last executing test programs: 19.299613153s ago: executing program 4 (id=429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020301010000000000000000cf0b14ede0abc21302000002"], 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'gre0\x00', 0x5a00}) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f00000000c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x30, 0x65, 0x32, 0x32, 0x36, 0x38, 0x38], 0x2d, [0x98, 0x66, 0x33, 0x65], 0x2d, [0x65, 0x32, 0x64, 0x33], 0x2d, [0x32, 0x36, 0x64, 0x64], 0x2d, [0x37, 0x37, 0x36, 0x34, 0x0, 0x30, 0x30, 0x63]}}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x78, 0x29, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xd}, {0xfff2, 0xffe0}, {0x10, 0xffff}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}, @TCA_RATE={0x6, 0x5, {0xf, 0xf}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf7}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0xb7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_mq={0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020301010000000000000000cf0b14ede0abc21302000002"], 0x1c}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'gre0\x00', 0x5a00}) (async) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f00000000c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x30, 0x65, 0x32, 0x32, 0x36, 0x38, 0x38], 0x2d, [0x98, 0x66, 0x33, 0x65], 0x2d, [0x65, 0x32, 0x64, 0x33], 0x2d, [0x32, 0x36, 0x64, 0x64], 0x2d, [0x37, 0x37, 0x36, 0x34, 0x0, 0x30, 0x30, 0x63]}}}]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x78, 0x29, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xd}, {0xfff2, 0xffe0}, {0x10, 0xffff}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}, @TCA_RATE={0x6, 0x5, {0xf, 0xf}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf7}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0xb7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_mq={0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (async) 19.106137402s ago: executing program 4 (id=432): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000007c0)=0x100, 0x4) bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000840), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000000000070000e1b4964aa0d6df12f8db2b04ef9a9354d300000000000000000002000007140000001100010000000000000000000500000a3087aa1b7f5c36e3daa91d6097eae3487791fe69c730d43e184ba0389491bf6b4c607300d8ec017295695d1f41aa58312154d84e5c26ac38f5eb7cfc6b83d1e8cd50f042514c4ef82c4e459fa81076248fe5dd14c9fb8dcacc9220a5ff4008ed9f7166fdcc71b718a07ee8e0732bb1c80e332854f7f59a41e41e3c0944925b970f1230b22383ac1f32d7a3daf1903bae6d384d25ab823a228f357f878510e6cf219ac2d6b2"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004004) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f00000001c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0xffffd000) (async) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000240)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048080}, 0x50082) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f0, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2000, 0x200da5d85240a79d, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x80, 0x4, 0x0, @empty, @empty}}}}) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) (async) syz_mount_image$f2fs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1523d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbb913f496d87c608604eb02b2c031d5ae40c75", @ANYRESHEX, @ANYRES32, @ANYRESHEX=r7, @ANYRES32=r2], 0xff, 0x5534, &(0x7f0000003d00)="$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") (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000009240)='./file1\x00', 0x42, 0x140) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) 17.756145418s ago: executing program 4 (id=440): open(&(0x7f0000000380)='./bus\x00', 0x400141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000a00)=""/222}, 0x78) 17.741383269s ago: executing program 4 (id=443): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f0000000180)={[{@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}]}, 0x1, 0x4fe, &(0x7f0000000880)="$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") open(&(0x7f0000000d80)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000dc0)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f0000000e00)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000e40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000e80)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000ec0)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) setxattr$trusted_overlay_upper(&(0x7f0000001000)='./file1\x00', &(0x7f0000001040), 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000300)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008841) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)="d726dd6c52", 0x5}, {&(0x7f0000000380)="217f6358d8275e235884b7150bdbc394", 0x10}], 0x2}}], 0x1, 0x6048001) socket$packet(0x11, 0x3, 0x300) 17.601079133s ago: executing program 4 (id=449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = epoll_create(0x61) epoll_ctl$EPOLL_CTL_ADD(r2, 0x7ffffffe, r1, &(0x7f0000000080)={0x10000009}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r7, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000a9000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x100, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = geteuid() syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}], [{@subj_role={'subj_role', 0x3d, '{\xcf\'!'}}, {@euid_gt={'euid>', r9}}, {@smackfsdef={'smackfsdef', 0x3d, '#'}}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}}, 0x1, 0x0, &(0x7f00000004c0)) 16.152162789s ago: executing program 4 (id=451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0x100}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x0, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'veth1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x800, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x0, 0x41, 0xfffffffe, 0x2, 0xfff, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 16.045977229s ago: executing program 32 (id=451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000540)={0xffffffffffffffff, 0x100}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x0, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'veth1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x800, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x0, 0x41, 0xfffffffe, 0x2, 0xfff, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 8.56599353s ago: executing program 3 (id=481): r0 = socket$netlink(0x10, 0x3, 0xa) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) (async) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f0000000200), 0x4000087, 0x2, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0xffe3) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xf0, 0x2000007, 0x100010, r5, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="83040500010000001c0012800e00010069703665727370616e0000fc0700028004001200"], 0x3c}}, 0x0) (async) syz_emit_ethernet(0xec, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, ' \x00', 0xb6, 0x6, 0x1, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x87}], {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0xc2, 0x8, 0x0, 0x7f, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xf, 0xf989, "c7162dd5d75a038b136155"}, @nop, @mptcp=@synack={0x1e, 0x10, 0x5, 0x2, 0x7, 0x2, 0x4}, @fastopen={0x22, 0x2}]}}, {"403175a00b32c23504468c727749e3facb56e86b5812892a22b9c09b6dee6b9f9b283752f90ab803f5e678aa0c80b3599f0b89171339d7a152154e4949ecfc961a2f1af002f6e9a41d6253807aae3b46130e614fd7cb29c39e55a6eb5e66a0b50bf0ee68946d386543be1c38a26d0fcef3f0b8a45058"}}}}}}}, 0x0) (async) bind$inet(r6, 0x0, 0x0) r8 = dup(r0) (async) r9 = open(&(0x7f0000000480)='./file1\x00', 0x109cc2, 0x158) ftruncate(r9, 0x200004) sendfile(r8, r9, 0x0, 0x80001d00c0d1) read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) 7.249484563s ago: executing program 1 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000190000022dbd7000fedbdf2502000001fe03fd06001d000008000500e000000106001d004e23000008000b0004000000080007006401010208001e005806000018001680140005000000000000000000000000000000000106001d004ed05a0008000b00f4faffff13000880044660cdda02345fd1ee8b581ef32200"], 0x80}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB="0000000000000000b707000000000000008af8ff00000000bfa200000000000007020000e8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r2}, 0x8) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000580), 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001180)={'ip_vti0\x00', &(0x7f0000001280)={'gre0\x00', 0x0, 0x8, 0x700, 0xffffffff, 0x14, {{0x21, 0x4, 0x2, 0x4, 0x84, 0x68, 0x0, 0x2, 0x29, 0x0, @private=0xa010111, @multicast2, {[@cipso={0x86, 0x56, 0x3, [{0x0, 0x4, "55b7"}, {0x2, 0xc, "6c37e5a22fcbc2ab6519"}, {0x6, 0x4, '\f7'}, {0x6, 0xf, "59e90fb967bae5b53b42418768"}, {0x0, 0xd, "2a8df8a8dce11e004ec3fe"}, {0x1, 0x2}, {0x5, 0x10, "45ef12d46e86775e4996f049e072"}, {0x1, 0xe, "7da2582f234d543b992f0208"}]}, @lsrr={0x83, 0xf, 0x60, [@multicast1, @broadcast, @loopback]}, @ssrr={0x89, 0xb, 0x80, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={0xffffffffffffffff, r3, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f00000005c0)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000007c0)=r4, 0x4) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000014c0)={[{@max_batch_time}, {@resgid}, {@inlinecrypt}, {@oldalloc}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000fc0), &(0x7f0000001000)='./bus\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000001040)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, 0x0) lseek(r7, 0xfffffffffffffffc, 0x2) getdents(r7, 0x0, 0x54) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001340)=ANY=[@ANYBLOB="400000001000ffff2bbd7000fcdbdf2500000000", @ANYRES16=r2, @ANYBLOB="104a0500239a0500200012f6c1f2f41e840a6810780bc2be81fa800e000100697036657273706176394cb1ff01981709e78ffce1b9be0cfbdc9347dddbba3dbf021270b858f819afa0ba350b1611a66694c42ae9650639739c9c439e9564e6bc79308dec7e5d65919cc761947666e1b6e320b310d8f71608fb343002c2517fdfd244"], 0x40}, 0x1, 0x20000, 0x0, 0x240440c1}, 0x9080) sendmsg$inet(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0xb3, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002001009240302010100010009"], 0x0) 7.249065503s ago: executing program 2 (id=484): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@nojournal_checksum}, {@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x4d7, &(0x7f0000000400)="$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") stat(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffff2d4, 0x200ffffe, 0x7, 0xfffffff7, 0x0, "05000801000000d510017b00000f3600", 0x0, 0x7ff}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/47, 0x2f}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) 7.248761852s ago: executing program 3 (id=485): capset(&(0x7f0000000700)={0x20080522}, &(0x7f0000000740)={0x200002, 0x200003, 0x803, 0x4, 0x7}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x2, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.835876984s ago: executing program 0 (id=486): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt(r2, 0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002dbd7000fedbdf256800000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070200007000000007758f00000000000501c805fe00b30004040603020188b942d3ce53286f00000c00c700f6cd810c5aa2c93e"], 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6004, 0x1) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0xd4) ioctl$BLKGETZONESZ(r3, 0x80041284, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000300)=@req3={0x8000, 0x6, 0x8000, 0x2000006}, 0x1c) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x810, &(0x7f00000003c0)={[{@data_ordered}, {@grpquota}]}, 0x4, 0x4fe, &(0x7f0000000400)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @dev, [0xff000000], [0x0, 0xffffff00, 0xff000000], '\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0xe}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@empty, @loopback, [0x0, 0xff, 0xff000000, 0x1fe000000], [0xff000000, 0xff, 0xffffffff, 0xd2072c74cd31bad7], 'macvlan0\x00', 'veth0_vlan\x00', {}, {}, 0x87, 0x0, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r5 = getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000c80)=0x81) sched_setscheduler(r5, 0x2, &(0x7f0000000cc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000d40)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000dc0), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000e00), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000e40)={0x2, 0x1234, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f0000000e80)='.