last executing test programs: 1m23.385636229s ago: executing program 3 (id=63): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x80000001, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120097", 0x8, 0x3a, 0x0, @mcast1, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x7, 0x2}}}}}}, 0x0) 1m23.325567031s ago: executing program 3 (id=64): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x10, 0x29, 0x39, 0x9ee}}], 0x10}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) socket(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010000000000009500000000000000de759eac6de9ad5d5fd9649b77f9189d4002b0a637e48b1c15a792730e699f36fad16ff8f9b44c4e8722921d795913dad36c48831da238b4254ebc0edbab6c01078c9b4a49fb61a0a6507fa02ae9479d6de75227d330c91e6a4f19f99c01825280eb17c577039f51279d244fc5d8802346ade4b2a651374d274105bdd3ed35f45c7d3de20347df4aadb5f513711382b3ba68e7d29aa130d28fc9cdfcc61894880a8d2d1ee8e42ba907458a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1m20.339261373s ago: executing program 3 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x8, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x121100) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000600)={0xf5c, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b}], @NL80211_ATTR_CSA_IES={0x3ec, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x74, 0x80, [@fast_bss_trans={0x37, 0x68, {0x4, 0x1, "c09de05e2635c9ed3e42e839e7fd51ff", "cda147e8559c07b5c07049b2359f851b9343b8144cbb67c0198095051b141629", "af5fcdb6a6963c1f6cfe37ffb87bc316b05b0d46b67f47f8b3b4d31da1629fe0", [{0x3, 0x14, "d7deb3d3c1085287295219960e2e559d5cacc55a"}]}}, @sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x35f, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x4, 0x9, 0x52d, 0x1, 0x9, 0x9, 0xfffc, 0x1]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x85}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xb08, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x1, 0x0, 0x4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x100, 0x4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x2, 0x9]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x140, 0x7f, [@fast_bss_trans={0x37, 0x102, {0x5, 0x8, "78c0b9f3a67835ed96d580d8cb7eff88", "1d3a769ccd1c29fc358e5d3a9e24db101fb7adc3df1685c640748f089c4d58c1", "3a26c12dbb7c10c186fd9229a046aba314c28b68c0bd4257134254a057f86e73", [{0x3, 0x12, "0393b1a2b4a7d76c0cc9da8508f03d03b120"}, {0x4, 0xb, "93f8832a77c39e527a6a9b"}, {0x1, 0x10, "c49d5a20e90847fb12fd11d8eb254e3a"}, {0x3, 0xe, "8c0a420c9e29530e28ea71e84499"}, {0x2, 0x5, "574313fd56"}, {0x2, 0x26, "deaf9372f534d3e8493e77574feeba247adeb04fc3f2d75c51da2c1c3701c7b230f7e8a9b205"}, {0x1, 0x26, "20133e48ce9880c621e6aabc0089a94c10482e044c36b261db57888f0cf91a24664ffa3c64d1"}, {0x3, 0x14, "02b015c23bf2a59aa0530a7b8baa500d7067421f"}]}}, @preq={0x82, 0x36, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0xd5e2, @device_a, 0x100, @value=@broadcast, 0x1, 0x3, 0x2, [{{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x1}, @broadcast, 0xf8ad}]}}]}, @NL80211_ATTR_PROBE_RESP={0x2d7, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x6c3, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_b, @broadcast, @from_mac, {0x7, 0x5}}, 0xfffffffffffffffe, @random=0x1, 0x2250, @val={0x0, 0x1e, @random="f717fc0f77e9b0a4e644f81441ebddf6360611f32260940e249b24178dc1"}, @void, @val={0x3, 0x1, 0xb5}, @void, @val={0x6, 0x2, 0xa}, @val={0x5, 0xdb, {0x0, 0x36, 0xbc, "f4286dec40e661156e771a1b37c2638e6731e47a55d6ff574aee0d70fc2c58f7f638e0560d8e0fefb9f0c5ab05e40e61f74f5a53cedf715beff13477637917b87e24f7020d04a98646eead41a097dac1564c8ea65490a7fffff7083d301db1e7ae255fabbb4746cedb1ee395b478fc858d6ccc69c5cf93cb3d3aee90939d74f0e3954545699634a62e9f9c769ef21c9a9170286a7a6e9281a4c03cd4657917f1e006e52f2a529a0746344e9eaf81ed4710c9ac9ac8343cc97d8860d19456ecf7e6b4d571a5cdbdebdace34c52e898dfe51215e53b1b1cac7"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x3, 0x9, 0x7}}, @val={0x2d, 0x1a, {0x1, 0x3, 0x3, 0x0, {0x1, 0x8, 0x0, 0xc3, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0xe23, 0x1}}, @void, @void, @void, [{0xdd, 0xf2, "c801ec05bb5076d939715017df011aedbad731c540fbf381516b7df61000f1d88177daa472cb3d3cc6d8d369a09d0c58c187765bd6e554cd57c0239f507c3cc7d5e3891287e12a0438602767559962dd8daab194861e708e8086f9ee96a9acd1a228f5edfb2db6c010d13963b35492f26db1946614e80c05f390ce804b065f6236f953dcf534ba230fc1609892f9ef1a497c5459c057188b69db64cfc47b3f6abcac34df17cf7f1b3542a30b38a655b48eb74f3d33f3e7422cc442985a4982d4aca3c76176b7c976022d16a2511f5204b3d8b8d8cd06660113a7036d435bea9e9d1c96ae61abd18a35c6ae0ba6bec0d4b638"}, {0xdd, 0xad, "46ad74ddad93d2fb532ad0d6e2b9c46308a95618ae3958be0f2a4a2110bc12a770b866312e99bd0420e77b03294e4ce177be560fb99d617066d7f12fcb65e7146ff79633bc11b4bfad2c1b487a773c07dbca622f4f0f7df21f5cad22c5d4bd8aea5a42bcb6851f6a629d0b64d4995ed627b54b4fd7d38894eb3954d0a21ffe2b2b4b68a7bef6990f6f9cd8c048cf77fbc961098b81fc9be911d6f32d7434426c88d22f14f356a6ddfc8f23c077"}, {0xdd, 0xb0, "5e493425fb4c8d393eead2eb606d71b47c49960d1548883a63f9f0bbd4ec9ddbe375d58a3c8def33227dbe9e292b28330a0db66de9e1ec13f7ed0fef8da6ed9dfc90f30064c861c1f50cb46636fb9c1bc5f7fa24e7da71d3e07971a9bc9004896251c49d6419678dfd96d6803b48f9a32866f028c3ec18bfe5cccbfce8eba01814743cce7a5a67e6b5c893bcaba403b32f20fbdae7524819ac6587482b5c92116ff79a20e6c177e7e3f895086c0914c2"}, {0xdd, 0xde, "d88ab0b009338625af0eca8f0d00c394b30dce6420854f58e2969ad95ac9a907b7cccde38886c3bacbaa4692c9686711417b2797371bc75d6037a4a55d4f96b9caae204d1725d8abd6b687bb23978c0a903c5bab3f3fd91dce710ba20e41edc9ba1fe9e336e6108cfbe14d689f6a3c59674778fbddcd5566a14f3a0186e8e8686559bdd8f59384b4b8f106205dee2e1d77ce8273e50311368c43e76744b687facf64338ddc005fc8619b16126c9ae02c3dc8f2131728940828f9f9c4f870a57e88e0fd73b00fd14379489dbfb06d9e691e3e653d3811e97fa4b5c0b9a77e"}, {0xdd, 0x92, "d1e89ec2d05465af525a06af85ba55c289f3f806d9811bc0c06050d9bfe4d448b4b8bdca12b4ce77c1306c1d6c8ffc9012e36ebf337ea8356b207200c667f5c34ccad2850800538131e37b501820b8c1542e3e496077f38631925b02c1fe9bce522fe744633710d8d773ab8128b2c608d92c126c74d3fa70ab7412a67ed949c1155bc50edd4b3ef267d0e2cac48c3da08ea7"}, {0xdd, 0x75, "3ae02e1bdf7994ebd3e4185ee1886a7aa615ae70c736cae8f273e961f4a7e9cc86b229ec3373a82f1e4211ce745f707526d2ada834b7c68deaadf51bf16dccc6d34b28ce0cca8fb630ee4285512d76101950dd1597d4a86d462fbb16cf31962ece706da471d0c9be230c53ff2a79352621d90c4ba2"}, {0xdd, 0xd5, "7216ecad33a993ce85ba9cabef75cba680df3d9dfac6d8804a2bd851c4eab22b838239611b45ba61e83509c0bad395835db7bf7c2ba2548bff7a90200c39867503356f1db3b0884d9bbdfe263596aa7114faa0139c47ebafe7c01fe3c4a3cbf95c1f8190ca17ca3df83f7ce2ec36e4640a8b50b98a3546f29982083a3a82136a138c568f7a7c4a5e352ed58c402aac73cb440a6e713004922a068b75aea9e2fcfd155f3ff518a332d8064d5216258661a1bc2209ae0cccc2775d69b1a8570a353aae7f6d7ab49f4993f544b94b43f8b457a5ccdffe"}, {0xdd, 0x5c, "53ce2c7636ac35cc109836bb812efbcb76ba9f18161dbd90d6ab8878efc5c41be3866173c5cebef8dc9adad573107c475cad1df3b3e7143c31427b203a0faaf297e656b3be5b10acd3bda730b011ef6c887324d116bd5a57a90b6237"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0xbe1c, 0xd]}]}]}, 0xf5c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) 1m20.217446578s ago: executing program 3 (id=86): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x1ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) unlink(&(0x7f0000000000)='./file1\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r1, 0x0, 0x0, 0x4c040, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1600000000000000b40000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000020000000000000000000000000002a4872730ce78dc461a9d2b477382d0b89bf23c881bd9db76a64d24fc7fa75d95fdcf944c808b02f4ac1d6045c03f1bad12d50ea224ee1a7cb4830143962006c603ba88cc1a4b49b9cc7a8ace2c776685803ad7c413683567d5a45a935805f140a5af20e25a8496af846ecdc95e7c9e4"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="0000000000000000790057ed0000000018000000190000000000000000000000950020000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114000000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) ptrace$poke(0x5, r4, &(0x7f0000000080), 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r6, &(0x7f00000009c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="40240308000f030400"], 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x81, 0x6, "a070b2d2", "ec30cd18"}}, 0x0}, 0x0) 1m18.281563247s ago: executing program 3 (id=94): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x10, 0x29, 0x39, 0x9ee}}], 0x10}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) socket(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010000000000009500000000000000de759eac6de9ad5d5fd9649b77f9189d4002b0a637e48b1c15a792730e699f36fad16ff8f9b44c4e8722921d795913dad36c48831da238b4254ebc0edbab6c01078c9b4a49fb61a0a6507fa02ae9479d6de75227d330c91e6a4f19f99c01825280eb17c577039f51279d244fc5d8802346ade4b2a651374d274105bdd3ed35f45c7d3de20347df4aadb5f513711382b3ba68e7d29aa130d28fc9cdfcc61894880a8d2d1ee8e42ba907458a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1m18.061376094s ago: executing program 3 (id=96): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x158, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x12c, 0x2, [@TCA_BPF_ACT={0x128, 0x1, [@m_xt={0x2c, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xbc, 0xa, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x1, 0x20000000, 0x0, 0x9}}, @TCA_DEF_DATA={0x10, 0x3, '8-&-+/--\\%\xd9\x00'}, @TCA_DEF_DATA={0x9, 0x3, '#%/$\x00'}, @TCA_DEF_DATA={0x7, 0x3, '(#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x5870, 0x1, 0x7f, 0x6}}]}, {0x21, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x3c, 0x1b, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}]}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m18.061163434s ago: executing program 32 (id=96): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x158, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x12c, 0x2, [@TCA_BPF_ACT={0x128, 0x1, [@m_xt={0x2c, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xbc, 0xa, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x1, 0x20000000, 0x0, 0x9}}, @TCA_DEF_DATA={0x10, 0x3, '8-&-+/--\\%\xd9\x00'}, @TCA_DEF_DATA={0x9, 0x3, '#%/$\x00'}, @TCA_DEF_DATA={0x7, 0x3, '(#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x5870, 0x1, 0x7f, 0x6}}]}, {0x21, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x3c, 0x1b, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}]}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 22.903764778s ago: executing program 0 (id=373): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYRES32=r0], 0x420}, 0x1, 0x0, 0x0, 0x8091}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000b80)={0x79, "8e30a37c215e4ed0f5a12a46dabbc58b4266a0c78471f9b4f9f3ef9bb9f7a9eb24fb5d9f2fcf465ebb5e1ffe6d1af05804cda5d951502683da314f35c6c29baf54b95de2f0476460dbd1088faebe420fa6d30fab784f264a5b1959e9d55a4dc867542942d41faff50506c393be398182a9ffb11bd2750b7815"}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000540)}, 0x40000) socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_emit_ethernet(0xca, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@cipso={0x86, 0x6}, @generic={0x0, 0x3, "bf"}, @timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @lsrr={0x83, 0x17, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x2b, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr, @remote, @local, @loopback, @remote, @private, @dev, @loopback]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x8, &(0x7f0000000280)=[{0x6, 0x8, 0x9, 0x7}, {0x7fff, 0x1, 0x1, 0x800}, {0x4, 0xa8, 0x1, 0x9}, {0x7fff, 0x38, 0xc7, 0x6}, {0xfff, 0xd3, 0x3, 0x7}, {0x5, 0x9, 0x58, 0xf6}, {0xff, 0x9, 0x6, 0x1000}, {0x7, 0x5d, 0x8, 0x1c1}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300}) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000003c0)={0x3, 0x9, 0x4, 0x9, 0x5, 0x0, [{0xfffffffffffffff9, 0x5e86c5b7, 0xffffffff00000000, '\x00', 0x100}, {0x40, 0x6, 0x6, '\x00', 0x290a}, {0x4, 0x3, 0x2e1f, '\x00', 0x2508}, {0x1, 0xc0, 0x5, '\x00', 0x2008}, {0x1, 0xfffffffffffffb6c, 0xfff, '\x00', 0x408}]}) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r7 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) epoll_create(0x2) 22.030176815s ago: executing program 0 (id=381): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 22.004642756s ago: executing program 0 (id=382): io_setup(0x202, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x3e, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1812471, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) io_setup(0xca, &(0x7f0000000080)=0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xcbee, r3, &(0x7f0000000140)="e5ed6dd8c28ce374a9991b119a575f82eeb4fe0366c48f49b5830beb2fe516e43c4065ad72d51fd2a19955be74d9c74a0764681b66812090e2f5a9cc0a678964a8bd877b7b301df8a0071a3db4745dc889d6c158b9ebc3cdc8e45af26ab43790af545d10b3a7ae7c02d062d574a028c98f5a44d44ca85bb095349418f5ffcc55ebb900eea47dd463b8e1a83eb061179d54b36399968b2ede680f1f234dc71d5f107d12c318b4c51f0820d49be9702a5bace4e3d6c9df81f6a5c86fd7c752bfe5c5641e6cb9567a94cf4f25be7d9f67bb6d746657a5c0631dade3805207c27c9a2b188215cff9fa099f3bb570caae3fdf79a0c3f4", 0xb499, 0x8}]) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") r4 = inotify_init() r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xfffffffffffffff2, 0x3) 21.896846459s ago: executing program 0 (id=384): unshare(0x28040c00) r0 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x10040) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x79, [@rand_addr, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00007edd0200000000515a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000280)=0x7d8, &(0x7f0000000140)='%pB \x00'}, 0x20) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4e) r9 = openat$cgroup_pressure(r8, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r9, 0xc0109428, 0x0) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) sendmsg$tipc(r7, 0xffffffffffffffff, 0x4080) 20.966901008s ago: executing program 0 (id=391): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x10, 0x29, 0x39, 0x9ee}}], 0x10}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb5", 0x89) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010000000000009500000000000000de759eac6de9ad5d5fd9649b77f9189d4002b0a637e48b1c15a792730e699f36fad16ff8f9b44c4e8722921d795913dad36c48831da238b4254ebc0edbab6c01078c9b4a49fb61a0a6507fa02ae9479d6de75227d330c91e6a4f19f99c01825280eb17c577039f51279d244fc5d8802346ade4b2a651374d274105bdd3ed35f45c7d3de20347df4aadb5f513711382b3ba68e7d29aa130d28fc9cdfcc61894880a8d2d1ee8e42ba907458a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 20.869655671s ago: executing program 0 (id=392): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 20.847043222s ago: executing program 33 (id=392): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 9.174433485s ago: executing program 1 (id=427): capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000c00000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000008a00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.143811166s ago: executing program 2 (id=431): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="340000000000000000000000070000fc07235c64010102ac1414bbac1e71a5af8c84188d25822d9e80a65a7c2f"], 0x38}}], 0x1, 0x50008000) unshare(0x64000600) r5 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES32=r5, @ANYBLOB="14000300"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=0x1000) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) 7.527126966s ago: executing program 1 (id=432): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,dots,dmask=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,showexec,time_offset=0x00000000000003a4,nodots,check=relaxed,nodots,dots,nodots,dots,flush,codepage=874,flush,dots,dots,flush,dots,dmask=01777777777777777777774,dots,subj_role=dots,fowner<', @ANYRES64=0x0, @ANYRESHEX], 0x1, 0x222, &(0x7f0000000840)="$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") (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141142, 0x60) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) ppoll(&(0x7f0000000b80)=[{r2, 0x20}, {0xffffffffffffffff, 0x200}, {r1, 0xc200}], 0x3, 0x0, 0x0, 0x0) 7.526391076s ago: executing program 2 (id=433): r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f0000000540)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJjb9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2tMePIoH/xNR8OTRv8GDZ2/iQfEmKJmZrq0fIDRt3Pb3g8kz886bZ543lMIzExLAuTWb/PpzKW7ElYiYjojrEdl+qdgyq3l4ISJuRsTUoa1UjD8ZuBgRVyPixih5nrNUnPr89vDWyk9v//LNd5cuXPvi6+8nt2pg0l6MiO5Wvr/bzWPayuPDYrw2bGexuzwsYn6i+6g4TvO429zIMuzWDubVsrjUyuenWzv9Udzs1Oqj2GpvZuNbvfyC/WHrIE/2hoe17ey40dzIYrufZrG1n9e1t5//b9vvD/I8jSLfx1n6GAwOYj7e3Gvm69l6lMV6b1CM53nTRnNvFIdFLC4X9bTTyOrYOM4n/f/2Tru3s5cMm9v9dtpLVirVlyvVO+XqdtpoDprL5Vq3cWc5mWt1RtPKg2atu9pK01anWamn3flkrlWvl6vVZO5uc6Nd6yXVamWpslBemS/2bidv3H8/6TSSuVF8rd3bGbQ7/WQz3U7yd8wni5WlV+aTW9Xk3bX1ZP3BvXtr6+99ePeD+6+uvfV6MelvZSVziwuLi+XqQnmxOn+O1v9JUfQY1w/HUpp0AQBPH/0/MAkn1/9vP4g4+f4/9P9j8VT1v2ev/999KWKi64dj0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxbP8x8+Wa2M5sfXyvGnymGniuOSxExFRG//4PpuHgk53SRZ+Zf5s/8pYZvS5FlGF3jUrFdjYjVYvvt2ZP+FAAAAODs+urxzc/ybj1/mZ10QZym/KbN1PWPxpSvFBEzsz+OKdvU6OX5MSXL/r4vxN6YsmU3sC6PKVl+y+3CuLL9J9NHwuVDoZSHqUOnAQCAM+JoJ3C6XQgAAACn6dNJF8BklOLgUebBs+Dsm/d/PhC8cuToicenVB8AAABwfKVJFwAAAACcuKz/9/t/AAAAcLblv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzBzv3cJg5EcQB+Nnhh/2nRau/byt6gjC1hj3uMKCBNUEAOpIU0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7dV+vF7dXv67Y5u307eUYDAAAAXLKt1ov6n1nqf23uf29u/Wz6RUSUEXFp7j6KT2eZoyanenn+5vT56lUNdxF1wuE9Js31JSL+NNfjj64/BQAAAPi4NsvVPM3W05/Z0AXRp7RoU377mymviIhq9pAprTzk/coUVn+/x/E/U1q9gDXNFJaW3Ma50t6k/rkfV+2mJ02RmvLiy45FZhs7AADQo9FZ0+8sBAAAgD79G7oAhlHE81bmcStwkppme+/zWQ8AAAB4h4qhCwAAAAA6V8//ezr/b+/8PwAAABhGOv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2r9WKzXM3b5uz27eQZDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSQiEMxQA0r++nM+n+FytBXYMI50AhbW8GFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7odZ6MK7zzP74+fd2SfHubSX6daejEaFhaaFhbmLeuAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzs3M9rHFUcAPDvzOxsfynGKDlERMGDerDptrb2Jh6U4ME/QQjptsZu/dEGsaWIuXiTnHsRPYoISrz1f+i5hV7qrYc9VPCszOxMdtoGXEuZ2TafD7x53x2Ged83CyHfeS8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBh/N40zorDwiROq3M3711dL/pbD/SF69u3l4tWxEmbST8ZXm5+SJYi4kh3yQAAALA/ZHV9HxF38p3Vok8Xyvo/r68pav4fn53EVT3/VV2yPlj/17V/0f74/e6LuwMtTMYpbnp2YzQ89nAqvWn45mOf5zx77j+v6JVPvnz3kpVfSPrh1gvjvHyeyfc3brzfL8MDbWQLADyKo3VfBfXvQ0U/6DIxAPaNXqPwruv/bKHbnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADaMN6KI3WcRMRybxoXbt27ur5Xf3379nLdTl27th3fTu9Z3CKPiLMbo+GxiDjY6ozm16XLV86vjUbDi+0Hr0REV6O/W03//MczXBzRyfMRPKYgrb7secnnyQg6/KEEAMBTKa9aUdffyXdWi3PJYsQ/P91f/7/eiGPG+v/uJ6duNsdq1v+D1mY4/1Y2L3yxcunylbc2LqydG54bfvb28cE7gxOnT548vVK+K1mp35gAAADAo+lXrVn/p4sPr/8fbsQxY/3/5Q+Db5pjZer/PU0X/brOBAAAYH97/tW//0r2OJ/0+/H12ubmxcHkuPv5+OTYQar/24GqNev/bLHrrAAAAIA2jLeS+9b/zzTimHH9/5mfX/q1ec8sIg5V6/9H1z8fnWlvOnOtjT8n7nqOAAAAdOtQ1Zrr/3m5/z/d3fKQRsQbr03i6t8AzlT/Zx9890tzrOb+/xPtTXEupUuT51H2SxG9pa4zAgAA4Gl2sGpFsf9nvrP66W+HP+rb/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQtn8DAAD//46APRw=") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xf519, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwrite64(r3, &(0x7f0000000180)="81", 