:0.34 failed with error -71 [ 82.097676][ T26] usb 7-1: USB disconnect, device number 6 [ 82.107224][ T58] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 82.116986][ T58] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 82.174647][ T58] usb 3-1: USB disconnect, device number 5 [ 82.304335][ T1358] loop2: detected capacity change from 0 to 1024 [ 82.348058][ T1358] EXT4-fs (loop2): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 82.361862][ T1358] netlink: 60 bytes leftover after parsing attributes in process `syz.2.332'. [ 82.408037][ T1358] loop2: detected capacity change from 0 to 512 [ 82.415229][ T1358] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.427193][ T1358] EXT4-fs (loop2): 1 truncate cleaned up [ 82.432873][ T1358] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,usrquota,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 82.576213][ T1371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.337'. [ 82.587303][ T308] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.557246][ T486] cdc_mbim 4-1:1.0: SET_NTB_FORMAT failed [ 83.607349][ T486] cdc_mbim 4-1:1.0: bind() failure [ 83.614058][ T486] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 83.649588][ T486] cdc_ncm 4-1:1.1: bind() failure [ 83.660062][ T486] usb 4-1: USB disconnect, device number 5 [ 83.668055][ T1379] loop6: detected capacity change from 0 to 128 [ 83.676679][ T1379] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.716385][ T308] usb 5-1: Using ep0 maxpacket: 16 [ 83.759182][ T1386] netlink: 308 bytes leftover after parsing attributes in process `syz.3.340'. [ 83.835921][ T1379] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.933735][ T308] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.947183][ T308] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 83.960497][ T308] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 83.969640][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.981976][ T308] usb 5-1: config 0 descriptor?? [ 84.030600][ T308] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 84.044792][ T1394] netlink: 308 bytes leftover after parsing attributes in process `syz.2.341'. [ 84.280190][ T58] usb 5-1: USB disconnect, device number 10 [ 84.337172][ T308] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 84.417209][ T487] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 84.464700][ T1402] loop3: detected capacity change from 0 to 256 [ 84.667181][ T308] usb 1-1: not running at top speed; connect to a high speed hub [ 84.667299][ T487] usb 7-1: Using ep0 maxpacket: 16 [ 84.747236][ T308] usb 1-1: config 10 has an invalid interface number: 8 but max is 0 [ 84.755522][ T308] usb 1-1: config 10 has no interface number 0 [ 84.761958][ T308] usb 1-1: config 10 interface 8 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 84.773172][ T308] usb 1-1: config 10 interface 8 has no altsetting 0 [ 84.947321][ T308] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=fe.e6 [ 84.961679][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.970721][ T308] usb 1-1: Product: syz [ 84.974928][ T308] usb 1-1: Manufacturer: syz [ 84.979806][ T308] usb 1-1: SerialNumber: syz [ 85.076337][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 85.076352][ T30] audit: type=1400 audit(1785789094.524:453): avc: denied { read } for pid=1405 comm="syz.2.348" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.105446][ T30] audit: type=1400 audit(1785789094.524:454): avc: denied { open } for pid=1405 comm="syz.2.348" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.161929][ T1422] dummy_hcd dummy_hcd.0: remove, state 1 [ 85.167981][ T1422] usb usb1: USB disconnect, device number 1 [ 85.207532][ T487] usb 7-1: unable to get BOS descriptor or descriptor too short [ 85.239254][ T1424] loop3: detected capacity change from 0 to 128 [ 85.255930][ T1424] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.273998][ T1424] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.291459][ T1422] usb 1-1: USB disconnect, device number 5 [ 85.309982][ T487] usb 7-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 85.322302][ T1422] dummy_hcd dummy_hcd.0: stopped [ 85.327388][ T1422] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 85.398962][ T487] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.642131][ T1434] xt_l2tp: invalid flags combination: 4 [ 86.208073][ T487] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 86.232816][ T487] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.247331][ T487] usb 7-1: Product: syz [ 86.261876][ T487] usb 7-1: Manufacturer: syz [ 86.266522][ T487] usb 7-1: SerialNumber: syz [ 86.325743][ T8] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.427878][ T1446] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 86.439643][ T1446] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 86.448072][ T1446] CPU: 1 PID: 1446 Comm: syz.0.363 Not tainted syzkaller #0 [ 86.455373][ T1446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.465424][ T1446] RIP: 0010:dummy_udc_start+0xbb/0x1d0 [ 86.470892][ T1446] Code: 00 00 ff 24 c5 c0 20 7c 85 e8 41 0f 40 fe eb 13 e8 3a 0f 40 fe eb 0c e8 33 0f 40 fe eb 05 e8 2c 0f 40 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 86 7e 7f fe 4d 8b 36 4c 89 f7 e8 [ 86.490498][ T1446] RSP: 0018:ffffc90000ca7aa8 EFLAGS: 00010246 [ 86.496573][ T1446] RAX: 0000000000000000 RBX: ffff88811bd70010 RCX: 0000000000080000 [ 86.504566][ T1446] RDX: ffffc9000131b000 RSI: 0000000000000468 RDI: 0000000000000469 [ 86.512548][ T1446] RBP: ffffc90000ca7ad0 R08: ffff88811c988000 R09: 0000000000000004 [ 86.520543][ T1446] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 86.528653][ T1446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 86.536664][ T1446] FS: 00007fd138f5f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 86.545620][ T1446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.552233][ T1446] CR2: 00007fd138f5dfd0 CR3: 0000000129845000 CR4: 00000000003506a0 [ 86.560225][ T1446] DR0: 0000000000000000 DR1: 00000000000018d1 DR2: 0000000000000000 [ 86.568211][ T1446] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 86.576200][ T1446] Call Trace: [ 86.579491][ T1446] [ 86.582460][ T1446] ? dummy_pullup+0x130/0x130 [ 86.587367][ T1446] udc_bind_to_driver+0x2af/0x770 [ 86.592418][ T1446] usb_gadget_probe_driver+0x1fc/0x380 [ 86.597900][ T1446] raw_ioctl+0x114d/0x3040 [ 86.602334][ T1446] ? ioctl_has_perm+0x3ab/0x4f0 [ 86.607200][ T1446] ? audio_source_pcm_show+0xe0/0xe0 [ 86.612709][ T1446] ? has_cap_mac_admin+0x370/0x370 [ 86.617879][ T1446] ? put_vma+0x44/0x60 [ 86.622181][ T1446] ? do_user_addr_fault+0x9e5/0x11c0 [ 86.627495][ T1446] ? selinux_file_ioctl+0x3ad/0x4c0 [ 86.632713][ T1446] ? selinux_file_alloc_security+0x120/0x120 [ 86.638711][ T1446] ? __fget_files+0x2e1/0x340 [ 86.643409][ T1446] ? security_file_ioctl+0x84/0xa0 [ 86.648538][ T1446] ? audio_source_pcm_show+0xe0/0xe0 [ 86.653848][ T1446] __se_sys_ioctl+0x121/0x1a0 [ 86.658546][ T1446] __x64_sys_ioctl+0x7b/0x90 [ 86.663152][ T1446] x64_sys_call+0x2f/0x9a0 [ 86.667578][ T1446] do_syscall_64+0x4c/0xa0 [ 86.672010][ T1446] ? clear_bhb_loop+0x50/0xa0 [ 86.676704][ T1446] ? clear_bhb_loop+0x50/0xa0 [ 86.681389][ T1446] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.687296][ T1446] RIP: 0033:0x7fd13a505cab [ 86.691723][ T1446] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 86.711360][ T1446] RSP: 002b:00007fd138f5cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.719807][ T1446] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd13a505cab [ 86.727793][ T1446] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 86.735778][ T1446] RBP: 00007fd138f5dfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 86.743760][ T1446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.751766][ T1446] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.759773][ T1446] [ 86.762810][ T1446] Modules linked in: [ 86.766801][ T486] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 86.774434][ T1446] ---[ end trace fa6eaf10ff51e160 ]--- [ 86.780091][ T1446] RIP: 0010:dummy_udc_start+0xbb/0x1d0 [ 86.797190][ T30] audit: type=1400 audit(1785789096.234:455): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 86.819241][ T1446] Code: 00 00 ff 24 c5 c0 20 7c 85 e8 41 0f 40 fe eb 13 e8 3a 0f 40 fe eb 0c e8 33 0f 40 fe eb 05 e8 2c 0f 40 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 86 7e 7f fe 4d 8b 36 4c 89 f7 e8 [ 86.839616][ T30] audit: type=1400 audit(1785789096.234:456): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.861273][ T1446] RSP: 0018:ffffc90000ca7aa8 EFLAGS: 00010246 [ 86.867564][ T1446] RAX: 0000000000000000 RBX: ffff88811bd70010 RCX: 0000000000080000 [ 86.875633][ T30] audit: type=1400 audit(1785789096.234:457): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.897036][ T1446] RDX: ffffc9000131b000 RSI: 0000000000000468 RDI: 0000000000000469 [ 86.905300][ T1446] RBP: ffffc90000ca7ad0 R08: ffff88811c988000 R09: 0000000000000004 [ 86.913419][ T30] audit: type=1400 audit(1785789096.244:458): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.934040][ T1446] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 86.942260][ T1446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 86.947453][ T308] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 86.950591][ T30] audit: type=1400 audit(1785789096.244:459): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.978239][ T1446] FS: 00007fd138f5f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 86.987279][ T1446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.993950][ T1446] CR2: 000055557838c948 CR3: 0000000129845000 CR4: 00000000003506b0 [ 87.002049][ T1446] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.010315][ T30] audit: type=1400 audit(1785789096.244:460): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.033323][ T1446] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.041422][ T1446] Kernel panic - not syncing: Fatal exception [ 87.047736][ T1446] Kernel Offset: disabled [ 87.052104][ T1446] Rebooting in 86400 seconds..