\x00', &(0x7f0000000ec0)='system.posix_acl_default\x00', &(0x7f0000000f00)=ANY=[@ANYBLOB="020000000700000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000f40)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.834269685s ago: executing program 1 (id=487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0xa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000840)={r0}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x4000003, 0x7, 0x10, 0x4, 0x17, 0x0, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x10}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x28000000}, 0x40) syz_mount_image$ext4(&(0x7f0000000a80)='ext2\x00', &(0x7f0000000ac0)='./bus\x00', 0x59000, &(0x7f0000000b00)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000b80)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@getneigh={0x14, 0x1e, 0x100, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1000c001) mount$cgroup(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540), 0x800000, &(0x7f0000000580)={[{@nofavordynmods}, {@name={'name', 0x3d, 'cgroup\x00'}}, {@subsystem='devices'}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f00000006c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x4a, &(0x7f0000001040)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendto$unix(r5, &(0x7f0000000880)="de5364d4964f7a70bbd6b4f16802f0a36dd474d9d2c556f523f3487592f8ea52428ea3806ff74f4f8d236433b7e6aef253e652404f868e11d54e1cab1e6f8efbb1b0702dad6d753561265b5da5f7c9151f", 0x51, 0x8044, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.834107185s ago: executing program 2 (id=488): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)={0x20, 0x18, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f852"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 5.833358875s ago: executing program 3 (id=489): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6a45, 0xfffffffffffffffc, 0x0, 0x0, &(0x7f0000000000)) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r4, 0x3a, 0xcf, 0x0, 0x0) 4.272161931s ago: executing program 0 (id=490): syz_usb_connect(0x3, 0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xe2, 0x6, 0x7}) 4.271931001s ago: executing program 1 (id=491): r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x400000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 4.270118762s ago: executing program 2 (id=492): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) r2 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x88841, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000900)={0x4, 0x0, 0x0, 0x2d8, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r1}, [@verity={0x0, 0x40, 0x0, 0x1a0, 'verity\x00', {'1', 0x20, @ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, '1024', 0x20, '4096', 0x20, 0x61, 0x20, 0xfa, 0x20, 'sha512', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, @hex=@hex64=[0x63, 0x66, 0x66, 0x34, 0x65, 0x64, 0x32, 0x33, 0x65, 0x38, 0x4, 0x63, 0x31, 0x38, 0x30, 0x62, 0x0, 0x66, 0x36, 0x39, 0x58, 0x32, 0x37, 0x33, 0x64, 0x34, 0x32, 0x6, 0x34, 0x62, 0x62, 0x38, 0x64, 0x65, 0x33, 0x6c, 0x53, 0x61, 0x61, 0x66, 0x62, 0x63, 0x38, 0x66, 0x37, 0x30, 0x31, 0x33, 0x33, 0x65, 0x64, 0x36, 0x66, 0x61, 0x6a, 0x30, 0x30, 0x257dd158b1bd841, 0x34, 0x61, 0x39, 0x30, 0x37, 0x38, 0x61, 0x38, 0x36, 0x30, 0x37, 0x35, 0x61, 0x66, 0x36, 0x35, 0x35, 0x39, 0x33, 0x67, 0x39, 0x62, 0x3b, 0x62, 0x64, 0x32, 0x63, 0x62, 0x3f, 0x31, 0x33, 0x37, 0x32, 0x33, 0x36, 0xc, 0x38, 0x37, 0x31, 0x63, 0x39, 0x34, 0x66, 0x38, 0x31, 0x32, 0x32, 0x0, 0x65, 0x50, 0x37, 0x33, 0x62, 0x62, 0x38, 0x39, 0x32, 0x37, 0x39, 0x30, 0x60, 0x38, 0x30, 0x65, 0x65, 0x34, 0x61, 0x36, 0x36, 0x33], ' 1 check_at_most_once'}}]}) 4.269243662s ago: executing program 3 (id=493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000500)=""/158, 0x9e}], 0x1, 0x80, 0x800003) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2.697543559s ago: executing program 0 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff80000180140001800800010000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="a70e7bdf1ce886bb33dcbf3c586d198bf6680e74fbf657764aaf27dd67ac237b2f9bafb155d217f1fe75fda1820e6763fa304271164807fec377298a23b6d7ec07d4"], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c40)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r4], 0x70}}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000e00)={0x3, &(0x7f0000000dc0)=[{0x8, 0x9, 0x9, 0xe}, {0x3, 0x0, 0x7, 0xfffffff7}, {0x8, 0x4, 0x9, 0x9}]}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}, @IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r10 = open(&(0x7f00000007c0)='./file0\x00', 0x12000, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0xf5, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x12, 0x21, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x22e, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x929}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0xffff1b74, 0x5d, &(0x7f0000000600)=""/93, 0x40f00, 0x72, '\x00', r9, @cgroup_sock_addr, r10, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x3, 0x2, 0x3}, 0x10, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 2.697217359s ago: executing program 1 (id=495): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002340)={'vlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1200}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002740), 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002780)='./file0\x00', 0x800, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000027c0)='./file0\x00', &(0x7f0000002800), 0x0, &(0x7f0000002840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x202f) mknodat$null(0xffffffffffffff9c, &(0x7f0000004900)='./file0/file0\x00', 0x8000, 0x103) write$FUSE_INIT(r3, &(0x7f0000004940)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffff801, 0x4040141, 0x6, 0x8, 0x9, 0xa14, 0x0, 0x0, 0x80, 0x400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000049c0)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a80)={0x90, 0x0, 0x1, {0x7, 0x1, 0x4000000000007, 0x6, 0x1, 0x10005, {0x4, 0xfffffbffefffff81, 0x9, 0x9, 0xeef7, 0xb, 0x10000, 0x7, 0x7fe, 0x8000, 0xa, r5, r6, 0x0, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0xff5c, &(0x7f00000003c0)=""/222}, 0x78) r7 = socket$inet(0x2, 0xa, 0x1ff) recvmmsg(r7, &(0x7f0000002480)=[{{&(0x7f0000000000)=@isdn, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/226, 0xe2}], 0x1, &(0x7f0000000500)=""/240, 0xf0}, 0x15}, {{&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/76, 0x4c}, {&(0x7f0000000800)=""/85, 0x55}, {&(0x7f0000000880)=""/133, 0x85}, {&(0x7f0000000940)=""/81, 0x51}, {&(0x7f00000009c0)=""/104, 0x68}], 0x6, &(0x7f0000000ac0)=""/118, 0x76}, 0x1000}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/41, 0x29}, {&(0x7f0000000b80)=""/106, 0x6a}], 0x2}}, {{&(0x7f0000000c40)=@ax25={{}, [@null, @default, @netrom, @rose, @rose, @remote, @netrom, @default]}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/82, 0x52}, {&(0x7f0000000d40)=""/67, 0x43}], 0x2}, 0x2}, {{&(0x7f0000000e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000e80)=""/149, 0x95}, {&(0x7f0000000f40)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x3}, 0xe}, {{&(0x7f0000001fc0)=@tipc=@id, 0x80, &(0x7f0000002380)=[{&(0x7f0000002040)=""/214, 0xd6}, {&(0x7f0000002140)=""/142, 0x8e}, {&(0x7f0000002200)=""/174, 0xae}, {&(0x7f00000022c0)=""/118, 0x76}, {&(0x7f0000002340)}], 0x5, &(0x7f0000002400)=""/68, 0x44}, 0x8}], 0x6, 0x23, &(0x7f0000002600)={0x0, 0x3938700}) 2.697001139s ago: executing program 2 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000200081dcfcffffff0300000002000000000000031f0000000500160004"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x44004) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0xfffffffffffffff7, [0x5, 0x372, 0xfffffffffffffffa, 0x4, 0x9]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 2.696824019s ago: executing program 3 (id=497): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000000080)=0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000b40)={0x20000023, &(0x7f00000003c0)=[{0x20, 0x7, 0x9, 0xfffff020}, {0x6, 0xfd, 0x7, 0xffffffff}, {0x3, 0x2, 0x8, 0x5}, {0x3, 0x40, 0x55, 0x8}, {0x101, 0x0, 0x7f, 0x8}]}, 0x10) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x60d3, 0x1}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x428, 0x1b8, 0x2e0, 0x1b8, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@ipv6={@mcast1, @local, [0xff000000], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, 0x0, 0x0}, 0x20) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x77359400}}, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009"], 0x0) 987.441761ms ago: executing program 0 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x12, 0x600, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x401, 0x2, 'syz1\x00', {0x30}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="680033f2085d0946f7c6e3", @ANYRES32=0x0, @ANYBLOB="0198000000000000480012800b000100697036746e6c00003800028014000300fc0100000000000000000000000000010400130014000200fc0100000000000000000000000000010500090000000000"], 0x68}}, 0x0) 982.555522ms ago: executing program 1 (id=499): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000100)="$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") truncate(&(0x7f0000001300)='./file1\x00', 0xc3f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000a40)='7', 0x1) ioprio_get$uid(0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000b00)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000b40)={0x64, &(0x7f0000000b80)=[{0x6, 0x3, 0x0, 0x7fc00100}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x42, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000bc0)=0x7) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000000c00)={0x0, 0xffff, 0x0, 0x0, r2}) write$P9_RREADLINK(r1, &(0x7f0000001380)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 975.912982ms ago: executing program 2 (id=500): r0 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="60fd5403da92a2008f1d22d8c91aa862", 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x700, 0x7800, 0x2, 0x9, {{0x2e, 0x4, 0x3, 0x12, 0xb8, 0x66, 0x0, 0x80, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @rr={0x7, 0xb, 0x32, [@rand_addr=0x64010101, @multicast2]}, @timestamp_prespec={0x44, 0x4c, 0x33, 0x3, 0x5, [{@loopback, 0x1d69}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x9}, {@remote, 0xfffffff4}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1}, {@empty, 0x6}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x70ee}, {@loopback, 0x2}, {@loopback, 0x2}]}, @noop, @timestamp_addr={0x44, 0x1c, 0xb4, 0x1, 0x0, [{@multicast1, 0x9}, {@private=0xa010100, 0x4939}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x6}]}, @rr={0x7, 0xb, 0xb5, [@multicast1, @empty]}, @rr={0x7, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast2, @multicast2, @broadcast, @empty, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r2, 0x4, 0xda, 0x1, 0x9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x10, 0x80, 0x6, 0xfff}}) fcntl$setpipe(r0, 0x407, 0x2) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000301, 0xee01, 0x0) syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000480)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000004c0)=r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000540)={0x430, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000000, 0x75}}}}, [@NL80211_ATTR_IE={0x301, 0x2a, [@ibss={0x6, 0x2, 0x427}, @perr={0x84, 0x49, {0x10, 0x5, [{{}, @device_a, 0x7, @void, 0x23}, {{}, @device_a, 0x10001, @void, 0x2a}, {{}, @broadcast, 0xffffffff, @void, 0x5}, {{}, @broadcast, 0x9, @void, 0xb}, {{0x0, 0x1}, @broadcast, 0x2930, @value=@device_b, 0x41}]}}, @ibss={0x6, 0x2}, @preq={0x82, 0x6d, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x6, 0x10000, @broadcast, 0x8, @value, 0x8, 0x9e, 0x7, [{{0x0, 0x0, 0x1}, @device_a, 0x5}, {{}, @broadcast, 0x2}, {{}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x1}, {{}, @device_b, 0xffffffff}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}]}}, @random={0x8, 0xe6, "0934cafc8b76d7b66a0637799ff1d16cf00a73a18207549d4e610caa4198085dbb0472a54078babdb8992f5d3372a8992d225f5e0b849ce4245dc4e90417dbcb2d2de0bea9180ee346f62bbe226ecd0fe159549c3e565f29814da3e08c6b930af973c84fe08cd2e27e9b5cd26cc91d72509d01d330cdf4b55caa4e1cc44208a086ab4fee54b124cc94182e19e5864904a2f619bf10320ce6a632fe845fa13c6e3b14d1a3e8588d79c9306e884422a50ebe8be5cb5eb204da0eda15fd0532d0af2104359db27be47147290a35a3ab7fa5dae892a7f12bd80009b812a81335bf1e734c6262f5b0"}, @random={0x97, 0xb8, "4a2b0b93a8a2306bd1d785fa43cdb0ffe6e1d7d307916b039e13072a438dff37bd19ea501f332a1a01537ce86d71c707fa8c54ffb00f95a8c2f9f4e40a71fc6358449daaf7f607fc7cb5c80c67560af76a9423615a26c598c4468fff40c490237f7e0bfdcd601b36c99b09f6f31a28de66f58a3283a377d9d7984e130308e5ec573997a17cc0466883aa75cd872141d37550f9b958872af7e51add8942309f4ecefd26968f1835c8cc45a2493bc5435b1061fb82dd2959d3"}, @fast_bss_trans={0x37, 0x8c, {0x4, 0x2, "2725e92d0db89249ad840354ae4e192b", "37fe049d1d0319f9447722090d18106487417291449d52eeebb68cf696b7e8ae", "cb583333a281635222dfa9586f3a2782c9ec308383480cdcf843a7c705d78835", [{0x3, 0x27, "2f01256f14fdea6b3d6858635c20d97d8a781d4f89684ee1cea2d7d20311209451d837117a495d"}, {0x1, 0xf, "0d1756f8306c70e263185033ff6921"}]}}, @dsss={0x3, 