0x1, 0x1000000) lseek(r1, 0xfffffffffffffff9, 0x3) signalfd4(r1, &(0x7f0000000080)={[0xff]}, 0x8, 0x800) wait4(r0, 0x0, 0x8, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="020000000100000000000000040038c520668dbe1f750000000000001000020000000000"], 0x24, 0x1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x880452, 0x0, 0xf8, 0x0, &(0x7f00000000c0)) chown(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xee01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@deltaction={0x18, 0x31, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045808}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 7.525962746s ago: executing program 5 (id=434): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)='\x00\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 7.525584096s ago: executing program 4 (id=435): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x98, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="26673e650f21ca0f20e035800000000f22e066ba400066b8de2c66ef0f20c035080000000f22c0b9110a00000f320f20c035020000000f22c0400f3066bad004b866000000ef3666430f38805200c4a16d6a9809000080", 0x57}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.818985909s ago: executing program 1 (id=436): r0 = syz_usb_connect$uac3(0x5, 0x97, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002082055000400001020301f4028500030188800e080b0102010030030904000000010130000a24010c0a002fb700000904010000010230000904010500000000000000010c760f0000f0040200000000000000019e0600010905010908048005040a252509000000ca020009040200000102300009044c409fb5d59c3f7433c60201010102300009058209ff032002010a2525ff030000010500"], &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x52}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r1, 0x0, 0x0, 0x100, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) shutdown(r1, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x2, 0x30, {0x30, 0x7, "58f67e095e26b91b7614621c1c4f6265464ae8fd95ba65929f4d10b35d650996fae969ede5dca914536c1ee78755"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000140)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x1, 0x28}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x10, 0x7, 0x4, "0f0894b9", "e3a71981"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x0, 0x3, 0x3, 0xc2, 0x3}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x20, 0x31, 0x7c, "bd90126d91db03b0b43f252a184d69a1b83e2f167e67609b5f96fb75e2d6bacdc82eafdd7be78d9aed1d98f8c97cf09913a0c098fea342e63aa78237ebfd32bfe1bc2356ee1a576d03eee8ee1e12f3c1078d4bf3ac82ab5cc1c0f6d54e1a4e5110a5eac99342f1c68feeb2ba09cb7216faa9bb1c2f00f534a29be7bc"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2c}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x18c1, 0x80}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000440)={0x40, 0x9, 0x0, 0x81}, &(0x7f0000000480)={0x40, 0xb, 0x2, 'wV'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "f7a5"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x5}}) 5.818371859s ago: executing program 2 (id=437): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x10, 0x29, 0x39, 0x9ee}}], 0x10}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0xff) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb5", 0x89) syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010000000000009500000000000000de759eac6de9ad5d5fd9649b77f9189d4002b0a637e48b1c15a792730e699f36fad16ff8f9b44c4e8722921d795913dad36c48831da238b4254ebc0edbab6c01078c9b4a49fb61a0a6507fa02ae9479d6de75227d330c91e6a4f19f99c01825280eb17c577039f51279d244fc5d8802346ade4b2a651374d274105bdd3ed35f45c7d3de20347df4aadb5f513711382b3ba68e7d29aa130d28fc9cdfcc61894880a8d2d1ee8e42ba907458a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 5.818004199s ago: executing program 5 (id=438): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f0000000540)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040881) write$tun(0xffffffffffffffff, 0x0, 0xfd1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x40000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfa}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe0}]}, 0x48}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = syz_clone(0xd8000011, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x81, 0x1f5, &(0x7f0000000300)="$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") r8 = syz_pidfd_open(0x0, 0x0) setns(r8, 0x24020000) umount2(0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) kcmp(r6, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(r7, 0x2, &(0x7f0000000040)=0x2) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x4}, 0x14) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) 5.817772339s ago: executing program 4 (id=439): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.806604759s ago: executing program 4 (id=440): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x282c42, 0x132) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000700)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = io_uring_setup(0x344f, &(0x7f0000000440)={0x0, 0x1539, 0x200, 0x1, 0x5000003, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000340)=""/4, 0x4}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000200)=[{0x0}], 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x2010, r5, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) readv(r10, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/191, 0xbf}], 0x1) ioctl$TIOCSIG(r3, 0x40045436, 0x7) fcntl$setlease(r2, 0x400, 0x1) 3.995095516s ago: executing program 1 (id=441): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f00000002c0)=""/138, 0x8a, 0x0, &(0x7f0000000140)=""/27, 0x1b}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x20, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x4, "ed1e"}, @window={0x3, 0x3, 0x6}, @eol, @mptcp=@generic={0x7a5531987a98cb3b, 0x2}]}}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x6, [@datasec={0x8, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x4, 0xdeb4}, {0x8, 0x9, 0x80}], "964d"}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0xfffffffd, [{0xa, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x6a, 0x8e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x481}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.994454496s ago: executing program 5 (id=442): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES64=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x5, 0x8009, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0xe0000, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x7f, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.994025716s ago: executing program 4 (id=443): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xe138, 0x198, 0xd8, 0x198, 0x190, 0x358, 0x358, 0x190, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x34}, 0xffffffff, 0x0, 'dvmrp1\x00', 'veth0_to_bond\x00', {}, {}, 0x88, 0x6}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x3, 0x81, 0x9, 'pptp\x00', 'syz1\x00', {0x80000000}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0xc, &(0x7f00000000c0)={[{@grpid}, {@acl}]}, 0x2, 0x53a, &(0x7f00000011c0)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") r4 = socket$packet(0x11, 0x3, 0x300) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') dup2(r4, 0xffffffffffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) 2.058075276s ago: executing program 1 (id=444): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x10, 0x29, 0x39, 0x9ee}}], 0x10}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb5", 0x89) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010000000000009500000000000000de759eac6de9ad5d5fd9649b77f9189d4002b0a637e48b1c15a792730e699f36fad16ff8f9b44c4e8722921d795913dad36c48831da238b4254ebc0edbab6c01078c9b4a49fb61a0a6507fa02ae9479d6de75227d330c91e6a4f19f99c01825280eb17c577039f51279d244fc5d8802346ade4b2a651374d274105bdd3ed35f45c7d3de20347df4aadb5f513711382b3ba68e7d29aa130d28fc9cdfcc61894880a8d2d1ee8e42ba907458a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 2.057489486s ago: executing program 2 (id=445): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xffff}, 0x22, [0x0, 0xfa8, 0x0, 0x10001, 0x0, 0x0, 0xb, 0x0, 0x4, 0x0, 0xfffffff9, 0x209, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffff35, 0x0, 0x100, 0xfffffffe, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x547e2ab0], [0x0, 0x0, 0x8000, 0xffffffff, 0x0, 0x1, 0x7, 0x0, 0x0, 0xf, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x3fffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x19c, 0xf9b, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80007, 0x1, 0x0, 0x0, 0x10000000, 0x0, 0x800, 0x0, 0xfffffffd, 0x20, 0x4, 0x0, 0x200000, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) symlink(&(0x7f0000000280)='.\x02\x00', 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8003, &(0x7f0000000740)={[{@data_journal}, {@oldalloc}, {@discard}, {@nodiscard}, {@nojournal_checksum}]}, 0x0, 0x62c, &(0x7f00000000c0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000040), 0x0, 0x0, 0x1) unshare(0x62020600) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = fsmount(r5, 0x0, 0x17f) sendmmsg(r4, &(0x7f0000000e80)=[{{&(0x7f0000000780)=@isdn={0x22, 0x3, 0xa}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000800)="17c6f95d8211d8e962c30de151", 0xd}, {&(0x7f0000000840)="63017c9bfe2249c741bb934a6aeced74130aaa08711724d252d682c8637688c624c42e1dc6b025d716d3ee8c71d00a181c20bf271f074c41365450ca3ed82603e0427abc70b2e435fd8941178b4fff0eb11cb9b5811cd648970654454fa975310b231015f61d44b339d5f6fb98b54b17e0aae8f596109b47b62bf12abb33a46dafbbe71afe44bfc03897c1c45df7527d80f8dcb5b41d04ad952d8227f842b1cf26b5cb", 0xa3}, {&(0x7f0000000900)="09785efbd26706844d679e6b09750cd69a719a5647", 0x15}, {&(0x7f0000000940)="65b38adbd2e12dbb89c6280d2f1ae3e5de288d75f755dc26871d389feb889d6c1bbdaf064c27f26d95574971f236c37666cdf5c7a836da76", 0x38}], 0x4, &(0x7f0000000e40)=[{0x10, 0x3a, 0x3}], 0x10}}], 0x1, 0x20004004) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffff0f00}}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e}, 0x28) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x19) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r8, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1e}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000805) 2.057137366s ago: executing program 5 (id=446): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000280)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4044) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@redirect_dir_off}], [], 0x5c}) 2.054977416s ago: executing program 4 (id=447): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)=@newsa={0x184, 0x10, 0x713, 0x70bd27, 0x84, {{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x1, 0x6, 0x0, 0x2, 0x8727e, 0xdb}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x320b, 0x8}, 0x80000000, 0x0, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}, @algo_auth={0x48, 0x1, {{'tgr160\x00'}}}]}, 0x184}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) read(0xffffffffffffffff, &(0x7f0000002fc0)=""/52, 0x34) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010024bd70000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xea5bc50b6199d7fe) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[], 0x47) splice(r2, 0x0, r1, 0x0, 0x800, 0x0) 23.626989ms ago: executing program 5 (id=448): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) read(0xffffffffffffffff, &(0x7f0000002fc0)=""/52, 0x34) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010024bd70000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xea5bc50b6199d7fe) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[], 0x47) splice(r2, 0x0, r1, 0x0, 0x800, 0x0) 22.763489ms ago: executing program 1 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@usrjquota}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f4, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = io_uring_setup(0x1e41, &(0x7f00000002c0)={0x0, 0x284f, 0x2, 0xfffffffe, 0x239}) setresuid(0xee00, 0xee00, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x102) 21.607709ms ago: executing program 2 (id=450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@minixdf}, {@init_itable}, {@debug}]}, 0x1, 0x5c5, &(0x7f00000000c0)="$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") (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000016) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) 21.254319ms ago: executing program 4 (id=451): r0 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2401c444) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x84) syz_usb_connect$midi(0x5, 0x82, &(0x7f0000000380)=ANY=[@ANYBLOB="1201100100000020990450104000010203010902700001013420090904000004010320954624020309820624020100f709050200ff0308f8030f25010b82c9bc975f8e61f7ab566e8409050302200007030f0e25010a29281c2ceef8d53c103309050e0008000028050b250107c67d6ce8f2806b09050808ff037f00df062501022b9d", @ANYRES32=r0, @ANYRES8], &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xb, 0x7, 0x7, 0xff, 0x4}, 0x7b, &(0x7f0000000500)=ANY=[]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x4, 0x4}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) fsopen(0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x2ffd, 0x4000003, 0xfffffef7, 0x2}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x40) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x804) 2.05229ms ago: executing program 2 (id=452): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000400)) 0s ago: executing program 5 (id=453): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f00000006c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x2}}, 0x2c, 0x1) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000340)={0x1, 0x1, 0x0, 0x0, 0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts. [ 17.313688][ T30] audit: type=1400 audit(1781351275.296:64): avc: denied { mounton } for pid=263 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.314773][ T263] cgroup: Unknown subsys name 'net' [ 17.317412][ T30] audit: type=1400 audit(1781351275.296:65): avc: denied { mount } for pid=263 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.321497][ T30] audit: type=1400 audit(1781351275.296:66): avc: denied { unmount } for pid=263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.321643][ T263] cgroup: Unknown subsys name 'devices' [ 17.442577][ T263] cgroup: Unknown subsys name 'hugetlb' [ 17.448194][ T263] cgroup: Unknown subsys name 'rlimit' [ 17.584867][ T30] audit: type=1400 audit(1781351275.566:67): avc: denied { setattr } for pid=263 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 17.608079][ T30] audit: type=1400 audit(1781351275.566:68): avc: denied { mounton } for pid=263 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 17.614041][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 17.632977][ T30] audit: type=1400 audit(1781351275.566:69): avc: denied { mount } for pid=263 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 17.663750][ T263] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 17.664525][ T30] audit: type=1400 audit(1781351275.626:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.698599][ T30] audit: type=1400 audit(1781351275.626:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.724338][ T30] audit: type=1400 audit(1781351275.646:72): avc: denied { read } for pid=263 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 17.749862][ T30] audit: type=1400 audit(1781351275.646:73): avc: denied { open } for pid=263 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.242073][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.249133][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.256681][ T285] device bridge_slave_0 entered promiscuous mode [ 18.264576][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.271691][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.279006][ T285] device bridge_slave_1 entered promiscuous mode [ 18.371739][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.378791][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.386262][ T286] device bridge_slave_0 entered promiscuous mode [ 18.395673][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.402881][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.410126][ T286] device bridge_slave_1 entered promiscuous mode [ 18.425295][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.432388][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.439648][ T288] device bridge_slave_0 entered promiscuous mode [ 18.448947][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.456031][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.463491][ T288] device bridge_slave_1 entered promiscuous mode [ 18.484419][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.492018][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.499412][ T289] device bridge_slave_0 entered promiscuous mode [ 18.506510][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.513608][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.521855][ T289] device bridge_slave_1 entered promiscuous mode [ 18.555501][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.562575][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.569969][ T287] device bridge_slave_0 entered promiscuous mode [ 18.579771][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.587059][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.594537][ T287] device bridge_slave_1 entered promiscuous mode [ 18.659429][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.666505][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.673799][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.680849][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.749332][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.756393][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.763648][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.770661][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.799187][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.806268][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.813548][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.820563][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.837536][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.844776][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.852516][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.859812][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.867431][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.874828][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.883148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 