0x1, 0xf4}, @cf={0x4, 0x6, {0x0, 0x5, 0x71b, 0x10}}]}, @NL80211_ATTR_IE={0x104, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x6, 0x4, @device_b, 0x4d8909a6, 0x4, 0x80000000}}, @cf={0x4, 0x6, {0xd, 0x3, 0x35, 0x8}}, @measure_req={0x26, 0x4f, {0x4, 0x7f, 0x6, "2061600bba80f0c7115ebe3cdcf89f708c76cae75791e2cf4c06c8c3cf54c80a632afa70a2de9635f60b3837d2396a960a0d0ed59141d4f2a757f5aba214b19e32f9341c0c182db83429a213"}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @broadcast}}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x1, 0x7f, 0x200, 0x9}}, @tim={0x5, 0x62, {0xff, 0x0, 0x2, "14d73c29f3c8bd05a275df8add9080b6740a5b1517df5168a62c51fa4c2aeb1f28d4e9adee667ac77d78fe3bc86d22649c2f41a9486731d62b8ec2847470acae3555e22fbb6316a93570e8717de493ddff1875e395950cd8fc90e4a78a81fb"}}]}]}, 0x430}, 0x1, 0x0, 0x0, 0x8000}, 0x4008010) ioctl$KDSETLED(r0, 0x4b32, 0x5) r8 = socket(0x3, 0x4, 0x6) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200882}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10, 0x38}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x49}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x4}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xda}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7a}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf22a7be9be6bc5a4}, 0x20000040) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r7) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x170, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "236372485a699e1922ca32e442e7a335056426dc5bfc7f1e9338d04b496017388a2c4a7dfcf28389651cefb2381698cf37c6ed3aaf1b41cead514b4c95848915fe3a246ca02db737968b930b484e4283abc08f6afdeeb43898a55a934d7e5541ee5ed0c03cb34f40bca4dabce09e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf0, 0x3, "dfb800574ad03126f935869deb6939297925dd61fca06d3b580360029073ecb6b021f833be542521f904a6b1d9db3e479a044f16d58d43c62f18a84e213ab4fbb8835480ab08a72795f93d079d0a3c2eb3bf430913096c648fe99383b87176ce464f58384fb888ca263466012182135058784e1010b1bdebef25c5b592a4fcdf0eaecb046b04e507e698990a3524a676daf4acbd0304303c6ed93f10299b1d4fc067c422a1593db3bcdeff2e5e8349ae85c034b8d2875a785e7dc98d70c18c83eecd3c6712907e8d54389abe7d297c100f848ad2de27c0a6d99b5f3364d1827dc353d1f42facd28c5d129cb8"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xea}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x98}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x84e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, r4, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x5, 0x9908, 0x1, 0xa}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x80, {0x2, 0x3, 0x8, 0x6}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x7fff, 0x9, 0x0, 0xf, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x100, 0xc}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080001}, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000010c0)={&(0x7f0000000fc0)=[{0x3, 0x0, 0x9, 0x2, 0x3, 0x2, 0x6, 0x7}, {0x3, 0x0, 0x5, 0x3, 0xac80, 0x8000, 0x2bc3c9da, 0x9}, {0x1, 0x0, 0x8001, 0xcb, 0x8, 0x27e, 0x344, 0xfd7}, {0x2, 0x0, 0x0, 0x1, 0xd35, 0x4, 0x4, 0x7}], 0x4, 0x38, 0x1, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x2c8, 0x398, 0x2c8, 0x0, 0xd0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, &(0x7f0000001100), {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [0xff, 0xffffff00, 0x0, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x62, 0xff, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@frag={{0x30}, {[0x1], 0x5, 0x8, 0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0x1}}}, {{@ipv6={@empty, @empty, [0x0, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffff00], 'erspan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2f, 0x3, 0x2, 0x30}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x17}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x4, 0x1, [0x5, 0x5, 0x3, 0x7, 0x1, 0x3, 0xea2, 0x8, 0x8, 0x1, 0x5, 0x9, 0x0, 0xf, 0x80, 0x2], 0xf}}, @common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x3, 0x3, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r10 = syz_io_uring_complete(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001e00)={'ip_vti0\x00', &(0x7f0000001dc0)={'gretap0\x00', r3, 0x7800, 0x10, 0x7, 0xf, {{0x8, 0x4, 0x1, 0x31, 0x20, 0x67, 0x0, 0x4, 0x4, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0xc, 0xc, 0x1, 0xb, [{@private=0xa010101, 0x1}]}]}}}}}) sendmmsg$inet(r10, &(0x7f0000002280)=[{{&(0x7f00000017c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001800)="9d196f26bcedca2227b2594aafd420ed42fa8e1716221332d6f54b563a7fc603dfb1ad343c262e49c60efe07f905727cbcc4039ed1fc07303f363615b8d9922dfd3de0502ef93c7ff5e96259d67f4b61fb901ddf3baf958da254aa8830a188af42c2366a9ad5c0f0043d03157273fc387c3aebf2495dbe41c5220d4b9fd83f7680316ecbcc51380a4c6d954aff3643d6e40f62efdeb5feb02012c0b5a7715ce985e937c5f1d03c317a6b2598555ae45ae83f4ceecff9dd1770e77add492a67970d8bd8e512839fce9608bc70cb7e18b1d10de622977a1663598b3744352aa7", 0xdf}, {&(0x7f0000001900)="2703a1aea44dd56abbbb68cb6a7e2b0d9a001064443a53d3d8e08492b6c1d3f9752e7a566251a77db570f9e054e0516bb3126440773ffc80287657bf89bc74644775c394dbf72887ca5788ebffd545c828093313effd1f0602d2470f28808c6d43a088ced868c008ebcd38", 0x6b}, {&(0x7f0000001980)="792b5d9095f25614b8102b1cc2a96377e79d99c7b4b6c2a4a697f4ad993881b5fc6d6b2cd20f9e16922151e9e29f2938a629a2de46d32fd29d03ba882670e6255db682748d6ccedd0c6606a16aa89ec432aef86d22ea04d0abd024710ee1bf2c318e3c674e3b70e89ae583248ee327f2af651beaaaf4a0b97a936f54db54ef6cd0b13e7743ab2f384ca08426e0ed272d2b7c781af479369bbf31", 0x9a}, {&(0x7f0000001a40)="d3029118cc5f335ceedc0c37576048c52976e16dba95ddabd4c1ab266350fca2877582b6278f26972f03f0ae8c15d501d6b66b12cc35e6e5a4983ccb151ecd343f50e7eb334f7d3f8b8bbb1bf730c560332a5f317a5895625a69c2ae379a58bbfca4115c20ea5b9faa134357365990a3f0c132b4e9521a7e5f157dc6125bdbf0e397a57275b4b0e9c7e8999af1ee2f2d5f3c6067aa", 0x95}, {&(0x7f0000001b00)="0058642590284bef551ce5fdaac773da4d046f09d4187362b99de3623d06b16dcaecc4c76fc0dc20b50a9a54508e331db777a72555585412979002ef67f8d73c0f2b75269dfbf5988b1ca32d9b576547693665", 0x53}, {&(0x7f0000001b80)="0e2c1aca6f9e3e7d0bc97cb67ca6e2ea845d23c30c3c8e6b56d0f32a56ad80e6d40df1bd887a50925003991f56785cefb5a3a9845f21baa964d788eb3293a1409a27091f830d8f0ca1a937fd9af86afde0531a878779f8eecd61fc08f2c8035a53f7dba859531336f12ce3d86126d7b29890cbb1556ccc7b69faa695bd9686181fea72bd770ad14f65b102fcbbc10ca65371f8d1129d67fbb75bf59f11feef89b39a7aa00b09b9ea7745c5bf11206448761b2c3481288fb3d4bb42fd786b2763705a17d5a953404b5042b3b5c477f5a25155f754170fc0cd9ca4c4dfa4d5f2", 0xdf}, {&(0x7f0000001c80)="832df137ee1842eae05c1e3f1a03f18d934c8d6f5a94cae6db25be977887de95c1c4c3cdcf799e39773cd3699610067f133f272621b30a779859c3e3ac83542dfbe8f6ba34fc8e40d5c3d527d2f1f5b5cd1eee16b7b7e18c7481ba3cfb817e99ca9c33c53da45458774266c602f51bee1676ef344b06504cd870493a7d91ddcd7a47b303f113", 0x86}], 0x7, &(0x7f0000001e40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xca}}], 0x88}}, {{&(0x7f0000001f00)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000001f40)="33a389a40a37953d4649681946b87ce92b8026048c46d00e560e8ef4f0b7eaa8", 0x20}, {&(0x7f0000001f80)="1909b56ec9cf1da2ecbe8edd1eeea5112136b986142eb257cfcc0354162c2502ee01908684426f47e3d671ee45480acaade2e483e812b803492cfe5f696ba83cc3224667ced9ba6680af29efe45c6081aac4c5e30102ab3aa11e934feb1545b734c3b1aedddccda0afdd64e6f96e8170b4999b43b59e764a640ddb32a7b2bbe9ba745b9bf93277ea1fbbc4e39b33c8246a912a75330418a34dedf611b819a124f73e1329c770fb1935419cca40953fe468f7062a32595063e4c7c9e4995b58a3645d864b1c43eae5be2ac8b8ab72b3301d8f095afb01b8e48507a1025e3c4ad25e6b1433066233c977e6b4083213bf26", 0xf0}, {&(0x7f0000002080)="29cd2c5f8b52f9a2d6bb032e71b397d9d33f69ebd975d016768120df1585dbcd783b9948bcdb63fb6246b5feab903475e1ac35e2bcce68", 0x37}], 0x3, &(0x7f0000002100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x36d6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x30, 0x0, 0x7, {[@end, @rr={0x7, 0x17, 0xb4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0x9b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x78, 0x0, 0x7, {[@cipso={0x86, 0x68, 0x0, [{0x5, 0xb, "fadb9e28dc0c7f0382"}, {0x5, 0x5, "cdfcff"}, {0x1, 0x8, "4a4e1ea3f608"}, {0x7, 0x2}, {0x7, 0xd, "68ff14e4307468b1f2d29d"}, {0x0, 0xb, "dfdbfeaffc2fc29014"}, {0x6, 0x10, "c530285abe63e03c8d2e51d790b9"}, {0x2, 0x11, "e94d5fc37c8b8d0b4f6cd3a4b41061"}, {0x0, 0xf, "8ee6cfdc9ca81949420ac7be72"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x158}}], 0x2, 0x4000) getsockname$packet(r10, &(0x7f0000002300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002340)=0x14) fsopen(&(0x7f0000002380)='adfs\x00', 0x0) 975.652192ms ago: executing program 3 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1, 0x21000000}]}]}}, 0x0, 0x3e}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x20, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x4, 0x1b}]}, 0x20}], 0x1, 0x0, 0x0, 0x60480}, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_mount_image$fuse(0x0, 0x0, 0x280028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x3000, &(0x7f00000002c0)='+#${@\x00') r2 = getpid() ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000300), 0x1004) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) io_setup(0x239f, &(0x7f0000000500)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000000000095", @ANYRESDEC=r3], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000680)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r5, r7, 0x16, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700), 0x8) 470.889503ms ago: executing program 0 (id=502): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) getgid() sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x2472, &(0x7f0000000400)={0x0, 0x990c, 0x8, 0x3, 0x3aa}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x1b, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='syzkaller\x00', 0x7, 0xf9, &(0x7f00000006c0)=""/249}, 0x94) r1 = syz_ublk_setup_io_uring(0x20009, &(0x7f0000000500)={0x0, 0x7660, 0x10, 0x2, 0xcc, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xc26, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x165) getdents64(r7, &(0x7f0000000140)=""/42, 0x2a) getdents64(r7, 0xfffffffffffffffe, 0x29) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r5, &(0x7f0000000180)={0x0, 0x20fb83, 0x0, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x54a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 468.754353ms ago: executing program 1 (id=503): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getrandom(&(0x7f0000000080)=""/286, 0xffffff9a, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000001700), 0x101302, 0x0) ioctl$DM_DEV_WAIT(r0, 0xc138fd08, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x140, 0x138, 0x0, 0x0, 0x11, 0x95, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}, "f90d3e"}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x8, 0x1c}, 0x18) ioctl$DM_DEV_RENAME(r1, 0xc138fd05, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, @name={'syz', 0x0, '2\x00'}}) ioctl$DM_LIST_DEVICES(r0, 0xc138fd02, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20011}) 468.006553ms ago: executing program 33 (id=503): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getrandom(&(0x7f0000000080)=""/286, 0xffffff9a, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000001700), 0x101302, 0x0) ioctl$DM_DEV_WAIT(r0, 0xc138fd08, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x140, 0x138, 0x0, 0x0, 0x11, 0x95, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}, "f90d3e"}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x8, 0x1c}, 0x18) ioctl$DM_DEV_RENAME(r1, 0xc138fd05, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, @name={'syz', 0x0, '2\x00'}}) ioctl$DM_LIST_DEVICES(r0, 0xc138fd02, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20011}) 388.867731ms ago: executing program 2 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000040000975d4008"], 0x48) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000006000)={{r0}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STATS_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STATS_GROUPS={0x4}]}, 0x18}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10003910}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0400070100df2510000000080006000d00000008000700090000000800060000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc000) syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESHEX], 0x25, 0x55bf, &(0x7f00000007c0)="$eJzs3E2LG3UYAPBnsrt9ty7iwVsHirALTWi2L+jJqi2+YEvx5eBJs0ka0iaZZZOma089eBQPfhNR8OTRz+BBj3oTD4o3oZKZWe32RbtuNsu2vx/MPDP//PPMM0MIPDMhATy1FtM/fkvieByOiLmIOJZEvp2US8SdiAvF3Bci4kREVO5ZknL874EDEXEkIo5Pkhc5k/KlL06NT5779e3fv/3+4PzRL7/5YU9PHNhTL0ZEf63YvtUvYtYp4vVyvDHu5rF/dlzGtS05+lkxfqu9mme41dic18jjmU4xP1u7OZzEa71GcxI73Wv5+NqgOOBw3NnMM3lDer2xnu+32qt57A6zPHZuF8fduF18t90ejoo8rTLfJ3n6GI02YzHe3mgX57N2I4/NwagcL/JmrfbGJI7LWB4umlmvldex+j8v8j7wTndwcyMdt9eH3WyQnqvVX6rVz1fr61mrPWqfrTb6rfNn06VObzKtOmo3+hc6WdbptWvNrL+cLnWazWq9ni5dbK92G4O0Xq+dqZ2unlsut06lb1z5IO210qVJfK07uDnq9obptWw9Ld6xnK7Uzry8nJ6sp+9dvppefffSpctX3//o4odXXr381uvlpAfKSpdWTq+sVOunqyv15afo/D8ti97G+ScPH/7px51dNig84gP2aPO7UwfAPvJA/x/39/+h/wembif9f/9Gub87/X88Tv8f0+z/Jy2V/v+/+9/Ktvrf41PpfxdC/7+L5w87su3+P3dg6nUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBzPy989Wa+sVjsHy3HnymHniv3k4ioRMTdh5iLA1tyzpV5Fh4xf+G+Gr5LIs8wOcbBcjkSERfK5c9nd/sqAAAAwJPr6zsnPi+69WK1uNcFMUvFTZvKsY+nlC+JiIXFX6aUrTJZPT+lZPnnez42ppQtv4F1aErJiltu89PK9ljmtoRD94SkCJWZlgMAAMzE1k5gtl0IAAAAs/TZv776yszqYMaS2HyUufksOP/l/T8PBA9PVnfv+3E/AAAAsJ8ke10AAAAAsOvy/t///wEAAMCTrfj/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgL3bu50ZtIIoD8LPBQP4pKMo9reQGZaSEHHMMFJAmKIG0kAaogUg5pIQVrLBnkbwL0moZYy36Psn2znj18wxweWNpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLf6v1/PfPL78uzdntL5NnNgAAAMAp22o9r/+YNu13qf9D6vqU2kVElBFxqnYfxKiVOUg51Zn/rx6N4U9EnXDoH6fjbUR8Tcfdx64/BQAAALhdm+Vq1lTrzSktAfzrd1RcSbNoU77/limviIhq+j9TWnk4fc4UVv++h/EjU1q9gDXJFNYsuQ1P3xvlekjboHV5mMmi/hLrVtnNcwEAgD61K4EzVQgAAAA34HvfA+Aanpb2xfF0fM84bi7pheCbVgsAAAB4hYq+BwAAAAB0rq7/u9n/b/Ki/f8K+/8BAABAds3+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW63nm+Vqdu7+4pk5u/1l8s0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHv25xiFYRgKouAmkZK4M7r/Yc2CXbp2MwOCx99KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCd1/nyvuLT2JOMXhuz55Xk26nx69T4d25sMxnr6d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzsz0sKhEAQRMGc8b+Tvv9hJUHPIEIENDyqqEUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzs289rHFUcAPA3O9lNU1uMUQJGpUoPerHptrb2KqIED/4JQkg3Nbq12uZgS7Dm4k1y7kX0IogISrzlf+i5gV7qrYccInjyEJlfyWyybX6QzKzN5wNv33ffTt6PmWXJd98sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhbX3wquNPI6Th9EsLtoerC/MJPXqtjqxsvRwIilJHA0Xraff2OvYG/GhLGFQvVZ+cma8vokAAADwrDi96xFxkd+HEB41l6eSujGa5v/N4pgk5/8x7yrK27bn/avrCyfylyaK/P/PPx6/tDnQaJyOk3Q6O9ftnN85laEDL/N/7vldjxhKz3z63UucXpDGR4svrjXT8xl9f//+B600HK5itgDAQZwr6jwo/h9K6nadEwPg2BgqJd5F/h+P1jsnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCqsLYbnijgKIUwMbcWJ1fWFmX71t0sPJ1bycvnevaVyn0kXzRDC7Fy3c75ntOEjX89gKs7mnc+nu93OzVu3qw7OhBD6vHR3b38e59N/4jGtEEJPy9mX+/TzyR7G2tbPjiB/e4Zqz+FIsr5dD456WqIdJ/z9jUwdb4BDDlpPukyN/PocxaAjlV/33qB47x1+z/v5LDmun6EAAOxHMy9JJvqouTyVtEVjIWz81Jv/v1mKQ0/ev3E3a8mer5Ty/8efXn5QHquc/7e3mk8d9RoH3eT89S8nb92+8/bc9elrnWudL9650H63ffHKpUtXJtPvSiZnQ2PbNyYAAACwH628lPP/kT77/ydLcXjK/n+2JZzl/1/90P6mPFbcP/8/9rY2/eqeCQAAwHHU2oxeeP2fv6M+R0StVvh6en7+Zjt73Hx+IXusdLoHNJyXcv4fj9U9KwAAAKAKa4tRz/7/1VIcnrL/X77//9Qvr/xW7jPO7i24EULonJu50b1a3XIGWu+Pfn+Oj+KHyulArbpXCgAAQF1G8lLe/2+OJfl/Y/OWh0YI4a2zIfyb/4Y/7DH/jz/87tfyWOX7/y9WusrB0xjPzkdaj4cwNF73jAAAAHiWnchLkuz/1Vye+uz3kx+33P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULX/AgAA//9KES1X") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005d80)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000005dc0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000005fc0)=0x7, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005f80)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x48000}}], 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f0000005e40)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005ec0)={&(0x7f0000005f00)=ANY=[@ANYRES32=0x0, @ANYBLOB="242400002248000008001300", @ANYRES32=0x0, @ANYBLOB="1400030069f3897f52089229e000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x40044) openat$dir(0xffffffffffffff9c, 0x0, 0x68800, 0x1c) creat(&(0x7f0000005f40)='./file1\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f0000000780)=""/2}, 0x20) 0s ago: executing program 0 (id=505): syz_usb_connect(0x3, 0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xe2, 0x6, 0x7}) kernel console output (not intermixed with test programs): m_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.694800][ T291] syz-executor: attempt to access beyond end of device [ 50.694800][ T291] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.709655][ T28] audit: type=1400 audit(1793989847.770:203): avc: denied { read write open } for pid=597 comm="syz.1.62" path="/9/file1/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.718582][ T591] loop0: detected capacity change from 0 to 131072 [ 50.745292][ T591] F2FS-fs (loop0): invalid crc value [ 50.760748][ T591] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.767409][ T19] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 50.815222][ T591] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 50.827833][ T623] loop1: detected capacity change from 0 to 128 [ 50.849878][ T28] audit: type=1400 audit(1793989847.920:204): avc: denied { read write } for pid=590 comm="syz.0.59" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.873876][ T28] audit: type=1400 audit(1793989847.920:205): avc: denied { open } for pid=590 comm="syz.0.59" path="/17/file1/file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.874096][ T287] EXT4-fs (loop3): unmounting filesystem. [ 50.905645][ T28] audit: type=1400 audit(1793989847.930:206): avc: denied { append } for pid=590 comm="syz.0.59" path="/17/file1/memory.events.local" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.935394][ T28] audit: type=1400 audit(1793989848.020:207): avc: denied { mounton } for pid=622 comm="syz.1.66" path="/10/bus/file0" dev="loop1" ino=1048647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 50.937743][ T567] usb 2-1: USB disconnect, device number 2 [ 50.981620][ T28] audit: type=1400 audit(1793989848.050:208): avc: denied { create } for pid=625 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.001755][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 51.026022][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.062566][ T290] EXT4-fs (loop4): unmounting filesystem. [ 51.069097][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.100131][ T28] audit: type=1400 audit(1793989848.180:209): avc: denied { bind } for pid=629 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.185227][ T633] loop3: detected capacity change from 0 to 16 [ 51.225903][ T633] erofs: (device loop3): mounted with root inode @ nid 36. [ 51.718538][ T636] syz.4.70[636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.719829][ T636] syz.4.70[636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.131222][ T19] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.166177][ T19] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 52.194863][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.203238][ T19] usb 3-1: Product: syz [ 52.214865][ T19] usb 3-1: Manufacturer: syz [ 52.219581][ T19] usb 3-1: SerialNumber: syz [ 53.013376][ T19] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.065577][ T19] usb 3-1: USB disconnect, device number 3 [ 53.119842][ T646] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 53.130473][ T651] FAULT_INJECTION: forcing a failure. [ 53.130473][ T651] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.143967][ T651] CPU: 0 PID: 651 Comm: syz.3.74 Not tainted syzkaller #0 [ 53.152619][ T651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 53.162690][ T651] Call Trace: [ 53.165985][ T651] [ 53.169005][ T651] __dump_stack+0x21/0x24 [ 53.173347][ T651] dump_stack_lvl+0x110/0x170 [ 53.178020][ T651] ? __cfi_dump_stack_lvl+0x8/0x8 [ 53.183655][ T651] dump_stack+0x15/0x24 [ 53.187905][ T651] should_fail_ex+0x3bf/0x510 [ 53.192600][ T651] should_fail+0xb/0x10 [ 53.196947][ T651] should_fail_usercopy+0x1a/0x20 [ 53.202079][ T651] _copy_from_user+0x1e/0xc0 [ 53.206843][ T651] __sys_sendto+0x30b/0x660 [ 53.211365][ T651] ? __cfi___sys_sendto+0x10/0x10 [ 53.216606][ T651] ? ksys_write+0x1fa/0x260 [ 53.221333][ T651] ? __cfi_ksys_write+0x10/0x10 [ 53.226628][ T651] __x64_sys_sendto+0xe5/0x100 [ 53.231405][ T651] x64_sys_call+0x83/0x9a0 [ 53.235917][ T651] do_syscall_64+0x4c/0xa0 [ 53.240513][ T651] ? clear_bhb_loop+0x30/0x80 [ 53.245196][ T651] ? clear_bhb_loop+0x30/0x80 [ 53.249880][ T651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.255879][ T651] RIP: 0033:0x7f1b87f9fb19 [ 53.260297][ T651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.280268][ T651] RSP: 002b:00007f1b88e49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 53.288869][ T651] RAX: ffffffffffffffda RBX: 00007f1b88226090 RCX: 00007f1b87f9fb19 [ 53.297101][ T651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 53.305073][ T651] RBP: 00007f1b88e49090 R08: 0000200000000b40 R09: 000000000000001c [ 53.313221][ T651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.321284][ T651] R13: 00007f1b88226128 R14: 00007f1b88226090 R15: 00007fff2a7473f8 [ 53.329351][ T651] [ 53.334041][ T567] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 53.445440][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.495032][ T571] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.526122][ T567] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.540636][ T567] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 53.550102][ T567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 53.558695][ T567] usb 2-1: Product: syz [ 53.562878][ T567] usb 2-1: Manufacturer: syz [ 53.567822][ T567] usb 2-1: SerialNumber: syz [ 53.649893][ T653] syz.2.75 uses obsolete (PF_INET,SOCK_PACKET) [ 53.674939][ T571] usb 1-1: Using ep0 maxpacket: 8 [ 53.681367][ T571] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.690052][ T571] usb 1-1: config 1 has an invalid interface number: 245 but max is 2 [ 53.698377][ T571] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.709465][ T571] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.718579][ T571] usb 1-1: config 1 has no interface number 0 [ 53.724782][ T571] usb 1-1: config 1 interface 245 has no altsetting 0 [ 53.733854][ T571] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 53.743378][ T571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.752265][ T571] usb 1-1: Product: syz [ 53.756885][ T571] usb 1-1: Manufacturer: syz [ 53.761624][ T571] usb 1-1: SerialNumber: syz [ 53.768799][ T571] usb 1-1: selecting invalid altsetting 0 [ 53.776971][ T567] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 53.915686][ T660] loop3: detected capacity change from 0 to 512 [ 53.936588][ T660] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.946143][ T660] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.058029][ C0] usblp0: nonzero write bulk status received: -71 [ 54.065099][ T586] usb 2-1: USB disconnect, device number 3 [ 54.172017][ T586] usblp0: removed [ 54.838076][ T670] loop2: detected capacity change from 0 to 512 [ 54.862335][ T670] EXT4-fs (loop2): invalid journal inode [ 54.869585][ T672] loop1: detected capacity change from 0 to 256 [ 54.876208][ T670] EXT4-fs (loop2): can't get journal size [ 54.894522][ T672] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 54.910204][ T670] EXT4-fs (loop2): 1 truncate cleaned up [ 54.916746][ T670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.946968][ T672] 9pnet_fd: Insufficient options for proto=fd [ 55.058260][ T287] EXT4-fs (loop3): unmounting filesystem. [ 55.084302][ T678] loop1: detected capacity change from 0 to 2048 [ 55.403495][ T678] loop1: p1 < > p3 [ 55.408402][ T678] loop1: p3 size 134217728 extends beyond EOD, truncated [ 55.451688][ T688] loop1: detected capacity change from 0 to 512 [ 55.459557][ T688] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.485470][ T691] syz.4.84[691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.485550][ T691] syz.4.84[691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.503225][ T688] EXT4-fs (loop1): 1 orphan inode deleted [ 55.521298][ T328] __quota_error: 14 callbacks suppressed [ 55.521313][ T328] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 55.541062][ T328] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 1 [ 55.563436][ T688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 55.594892][ T688] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.606644][ T288] EXT4-fs (loop2): unmounting filesystem. [ 55.637398][ T688] capability: warning: `syz.1.85' uses deprecated v2 capabilities in a way that may be insecure [ 56.055169][ T586] usb 1-1: USB disconnect, device number 2 [ 56.237930][ T291] EXT4-fs (loop1): unmounting filesystem. [ 56.306317][ T28] audit: type=1400 audit(1793989853.390:224): avc: denied { write } for pid=707 comm="syz.3.91" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.327406][ T702] loop0: detected capacity change from 0 to 40427 [ 56.346912][ T28] audit: type=1400 audit(1793989853.430:225): avc: denied { open } for pid=707 comm="syz.3.91" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.361559][ T702] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 56.380968][ T28] audit: type=1400 audit(1793989853.430:226): avc: denied { ioctl } for pid=707 comm="syz.3.91" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.410222][ T702] F2FS-fs (loop0): invalid crc value [ 56.426007][ T28] audit: type=1400 audit(1793989853.500:227): avc: denied { shutdown } for pid=703 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.454883][ T702] F2FS-fs (loop0): Found nat_bits in checkpoint [ 56.499473][ T702] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 56.524241][ T28] audit: type=1400 audit(1793989853.600:228): avc: denied { search } for pid=715 comm="syz.1.92" name="/" dev="configfs" ino=13890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.570951][ T721] process 'syz.2.94' launched './file1' with NULL argv: empty string added [ 56.592641][ T28] audit: type=1400 audit(1793989853.640:229): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.618464][ T567] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 56.639933][ T702] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 56.645014][ T728] loop2: detected capacity change from 0 to 512 [ 56.648583][ T726] fuse: Unknown parameter 'dont_hash' [ 56.668924][ T730] f2fs_ckpt-7:0: attempt to access beyond end of device [ 56.668924][ T730] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.685190][ T728] EXT4-fs (loop2): invalid journal inode [ 56.686618][ T28] audit: type=1400 audit(1793989853.640:230): avc: denied { mount } for pid=720 comm="syz.2.94" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.692568][ T728] EXT4-fs (loop2): can't get journal size [ 56.723068][ T728] EXT4-fs (loop2): 1 truncate cleaned up [ 56.728167][ T28] audit: type=1400 audit(1793989853.650:231): avc: denied { read } for pid=720 comm="syz.2.94" name="cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 56.729682][ T728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.755778][ T28] audit: type=1400 audit(1793989853.650:232): avc: denied { open } for pid=720 comm="syz.2.94" path="/21/dev/cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 56.796754][ T733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.828819][ T567] usb 4-1: unable to get BOS descriptor or descriptor too short [ 56.855028][ T567] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.886548][ T737] loop1: detected capacity change from 0 to 512 [ 56.896109][ T567] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 57.315537][ T567] usb 4-1: string descriptor 0 read error: -22 [ 57.324005][ T567] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.342916][ T567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.371426][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.381138][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.388867][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.398159][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.407613][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.418496][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.428930][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.430311][ T708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 57.437894][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.458674][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.468730][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.475664][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.483489][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.492981][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.501877][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.512964][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.521062][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.532008][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.539629][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.547973][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.556245][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.562999][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.570573][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.578783][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.587189][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.594622][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.602701][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.613175][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.622676][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.632209][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.639365][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.647879][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.655438][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.662951][ T745] 9pnet_fd: Insufficient options for proto=fd [ 57.675267][ T567] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 57.779393][ T749] syz.1.101[749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.779479][ T749] syz.1.101[749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.889553][ T567] usb 4-1: USB disconnect, device number 9 [ 58.956996][ T288] EXT4-fs (loop2): unmounting filesystem. [ 58.986148][ T755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=755 comm=syz.4.103 [ 59.002429][ T755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 59.028921][ T764] loop0: detected capacity change from 0 to 512 [ 59.069456][ T764] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 59.079917][ T764] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.108110][ T773] loop4: detected capacity change from 0 to 512 [ 59.122673][ T289] EXT4-fs (loop0): unmounting filesystem. [ 59.153174][ T781] loop0: detected capacity change from 0 to 1024 [ 59.185094][ T773] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.199925][ T773] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.215931][ T781] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 59.223418][ T773] EXT4-fs (loop4): unmounting filesystem. [ 59.269614][ T765] loop2: detected capacity change from 0 to 40427 [ 59.295723][ T765] F2FS-fs (loop2): invalid crc value [ 59.321237][ T765] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.366204][ T765] F2FS-fs (loop2): Start checkpoint disabled! [ 59.376465][ T765] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 59.386607][ T765] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 59.407954][ T797] bridge_slave_1: default FDB implementation only supports local addresses [ 59.418354][ T797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=797 comm=syz.4.109 [ 59.593393][ T811] loop4: detected capacity change from 0 to 1024 [ 59.626607][ T811] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.686864][ T811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.706552][ T802] loop3: detected capacity change from 0 to 40427 [ 59.718702][ T802] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 59.736506][ T802] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.747037][ T802] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.780055][ T802] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 59.787317][ T802] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.824910][ T392] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 60.908044][ T830] syz.1.115[830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.908134][ T830] syz.1.115[830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.934873][ T392] usb 3-1: Using ep0 maxpacket: 32 [ 61.901854][ T392] usb 3-1: unable to get BOS descriptor or descriptor too short [ 61.910699][ T392] usb 3-1: config 254 has an invalid interface number: 103 but max is 0 [ 61.919374][ T392] usb 3-1: config 254 has no interface number 0 [ 61.925747][ T392] usb 3-1: config 254 interface 103 altsetting 2 bulk endpoint 0xB has invalid maxpacket 1023 [ 61.936070][ T392] usb 3-1: config 254 interface 103 altsetting 2 bulk endpoint 0xA has invalid maxpacket 1023 [ 62.097532][ T392] usb 3-1: config 254 interface 103 has no altsetting 0 [ 62.098275][ T289] EXT4-fs (loop0): unmounting filesystem. [ 62.106098][ T392] usb 3-1: string descriptor 0 read error: -71 [ 62.117314][ T392] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 62.129779][ T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.139982][ T392] usb 3-1: can't set config #254, error -71 [ 62.152169][ T392] usb 3-1: USB disconnect, device number 4 [ 62.165928][ T842] set_capacity_and_notify: 1 callbacks suppressed [ 62.165943][ T842] loop1: detected capacity change from 0 to 512 [ 62.188384][ T846] loop0: detected capacity change from 0 to 256 [ 62.218155][ T846] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10bcab, utbl_chksum : 0xe619d30d) [ 62.276794][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 62.276808][ T28] audit: type=1400 audit(1793989859.360:248): avc: denied { add_name } for pid=845 comm="syz.0.118" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.355637][ T28] audit: type=1400 audit(1793989859.390:249): avc: denied { associate } for pid=845 comm="syz.0.118" name="blkio.bfq.io_service_bytes_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.439175][ T28] audit: type=1400 audit(1793989859.390:250): avc: denied { append } for pid=845 comm="syz.0.118" path="/24/file1/blkio.bfq.io_service_bytes_recursive" dev="loop0" ino=1048652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.483391][ T290] EXT4-fs (loop4): unmounting filesystem. [ 62.515737][ T856] loop1: detected capacity change from 0 to 256 [ 62.522079][ T28] audit: type=1400 audit(1793989859.390:251): avc: denied { ioctl } for pid=845 comm="syz.0.118" path="/24/file1/blkio.bfq.io_service_bytes_recursive" dev="loop0" ino=1048652 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.646458][ T862] loop4: detected capacity change from 0 to 4096 [ 62.682471][ T28] audit: type=1400 audit(1793989859.760:252): avc: denied { bind } for pid=873 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.683694][ T862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.784326][ T882] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.801621][ T882] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 62.821574][ T884] loop3: detected capacity change from 0 to 512 [ 62.851121][ T884] EXT4-fs (loop3): invalid journal inode [ 62.864990][ T884] EXT4-fs (loop3): can't get journal size [ 62.893760][ T884] EXT4-fs (loop3): 1 truncate cleaned up [ 62.899536][ T884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 62.983388][ T895] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.018380][ T290] EXT4-fs (loop4): unmounting filesystem. [ 63.024852][ T890] syz.2.130[890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.024925][ T890] syz.2.130[890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.372746][ T903] raw_sendmsg: syz.1.133 forgot to set AF_INET. Fix it! [ 63.391344][ T904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 63.395220][ T28] audit: type=1400 audit(2000000000.400:253): avc: denied { name_bind } for pid=899 comm="syz.1.133" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 63.400354][ T904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 64.569615][ T909] loop1: detected capacity change from 0 to 512 [ 64.576032][ T897] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.914748][ T909] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.932479][ T909] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.941824][ T909] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.957877][ T909] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 64.974709][ T909] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 64.976270][ T287] EXT4-fs (loop3): unmounting filesystem. [ 64.987546][ T914] loop0: detected capacity change from 0 to 256 [ 64.992893][ T909] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.134: Failed to acquire dquot type 0 [ 65.013786][ T916] loop2: detected capacity change from 0 to 16 [ 65.050574][ T291] EXT4-fs (loop1): unmounting filesystem. [ 65.056529][ T28] audit: type=1400 audit(2000000002.060:254): avc: denied { read } for pid=920 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.076006][ T921] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.077437][ T28] audit: type=1400 audit(2000000002.060:255): avc: denied { read } for pid=920 comm="syz.0.138" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.093111][ T432] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.108717][ T922] Zero length message leads to an empty skb [ 65.118358][ T897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 65.124322][ T915] overlayfs: missing 'lowerdir' [ 65.136123][ T920] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.153375][ T927] FAULT_INJECTION: forcing a failure. [ 65.153375][ T927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.167832][ T927] CPU: 0 PID: 927 Comm: syz.1.139 Not tainted syzkaller #0 [ 65.175084][ T927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 65.175627][ T897] usb 5-1: config 64 has an invalid interface number: 174 but max is 0 [ 65.185434][ T927] Call Trace: [ 65.185447][ T927] [ 65.185453][ T927] __dump_stack+0x21/0x24 [ 65.185478][ T927] dump_stack_lvl+0x110/0x170 [ 65.185493][ T927] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.205029][ T924] loop2: detected capacity change from 0 to 512 [ 65.209068][ T927] dump_stack+0x15/0x24 [ 65.214561][ T897] usb 5-1: config 64 has no interface number 0 [ 65.220439][ T927] should_fail_ex+0x3bf/0x510 [ 65.220475][ T927] should_fail+0xb/0x10 [ 65.220494][ T927] should_fail_usercopy+0x1a/0x20 [ 65.224670][ T897] usb 5-1: config 64 interface 174 altsetting 253 endpoint 0x4 has an invalid bInterval 129, changing to 11 [ 65.231178][ T927] _copy_from_user+0x1e/0xc0 [ 65.231210][ T927] bm_status_write+0xc4/0x380 [ 65.231231][ T927] ? selinux_file_permission+0x2a5/0x510 [ 65.231258][ T927] ? __cfi_bm_status_write+0x10/0x10 [ 65.231276][ T927] ? security_file_permission+0x8a/0xb0 [ 65.231301][ T927] ? security_file_permission+0x94/0xb0 [ 65.231325][ T927] ? __cfi_bm_status_write+0x10/0x10 [ 65.293930][ T927] vfs_write+0x3fb/0xd00 [ 65.295718][ T897] usb 5-1: config 64 interface 174 has no altsetting 0 [ 65.298204][ T927] ? __cfi_vfs_write+0x10/0x10 [ 65.309826][ T927] ? __kasan_check_write+0x14/0x20 [ 65.314978][ T927] ? mutex_lock+0x93/0x1b0 [ 65.316308][ T897] usb 5-1: New USB device found, idVendor=1b3d, idProduct=015c, bcdDevice=f1.28 [ 65.319417][ T927] ? __cfi_mutex_lock+0x10/0x10 [ 65.333488][ T927] ? __fdget_pos+0x2cd/0x380 [ 65.338637][ T927] ? ksys_write+0x70/0x260 [ 65.343098][ T927] ksys_write+0x14a/0x260 [ 65.347541][ T927] ? __cfi_ksys_write+0x10/0x10 [ 65.352550][ T927] ? debug_smp_processor_id+0x17/0x20 [ 65.354865][ T897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.358050][ T927] __x64_sys_write+0x7b/0x90 [ 65.370743][ T927] x64_sys_call+0x27b/0x9a0 [ 65.375301][ T927] do_syscall_64+0x4c/0xa0 [ 65.377731][ T897] usb 5-1: Product: syz [ 65.380020][ T927] ? clear_bhb_loop+0x30/0x80 [ 65.387834][ T897] usb 5-1: Manufacturer: syz [ 65.389112][ T927] ? clear_bhb_loop+0x30/0x80 [ 65.393874][ T897] usb 5-1: SerialNumber: syz [ 65.398535][ T927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.398557][ T927] RIP: 0033:0x7f0b4bd9fb19 [ 65.398573][ T927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.433369][ T927] RSP: 002b:00007f0b4cc69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.441810][ T927] RAX: ffffffffffffffda RBX: 00007f0b4c025fa0 RCX: 00007f0b4bd9fb19 [ 65.449804][ T927] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 65.457812][ T927] RBP: 00007f0b4cc69090 R08: 0000000000000000 R09: 0000000000000000 [ 65.466507][ T927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.474519][ T927] R13: 00007f0b4c026038 R14: 00007f0b4c025fa0 R15: 00007ffc4e072d68 [ 65.482522][ T927] [ 65.637336][ T897] ftdi_sio 5-1:64.174: FTDI USB Serial Device converter detected [ 65.657424][ T897] ftdi_sio ttyUSB0: unknown device type: 0xf128 [ 65.673021][ T897] usb 5-1: USB disconnect, device number 3 [ 65.695738][ T897] ftdi_sio 5-1:64.174: device disconnected [ 65.740536][ T947] loop0: detected capacity change from 0 to 512 [ 65.772316][ T947] EXT4-fs (loop0): invalid journal inode [ 65.791402][ T947] EXT4-fs (loop0): can't get journal size [ 65.812477][ T947] EXT4-fs (loop0): 1 truncate cleaned up [ 65.829110][ T947] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 65.834933][ T567] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 65.871290][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.884479][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.892333][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.900044][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.907607][ T19] rtc rtc0: __rtc_set_alarm: err=-22 [ 65.985342][ T952] overlayfs: failed to resolve './file0': -2 [ 66.396008][ T567] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.409665][ T567] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 66.419026][ T971] 9pnet_fd: Insufficient options for proto=fd [ 66.420461][ T567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.434549][ T567] usb 2-1: Product: syz [ 66.438795][ T567] usb 2-1: Manufacturer: syz [ 66.443762][ T567] usb 2-1: SerialNumber: syz [ 66.456229][ T973] netlink: 104 bytes leftover after parsing attributes in process `syz.3.150'. [ 66.474984][ T567] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 66.641459][ T289] EXT4-fs (loop0): unmounting filesystem. [ 66.672108][ T567] usb 2-1: USB disconnect, device number 4 [ 66.974918][ T990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.152'. [ 67.026261][ T994] FAULT_INJECTION: forcing a failure. [ 67.026261][ T994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.077956][ T994] CPU: 0 PID: 994 Comm: syz.4.154 Not tainted syzkaller #0 [ 67.085331][ T994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 67.095677][ T994] Call Trace: [ 67.099004][ T994] [ 67.101953][ T994] __dump_stack+0x21/0x24 [ 67.106314][ T994] dump_stack_lvl+0x110/0x170 [ 67.111098][ T994] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.116232][ T994] dump_stack+0x15/0x24 [ 67.120404][ T994] should_fail_ex+0x3bf/0x510 [ 67.125192][ T994] should_fail+0xb/0x10 [ 67.129372][ T994] should_fail_usercopy+0x1a/0x20 [ 67.134416][ T994] _copy_to_user+0x1e/0x90 [ 67.139507][ T994] simple_read_from_buffer+0xe9/0x160 [ 67.144949][ T994] proc_fail_nth_read+0x1a6/0x220 [ 67.150120][ T994] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 67.155701][ T994] ? security_file_permission+0x94/0xb0 [ 67.161911][ T994] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 67.167477][ T994] vfs_read+0x286/0x930 [ 67.171649][ T994] ? __cfi_vfs_read+0x10/0x10 [ 67.176339][ T994] ? __kasan_check_write+0x14/0x20 [ 67.181481][ T994] ? mutex_lock+0x93/0x1b0 [ 67.185898][ T994] ? __cfi_mutex_lock+0x10/0x10 [ 67.190764][ T994] ? __fdget_pos+0x2cd/0x380 [ 67.195393][ T994] ? ksys_read+0x70/0x260 [ 67.199730][ T994] ksys_read+0x14a/0x260 [ 67.204060][ T994] ? __cfi_ksys_read+0x10/0x10 [ 67.209089][ T994] ? debug_smp_processor_id+0x17/0x20 [ 67.214557][ T994] __x64_sys_read+0x7b/0x90 [ 67.219080][ T994] x64_sys_call+0x2f/0x9a0 [ 67.223529][ T994] do_syscall_64+0x4c/0xa0 [ 67.227953][ T994] ? clear_bhb_loop+0x30/0x80 [ 67.232776][ T994] ? clear_bhb_loop+0x30/0x80 [ 67.237493][ T994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.244039][ T994] RIP: 0033:0x7f5f0fb6034e [ 67.248459][ T994] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.268330][ T994] RSP: 002b:00007f5f109e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.276837][ T994] RAX: ffffffffffffffda RBX: 00007f5f109e26c0 RCX: 00007f5f0fb6034e [ 67.284827][ T994] RDX: 000000000000000f RSI: 00007f5f109e20a0 RDI: 0000000000000004 [ 67.292891][ T994] RBP: 00007f5f109e2090 R08: 0000000000000000 R09: 0000000000000000 [ 67.300943][ T994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.308928][ T994] R13: 00007f5f0fe26038 R14: 00007f5f0fe25fa0 R15: 00007ffca6ab2bf8 [ 67.316938][ T994] [ 67.320247][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 67.320260][ T28] audit: type=1400 audit(2000000004.150:273): avc: denied { bind } for pid=995 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.386499][ T28] audit: type=1400 audit(2000000004.150:274): avc: denied { setopt } for pid=995 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.610629][ T28] audit: type=1400 audit(2000000004.620:275): avc: denied { listen } for pid=1003 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 67.735316][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.803283][ T28] audit: type=1400 audit(2000000004.740:276): avc: denied { sys_module } for pid=1003 comm="syz.1.158" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.845737][ T28] audit: type=1400 audit(2000000004.740:277): avc: denied { read } for pid=1003 comm="syz.1.158" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.883080][ T28] audit: type=1400 audit(2000000004.740:278): avc: denied { open } for pid=1003 comm="syz.1.158" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.922587][ T28] audit: type=1400 audit(2000000004.810:279): avc: denied { append } for pid=1012 comm="syz.2.159" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.983770][ T1013] cgroup: name respecified [ 67.990202][ T310] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 68.022197][ T310] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.035488][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.042139][ T310] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 68.052296][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.073242][ T310] usb 1-1: config 0 descriptor?? [ 68.112962][ T1025] loop2: detected capacity change from 0 to 512 [ 68.132720][ T1025] EXT4-fs (loop2): invalid journal inode [ 68.138641][ T1025] EXT4-fs (loop2): can't get journal size [ 68.151169][ T1025] EXT4-fs (loop2): 1 truncate cleaned up [ 68.157111][ T1025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.584158][ T310] magicmouse 0003:05AC:0324.0002: ignoring exceeding usage max [ 68.616905][ T310] input: HID 05ac:0324 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:0324.0002/input/input4 [ 68.665891][ T310] magicmouse 0003:05AC:0324.0002: input,hidraw0: USB HID v0.10 Joystick [HID 05ac:0324] on usb-dummy_hcd.0-1/input0 [ 68.718403][ T28] audit: type=1400 audit(2000000005.730:280): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=718 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.888951][ T28] audit: type=1400 audit(2000000005.730:281): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=718 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.916789][ T19] usb 1-1: USB disconnect, device number 3 [ 68.933173][ T1039] fido_id[1039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 68.955082][ T28] audit: type=1400 audit(2000000005.810:282): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=718 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.983157][ T1049] device bridge0 entered promiscuous mode [ 69.008302][ T288] EXT4-fs (loop2): unmounting filesystem. [ 69.042746][ T1056] loop2: detected capacity change from 0 to 16 [ 69.133425][ T1059] loop2: detected capacity change from 0 to 8192 [ 69.216325][ T1059] loop2: p1 p2 p3 p4[EZD] [ 69.224805][ T1059] loop2: p1 start 16384 is beyond EOD, truncated [ 69.234636][ T1059] loop2: p2 size 150994944 extends beyond EOD, truncated [ 69.247961][ T1059] loop2: p3 start 67108864 is beyond EOD, truncated [ 69.259113][ T1059] loop2: p4 size 33555584 extends beyond EOD, truncated [ 69.321770][ T822] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 69.333427][ T325] udevd[325]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 69.344096][ T822] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 143398) [ 69.356405][ T822] Buffer I/O error on device sda1, logical block 143360 [ 69.363395][ T822] device offline error, dev sda, sector 1147694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 69.374014][ T822] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 143461) [ 69.385597][ T822] device offline error, dev sda, sector 1155270 op 0x1:(WRITE) flags 0x0 phys_seg 11 prio class 2 [ 69.396456][ T822] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144408) [ 69.408020][ T822] device offline error, dev sda, sector 1159190 op 0x1:(WRITE) flags 0x0 phys_seg 7 prio class 2 [ 69.418529][ T822] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144898) [ 69.430181][ T822] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144901) [ 69.442304][ T357] Buffer I/O error on device sda1, logical block 143423 [ 69.460969][ T357] Buffer I/O error on device sda1, logical block 144370 [ 69.479956][ T822] device offline error, dev sda, sector 1257734 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 69.490759][ T822] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 157216) [ 69.493964][ T1068] loop0: detected capacity change from 0 to 512 [ 69.502697][ T822] device offline error, dev sda, sector 1274014 op 0x1:(WRITE) flags 0x0 phys_seg 19 prio class 2 [ 69.519359][ T822] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 159251) [ 69.530970][ T822] device offline error, dev sda, sector 1130806 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 69.541517][ T822] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2027 starting block 141350) [ 69.549114][ T357] Buffer I/O error on device sda1, logical block 144371 [ 69.553304][ T822] Buffer I/O error on device sda1, logical block 141312 [ 69.567677][ T822] Buffer I/O error on device sda1, logical block 141313 [ 69.574653][ T822] Buffer I/O error on device sda1, logical block 141314 [ 69.581674][ T822] Buffer I/O error on device sda1, logical block 141315 [ 69.588731][ T822] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2027 starting block 141354) [ 69.599813][ T357] Buffer I/O error on device sda1, logical block 144372 [ 69.600532][ T822] device offline error, dev sda, sector 1134902 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 69.618059][ T822] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2029 starting block 141862) [ 69.629712][ T822] Buffer I/O error on device sda1, logical block 141824 [ 69.636945][ T822] device offline error, dev sda, sector 1143094 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 69.680139][ T65] Buffer I/O error on dev sda1, logical block 131223, lost sync page write [ 69.713994][ T65] Aborting journal on device sda1-8. [ 69.725204][ T65] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 