18.890525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.901705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.918123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.926293][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.933351][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.941066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.949174][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.956208][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.964520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.972704][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.979719][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.011388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.021022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.029208][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.036263][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.043826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.051930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.075150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.083274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.091828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.099680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.107978][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.115052][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.122510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.130632][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.137890][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.145350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.153338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.166701][ T286] device veth0_vlan entered promiscuous mode [ 19.184337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.193598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.201843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.209210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.217084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.225559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.233878][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.240940][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.248347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.256719][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.263783][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.271455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.287030][ T286] device veth1_macvtap entered promiscuous mode [ 19.299433][ T285] device veth0_vlan entered promiscuous mode [ 19.306381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 19.314630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.322677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 19.330650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.338826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.347171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.355333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.362966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.370276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.377886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 19.386219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.394480][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.401541][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.409019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 19.417450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.425701][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.432919][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.440549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 19.448523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.456574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.464261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.471671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.481902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 19.490243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.502723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 19.510940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.525590][ T289] device veth0_vlan entered promiscuous mode [ 19.537371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 19.545834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.554557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 19.562764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.571290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 19.579496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.587892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 19.596113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.604468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.612015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.626611][ T285] device veth1_macvtap entered promiscuous mode [ 19.633321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 19.641551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.649462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.657838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.666101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.673907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.682222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.696036][ T289] device veth1_macvtap entered promiscuous mode [ 19.702995][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 19.718634][ T288] device veth0_vlan entered promiscuous mode [ 19.731634][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 19.739681][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 19.748207][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.757966][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 19.767180][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.782105][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 19.790437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.799305][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 19.807569][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.816156][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.823823][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.836538][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 19.844928][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.855941][ T287] device veth0_vlan entered promiscuous mode [ 19.891082][ T287] device veth1_macvtap entered promiscuous mode [ 19.929252][ T310] loop1: detected capacity change from 0 to 256 [ 20.011415][ T310] FAT-fs (loop1): IO charset iso not found [ 20.082554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.108487][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.270271][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.313182][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.356201][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.398035][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.442924][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.482366][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.517941][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.537394][ T318] loop4: detected capacity change from 0 to 128 [ 20.544617][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.724435][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.741121][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.758830][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.796390][ T288] device veth1_macvtap entered promiscuous mode [ 20.811027][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.823226][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.893541][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.906528][ T318] FAT-fs (loop4): Directory bread(block 32) failed [ 20.931620][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.942218][ T318] FAT-fs (loop4): Directory bread(block 33) failed [ 20.949508][ T318] FAT-fs (loop4): Directory bread(block 34) failed [ 20.956568][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.964766][ T318] FAT-fs (loop4): Directory bread(block 35) failed [ 20.971813][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.007692][ T318] FAT-fs (loop4): Directory bread(block 36) failed [ 21.017847][ T318] FAT-fs (loop4): Directory bread(block 37) failed [ 21.032279][ T318] FAT-fs (loop4): Directory bread(block 38) failed [ 21.039249][ T318] FAT-fs (loop4): Directory bread(block 39) failed [ 21.046797][ T318] FAT-fs (loop4): Directory bread(block 40) failed [ 21.053540][ T318] FAT-fs (loop4): Directory bread(block 41) failed [ 21.065459][ T331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 21.112917][ T334] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8'. [ 21.122953][ T338] loop0: detected capacity change from 0 to 512 [ 21.130920][ T338] ======================================================= [ 21.130920][ T338] WARNING: The mand mount option has been deprecated and [ 21.130920][ T338] and is ignored by this kernel. Remove the mand [ 21.130920][ T338] option from the mount to silence this warning. [ 21.130920][ T338] ======================================================= [ 21.190478][ T340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11'. [ 21.394219][ T347] device bridge1 entered promiscuous mode [ 21.875472][ T344] loop3: detected capacity change from 0 to 1024 [ 22.845496][ T347] syz.2.12 (347) used greatest stack depth: 22344 bytes left [ 22.845831][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 22.845842][ T30] audit: type=1400 audit(1781351279.306:118): avc: denied { create } for pid=343 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 22.882509][ T344] EXT4-fs (loop3): Ignoring removed orlov option [ 22.888898][ T344] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 22.914942][ T315] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 22.925811][ T30] audit: type=1400 audit(1781351279.806:119): avc: denied { ioctl } for pid=343 comm="syz.3.13" path="socket:[15754]" dev="sockfs" ino=15754 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 23.488509][ T354] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.511051][ T30] audit: type=1400 audit(1781351281.466:120): avc: denied { read write } for pid=353 comm="syz.2.14" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.546937][ T356] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 23.546937][ T356] verification time 151 usec [ 23.546937][ T356] stack depth 0 [ 23.546937][ T356] processed 2 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 23.546937][ T356] " or missing value [ 23.573546][ T30] audit: type=1400 audit(1781351281.466:121): avc: denied { open } for pid=353 comm="syz.2.14" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.615436][ T30] audit: type=1400 audit(1781351281.466:122): avc: denied { ioctl } for pid=353 comm="syz.2.14" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.641497][ T358] loop2: detected capacity change from 0 to 1024 [ 23.653194][ T30] audit: type=1400 audit(1781351281.526:123): avc: denied { mounton } for pid=355 comm="syz.3.15" path="/3/bus" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 23.675408][ T30] audit: type=1400 audit(1781351281.546:124): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 23.695449][ T30] audit: type=1400 audit(1781351281.626:125): avc: denied { read write } for pid=362 comm="syz.3.18" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.704985][ T365] loop0: detected capacity change from 0 to 1024 [ 23.718958][ T30] audit: type=1400 audit(1781351281.626:126): avc: denied { open } for pid=362 comm="syz.3.18" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.729540][ T358] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 23.750204][ T30] audit: type=1400 audit(1781351281.626:127): avc: denied { ioctl } for pid=362 comm="syz.3.18" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.881623][ T365] EXT4-fs (loop0): Ignoring removed nobh option [ 23.910897][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.013604][ T365] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,discard,barrier=0x000000002cb525b5,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsv1,nobh,,errors=continue. Quota mode: none. [ 24.029312][ T358] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 24.084509][ T315] syz.4.5 (315) used greatest stack depth: 21088 bytes left [ 24.160925][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.190864][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 24.371529][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.400960][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 24.465750][ T325] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 24.482426][ T325] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 24.495096][ T325] EXT4-fs (loop2): This should not happen!! Data will be lost [ 24.495096][ T325] [ 24.504958][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.506856][ T325] EXT4-fs (loop2): Total free blocks count 0 [ 24.518643][ T325] EXT4-fs (loop2): Free/Dirty block details [ 24.524593][ T325] EXT4-fs (loop2): free_blocks=20480 [ 24.529991][ T325] EXT4-fs (loop2): dirty_blocks=4448 [ 24.536593][ T325] EXT4-fs (loop2): Block reservation details [ 24.543430][ T325] EXT4-fs (loop2): i_reserved_data_blocks=278 [ 24.559169][ T325] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 24.572503][ T325] EXT4-fs (loop2): This should not happen!! Data will be lost [ 24.572503][ T325] [ 24.604184][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.614159][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.622555][ T60] usb 4-1: Product: syz [ 24.626748][ T60] usb 4-1: Manufacturer: syz [ 24.631869][ T60] usb 4-1: SerialNumber: syz [ 24.641075][ T39] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.652275][ T39] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 24.661365][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.673612][ T39] usb 2-1: config 0 descriptor?? [ 24.683519][ T383] loop0: detected capacity change from 0 to 1024 [ 24.721386][ T383] EXT4-fs (loop0): Ignoring removed nobh option [ 24.745679][ T383] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,discard,barrier=0x000000002cb525b5,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsv1,nobh,,errors=continue. Quota mode: none. [ 25.130538][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.141756][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.152567][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.166567][ T20] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.170242][ T393] process 'syz.2.21' launched './file2' with NULL argv: empty string added [ 25.181156][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.211015][ T20] usb 5-1: config 0 descriptor?? [ 25.681894][ T20] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 25.691105][ T20] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 26.010810][ T60] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 26.017556][ T60] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 26.025082][ T60] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 26.049535][ T403] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 26.463426][ T409] netlink: 144 bytes leftover after parsing attributes in process `syz.0.26'. [ 26.474799][ T60] cdc_ncm 4-1:1.0: setting tx_max = 60 [ 26.483787][ T60] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 26.916964][ T60] usb 2-1: USB disconnect, device number 2 [ 26.930493][ T411] usb 4-1: USB disconnect, device number 2 [ 26.943860][ T411] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 26.982506][ T435] loop1: detected capacity change from 0 to 1024 [ 27.014690][ T435] EXT4-fs (loop1): Ignoring removed nobh option [ 27.070985][ T435] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,discard,barrier=0x000000002cb525b5,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsv1,nobh,,errors=continue. Quota mode: none. [ 27.164914][ T454] loop4: detected capacity change from 0 to 512 [ 28.584802][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 28.584823][ T30] audit: type=1400 audit(1781351286.566:169): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.679221][ T469] mmap: syz.2.33 (469) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 29.647969][ T471] loop0: detected capacity change from 0 to 1024 [ 29.671626][ T30] audit: type=1400 audit(1781351286.646:170): avc: denied { read } for pid=462 comm="syz.2.33" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.694723][ T30] audit: type=1400 audit(1781351286.646:171): avc: denied { open } for pid=462 comm="syz.2.33" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.718589][ T30] audit: type=1400 audit(1781351286.656:172): avc: denied { ioctl } for pid=462 comm="syz.2.33" path="/dev/input/event0" dev="devtmpfs" ino=256 ioctlcmd=0x4523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.756961][ T30] audit: type=1400 audit(1781351286.686:173): avc: denied { write } for pid=462 comm="syz.2.33" path="socket:[15961]" dev="sockfs" ino=15961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.784246][ T476] loop1: detected capacity change from 0 to 512 [ 29.795104][ T30] audit: type=1400 audit(1781351287.656:174): avc: denied { create } for pid=472 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.814497][ T30] audit: type=1400 audit(1781351287.656:175): avc: denied { write } for pid=472 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.845870][ T476] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.35: casefold flag without casefold feature [ 29.860179][ T476] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.35: couldn't read orphan inode 15 (err -117) [ 29.866700][ T471] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.885953][ T476] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.210438][ T293] usb 5-1: USB disconnect, device number 2 [ 30.230429][ T471] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 30.327526][ T30] audit: type=1400 audit(1781351288.306:176): avc: denied { mounton } for pid=475 comm="syz.1.35" path="/7/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.327962][ T476] incfs_lookup_dentry err:-117 [ 30.359648][ T476] incfs: Can't find or create .index dir in ./file0 [ 30.369048][ T476] incfs: mount failed -117 [ 30.408563][ T476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 30.420782][ T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.433618][ T476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 30.700993][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 30.773416][ T8] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 30.824522][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1140 with error 28 [ 30.837835][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.837835][ T8] [ 30.849344][ T8] EXT4-fs (loop0): Total free blocks count 0 [ 30.866324][ T8] EXT4-fs (loop0): Free/Dirty block details [ 30.879553][ T8] EXT4-fs (loop0): free_blocks=20480 [ 30.885335][ T8] EXT4-fs (loop0): dirty_blocks=1152 [ 30.885498][ T60] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.890809][ T8] EXT4-fs (loop0): Block reservation details [ 30.903923][ T60] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 30.906857][ T8] EXT4-fs (loop0): i_reserved_data_blocks=72 [ 30.916773][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.933926][ T60] usb 4-1: config 0 descriptor?? [ 31.531010][ T511] loop0: detected capacity change from 0 to 1024 [ 31.717468][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.819195][ T511] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.830078][ T511] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.871426][ T30] audit: type=1400 audit(1781351289.856:177): avc: denied { ioctl } for pid=510 comm="syz.0.45" path="/10/file1/file1" dev="loop0" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.010777][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 32.106535][ T520] loop1: detected capacity change from 0 to 512 [ 32.130855][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.141069][ T26] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 32.150204][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.158760][ T26] usb 3-1: config 0 descriptor?? [ 32.168387][ T520] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.181872][ T520] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.192919][ T520] EXT4-fs (loop1): 1 truncate cleaned up [ 32.198609][ T520] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.219694][ T30] audit: type=1400 audit(1781351290.196:178): avc: denied { setattr } for pid=519 comm="syz.1.47" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.243856][ T520] capability: warning: `syz.1.47' uses deprecated v2 capabilities in a way that may be insecure [ 32.377365][ T524] loop4: detected capacity change from 0 to 1024 [ 32.417341][ T524] EXT4-fs (loop4): Ignoring removed nobh option [ 32.431977][ T524] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,discard,barrier=0x000000002cb525b5,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsv1,nobh,,errors=continue. Quota mode: none. [ 32.772601][ T531] usb 4-1: USB disconnect, device number 3 [ 32.927177][ T535] loop3: detected capacity change from 0 to 40427 [ 32.971473][ T535] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 32.978611][ T535] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 32.995405][ T535] F2FS-fs (loop3): invalid crc value [ 33.004889][ T535] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 33.016138][ T535] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.102300][ T545] loop4: detected capacity change from 0 to 512 [ 33.180126][ T545] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.52: invalid indirect mapped block 10 (level 1) [ 33.194232][ T545] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.52: invalid indirect mapped block 8 (level 1) [ 33.209913][ T545] EXT4-fs (loop4): 1 truncate cleaned up [ 33.215631][ T545] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.291345][ T545] mmap: syz.4.52 (545): VmData 17715200 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 33.342858][ T535] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 33.378356][ T535] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 33.933684][ T293] usb 3-1: USB disconnect, device number 2 [ 33.950785][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 33.950800][ T30] audit: type=1400 audit(1781351291.926:183): avc: denied { setattr } for pid=534 comm="syz.3.51" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.983329][ T30] audit: type=1400 audit(1781351291.926:184): avc: denied { write } for pid=534 comm="syz.3.51" path=2F362F66696C65322F233131202864656C6574656429 dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.328823][ T285] attempt to access beyond end of device [ 34.328823][ T285] loop3: rw=2049, want=45104, limit=40427 [ 34.552876][ T30] audit: type=1400 audit(1781351292.536:185): avc: denied { create } for pid=563 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.593505][ T30] audit: type=1400 audit(1781351292.556:186): avc: denied { bind } for pid=563 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.616187][ T564] loop3: detected capacity change from 0 to 4096 [ 34.623076][ T30] audit: type=1400 audit(1781351292.556:187): avc: denied { write } for pid=563 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.642547][ T30] audit: type=1400 audit(1781351292.556:188): avc: denied { read } for pid=563 comm="syz.3.56" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.665214][ T30] audit: type=1400 audit(1781351292.556:189): avc: denied { open } for pid=563 comm="syz.3.56" path="/7/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.691477][ T564] EXT4-fs (loop3): Ignoring removed orlov option [ 34.712349][ T564] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,nolazytime,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 34.777196][ T30] audit: type=1400 audit(1781351292.756:190): avc: denied { create } for pid=563 comm="syz.3.56" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.861196][ T30] audit: type=1400 audit(1781351292.846:191): avc: denied { bind } for pid=566 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.874011][ T570] loop2: detected capacity change from 0 to 128 [ 34.985707][ T30] audit: type=1400 audit(1781351292.846:192): avc: denied { ioctl } for pid=566 comm="syz.2.59" path="socket:[16734]" dev="sockfs" ino=16734 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.076066][ T572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 35.104626][ T572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 35.578833][ T578] loop2: detected capacity change from 0 to 40427 [ 35.604322][ T590] loop0: detected capacity change from 0 to 1024 [ 35.610796][ T531] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.625054][ T578] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 35.634145][ T578] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 35.643165][ T578] F2FS-fs (loop2): invalid crc value [ 35.648961][ T578] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=1844674 w/o reserve_root and reserve_node [ 35.660434][ T578] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.684182][ T590] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.720904][ T590] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 35.749338][ T578] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 35.761797][ T578] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.860801][ T531] usb 4-1: Using ep0 maxpacket: 8 [ 35.980870][ T531] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.994101][ T531] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 36.010835][ T531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.032645][ T531] usb 4-1: config 0 descriptor?? [ 36.069708][ T8] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 36.114604][ T312] attempt to access beyond end of device [ 36.114604][ T312] loop2: rw=2049, want=45104, limit=40427 [ 36.135781][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 36.150289][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.150289][ T8] [ 36.160828][ T8] EXT4-fs (loop0): Total free blocks count 0 [ 36.167316][ T8] EXT4-fs (loop0): Free/Dirty block details [ 36.175090][ T8] EXT4-fs (loop0): free_blocks=20480 [ 36.180471][ T8] EXT4-fs (loop0): dirty_blocks=3488 [ 36.185358][ T610] loop4: detected capacity change from 0 to 1024 [ 36.186211][ T8] EXT4-fs (loop0): Block reservation details [ 36.200371][ T8] EXT4-fs (loop0): i_reserved_data_blocks=218 [ 36.220240][ T608] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1432 with error 28 [ 36.233884][ T608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.233884][ T608] [ 36.257010][ T610] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.259386][ T607] loop1: detected capacity change from 0 to 512 [ 36.280613][ T610] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 36.308218][ T607] EXT4-fs (loop1): Ignoring removed bh option [ 36.321044][ T607] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.68: inode #13: comm syz.1.68: iget: illegal inode # [ 36.333669][ T607] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.68: couldn't read orphan inode 13 (err -117) [ 36.346814][ T607] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,i_version,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,,errors=continue. Quota mode: none. [ 36.422115][ T607] EXT4-fs error (device loop1): ext4_resize_begin:61: comm syz.1.68: resize_inode disabled but reserved GDT blocks non-zero [ 36.495866][ T622] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.534531][ T625] EXT4-fs (loop2): Unrecognized mount option "fsname=!" or missing value [ 36.547983][ T622] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 36.566416][ T45] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 36.593374][ T45] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 36.607191][ T45] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.607191][ T45] [ 36.617360][ T45] EXT4-fs (loop4): Total free blocks count 0 [ 36.623495][ T45] EXT4-fs (loop4): Free/Dirty block details [ 36.629493][ T45] EXT4-fs (loop4): free_blocks=20480 [ 36.635271][ T45] EXT4-fs (loop4): dirty_blocks=2784 [ 36.640666][ T45] EXT4-fs (loop4): Block reservation details [ 36.646953][ T45] EXT4-fs (loop4): i_reserved_data_blocks=174 [ 36.647946][ T10] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 36.662148][ T45] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 732 with error 28 [ 36.683129][ T45] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.683129][ T45] [ 36.698963][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 36.714916][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.714916][ T10] [ 36.726236][ T10] EXT4-fs (loop0): Total free blocks count 0 [ 36.732567][ T10] EXT4-fs (loop0): Free/Dirty block details [ 36.738533][ T10] EXT4-fs (loop0): free_blocks=20480 [ 36.743988][ T10] EXT4-fs (loop0): dirty_blocks=2304 [ 36.749327][ T10] EXT4-fs (loop0): Block reservation details [ 36.755472][ T10] EXT4-fs (loop0): i_reserved_data_blocks=144 [ 36.770283][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 8 with error 28 [ 36.793925][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.793925][ T10] [ 36.950262][ T641] EXT4-fs (loop4): Ignoring removed oldalloc option [ 36.980796][ T641] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 37.410750][ T26] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 37.419368][ T654] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=654 comm=syz.1.81 [ 37.890953][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 38.070928][ T26] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 38.087401][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.112694][ T26] usb 5-1: Product: syz [ 38.125019][ T26] usb 5-1: Manufacturer: syz [ 38.129859][ T26] usb 5-1: SerialNumber: syz [ 38.240600][ T493] usb 4-1: USB disconnect, device number 4 [ 38.348291][ T668] set_capacity_and_notify: 3 callbacks suppressed [ 38.348306][ T668] loop3: detected capacity change from 0 to 512 [ 38.372661][ T668] EXT4-fs (loop3): Ignoring removed bh option [ 38.383437][ T668] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 38.393770][ T668] EXT4-fs (loop3): 1 truncate cleaned up [ 38.399440][ T668] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 38.417573][ T668] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 38.470908][ T26] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 38.480908][ T26] usb 5-1: USB disconnect, device number 3 [ 38.560780][ T293] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.600769][ T531] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 38.790764][ T411] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.960815][ T293] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.960827][ T531] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.994904][ T531] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 39.017075][ T531] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 39.030774][ T411] usb 4-1: Using ep0 maxpacket: 32 [ 39.040851][ T293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.057867][ T293] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.075503][ T293] usb 3-1: config 1 has no interface number 0 [ 39.088199][ T293] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.120820][ T531] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.140107][ T531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 39.150201][ T531] usb 2-1: SerialNumber: syz [ 39.150808][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.171136][ T666] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 39.175878][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.191237][ T531] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 39.204157][ T411] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.220871][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.240940][ T411] usb 4-1: config 0 descriptor?? [ 39.260874][ T293] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 39.281833][ T411] hub 4-1:0.0: USB hub found [ 39.287315][ T293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.307544][ T293] usb 3-1: Product: syz [ 39.312301][ T293] usb 3-1: Manufacturer: syz [ 39.316904][ T293] usb 3-1: SerialNumber: syz [ 39.406336][ T677] loop4: detected capacity change from 0 to 131072 [ 39.417563][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 39.417576][ T30] audit: type=1400 audit(1781351297.396:217): avc: denied { write } for pid=680 comm="syz.0.89" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.431285][ T531] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 39.457839][ T531] usb 2-1: USB disconnect, device number 3 [ 39.497640][ T677] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0xf2f50510) [ 39.500817][ T411] hub 4-1:0.0: 9 ports detected [ 39.506371][ T677] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 39.520010][ T677] F2FS-fs (loop4): invalid crc value [ 39.540882][ T411] hub 4-1:0.0: insufficient power available to use all downstream ports [ 39.554426][ T677] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.597726][ T677] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 39.604918][ T677] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 39.623945][ T293] usb 3-1: USB disconnect, device number 3 [ 39.641736][ T385] udevd[385]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.911111][ T411] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 39.917484][ T411] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 40.040811][ T411] usbhid 4-1:0.0: can't add hid device: -71 [ 40.046874][ T411] usbhid: probe of 4-1:0.0 failed with error -71 [ 40.092167][ T411] usb 4-1: USB disconnect, device number 5 [ 40.251522][ T699] loop2: detected capacity change from 0 to 1024 [ 40.262060][ T699] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.286662][ T285] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 40.308013][ T699] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 40.355600][ T285] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: casefold flag without casefold feature [ 40.368526][ T285] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: casefold flag without casefold feature [ 40.475007][ T285] syz-executor (285) used greatest stack depth: 20768 bytes left [ 40.573680][ T30] audit: type=1400 audit(1781351298.556:218): avc: denied { mounton } for pid=708 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 40.638492][ T10] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 40.642191][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.657741][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 40.660400][ T708] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.661258][ T708] device bridge_slave_0 entered promiscuous mode [ 40.691066][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.698429][ T708] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.705997][ T708] device bridge_slave_1 entered promiscuous mode [ 40.719638][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.719638][ T10] [ 40.729923][ T10] EXT4-fs (loop2): Total free blocks count 0 [ 40.736144][ T10] EXT4-fs (loop2): Free/Dirty block details [ 40.743328][ T10] EXT4-fs (loop2): free_blocks=20480 [ 40.748707][ T10] EXT4-fs (loop2): dirty_blocks=2592 [ 40.754332][ T10] EXT4-fs (loop2): Block reservation details [ 40.760457][ T10] EXT4-fs (loop2): i_reserved_data_blocks=162 [ 40.792302][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.799408][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.806742][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.807943][ T715] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 532 with error 28 [ 40.813982][ T708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.834088][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.834891][ T715] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.834891][ T715] [ 40.846577][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.881729][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.912862][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.938060][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.966682][ T708] device veth0_vlan entered promiscuous mode [ 40.980075][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.989039][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.000116][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.010407][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.027247][ T708] device veth1_macvtap entered promiscuous mode [ 41.034416][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.104833][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.165454][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.283377][ T30] audit: type=1400 audit(1781351299.226:219): avc: denied { read write } for pid=719 comm="syz.2.100" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 41.344167][ T8] device bridge_slave_1 left promiscuous mode [ 41.399727][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.426709][ T30] audit: type=1400 audit(1781351299.226:220): avc: denied { open } for pid=719 comm="syz.2.100" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 41.457752][ T30] audit: type=1400 audit(1781351299.256:221): avc: denied { mount } for pid=719 comm="syz.2.100" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 41.476240][ T717] loop1: detected capacity change from 0 to 40427 [ 41.488823][ T8] device bridge_slave_0 left promiscuous mode [ 41.495528][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.505051][ T8] device veth1_macvtap left promiscuous mode [ 41.511720][ T8] device veth0_vlan left promiscuous mode [ 41.522591][ T724] loop4: detected capacity change from 0 to 4096 [ 41.531584][ T717] F2FS-fs (loop1): fault_injection options not supported [ 41.544826][ T717] F2FS-fs (loop1): invalid crc value [ 41.561564][ T724] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 41.590871][ T717] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.620334][ T724] EXT4-fs (loop4): Test dummy encryption mode enabled [ 41.643609][ T724] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 41.644694][ T717] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.657048][ T724] System zones: 