69.734921][ T571] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 69.747013][ T65] JBD2: I/O error when updating journal superblock for sda1-8. [ 69.803949][ T1040] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.165: Detected aborted journal [ 69.832059][ T1040] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 69.843679][ T1040] EXT4-fs (sda1): I/O error while writing superblock [ 69.853498][ T1050] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.169: Detected aborted journal [ 69.865551][ T1040] EXT4-fs (sda1): Remounting filesystem read-only [ 69.866428][ T1067] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.173: Detected aborted journal [ 69.873640][ T1040] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.165: Detected aborted journal [ 69.890681][ T1050] EXT4-fs (sda1): Remounting filesystem read-only [ 69.896970][ T1040] EXT4-fs (sda1): Remounting filesystem read-only [ 69.911900][ T1067] EXT4-fs (sda1): Remounting filesystem read-only [ 69.921417][ T1066] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 69.929536][ T1040] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.165: Detected aborted journal [ 69.934929][ T1050] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.169: Detected aborted journal [ 69.951728][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 69.951800][ T571] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.975623][ T1067] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.173: Detected aborted journal [ 69.986598][ T1040] EXT4-fs (sda1): Remounting filesystem read-only [ 69.995799][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 70.002284][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 70.008047][ T571] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 154, changing to 7 [ 70.027983][ T1050] EXT4-fs (sda1): Remounting filesystem read-only [ 70.054082][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 70.060987][ T1067] EXT4-fs (sda1): Remounting filesystem read-only [ 70.076672][ T571] usb 1-1: string descriptor 0 read error: -22 [ 70.080324][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 70.093371][ T571] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.125284][ T571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.140940][ T1041] Read-error on swap-device (8:0:788126) May 18 03:33:27 syzkaller kern.alert kernel: [ [ 70.159528][ T571] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found 70.140940][ T10[ 70.166872][ T1041] Read-error on swap-device (8:0:788134) 41] Read-error o[ 70.171091][ T1073] loop4: detected capacity change from 0 to 40427 [ 70.176563][ T1041] Read-error on swap-device (8:0:788142) n swap-device (8:0:788126) May 18 03:33:27 syzkaller kern.alert[ 70.191912][ T1041] Read-error on swap-device (8:0:788150) kernel: [ 70.166872][ T1041] Read-error on swap-device (8:0:788134) May 18 03:33:27 syzkaller kern.alert kernel: [ 70.176563][ T1041] Read-error on swap-device (8:0:788142) May 18 03:33:27 syzkaller kern.alert kernel: [ 70.191912][ T1041] Read-error on swap-device (8:0:788150) [ 70.278561][ T1073] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 70.323001][ T1073] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 70.398783][ T1073] F2FS-fs (loop4): invalid crc value [ 70.424348][ T1073] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.501449][ T1088] loop1: detected capacity change from 0 to 512 [ 70.512291][ T1073] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.519760][ T1088] EXT4-fs (loop1): invalid journal inode [ 70.525524][ T1073] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.533159][ T1088] EXT4-fs (loop1): can't get journal size [ 70.546896][ T1088] EXT4-fs (loop1): 1 truncate cleaned up [ 70.552639][ T1088] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.562020][ T1073] syz.4.174: attempt to access beyond end of device [ 70.562020][ T1073] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 70.611328][ T571] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 70.623797][ T571] usb 1-1: unit 5: unexpected type 0x03 [ 70.632557][ T571] usb 1-1: unit 3 not found! [ 70.667638][ T822] kworker/u4:6: attempt to access beyond end of device [ 70.667638][ T822] loop4: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 70.670708][ T571] usb 1-1: USB disconnect, device number 4 [ 71.183062][ T1104] netlink: 196 bytes leftover after parsing attributes in process `syz.3.184'. [ 71.212705][ T1102] loop4: detected capacity change from 0 to 32768 [ 71.276463][ T1102] loop4: p1 p2 p3 < p5 p6 p7 > [ 71.289911][ T1102] loop4: p2 size 16775168 extends beyond EOD, truncated [ 71.302473][ T1102] loop4: p5 start 4294970168 is beyond EOD, truncated [ 71.432399][ T291] EXT4-fs (loop1): unmounting filesystem. [ 71.732836][ T1117] netlink: 'syz.1.187': attribute type 4 has an invalid length. [ 71.742392][ T1117] netlink: 'syz.1.187': attribute type 4 has an invalid length. [ 71.790066][ T429] udevd[429]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 71.791519][ T432] udevd[432]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 71.801408][ T327] udevd[327]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 71.810912][ T431] udevd[431]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 71.821678][ T325] udevd[325]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 71.946589][ T1100] loop2: detected capacity change from 0 to 131072 [ 71.957228][ T1100] F2FS-fs (loop2): invalid crc value [ 71.964470][ T1100] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.984862][ T571] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.015608][ T1100] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 72.137827][ T1133] FAULT_INJECTION: forcing a failure. [ 72.137827][ T1133] name failslab, interval 1, probability 0, space 0, times 1 [ 72.175200][ T1133] CPU: 1 PID: 1133 Comm: syz.0.190 Not tainted syzkaller #0 [ 72.182628][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 72.192816][ T1133] Call Trace: [ 72.196120][ T1133] [ 72.199182][ T1133] __dump_stack+0x21/0x24 [ 72.203545][ T1133] dump_stack_lvl+0x110/0x170 [ 72.208297][ T1133] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.213381][ T1133] dump_stack+0x15/0x24 [ 72.217654][ T1133] should_fail_ex+0x3bf/0x510 [ 72.222376][ T1133] ? vm_area_dup+0x27/0x280 [ 72.226983][ T1133] __should_failslab+0xac/0xf0 [ 72.231790][ T1133] should_failslab+0x9/0x20 [ 72.234929][ T571] usb 5-1: Using ep0 maxpacket: 16 [ 72.236437][ T1133] kmem_cache_alloc+0x3b/0x320 [ 72.243663][ T571] usb 5-1: config 32 has an invalid interface number: 64 but max is 0 [ 72.246617][ T1133] vm_area_dup+0x27/0x280 [ 72.246649][ T1133] ? __split_vma+0x1b0/0x980 [ 72.263847][ T1133] __split_vma+0x1c6/0x980 [ 72.268310][ T1133] split_vma+0x7c/0xd0 [ 72.270738][ T571] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 72.272420][ T1133] mprotect_fixup+0x56f/0x940 [ 72.282741][ T571] usb 5-1: config 32 has no interface number 0 [ 72.288191][ T1133] ? mas_prev_slot+0x8a7/0x8e0 [ 72.288230][ T1133] ? __cfi_mprotect_fixup+0x10/0x10 [ 72.294467][ T571] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 72.299173][ T1133] ? security_file_mprotect+0x95/0xc0 [ 72.299200][ T1133] do_mprotect_pkey+0x80a/0xbe0 [ 72.304392][ T571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.313507][ T1133] ? prot_none_test+0x10/0x10 [ 72.313544][ T1133] ? __this_cpu_preempt_check+0x13/0x20 [ 72.313568][ T1133] ? xfd_validate_state+0x70/0x150 [ 72.331557][ T102] udevd[102]: worker [325] terminated by signal 7 (Bus error) [ 72.331888][ T1133] ? fpregs_restore_userregs+0x128/0x260 [ 72.336716][ T102] udevd[102]: worker [325] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 72.342807][ T1133] __x64_sys_mprotect+0x80/0x90 [ 72.342834][ T1133] x64_sys_call+0x997/0x9a0 [ 72.380299][ T1133] do_syscall_64+0x4c/0xa0 [ 72.384890][ T1133] ? clear_bhb_loop+0x30/0x80 [ 72.389761][ T1133] ? clear_bhb_loop+0x30/0x80 [ 72.394543][ T1133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.400654][ T1133] RIP: 0033:0x7f00f4b9fb19 [ 72.405074][ T1133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.424772][ T1133] RSP: 002b:00007f00f5aef028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 72.433285][ T1133] RAX: ffffffffffffffda RBX: 00007f00f4e25fa0 RCX: 00007f00f4b9fb19 [ 72.441264][ T1133] RDX: 0000000000000009 RSI: 000000000000f000 RDI: 0000200000000000 [ 72.449334][ T1133] RBP: 00007f00f4c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 72.457304][ T1133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.465263][ T1133] R13: 00007f00f4e26038 R14: 00007f00f4e25fa0 R15: 00007ffeeff66fd8 [ 72.473340][ T1133] [ 72.511194][ T1133] loop0: detected capacity change from 0 to 512 [ 72.529937][ T102] udevd[102]: worker [429] terminated by signal 7 (Bus error) [ 72.568966][ T102] udevd[102]: worker [429] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.64' [ 72.585147][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 72.585164][ T28] audit: type=1400 audit(2000000009.600:301): avc: denied { create } for pid=1114 comm="syz.4.188" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.617671][ T309] usb 5-1: USB disconnect, device number 4 [ 72.644114][ T28] audit: type=1400 audit(2000000009.620:302): avc: denied { link } for pid=1114 comm="syz.4.188" name="#9" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.666945][ T28] audit: type=1400 audit(2000000009.620:303): avc: denied { rename } for pid=1114 comm="syz.4.188" name="#a" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.738054][ T28] audit: type=1400 audit(2000000009.750:304): avc: denied { wake_alarm } for pid=1149 comm="syz.0.195" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.758685][ T1155] zero sized request [ 72.774889][ T28] audit: type=1400 audit(2000000009.750:305): avc: denied { read } for pid=1149 comm="syz.0.195" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.795479][ T28] audit: type=1400 audit(2000000009.770:306): avc: denied { read write } for pid=1154 comm="syz.0.196" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 72.821026][ T28] audit: type=1400 audit(2000000009.770:307): avc: denied { open } for pid=1154 comm="syz.0.196" path="/42/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 72.847340][ T28] audit: type=1400 audit(2000000009.770:308): avc: denied { ioctl } for pid=1154 comm="syz.0.196" path="/42/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 72.872810][ T28] audit: type=1400 audit(2000000009.770:309): avc: denied { read } for pid=1154 comm="syz.0.196" path="socket:[19041]" dev="sockfs" ino=19041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.894167][ T1175] loop2: detected capacity change from 0 to 256 [ 72.896244][ T28] audit: type=1400 audit(2000000009.880:310): avc: denied { getopt } for pid=1157 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.976409][ T1175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 73.105096][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 73.283058][ T1185] syz.2.200[1185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.283924][ T1185] syz.2.200[1185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.296817][ T24] usb 1-1: config 6 interface 0 has no altsetting 0 [ 73.323611][ T24] usb 1-1: New USB device found, idVendor=e582, idProduct=416b, bcdDevice=d4.3f [ 73.334865][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.346134][ T24] usb 1-1: Product: syz [ 73.350370][ T24] usb 1-1: Manufacturer: syz [ 73.356746][ T24] usb 1-1: SerialNumber: syz [ 73.382308][ T1190] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 73.728591][ T24] usb-storage 1-1:6.0: USB Mass Storage device detected [ 74.880757][ T1181] EXT4-fs error: 115 callbacks suppressed [ 74.880780][ T1181] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.200: Detected aborted journal [ 74.912976][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 74.924539][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 74.934899][ T1181] EXT4-fs: 97 callbacks suppressed [ 74.934912][ T1181] EXT4-fs (sda1): Remounting filesystem read-only [ 74.936318][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 74.944913][ T1181] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.200: Detected aborted journal [ 75.905008][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 75.914879][ T1181] EXT4-fs (sda1): Remounting filesystem read-only [ 75.935205][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 76.525341][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 76.538894][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 76.554899][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 76.564721][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 76.604562][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 76.616814][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 76.627117][ T24] usb 1-1: USB disconnect, device number 5 [ 76.630516][ T1196] EXT4-fs (sda1): Remounting filesystem read-only [ 76.639768][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 