0-5 [ 41.683102][ T724] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 41.735767][ T730] loop5: detected capacity change from 0 to 1024 [ 41.767663][ T286] attempt to access beyond end of device [ 41.767663][ T286] loop1: rw=2049, want=45104, limit=40427 [ 41.832715][ T730] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.843619][ T730] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.990866][ T531] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.272992][ T734] loop2: detected capacity change from 0 to 131072 [ 42.314300][ T734] F2FS-fs (loop2): Test dummy encryption mode enabled [ 42.322521][ T734] F2FS-fs (loop2): invalid crc value [ 42.329327][ T734] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.355335][ T734] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.371154][ T531] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 42.380291][ T531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.388884][ T531] usb 5-1: config 0 descriptor?? [ 42.480918][ T411] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.630789][ T293] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 42.639306][ T30] audit: type=1400 audit(1781351300.616:222): avc: denied { getopt } for pid=723 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.659838][ T724] netlink: 104 bytes leftover after parsing attributes in process `syz.4.101'. [ 42.730797][ T411] usb 1-1: Using ep0 maxpacket: 16 [ 42.870824][ T411] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.021079][ T293] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.037425][ T293] usb 3-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 43.064158][ T411] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.118651][ T293] usb 3-1: config 0 interface 0 has no altsetting 0 [ 43.133583][ T411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.144880][ T293] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 43.158545][ T411] usb 1-1: Product: syz [ 43.164882][ T411] usb 1-1: Manufacturer: syz [ 43.170769][ T293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.181715][ T411] usb 1-1: SerialNumber: syz [ 43.338192][ T293] usb 3-1: config 0 descriptor?? [ 43.350966][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.381527][ T293] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 43.549177][ T760] loop5: detected capacity change from 0 to 8192 [ 43.568013][ T760] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.590852][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 43.596112][ T30] audit: type=1400 audit(1781351301.576:223): avc: denied { setopt } for pid=733 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.619265][ T30] audit: type=1400 audit(1781351301.606:224): avc: denied { read } for pid=733 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.705715][ T30] audit: type=1400 audit(1781351301.686:225): avc: denied { create } for pid=763 comm="syz.5.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.731647][ T455] usb 3-1: USB disconnect, device number 4 [ 43.740903][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.753004][ T26] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 43.765086][ T30] audit: type=1400 audit(1781351301.746:226): avc: denied { remount } for pid=733 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.765141][ T765] F2FS-fs (loop2): Unrecognized mount option "noload" or missing value [ 43.791813][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.807925][ T26] usb 2-1: config 0 descriptor?? [ 43.822633][ T768] loop5: detected capacity change from 0 to 512 [ 43.867141][ T768] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 43.883896][ T768] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.895649][ T765] F2FS-fs (loop2): Unrecognized mount option "auto_da_alloc=0x00000000000000a3" or missing value [ 44.052565][ T772] loop5: detected capacity change from 0 to 40427 [ 44.095687][ T772] F2FS-fs (loop5): invalid crc value [ 44.102286][ T772] F2FS-fs (loop5): Found nat_bits in checkpoint [ 44.134652][ T772] F2FS-fs (loop5): Start checkpoint disabled! [ 44.141971][ T772] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 44.179726][ T772] F2FS-fs (loop5): switch discard_unit option is not allowed [ 44.229547][ T325] attempt to access beyond end of device [ 44.229547][ T325] loop5: rw=2049, want=45104, limit=40427 [ 44.520859][ T411] cdc_ncm 1-1:1.0: failed to get mac address [ 44.540896][ T411] cdc_ncm 1-1:1.0: bind() failure [ 44.560845][ T411] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 44.580833][ T411] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 44.588691][ T411] usb 1-1: USB disconnect, device number 2 [ 44.610879][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 44.850832][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 44.970884][ T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.001786][ T778] loop0: detected capacity change from 0 to 16 [ 45.051532][ T778] erofs: (device loop0): mounted with root inode @ nid 36. [ 45.148676][ T531] usb 5-1: Cannot read MAC address [ 45.153982][ T531] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 45.163256][ T531] usb 5-1: USB disconnect, device number 4 [ 45.211204][ T26] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.221267][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.229936][ T26] usb 6-1: Product: syz [ 45.235514][ T26] usb 6-1: Manufacturer: syz [ 45.240192][ T26] usb 6-1: SerialNumber: syz [ 45.255556][ T785] attempt to access beyond end of device [ 45.255556][ T785] loop0: rw=0, want=304, limit=16 [ 45.266403][ T785] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 45.377471][ T790] loop2: detected capacity change from 0 to 1024 [ 45.384998][ T790] EXT4-fs (loop2): Ignoring removed oldalloc option [ 45.391681][ T790] EXT4-fs (loop2): Ignoring removed oldalloc option [ 45.398334][ T790] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.412156][ T790] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 45.440580][ T790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.115'. [ 45.879202][ T795] loop0: detected capacity change from 0 to 256 [ 45.944972][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 45.944986][ T30] audit: type=1400 audit(1781351303.926:228): avc: denied { write } for pid=796 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.987031][ T411] usb 2-1: USB disconnect, device number 4 [ 46.055302][ T803] loop0: detected capacity change from 0 to 1024 [ 46.059910][ T801] loop1: detected capacity change from 0 to 4096 [ 46.101052][ T801] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 46.121315][ T803] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.146400][ T801] EXT4-fs (loop1): Test dummy encryption mode enabled [ 46.153327][ T801] EXT4-fs (loop1): Unrecognized mount option "smackfsfloor=test_dummy_encryption" or missing value [ 46.172188][ T803] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 46.247848][ T30] audit: type=1400 audit(1781351304.226:229): avc: denied { write } for pid=800 comm="syz.1.119" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.380826][ T30] audit: type=1326 audit(1781351304.256:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=800 comm="syz.1.119" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc628b5ae59 code=0x7ffc0000 [ 46.420844][ T26] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 46.428488][ T30] audit: type=1326 audit(1781351304.256:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=800 comm="syz.1.119" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc628b5ae59 code=0x7ffc0000 [ 46.453512][ T26] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 46.461091][ T26] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 46.467348][ T30] audit: type=1326 audit(1781351304.256:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=800 comm="syz.1.119" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc628b5ae59 code=0x7ffc0000 [ 47.149027][ T814] loop2: detected capacity change from 0 to 40427 [ 47.190918][ T26] cdc_ncm 6-1:1.0: setting tx_max = 60 [ 47.205222][ T814] F2FS-fs (loop2): invalid crc value [ 47.270234][ T30] audit: type=1326 audit(1781351304.256:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=800 comm="syz.1.119" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc628b5ae59 code=0x7ffc0000 [ 47.323202][ T26] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 47.354963][ T814] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 47.380189][ T30] audit: type=1326 audit(1781351304.256:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=800 comm="syz.1.119" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fc628b5ae59 code=0x7ffc0000 [ 47.410867][ T814] F2FS-fs (loop2): Start checkpoint disabled! [ 47.420645][ T814] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 47.431375][ T26] usb 6-1: USB disconnect, device number 2 [ 47.437505][ T26] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 47.448254][ T30] audit: type=1326 audit(1781351304.256:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=800 comm="syz.1.119" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc628b5ae59 code=0x7ffc0000 [ 47.488699][ T30] audit: type=1326 audit(1781351304.256:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=800 comm="syz.1.119" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc628b5ae59 code=0x7ffc0000 [ 47.567998][ T821] netlink: 144 bytes leftover after parsing attributes in process `syz.4.123'. [ 48.017640][ T325] attempt to access beyond end of device [ 48.017640][ T325] loop2: rw=1, want=79960, limit=40427 [ 48.020152][ T30] audit: type=1326 audit(1781351304.256:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=800 comm="syz.1.119" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc628b5ae59 code=0x7ffc0000 [ 48.091134][ T8] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 48.091812][ T325] attempt to access beyond end of device [ 48.091812][ T325] loop2: rw=1, want=81920, limit=40427 [ 48.128347][ T325] attempt to access beyond end of device [ 48.128347][ T325] loop2: rw=1, want=53248, limit=40427 [ 48.140534][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 48.162621][ T325] attempt to access beyond end of device [ 48.162621][ T325] loop2: rw=1, want=69632, limit=40427 [ 48.173739][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.173739][ T8] [ 48.183443][ T8] EXT4-fs (loop0): Total free blocks count 0 [ 48.194154][ T325] attempt to access beyond end of device [ 48.194154][ T325] loop2: rw=1, want=69640, limit=40427 [ 48.205164][ T8] EXT4-fs (loop0): Free/Dirty block details [ 48.211226][ T8] EXT4-fs (loop0): free_blocks=20480 [ 48.217057][ T325] attempt to access beyond end of device [ 48.217057][ T325] loop2: rw=1, want=69648, limit=40427 [ 48.257625][ T8] EXT4-fs (loop0): dirty_blocks=6112 [ 48.263007][ T8] EXT4-fs (loop0): Block reservation details [ 48.268988][ T8] EXT4-fs (loop0): i_reserved_data_blocks=382 [ 48.275218][ T325] attempt to access beyond end of device [ 48.275218][ T325] loop2: rw=1, want=69656, limit=40427 [ 48.290942][ T325] attempt to access beyond end of device [ 48.290942][ T325] loop2: rw=1, want=69664, limit=40427 [ 48.304074][ T826] FAULT_INJECTION: forcing a failure. [ 48.304074][ T826] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.312390][ T822] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 48.330860][ T325] attempt to access beyond end of device [ 48.330860][ T325] loop2: rw=1, want=69672, limit=40427 [ 48.342292][ T325] attempt to access beyond end of device [ 48.342292][ T325] loop2: rw=1, want=69680, limit=40427 [ 48.351392][ T826] CPU: 1 PID: 826 Comm: syz.4.126 Not tainted syzkaller #0 [ 48.353481][ T822] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.353481][ T822] [ 48.360415][ T826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 48.360449][ T826] Call Trace: [ 48.360455][ T826] [ 48.386290][ T826] __dump_stack+0x21/0x30 [ 48.390645][ T826] dump_stack_lvl+0x110/0x170 [ 48.395333][ T826] ? show_regs_print_info+0x20/0x20 [ 48.400539][ T826] ? vfs_write+0xc72/0xfd0 [ 48.404963][ T826] dump_stack+0x15/0x20 [ 48.409478][ T826] should_fail+0x3c1/0x510 [ 48.413902][ T826] should_fail_usercopy+0x1a/0x20 [ 48.418937][ T826] _copy_from_user+0x20/0xd0 [ 48.423543][ T826] __sys_bpf+0x258/0x7d0 [ 48.427796][ T826] ? bpf_link_show_fdinfo+0x330/0x330 [ 48.433185][ T826] ? debug_smp_processor_id+0x17/0x20 [ 48.438571][ T826] __x64_sys_bpf+0x7c/0x90 [ 48.442995][ T826] x64_sys_call+0x4b9/0x9a0 [ 48.447509][ T826] do_syscall_64+0x4c/0xa0 [ 48.451927][ T826] ? clear_bhb_loop+0x50/0xa0 [ 48.456608][ T826] ? clear_bhb_loop+0x50/0xa0 [ 48.461287][ T826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.467189][ T826] RIP: 0033:0x7fb574bcae59 [ 48.471604][ T826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.491400][ T826] RSP: 002b:00007fb573625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.499818][ T826] RAX: ffffffffffffffda RBX: 00007fb574e43fa0 RCX: 00007fb574bcae59 [ 48.507882][ T826] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000009 [ 48.515852][ T826] RBP: 00007fb573625090 R08: 0000000000000000 R09: 0000000000000000 [ 48.523831][ T826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.531810][ T826] R13: 00007fb574e44038 R14: 00007fb574e43fa0 R15: 00007ffcbda35b28 [ 48.539790][ T826] [ 48.751729][ T810] loop1: detected capacity change from 0 to 131072 [ 48.772495][ T810] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 48.805374][ T810] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 48.816365][ T835] loop0: detected capacity change from 0 to 8192 [ 48.822799][ T810] F2FS-fs (loop1): invalid crc value [ 48.865975][ T835] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.893930][ T810] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.991122][ T810] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 49.000764][ T20] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 49.018631][ T810] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 49.401021][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 49.500787][ T815] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 49.540820][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.720895][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.740825][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.748909][ T20] usb 3-1: Product: syz [ 49.750837][ T815] usb 1-1: Using ep0 maxpacket: 8 [ 49.758946][ T20] usb 3-1: Manufacturer: syz [ 49.769037][ T20] usb 3-1: SerialNumber: syz [ 49.870946][ T815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.896075][ T815] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 50.094092][ T855] netlink: 144 bytes leftover after parsing attributes in process `syz.1.131'. [ 50.103572][ T815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.110542][ T851] loop5: detected capacity change from 0 to 40427 [ 50.121335][ T815] usb 1-1: config 0 descriptor?? [ 50.431190][ T860] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.926708][ T872] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 50.926708][ T872] verification time 168 usec [ 50.926708][ T872] stack depth 0 [ 50.926708][ T872] processed 2 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 50.926708][ T872] " or missing value [ 51.275032][ T20] cdc_ncm 3-1:1.0: failed to get mac address [ 51.300823][ T20] cdc_ncm 3-1:1.0: bind() failure [ 51.320810][ T20] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 51.344407][ T20] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 51.352611][ T20] usb 3-1: USB disconnect, device number 5 [ 51.379359][ T878] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 51.423784][ T885] loop4: detected capacity change from 0 to 512 [ 51.934204][ T885] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.945534][ T885] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.972983][ T885] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.141: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 51.988577][ T887] netlink: 144 bytes leftover after parsing attributes in process `syz.5.140'. [ 52.009153][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 52.009170][ T30] audit: type=1400 audit(1781351309.986:255): avc: denied { write } for pid=884 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 52.118578][ T311] usb 1-1: USB disconnect, device number 3 [ 52.136400][ T30] audit: type=1400 audit(1781351310.116:256): avc: denied { append } for pid=898 comm="syz.1.144" name="vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.168304][ T905] loop1: detected capacity change from 0 to 256 [ 52.201029][ T905] exfat: Deprecated parameter 'utf8' [ 52.494023][ T907] netlink: 144 bytes leftover after parsing attributes in process `syz.2.146'. [ 52.586924][ T909] netlink: 144 bytes leftover after parsing attributes in process `syz.0.145'. [ 52.768170][ T913] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 52.768170][ T913] verification time 3269 usec [ 52.768170][ T913] stack depth 0 [ 52.768170][ T913] processed 2 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 52.768170][ T913] " or missing value [ 52.790852][ T905] exfat: Bad value for 'time_offset' [ 55.021713][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 55.202309][ T949] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 55.202309][ T949] verification time 134 usec [ 55.202309][ T949] stack depth 0 [ 55.202309][ T949] processed 2 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 55.202309][ T949] " or missing value [ 55.307647][ T947] loop5: detected capacity change from 0 to 32768 [ 55.320894][ T20] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 55.330807][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 55.338167][ T947] loop5: p1 < > p3 < p5 p6 > [ 55.352625][ T947] loop5: p5 size 131072 extends beyond EOD, truncated [ 55.360198][ T947] loop5: p6 start 2164271104 is beyond EOD, truncated [ 55.460880][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.471750][ T311] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 55.484532][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.496741][ T311] usb 1-1: config 0 descriptor?? [ 55.707621][ T958] netlink: 144 bytes leftover after parsing attributes in process `syz.4.162'. [ 55.739148][ T30] audit: type=1400 audit(1781351313.716:257): avc: denied { map } for pid=960 comm="syz.5.163" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.763355][ T708] ------------[ cut here ]------------ [ 55.767773][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 55.774121][ T708] WARNING: CPU: 1 PID: 708 at fs/overlayfs/util.c:475 ovl_dir_modified+0x189/0x1c0 [ 55.779816][ T30] audit: type=1400 audit(1781351313.716:258): avc: denied { unlink } for pid=960 comm="syz.5.163" name="#1" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.783578][ T708] Modules linked in: [ 55.810384][ T708] CPU: 0 PID: 708 Comm: syz-executor Not tainted syzkaller #0 [ 55.818096][ T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 55.828513][ T708] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 55.834209][ T708] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8e 8a a7 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 0c 68 ff <0f> 0b e9 17 ff ff ff e8 6b 0c 68 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 55.854269][ T708] RSP: 0018:ffffc90001117b80 EFLAGS: 00010293 [ 55.860387][ T708] RAX: ffffffff8201d4e9 RBX: 1ffff1102242575a RCX: ffff88811b6613c0 [ 55.868685][ T708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.876739][ T708] RBP: ffffc90001117bb0 R08: ffff88812e4a1baf R09: 1ffff11025c94375 [ 55.884801][ T708] R10: dffffc0000000000 R11: ffffed1025c94376 R12: ffff88811212baa0 [ 55.892986][ T708] R13: 0000000000000000 R14: ffff88812e4a1b08 R15: ffff88811212bad0 [ 55.901284][ T708] FS: 000055555c80d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 55.910261][ T708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.917155][ T708] CR2: 00007fe1c310fbcd CR3: 00000001226da000 CR4: 00000000003506b0 [ 55.925261][ T708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.933304][ T708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.941384][ T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.951508][ T708] Call Trace: [ 55.951526][ T20] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 55.954862][ T708] [ 55.964702][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.967605][ T708] ovl_do_remove+0x5f6/0x9a0 [ 55.976340][ T20] usb 2-1: config 0 descriptor?? [ 55.981233][ T708] ? ovl_getattr+0xf80/0xf80 [ 55.989688][ T708] ? ovl_set_redirect+0x670/0x670 [ 55.995039][ T708] ? selinux_inode_rmdir+0x22/0x30 [ 56.000218][ T708] ovl_rmdir+0x1a/0x20 [ 56.004416][ T708] vfs_rmdir+0x313/0x460 [ 56.008862][ T708] incfs_kill_sb+0x105/0x220 [ 56.013593][ T708] deactivate_locked_super+0xa0/0x100 [ 56.019055][ T708] deactivate_super+0xaf/0xe0 [ 56.024153][ T708] cleanup_mnt+0x45b/0x510 [ 56.028690][ T708] __cleanup_mnt+0x19/0x20 [ 56.033358][ T708] task_work_run+0x127/0x190 [ 56.038034][ T708] exit_to_user_mode_loop+0xd0/0xe0 [ 56.043392][ T708] exit_to_user_mode_prepare+0x87/0xd0 [ 56.049469][ T708] syscall_exit_to_user_mode+0x1a/0x30 [ 56.055036][ T708] do_syscall_64+0x58/0xa0 [ 56.059514][ T708] ? clear_bhb_loop+0x50/0xa0 [ 56.064366][ T708] ? clear_bhb_loop+0x50/0xa0 [ 56.069093][ T708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.075049][ T708] RIP: 0033:0x7f6b38e15097 [ 56.079504][ T708] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 56.100387][ T708] RSP: 002b:00007ffe0549d908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 56.108990][ T708] RAX: 0000000000000000 RBX: 00007f6b38ea91ca RCX: 00007f6b38e15097 [ 56.117054][ T708] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0549d9c0 [ 56.125164][ T708] RBP: 00007ffe0549d9c0 R08: 00007ffe0549e9c0 R09: 00000000ffffffff [ 56.138858][ T708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0549ea50 [ 56.147273][ T708] R13: 00007f6b38ea91ca R14: 000000000000d9bd R15: 00007ffe0549ea90 [ 56.156128][ T708] [ 56.159265][ T708] ---[ end trace b480105f259f1d0a ]--- [ 56.161717][ T963] loop2: detected capacity change from 0 to 8192 [ 56.165205][ T708] ------------[ cut here ]------------ [ 56.176854][ T708] WARNING: CPU: 1 PID: 708 at fs/overlayfs/util.c:475 ovl_dir_modified+0x189/0x1c0 [ 56.187851][ T708] Modules linked in: [ 56.192150][ T708] CPU: 0 PID: 708 Comm: syz-executor Tainted: G W syzkaller #0 [ 56.201115][ T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 56.211785][ T708] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 56.217743][ T708] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8e 8a a7 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 0c 68 ff <0f> 0b e9 17 ff ff ff e8 6b 0c 68 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 56.239453][ T708] RSP: 0018:ffffc90001117b80 EFLAGS: 00010293 [ 56.247431][ T708] RAX: ffffffff8201d4e9 RBX: 1ffff1102242575a RCX: ffff88811b6613c0 [ 56.250996][ T963] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.271761][ T708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.288274][ T708] RBP: ffffc90001117bb0 R08: ffff88812e4a1baf R09: 1ffff11025c94375 [ 56.296662][ T708] R10: dffffc0000000000 R11: ffffed1025c94376 R12: ffff88811212baa0 [ 56.317557][ T708] R13: 0000000000000000 R14: ffff88812e4a1b08 R15: ffff88811212bad0 [ 56.326253][ T708] FS: 000055555c80d500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 56.335633][ T708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.343922][ T708] CR2: 0000200000000380 CR3: 00000001226da000 CR4: 00000000003506a0 [ 56.352434][ T708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.360499][ T708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.368796][ T708] Call Trace: [ 56.372762][ T708] [ 56.375848][ T708] ovl_do_remove+0x5f6/0x9a0 [ 56.380640][ T708] ? ovl_getattr+0xf80/0xf80 [ 56.385630][ T708] ? ovl_set_redirect+0x670/0x670 [ 56.390134][ T967] loop2: detected capacity change from 0 to 1024 [ 56.412412][ T708] ? selinux_inode_rmdir+0x22/0x30 [ 56.418168][ T708] ovl_rmdir+0x1a/0x20 [ 56.423880][ T708] vfs_rmdir+0x313/0x460 [ 56.428310][ T708] incfs_kill_sb+0x198/0x220 [ 56.434670][ T708] deactivate_locked_super+0xa0/0x100 [ 56.440621][ T708] deactivate_super+0xaf/0xe0 [ 56.507560][ T708] cleanup_mnt+0x45b/0x510 [ 56.513410][ T708] __cleanup_mnt+0x19/0x20 [ 56.519467][ T708] task_work_run+0x127/0x190 [ 56.525349][ T708] exit_to_user_mode_loop+0xd0/0xe0 [ 56.531621][ T708] exit_to_user_mode_prepare+0x87/0xd0 [ 56.537295][ T708] syscall_exit_to_user_mode+0x1a/0x30 [ 56.544279][ T708] do_syscall_64+0x58/0xa0 [ 56.549152][ T708] ? clear_bhb_loop+0x50/0xa0 [ 56.558392][ T967] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.563603][ T708] ? clear_bhb_loop+0x50/0xa0 [ 56.578053][ T708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.585353][ T708] RIP: 0033:0x7f6b38e15097 [ 56.586830][ T967] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 56.590236][ T708] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 56.640452][ T708] RSP: 002b:00007ffe0549d908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 56.649208][ T708] RAX: 0000000000000000 RBX: 00007f6b38ea91ca RCX: 00007f6b38e15097 [ 56.657530][ T708] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0549d9c0 [ 56.665816][ T708] RBP: 00007ffe0549d9c0 R08: 00007ffe0549e9c0 R09: 00000000ffffffff [ 56.674132][ T708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0549ea50 [ 56.682754][ T708] R13: 00007f6b38ea91ca R14: 000000000000d9bd R15: 00007ffe0549ea90 [ 56.691203][ T708] [ 56.694408][ T708] ---[ end trace b480105f259f1d0b ]--- [ 56.719058][ T975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.164'. [ 56.786417][ T976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.164'. [ 56.812206][ T815] usb 1-1: USB disconnect, device number 4 [ 56.842016][ T8] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 56.869592][ T8] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 56.892479][ T8] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.892479][ T8] [ 56.908367][ T8] EXT4-fs (loop2): Total free blocks count 0 [ 56.917584][ T8] EXT4-fs (loop2): Free/Dirty block details [ 56.927063][ T8] EXT4-fs (loop2): free_blocks=20480 [ 56.936656][ T8] EXT4-fs (loop2): dirty_blocks=4496 [ 56.944182][ T8] EXT4-fs (loop2): Block reservation details [ 56.953394][ T8] EXT4-fs (loop2): i_reserved_data_blocks=281 [ 56.981415][ T981] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 57.000191][ T981] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.000191][ T981] [ 57.031881][ T976] loop5: detected capacity change from 0 to 40427 [ 57.178254][ T976] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 57.181455][ T985] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 57.181455][ T985] verification time 138 usec [ 57.181455][ T985] stack depth 0 [ 57.181455][ T985] processed 2 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 57.181455][ T985] " or missing value [ 57.230766][ T815] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 57.252252][ T976] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 57.261941][ T26] usb 2-1: USB disconnect, device number 5 [ 57.268235][ T976] F2FS-fs (loop5): invalid crc value [ 57.284090][ T976] F2FS-fs (loop5): invalid crc value [ 57.298604][ T976] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 57.532233][ T30] audit: type=1400 audit(1781351315.516:259): avc: denied { name_bind } for pid=979 comm="syz.0.169" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 57.568460][ T995] loop2: detected capacity change from 0 to 40427 [ 57.575222][ T30] audit: type=1400 audit(1781351315.516:260): avc: denied { node_bind } for pid=979 comm="syz.0.169" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 57.605480][ T995] F2FS-fs (loop2): fault_injection options not supported [ 57.628595][ T30] audit: type=1400 audit(1781351315.516:261): avc: denied { setopt } for pid=979 comm="syz.0.169" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.651966][ T995] F2FS-fs (loop2): invalid crc value [ 57.679314][ T26] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 57.699189][ T1001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.175'. [ 57.708451][ T1001] 8021q: VLANs not supported on ip6_vti0 [ 57.714810][ T995] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.759366][ T995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.067621][ T1006] netlink: 144 bytes leftover after parsing attributes in process `syz.5.176'. [ 58.110021][ T989] handle_bad_sector: 1509 callbacks suppressed [ 58.110156][ T989] attempt to access beyond end of device [ 58.110156][ T989] loop2: rw=2049, want=45104, limit=40427 [ 58.130759][ T26] usb 2-1: Invalid ep0 maxpacket: 64 [ 58.147380][ T30] audit: type=1400 audit(1781351316.126:262): avc: denied { setattr } for pid=988 comm="syz.2.174" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 58.226717][ T288] attempt to access beyond end of device [ 58.226717][ T288] loop2: rw=2049, want=45120, limit=40427 [ 58.280762][ T26] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 58.351824][ T1008] loop2: detected capacity change from 0 to 512 [ 58.411607][ T1008] EXT4-fs (loop2): Ignoring removed nobh option [ 58.428095][ T1008] EXT4-fs (loop2): Unrecognized mount option "grpquota.." or missing value [ 58.450788][ T815] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.483013][ T30] audit: type=1400 audit(1781351316.466:263): avc: denied { bind } for pid=1011 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.530758][ T26] usb 2-1: Invalid ep0 maxpacket: 64 [ 58.536495][ T26] usb usb2-port1: attempt power cycle [ 58.580895][ T815] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 58.611485][ T815] usb 1-1: can't read configurations, error -71 [ 58.621793][ T1014] Zero length message leads to an empty skb [ 58.624918][ T1016] loop5: detected capacity change from 0 to 1024 [ 58.634738][ T1014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 58.712794][ T1008] loop2: detected capacity change from 0 to 40427 [ 58.744490][ T1016] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.757370][ T1016] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.760185][ T1008] F2FS-fs (loop2): invalid crc value [ 58.803343][ T1008] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.850478][ T1008] F2FS-fs (loop2): Start checkpoint disabled! [ 58.861760][ T1008] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 58.960766][ T26] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 59.050910][ T26] usb 2-1: Invalid ep0 maxpacket: 64 [ 59.260849][ T26] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 59.360952][ T26] usb 2-1: Invalid ep0 maxpacket: 64 [ 59.366424][ T26] usb usb2-port1: unable to enumerate USB device [ 60.179418][ T1037] netlink: 144 bytes leftover after parsing attributes in process `syz.4.185'. [ 60.967481][ T815] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 61.006875][ T1051] loop4: detected capacity change from 0 to 512 [ 61.023707][ T1045] netlink: 144 bytes leftover after parsing attributes in process `syz.5.186'. [ 61.036572][ T1042] loop2: detected capacity change from 0 to 40427 [ 61.074341][ T1042] F2FS-fs (loop2): fault_injection options not supported [ 61.079709][ T1051] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.086552][ T1042] F2FS-fs (loop2): invalid crc value [ 61.115873][ T1051] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.718216][ T1056] netlink: 144 bytes leftover after parsing attributes in process `syz.1.190'. [ 61.723490][ T1060] loop5: detected capacity change from 0 to 512 [ 61.737647][ T1042] F2FS-fs (loop2): Found nat_bits in checkpoint [ 61.740887][ T815] usb 1-1: Using ep0 maxpacket: 8 [ 61.766109][ T1051] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.188: corrupted inode contents [ 61.778104][ T1051] EXT4-fs error (device loop4): ext4_dirty_inode:6108: inode #2: comm syz.4.188: mark_inode_dirty error [ 61.778418][ T1042] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.789921][ T1051] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.188: corrupted inode contents [ 61.824267][ T1051] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.188: mark_inode_dirty error [ 61.837049][ T1062] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 61.846959][ T30] audit: type=1400 audit(1781351319.826:264): avc: denied { relabelto } for pid=1048 comm="syz.4.188" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 61.883730][ T1062] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.188: corrupted inode contents [ 61.890232][ T1040] attempt to access beyond end of device [ 61.890232][ T1040] loop2: rw=2049, want=45104, limit=40427 [ 61.899441][ T1062] EXT4-fs error (device loop4): ext4_dirty_inode:6108: inode #2: comm syz.4.188: mark_inode_dirty error [ 61.918283][ T815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.018145][ T815] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 62.039504][ T1062] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.188: corrupted inode contents [ 62.098396][ T815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.132026][ T1051] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.188: corrupted inode contents [ 62.143983][ T815] usb 1-1: config 0 descriptor?? [ 62.171147][ T1051] EXT4-fs error (device loop4): add_dirent_to_buf:2216: inode #2: comm syz.4.188: mark_inode_dirty error [ 62.251540][ T1069] loop4: detected capacity change from 0 to 1024 [ 62.261988][ T1069] EXT4-fs (loop4): bad geometry: block count 144115188075856384 exceeds size of device (512 blocks) [ 62.306308][ T1039] attempt to access beyond end of device [ 62.306308][ T1039] loop2: rw=2049, want=45120, limit=40427 [ 62.348166][ T411] usb 1-1: USB disconnect, device number 6 [ 62.381316][ T1074] loop0: detected capacity change from 0 to 1024 [ 62.524784][ T1074] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.722907][ T1074] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.800426][ T1088] loop0: detected capacity change from 0 to 512 [ 62.816547][ T1088] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 62.832246][ T1090] loop5: detected capacity change from 0 to 2048 [ 62.858172][ T1088] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 62.870290][ T1088] EXT4-fs (loop0): 1 truncate cleaned up [ 62.876519][ T1088] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 62.901055][ T1090] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 62.923583][ T30] audit: type=1400 audit(1781351320.906:265): avc: denied { getopt } for pid=1087 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.953929][ T30] audit: type=1400 audit(1781351320.906:266): avc: denied { setattr } for pid=1087 comm="syz.0.200" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.062900][ T1097] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 63.062900][ T1097] verification time 133 usec [ 63.062900][ T1097] stack depth 0 [ 63.062900][ T1097] processed 2 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 63.062900][ T1097] " or missing value [ 63.107541][ T30] audit: type=1400 audit(1781351321.086:267): avc: denied { rmdir } for pid=287 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.110686][ T1082] loop4: detected capacity change from 0 to 131072 [ 63.138243][ T287] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 63.148598][ T1082] F2FS-fs (loop4): invalid crc value [ 63.154827][ T30] audit: type=1400 audit(1781351321.116:268): avc: denied { rmdir } for pid=287 comm="syz-executor" name=".index" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.199137][ T287] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 63.227748][ T30] audit: type=1400 audit(1781351321.116:269): avc: denied { unlink } for pid=287 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 63.595418][ T287] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 63.610080][ T1100] netlink: 144 bytes leftover after parsing attributes in process `syz.1.202'. [ 63.612530][ T1105] loop2: detected capacity change from 0 to 512 [ 63.621293][ T1082] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.640105][ T1105] EXT4-fs (loop2): Ignoring removed nobh option [ 63.647114][ T1105] EXT4-fs (loop2): Unrecognized mount option "grpquota.." or missing value [ 63.784267][ T1113] loop0: detected capacity change from 0 to 512 [ 63.835074][ T1082] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 63.911901][ T1113] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.930982][ T1113] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.932859][ T1082] netlink: 44 bytes leftover after parsing attributes in process `syz.4.198'. [ 64.000784][ T1027] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.322512][ T1113] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.203: corrupted inode contents [ 64.340994][ T1113] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #2: comm syz.0.203: mark_inode_dirty error [ 64.360752][ T1027] usb 6-1: Using ep0 maxpacket: 8 [ 64.366196][ T1113] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.203: corrupted inode contents [ 64.391144][ T1113] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.203: mark_inode_dirty error [ 64.412669][ T1120] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.203: corrupted inode contents [ 64.440809][ T1105] F2FS-fs (loop2): invalid crc value [ 64.447511][ T1120] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #2: comm syz.0.203: mark_inode_dirty error [ 64.459401][ T1120] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.203: corrupted inode contents [ 64.471908][ T1105] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.472107][ T1113] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.203: corrupted inode contents [ 64.490837][ T1027] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.501087][ T1027] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 64.510246][ T1027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.519165][ T1113] EXT4-fs error (device loop0): add_dirent_to_buf:2216: inode #2: comm syz.0.203: mark_inode_dirty error [ 64.531392][ T1027] usb 6-1: config 0 descriptor?? [ 64.531592][ T1105] F2FS-fs (loop2): Start checkpoint disabled! [ 64.543929][ T1123] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.546878][ T1105] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 64.568456][ T1123] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 64.583243][ T1123] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 64.596351][ T1123] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.596351][ T1123] [ 64.606166][ T1123] EXT4-fs (loop4): Total free blocks count 0 [ 64.612398][ T1123] EXT4-fs (loop4): Free/Dirty block details [ 64.618404][ T1123] EXT4-fs (loop4): free_blocks=4096 [ 64.619966][ T1128] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 33 with error 28 [ 64.623944][ T1123] EXT4-fs (loop4): dirty_blocks=64 [ 64.623963][ T1123] EXT4-fs (loop4): Block reservation details [ 64.647384][ T1123] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 64.653464][ T1128] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.653464][ T1128] [ 64.721831][ T1130] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.742094][ T1130] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 64.790866][ T1136] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 64.853698][ T30] audit: type=1400 audit(1781351322.836:270): avc: denied { mount } for pid=1133 comm="syz.4.210" name="/" dev="ramfs" ino=18995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 64.989153][ T1144] netlink: 144 bytes leftover after parsing attributes in process `syz.1.211'. [ 65.000493][ T30] audit: type=1400 audit(1781351322.926:271): avc: denied { mount } for pid=1139 comm="syz.1.211" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.079843][ T30] audit: type=1400 audit(1781351323.056:272): avc: denied { read write } for pid=1133 comm="syz.4.210" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.110263][ T30] audit: type=1400 audit(1781351323.096:273): avc: denied { open } for pid=1133 comm="syz.4.210" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.722368][ T1152] tipc: Started in network mode [ 65.727414][ T1152] tipc: Node identity 7f000001, cluster identity 4711 [ 65.734891][ T1152] tipc: Enabling of bearer rejected, failed to enable media [ 65.760187][ T1152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.213'. [ 66.118509][ T30] audit: type=1400 audit(1781351324.096:274): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.297743][ T815] usb 6-1: USB disconnect, device number 3 [ 66.640845][ T1150] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.667091][ T1150] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 66.984542][ T1166] netlink: 144 bytes leftover after parsing attributes in process `syz.0.217'. [ 67.035467][ T1150] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 67.189497][ T1150] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.189497][ T1150] [ 67.204710][ T1168] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 33 with error 28 [ 67.215598][ T1150] EXT4-fs (loop4): Total free blocks count 0 [ 67.243138][ T1150] EXT4-fs (loop4): Free/Dirty block details [ 67.243742][ T1168] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.243742][ T1168] [ 67.249371][ T1150] EXT4-fs (loop4): free_blocks=4096 [ 67.282329][ T1150] EXT4-fs (loop4): dirty_blocks=64 [ 67.292042][ T1168] EXT4-fs (loop4): Total free blocks count 0 [ 67.297738][ T1150] EXT4-fs (loop4): Block reservation details [ 67.509489][ T1176] netlink: 'syz.0.221': attribute type 11 has an invalid length. [ 67.612009][ T1180] set_capacity_and_notify: 5 callbacks suppressed [ 67.612025][ T1180] loop4: detected capacity change from 0 to 1024 [ 67.717755][ T1180] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.966258][ T1188] loop5: detected capacity change from 0 to 8192 [ 67.983921][ T1180] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 67.986108][ T849] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 68.063005][ T1188] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.169205][ T1172] loop1: detected capacity change from 0 to 131072 [ 68.170578][ T312] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 68.190433][ T312] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1184 with error 28 [ 68.191114][ T1172] F2FS-fs (loop1): Test dummy encryption mode enabled [ 68.203205][ T312] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.203205][ T312] [ 68.300183][ T312] EXT4-fs (loop4): Total free blocks count 0 [ 68.307468][ T312] EXT4-fs (loop4): Free/Dirty block details [ 68.315072][ T312] EXT4-fs (loop4): free_blocks=20480 [ 68.320665][ T312] EXT4-fs (loop4): dirty_blocks=1184 [ 68.327050][ T312] EXT4-fs (loop4): Block reservation details [ 68.333918][ T312] EXT4-fs (loop4): i_reserved_data_blocks=74 [ 68.340420][ T849] usb 1-1: Using ep0 maxpacket: 32 [ 68.350657][ T1172] F2FS-fs (loop1): invalid crc value [ 68.362151][ T1197] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 68.379804][ T1172] F2FS-fs (loop1): Found nat_bits in checkpoint [ 68.387284][ T1197] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.387284][ T1197] [ 68.428042][ T1172] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 68.550804][ T849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.550855][ T26] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.925237][ T1210] loop1: detected capacity change from 0 to 128 [ 68.990795][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 68.990852][ T849] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 69.006137][ T849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.007474][ T1210] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.014468][ T849] usb 1-1: Product: syz [ 69.025371][ T1210] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.029338][ T849] usb 1-1: Manufacturer: syz [ 69.069519][ T849] usb 1-1: SerialNumber: syz [ 69.078332][ T849] usb 1-1: config 0 descriptor?? [ 69.082933][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 69.082948][ T30] audit: type=1400 audit(1781351327.066:276): avc: denied { read } for pid=1209 comm="syz.1.229" path="socket:[19730]" dev="sockfs" ino=19730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.141454][ T849] cdc_ether: probe of 1-1:0.0 failed with error -22 [ 69.148209][ T849] usb 1-1: unsupported MDLM descriptors [ 69.150823][ T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.164085][ T26] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 69.173466][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.182051][ T26] usb 6-1: config 0 descriptor?? [ 69.350535][ T26] usb 1-1: USB disconnect, device number 7 [ 69.448151][ T815] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 70.162988][ T1220] netlink: 144 bytes leftover after parsing attributes in process `syz.4.231'. [ 70.760902][ T815] usb 2-1: unable to get BOS descriptor or descriptor too short [ 70.800837][ T815] usb 2-1: not running at top speed; connect to a high speed hub [ 70.830790][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.880866][ T815] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 34, changing to 4 [ 70.950823][ T455] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 71.050860][ T815] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 71.060153][ T815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.068214][ T815] usb 2-1: Product: syz [ 71.073704][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 71.078980][ T815] usb 2-1: Manufacturer: syz [ 71.083951][ T815] usb 2-1: SerialNumber: syz [ 71.177191][ T531] usb 6-1: USB disconnect, device number 4 [ 71.190984][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.231444][ T455] usb 1-1: Using ep0 maxpacket: 16 [ 71.331739][ T1232] loop2: detected capacity change from 0 to 8192 [ 71.359662][ T1212] netlink: 272 bytes leftover after parsing attributes in process `syz.1.229'. [ 71.368967][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.378256][ T30] audit: type=1400 audit(1781351329.336:277): avc: denied { nlmsg_read } for pid=1209 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.413526][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.434395][ T1210] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 33: comm syz.1.229: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 71.454658][ T26] usb 5-1: Product: syz [ 71.459729][ T26] usb 5-1: Manufacturer: syz [ 71.466256][ T30] audit: type=1400 audit(1781351329.416:278): avc: denied { create } for pid=1209 comm="syz.1.229" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 71.510049][ T1232] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.515726][ T30] audit: type=1400 audit(1781351329.486:279): avc: denied { load_policy } for pid=1209 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.536652][ T26] usb 5-1: SerialNumber: syz [ 71.541013][ T1212] SELinux: policydb string length 1630561644 does not match expected length 8 [ 71.554559][ T1210] EXT4-fs error (device loop1) in do_split:2095: Corrupt filesystem [ 71.563046][ T1212] SELinux: failed to load policy [ 71.570935][ T455] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.626906][ T1236] loop2: detected capacity change from 0 to 512 [ 71.680941][ T815] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 71.700968][ T815] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 71.711243][ T1236] EXT4-fs (loop2): Ignoring removed bh option [ 71.732472][ T1236] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,grpquota,,errors=continue. Quota mode: writeback. [ 71.740859][ T815] usb 2-1: unable to issue vendor read request (ret = -71) [ 71.744753][ T1236] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.772488][ T815] usb 2-1: unable to issue vendor read request (ret = -71) [ 71.780857][ T30] audit: type=1400 audit(1781351329.756:280): avc: denied { write } for pid=1235 comm="syz.2.237" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.788515][ T1236] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 71.802792][ T455] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.810367][ T815] usb 2-1: unable to issue vendor read request (ret = -71) [ 71.819557][ T455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.834776][ T30] audit: type=1400 audit(1781351329.766:281): avc: denied { add_name } for pid=1235 comm="syz.2.237" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.850823][ T815] usb 2-1: unable to issue vendor read request (ret = -71) [ 71.855240][ T455] usb 1-1: Product: syz [ 71.866592][ T30] audit: type=1400 audit(1781351329.766:282): avc: denied { remove_name } for pid=1235 comm="syz.2.237" name="#5" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.868691][ T815] usb 2-1: USB disconnect, device number 10 [ 71.888858][ T455] usb 1-1: Manufacturer: syz [ 71.888876][ T455] usb 1-1: SerialNumber: syz [ 71.925774][ T30] audit: type=1400 audit(1781351329.766:283): avc: denied { rename } for pid=1235 comm="syz.2.237" name="#5" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.948230][ T30] audit: type=1400 audit(1781351329.766:284): avc: denied { unlink } for pid=1235 comm="syz.2.237" name="#5" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.971347][ T30] audit: type=1400 audit(1781351329.766:285): avc: denied { unlink } for pid=1235 comm="syz.2.237" name="#6" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.478827][ T6] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 72.740836][ T26] cdc_ncm 5-1:1.0: failed to get mac address [ 72.760833][ T26] cdc_ncm 5-1:1.0: bind() failure [ 72.780859][ T26] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 72.800824][ T26] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 72.808696][ T26] usb 5-1: USB disconnect, device number 5 [ 72.810791][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 72.955450][ T6] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 72.963654][ T6] usb 2-1: config 0 has no interface number 0 [ 73.174440][ T455] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 73.181006][ T455] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 73.188471][ T455] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 73.261530][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 73.270653][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.278677][ T6] usb 2-1: Product: syz [ 73.282934][ T6] usb 2-1: Manufacturer: syz [ 73.287599][ T6] usb 2-1: SerialNumber: syz [ 73.292256][ T455] cdc_ncm 1-1:1.0: setting tx_max = 60 [ 73.298807][ T455] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 73.309538][ T6] usb 2-1: config 0 descriptor?? [ 73.317280][ T455] usb 1-1: USB disconnect, device number 8 [ 73.324715][ T455] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 73.480764][ T849] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.640819][ T6] usb 2-1: Found UVC 0.00 device syz (046d:08c3) [ 73.647792][ T6] usb 2-1: No streaming interface found for terminal 6. [ 73.656649][ T6] usb 2-1: USB disconnect, device number 11 [ 73.720757][ T849] usb 5-1: Using ep0 maxpacket: 8 [ 74.082439][ T849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.100948][ T849] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 74.120193][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.128671][ T1269] loop0: detected capacity change from 0 to 8192 [ 74.134278][ T849] usb 5-1: config 0 descriptor?? [ 74.161905][ T1269] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.199693][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 74.199708][ T30] audit: type=1400 audit(1781351332.176:288): avc: denied { setopt } for pid=1271 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.761545][ T1284] netlink: 144 bytes leftover after parsing attributes in process `syz.1.251'. [ 75.181608][ T1298] loop1: detected capacity change from 0 to 8192 [ 75.519621][ T1298] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.573931][ T1306] loop4: detected capacity change from 0 to 1024 [ 75.674014][ T1306] EXT4-fs (loop4): Ignoring removed oldalloc option [ 75.684457][ T1306] EXT4-fs (loop4): Ignoring removed oldalloc option [ 75.684486][ T1306] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.712470][ T1306] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 75.746328][ T30] audit: type=1400 audit(1781351333.726:289): avc: denied { mounton } for pid=1258 comm="syz.4.243" path="/47/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.813254][ T30] audit: type=1400 audit(1781351333.756:290): avc: denied { block_suspend } for pid=1258 comm="syz.4.243" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.550754][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 76.790771][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 76.847023][ T849] usb 5-1: USB disconnect, device number 6 [ 76.872889][ T30] audit: type=1400 audit(1781351334.856:291): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 76.910891][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.922917][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.934188][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 76.944094][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.145978][ T39] usb 3-1: config 0 descriptor?? [ 77.160136][ T30] audit: type=1400 audit(1781351335.136:292): avc: denied { read } for pid=1344 comm="syz.4.272" path="socket:[20082]" dev="sockfs" ino=20082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.193195][ T1342] netlink: 144 bytes leftover after parsing attributes in process `syz.5.271'. [ 77.205854][ T39] hub 3-1:0.0: USB hub found [ 77.265198][ T1341] loop1: detected capacity change from 0 to 40427 [ 77.551097][ T39] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 77.585282][ T1341] F2FS-fs (loop1): fault_injection options not supported [ 77.629181][ T6] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 77.636526][ T1341] F2FS-fs (loop1): invalid crc value [ 77.644148][ T1341] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.668862][ T1341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.696847][ T1335] attempt to access beyond end of device [ 77.696847][ T1335] loop1: rw=2049, want=45104, limit=40427 [ 77.820204][ T1334] attempt to access beyond end of device [ 77.820204][ T1334] loop1: rw=2049, want=45120, limit=40427 [ 78.066573][ T39] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 78.191017][ T6] usb 1-1: config 120 has an invalid interface number: 125 but max is 0 [ 78.201052][ T6] usb 1-1: config 120 has no interface number 0 [ 78.207363][ T6] usb 1-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 78.219197][ T6] usb 1-1: config 120 interface 125 has no altsetting 0 [ 78.254654][ T1329] UDC core: couldn't find an available UDC or it's busy: -16 [ 78.270431][ T1329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.345585][ T1372] loop1: detected capacity change from 0 to 512 [ 78.400841][ T6] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 78.414292][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.433833][ T6] usb 1-1: Product: syz [ 78.442295][ T39] usb 3-1: USB disconnect, device number 6 [ 78.453835][ T6] usb 1-1: Manufacturer: syz [ 78.458834][ T6] usb 1-1: SerialNumber: syz [ 78.480957][ T1337] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 78.867352][ T1337] loop0: detected capacity change from 0 to 512 [ 78.902575][ T1376] loop5: detected capacity change from 0 to 1024 [ 78.950193][ T1337] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.270: Invalid inode bitmap blk 4 in block_group 0 [ 78.963295][ T1337] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 78.999188][ T1337] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 79.036261][ T1337] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.270: Invalid inode bitmap blk 4 in block_group 0 [ 79.049633][ T1337] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 79.156820][ T1385] loop4: detected capacity change from 0 to 256 [ 79.245459][ T1376] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.257907][ T1385] overlayfs: filesystem on './file0' not supported [ 79.264578][ T1376] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.281190][ T30] audit: type=1400 audit(1781351337.246:293): avc: denied { mounton } for pid=1383 comm="syz.4.283" path=2F35322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="loop4" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 79.351025][ T6] ums-usbat 1-1:120.125: USB Mass Storage device detected [ 79.405586][ T6] ums-usbat: probe of 1-1:120.125 failed with error 3 [ 79.562480][ T6] usb 1-1: USB disconnect, device number 9 [ 79.699848][ T1408] loop0: detected capacity change from 0 to 1024 [ 80.278018][ T1408] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.302758][ T1408] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,block_validity,max_dir_size_kb=0x0000000000000001,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 80.452513][ T1421] netlink: 144 bytes leftover after parsing attributes in process `syz.2.291'. [ 80.603916][ T1425] loop1: detected capacity change from 0 to 128 [ 80.726173][ T1425] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.746132][ T1425] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.798783][ T1425] syz.1.292 (pid 1425) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 80.803164][ T45] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 80.830141][ T45] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 80.830593][ T1425] fscrypt: key with description 'fscrypt:0000111122223333' is too short (got 22 bytes, need 32+ bytes) [ 80.843532][ T45] EXT4-fs (loop0): This should not happen!! Data will be lost [ 80.843532][ T45] [ 80.864324][ T45] EXT4-fs (loop0): Total free blocks count 0 [ 80.870589][ T45] EXT4-fs (loop0): Free/Dirty block details [ 80.876648][ T45] EXT4-fs (loop0): free_blocks=20480 [ 80.881987][ T45] EXT4-fs (loop0): dirty_blocks=3600 [ 80.887313][ T45] EXT4-fs (loop0): Block reservation details [ 80.893348][ T45] EXT4-fs (loop0): i_reserved_data_blocks=225 [ 80.912697][ T1430] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1544 with error 28 [ 80.916279][ T1425] fscrypt: key with description 'fscrypt:0000111122223333' is too short (got 22 bytes, need 32+ bytes) [ 80.937888][ T1420] loop5: detected capacity change from 0 to 40427 [ 80.951569][ T1430] EXT4-fs (loop0): This should not happen!! Data will be lost [ 80.951569][ T1430] [ 80.993442][ T1420] F2FS-fs (loop5): fault_injection options not supported [ 81.008320][ T1420] F2FS-fs (loop5): invalid crc value [ 81.084778][ T1420] F2FS-fs (loop5): Found nat_bits in checkpoint [ 81.350671][ T1420] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 81.454719][ T30] audit: type=1400 audit(1781351339.426:294): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 81.491196][ T1415] attempt to access beyond end of device [ 81.491196][ T1415] loop5: rw=2049, want=45104, limit=40427 [ 81.518575][ T1415] attempt to access beyond end of device [ 81.518575][ T1415] loop5: rw=2049, want=45120, limit=40427 [ 82.375923][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 82.400759][ T39] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 83.383081][ T30] audit: type=1400 audit(1781351341.366:295): avc: denied { connect } for pid=1470 comm="syz.5.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.470797][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 83.676652][ T531] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.730992][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.743599][ T1480] loop0: detected capacity change from 0 to 256 [ 83.811049][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.830081][ T1480] FAT-fs (loop0): Directory bread(block 64) failed [ 83.843990][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.853293][ T1480] FAT-fs (loop0): Directory bread(block 65) failed [ 83.859897][ T1480] FAT-fs (loop0): Directory bread(block 66) failed [ 83.866785][ T39] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 113, using maximum allowed: 30 [ 83.879737][ T1480] FAT-fs (loop0): Directory bread(block 67) failed [ 83.886462][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.896971][ T1480] FAT-fs (loop0): Directory bread(block 68) failed [ 83.903968][ T1480] FAT-fs (loop0): Directory bread(block 69) failed [ 83.910545][ T39] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 83.923918][ T1480] FAT-fs (loop0): Directory bread(block 70) failed [ 83.930478][ T1480] FAT-fs (loop0): Directory bread(block 71) failed [ 83.937477][ T1480] FAT-fs (loop0): Directory bread(block 72) failed [ 83.944187][ T1480] FAT-fs (loop0): Directory bread(block 73) failed [ 83.950927][ T531] usb 5-1: Using ep0 maxpacket: 16 [ 84.039478][ T531] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 86.222020][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.240870][ T531] usb 5-1: unable to read config index 1 descriptor/start: -71 [ 86.245962][ T1492] loop0: detected capacity change from 0 to 512 [ 86.248672][ T531] usb 5-1: can't read configurations, error -71 [ 86.261722][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.886541][ T1497] netlink: 144 bytes leftover after parsing attributes in process `syz.4.311'. [ 86.951591][ T1499] netlink: 144 bytes leftover after parsing attributes in process `syz.1.312'. [ 87.006654][ T39] usb 2-1: Product: syz [ 87.592677][ T1507] loop4: detected capacity change from 0 to 1024 [ 87.599350][ T39] usb 2-1: Manufacturer: syz [ 87.608563][ T1492] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.619881][ T1492] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.630635][ T39] usb 2-1: can't set config #1, error -71 [ 87.637367][ T39] usb 2-1: USB disconnect, device number 12 [ 87.647600][ T1492] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 87.709588][ T1507] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.728115][ T1507] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.753607][ T1495] loop2: detected capacity change from 0 to 40427 [ 87.785127][ T1495] F2FS-fs (loop2): fault_injection options not supported [ 87.821808][ T1518] kvm: pic: non byte read [ 87.830222][ T1495] F2FS-fs (loop2): invalid crc value [ 88.058393][ T1495] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.094581][ T1495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.109956][ T1485] attempt to access beyond end of device [ 88.109956][ T1485] loop2: rw=2049, want=45104, limit=40427 [ 88.145073][ T30] audit: type=1400 audit(1781351346.126:296): avc: denied { create } for pid=1534 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.164733][ T1485] attempt to access beyond end of device [ 88.164733][ T1485] loop2: rw=2049, want=45120, limit=40427 [ 88.453368][ T1547] loop1: detected capacity change from 0 to 512 [ 88.471820][ T1547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.492238][ T1547] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.507249][ T1547] EXT4-fs (loop1): 1 truncate cleaned up [ 88.513293][ T1547] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 88.975915][ T1550] netlink: 144 bytes leftover after parsing attributes in process `syz.2.326'. [ 89.028192][ T30] audit: type=1400 audit(1781351347.006:297): avc: denied { remount } for pid=1555 comm="syz.5.330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.362994][ T30] audit: type=1400 audit(1781351347.336:298): avc: denied { create } for pid=1563 comm="syz.2.331" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.417032][ T30] audit: type=1400 audit(1781351347.376:299): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.497965][ T30] audit: type=1400 audit(1781351347.386:300): avc: denied { connect } for pid=1571 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.517609][ T30] audit: type=1400 audit(1781351347.386:301): avc: denied { write } for pid=1571 comm="syz.2.334" path="socket:[21572]" dev="sockfs" ino=21572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.053084][ T1575] loop4: detected capacity change from 0 to 40427 [ 90.425751][ T1575] F2FS-fs (loop4): fault_injection options not supported [ 90.465030][ T1575] F2FS-fs (loop4): invalid crc value [ 90.480988][ T1575] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.556652][ T1575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.589546][ T1568] attempt to access beyond end of device [ 90.589546][ T1568] loop4: rw=2049, want=45104, limit=40427 [ 90.630422][ T1568] attempt to access beyond end of device [ 90.630422][ T1568] loop4: rw=2049, want=45120, limit=40427 [ 91.217892][ T1605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.342'. [ 93.440775][ T30] audit: type=1400 audit(1781351351.396:302): avc: denied { bind } for pid=1617 comm="syz.5.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.466893][ T1620] loop1: detected capacity change from 0 to 512 [ 93.521053][ T30] audit: type=1400 audit(1781351351.396:303): avc: denied { setattr } for pid=1617 comm="syz.5.345" name="NETLINK" dev="sockfs" ino=21611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.579721][ T1627] syz.0.347 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.195942][ T30] audit: type=1400 audit(1781351352.176:304): avc: denied { lock } for pid=1628 comm="syz.4.350" path="socket:[21641]" dev="sockfs" ino=21641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 94.706543][ T1657] xt_hashlimit: size too large, truncated to 1048576 [ 94.966575][ T1665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 94.987834][ T1669] netlink: 88 bytes leftover after parsing attributes in process `syz.5.364'. [ 95.348471][ T30] audit: type=1400 audit(1781351353.326:305): avc: denied { read write } for pid=1685 comm="syz.0.370" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 95.372721][ T30] audit: type=1400 audit(1781351353.326:306): avc: denied { open } for pid=1685 comm="syz.0.370" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 95.398165][ T30] audit: type=1400 audit(1781351353.326:307): avc: denied { ioctl } for pid=1685 comm="syz.0.370" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 95.645520][ T1700] xt_hashlimit: size too large, truncated to 1048576 [ 95.700828][ T30] audit: type=1400 audit(1781351353.666:308): avc: denied { connect } for pid=1699 comm="syz.5.372" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.743433][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.756590][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.764509][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.782489][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 95.794781][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.804203][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 95.813549][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.822989][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.831580][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.847109][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.858887][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.607942][ T30] audit: type=1400 audit(1781351354.586:309): avc: denied { remount } for pid=1725 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 96.659190][ T1728] netlink: 104 bytes leftover after parsing attributes in process `syz.4.383'. [ 96.674092][ T30] audit: type=1400 audit(1781351354.616:310): avc: denied { mounton } for pid=1725 comm="syz.0.382" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 96.708285][ T30] audit: type=1400 audit(1781351354.676:311): avc: denied { listen } for pid=1729 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 96.734215][ T1728] xt_hashlimit: size too large, truncated to 1048576 [ 98.141385][ T45] device bridge_slave_1 left promiscuous mode [ 98.147557][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.168058][ T45] device bridge_slave_0 left promiscuous mode [ 98.182979][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.215589][ T45] device veth1_macvtap left promiscuous mode [ 98.224806][ T45] device veth0_vlan left promiscuous mode [ 98.796130][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 98.796146][ T30] audit: type=1400 audit(1781351356.776:357): avc: denied { execmem } for pid=1767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 98.821662][ T30] audit: type=1400 audit(1781351356.776:358): avc: denied { create } for pid=1768 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 98.841385][ T30] audit: type=1400 audit(1781351356.786:359): avc: denied { map_create } for pid=1771 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 98.860829][ T30] audit: type=1400 audit(1781351356.786:360): avc: denied { read write } for pid=286 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.885092][ T30] audit: type=1400 audit(1781351356.786:361): avc: denied { prog_load } for pid=1769 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 98.904181][ T30] audit: type=1400 audit(1781351356.786:362): avc: denied { create } for pid=1769 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 99.402758][ T30] audit: type=1400 audit(1781351357.378:363): avc: denied { execmem } for pid=1775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 99.422642][ T30] audit: type=1400 audit(1781351357.388:364): avc: denied { create } for pid=1779 comm="syz.5.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 99.443438][ T30] audit: type=1400 audit(1781351357.388:365): avc: denied { map_create } for pid=1779 comm="syz.5.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.462687][ T30] audit: type=1400 audit(1781351357.388:366): avc: denied { prog_load } for pid=1779 comm="syz.5.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.948728][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 103.948743][ T30] audit: type=1400 audit(1781351361.928:393): avc: denied { execmem } for pid=1820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 103.977324][ T30] audit: type=1400 audit(1781351361.938:394): avc: denied { name_bind } for pid=1821 comm="syz.2.414" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 104.019633][ T30] audit: type=1400 audit(1781351361.988:395): avc: denied { create } for pid=1825 comm="syz.5.415" dev="anon_inodefs" ino=21932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 104.041820][ T30] audit: type=1400 audit(1781351361.988:396): avc: denied { mount } for pid=1827 comm="syz.1.413" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=0 [ 104.081066][ T30] audit: type=1400 audit(1781351361.998:397): avc: denied { read write } for pid=286 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.128065][ T30] audit: type=1400 audit(1781351362.008:398): avc: denied { create } for pid=1821 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 104.158400][ T30] audit: type=1400 audit(1781351362.008:399): avc: denied { create } for pid=1821 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 104.187948][ T30] audit: type=1400 audit(1781351362.128:400): avc: denied { prog_load } for pid=1825 comm="syz.5.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.184037][ T30] audit: type=1400 audit(1781351363.168:401): avc: denied { create } for pid=1835 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 105.220775][ T30] audit: type=1400 audit(1781351363.168:402): avc: denied { execmem } for pid=1834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 109.415083][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 109.415098][ T30] audit: type=1400 audit(1781351367.398:430): avc: denied { mounton } for pid=1866 comm="syz.2.428" path="/92/file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 109.448193][ T30] audit: type=1400 audit(1781351367.398:431): avc: denied { create } for pid=1864 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 109.469178][ T30] audit: type=1400 audit(1781351367.418:432): avc: denied { prog_load } for pid=1866 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.488249][ T30] audit: type=1400 audit(1781351367.418:433): avc: denied { create } for pid=1866 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 109.508225][ T30] audit: type=1400 audit(1781351367.428:434): avc: denied { create } for pid=1872 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 109.528664][ T1876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 109.537773][ T30] audit: type=1400 audit(1781351367.428:435): avc: denied { create } for pid=1867 comm="syz.5.429" dev="anon_inodefs" ino=21086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 109.561209][ T30] audit: type=1400 audit(1781351367.428:436): avc: denied { prog_load } for pid=1870 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.580607][ T30] audit: type=1400 audit(1781351367.428:437): avc: denied { execmem } for pid=1863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 109.600081][ T30] audit: type=1400 audit(1781351367.448:438): avc: denied { read write } for pid=286 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.624256][ T30] audit: type=1400 audit(1781351367.508:439): avc: denied { mount } for pid=1872 comm="syz.2.431" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=0 [ 114.591318][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 114.591333][ T30] audit: type=1400 audit(1781351372.578:460): avc: denied { execmem } for pid=1907 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 114.606116][ T1912] xt_hashlimit: size too large, truncated to 1048576 [ 114.620957][ T30] audit: type=1400 audit(1781351372.578:461): avc: denied { map_create } for pid=1908 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.645691][ T30] audit: type=1400 audit(1781351372.578:462): avc: denied { map_create } for pid=1908 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.664842][ T30] audit: type=1400 audit(1781351372.628:463): avc: denied { module_request } for pid=1908 comm="syz.1.441" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 114.686370][ T30] audit: type=1400 audit(1781351372.638:464): avc: denied { bpf } for pid=1908 comm="syz.1.441" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 114.707431][ T30] audit: type=1400 audit(1781351372.638:465): avc: denied { prog_load } for pid=1908 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.726423][ T30] audit: type=1400 audit(1781351372.648:466): avc: denied { create } for pid=1911 comm="syz.5.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 114.747032][ T30] audit: type=1400 audit(1781351372.678:467): avc: denied { create } for pid=1909 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 114.808628][ T30] audit: type=1400 audit(1781351372.788:468): avc: denied { read write } for pid=286 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.533147][ T30] audit: type=1400 audit(1781351374.518:469): avc: denied { create } for pid=1917 comm="syz.1.444" dev="anon_inodefs" ino=22027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 118.722493][ T380] tipc: Left network mode [ 119.371478][ T380] device bridge_slave_1 left promiscuous mode [ 119.377621][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.385178][ T380] device bridge_slave_0 left promiscuous mode [ 119.391483][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.399485][ T380] device veth1_macvtap left promiscuous mode [ 119.405691][ T380] device veth0_vlan left promiscuous mode [ 120.431660][ T380] device bridge_slave_1 left promiscuous mode [ 120.437809][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.445766][ T380] device bridge_slave_0 left promiscuous mode [ 120.451949][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.459709][ T380] device bridge_slave_1 left promiscuous mode [ 120.465888][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.473369][ T380] device bridge_slave_0 left promiscuous mode [ 120.479465][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.487248][ T380] device bridge_slave_1 left promiscuous mode [ 120.493452][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.501032][ T380] device bridge_slave_0 left promiscuous mode [ 120.507141][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.515608][ T380] device veth1_macvtap left promiscuous mode [ 120.521807][ T380] device veth0_vlan left promiscuous mode [ 120.527762][ T380] device veth1_macvtap left promiscuous mode [ 120.533813][ T380] device veth0_vlan left promiscuous mode [ 120.539783][ T380] device veth1_macvtap left promiscuous mode [ 120.545792][ T380] device veth0_vlan left promiscuous mode