76.646439][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 76.660837][ T1199] EXT4-fs (sda1): Remounting filesystem read-only [ 76.661615][ T1200] EXT4-fs (sda1): Remounting filesystem read-only [ 77.046802][ T897] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 77.058855][ T1211] loop1: detected capacity change from 0 to 16 [ 77.122761][ T432] blk_print_req_error: 53 callbacks suppressed [ 77.122775][ T432] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.154458][ T1214] Write-error on swap-device (8:0:806278) May 18 03:33:34 syzkaller kern.alert kernel: [ 77.154458][ T1214] Write-error on swap-device (8:0:806278) [ 77.218685][ T1205] loop2: detected capacity change from 0 to 40427 [ 77.225787][ T1205] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 77.232224][ T1205] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 77.241214][ T1205] F2FS-fs (loop2): invalid crc value [ 77.248039][ T1205] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 77.273275][ T1205] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 77.280650][ T1205] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.314978][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.329464][ T288] syz-executor: attempt to access beyond end of device [ 77.329464][ T288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.505942][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 77.525292][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.545613][ T24] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 77.570887][ T1233] loop1: detected capacity change from 0 to 512 [ 77.586596][ T1235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 77.596704][ T24] usb 1-1: New USB device found, idVendor=174c, idProduct=06aa, bcdDevice= 1.16 [ 77.618550][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.638624][ T24] usb 1-1: Product: syz [ 77.645015][ T24] usb 1-1: Manufacturer: syz [ 77.647041][ T1233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0002] [ 77.659785][ T24] usb 1-1: SerialNumber: syz [ 77.669852][ T1233] System zones: 0-2, 18-18, 34-34 [ 77.691564][ T24] usb-storage 1-1:1.0: USB Mass Storage device detected [ 77.699658][ T1233] EXT4-fs (loop1): 1 orphan inode deleted [ 77.700361][ T1231] loop2: detected capacity change from 0 to 40427 [ 77.713100][ T1233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.729211][ T1231] F2FS-fs (loop2): invalid crc value [ 77.735084][ T1233] ext4 filesystem being mounted at /40 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.736460][ T1242] loop4: detected capacity change from 0 to 512 [ 77.751656][ T822] __quota_error: 3 callbacks suppressed [ 77.751671][ T822] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 77.780773][ T24] scsi host1: usb-storage 1-1:1.0 [ 77.788890][ T822] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:6: Failed to release dquot type 1 [ 77.788925][ T1231] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.828220][ T1242] EXT4-fs (loop4): invalid journal inode [ 77.834196][ T1242] EXT4-fs (loop4): can't get journal size [ 77.841664][ T1242] EXT4-fs (loop4): 1 truncate cleaned up [ 77.848216][ T1242] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.863786][ T1231] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 77.900846][ T309] usb 1-1: USB disconnect, device number 6 [ 77.933782][ T291] EXT4-fs (loop1): unmounting filesystem. [ 78.189838][ T1256] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 78.529780][ T28] audit: type=1400 audit(2000000015.540:314): avc: denied { create } for pid=1230 comm="syz.2.210" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 78.546690][ T1231] syz.2.210: attempt to access beyond end of device [ 78.546690][ T1231] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.609794][ T290] EXT4-fs (loop4): unmounting filesystem. [ 78.637729][ T1256] loop1: detected capacity change from 0 to 40427 [ 78.649689][ T1256] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 78.657569][ T1256] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.683185][ T1256] F2FS-fs (loop1): invalid journal entries nats 0 sits 65535 [ 78.693655][ T1256] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-22) [ 78.793354][ T1265] loop2: detected capacity change from 0 to 512 [ 78.832152][ T1265] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0002] [ 78.855766][ T28] audit: type=1400 audit(2000000015.870:315): avc: denied { bind } for pid=1268 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.856941][ T1265] System zones: 0-2, 18-18, 34-34 [ 78.984002][ T1265] EXT4-fs (loop2): 1 orphan inode deleted [ 78.989849][ T1265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.998974][ T308] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 79.008997][ T308] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 1 [ 79.020546][ T1265] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.092889][ T1273] loop0: detected capacity change from 0 to 256 [ 79.394967][ T28] audit: type=1400 audit(2000000016.340:316): avc: denied { setopt } for pid=1264 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.678079][ T28] audit: type=1400 audit(2000000016.340:317): avc: denied { getopt } for pid=1264 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.122697][ T1268] EXT4-fs error: 65 callbacks suppressed [ 80.122730][ T1268] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.218: Detected aborted journal [ 80.139373][ T1268] EXT4-fs: 52 callbacks suppressed [ 80.139395][ T1268] EXT4-fs (sda1): Remounting filesystem read-only [ 80.154185][ T28] audit: type=1326 audit(2000000016.490:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1258 comm="syz.4.216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0fb9fb19 code=0x7fc00000 [ 80.181446][ T1274] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.220: Detected aborted journal [ 80.206209][ T288] EXT4-fs (loop2): unmounting filesystem. [ 80.216003][ T28] audit: type=1326 audit(2000000016.490:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1258 comm="syz.4.216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f0fb9fb19 code=0x7fc00000 [ 80.254887][ T1274] EXT4-fs (sda1): Remounting filesystem read-only [ 80.258475][ T28] audit: type=1326 audit(2000000016.490:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1258 comm="syz.4.216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0fb9fb19 code=0x7fc00000 [ 80.263337][ T10] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 80.291605][ T1274] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.220: Detected aborted journal [ 80.296197][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 80.307155][ T1274] EXT4-fs (sda1): Remounting filesystem read-only [ 80.325523][ T10] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 80.328639][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 80.337250][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 80.359149][ T1276] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.222: Detected aborted journal [ 80.360624][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 80.370905][ T1277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.223: Detected aborted journal [ 80.381822][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 80.404090][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 80.427641][ T1276] EXT4-fs (sda1): Remounting filesystem read-only [ 80.448483][ T1277] EXT4-fs (sda1): Remounting filesystem read-only [ 80.455851][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 80.636193][ T1280] loop4: detected capacity change from 0 to 4096 [ 80.662921][ T1276] EXT4-fs (sda1): Remounting filesystem read-only [ 80.690142][ T1277] EXT4-fs (sda1): Remounting filesystem read-only [ 80.708773][ T1279] EXT4-fs (sda1): Remounting filesystem read-only [ 80.776522][ T1280] EXT4-fs (loop4): Test dummy encryption mode enabled [ 80.796157][ T1280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.846069][ T1278] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 80.957722][ T1297] loop0: detected capacity change from 0 to 512 [ 80.965582][ T1297] EXT4-fs (loop0): invalid journal inode [ 80.971613][ T1297] EXT4-fs (loop0): can't get journal size [ 80.989481][ T1297] EXT4-fs (loop0): 1 truncate cleaned up [ 81.002859][ T1297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 81.141148][ T290] EXT4-fs (loop4): unmounting filesystem. [ 81.161617][ T1301] ip_tables: iptables: counters copy to user failed while replacing table [ 81.434968][ T280] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 81.479563][ T1304] xt_hashlimit: size too large, truncated to 1048576 [ 81.635567][ T280] usb 3-1: not running at top speed; connect to a high speed hub [ 81.654206][ T280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.674697][ T280] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 81.694084][ T280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.717671][ T280] usb 3-1: Found UVC 1.00 device (0000:0000) [ 81.734738][ T280] usb 3-1: No streaming interface found for terminal 2. [ 81.746248][ T1272] F2FS-fs (loop1): invalid crc value [ 81.762140][ T1272] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.831579][ T289] EXT4-fs (loop0): unmounting filesystem. [ 81.852708][ T1272] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 81.919625][ T1301] tipc: Started in network mode [ 81.924614][ T1301] tipc: Node identity 7f000001, cluster identity 4711 [ 81.946933][ T1301] tipc: New replicast peer: 127.0.0.1 [ 81.970291][ T1301] tipc: Enabled bearer , priority 10 [ 81.985394][ T567] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.005705][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.015696][ T567] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.040599][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.055983][ T1318] udevd[1318]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 82.097886][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.107021][ T822] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.111018][ T280] usb 3-1: USB disconnect, device number 5 [ 82.114071][ T822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.114376][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 82.193905][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.225071][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 82.235495][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.254201][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.268305][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.285435][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.303841][ T822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.318853][ T897] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 82.507058][ T1328] set_capacity_and_notify: 1 callbacks suppressed [ 82.507078][ T1328] loop4: detected capacity change from 0 to 1024 [ 82.558959][ T1328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.599322][ T1328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 82.632901][ T1336] loop1: detected capacity change from 0 to 2048 [ 82.657267][ T1336] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 82.663871][ T1336] EXT4-fs (loop1): mount failed [ 83.084907][ T897] tipc: Node number set to 2130706433 [ 83.098326][ T1347] loop2: detected capacity change from 0 to 512 [ 83.113479][ T1347] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.236: bad orphan inode 15 [ 83.123857][ T1347] ext4_test_bit(bit=14, block=5) = 0 [ 83.129277][ T1347] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.224372][ T28] kauditd_printk_skb: 206 callbacks suppressed [ 83.224389][ T28] audit: type=1400 audit(2000000020.230:527): avc: denied { nlmsg_read } for pid=1357 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 83.319697][ T28] audit: type=1326 audit(2000000020.330:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.238" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00f4b9fb19 code=0x0 [ 83.362355][ T28] audit: type=1400 audit(2000000020.370:529): avc: denied { rmdir } for pid=290 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.387235][ T28] audit: type=1400 audit(2000000020.400:530): avc: denied { unlink } for pid=290 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 83.411515][ T290] EXT4-fs (loop4): unmounting filesystem. [ 83.837934][ T288] EXT4-fs (loop2): unmounting filesystem. [ 83.915363][ T280] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.104893][ T280] usb 5-1: Using ep0 maxpacket: 16 [ 84.112908][ T280] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.162318][ T280] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 84.207595][ T280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.248451][ T280] usb 5-1: Product: syz [ 84.269096][ T280] usb 5-1: Manufacturer: syz [ 84.315622][ T280] usb 5-1: SerialNumber: syz [ 84.333503][ T102] udevd[102]: worker [1191] terminated by signal 7 (Bus error) [ 84.341448][ T102] udevd[102]: worker [1191] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 84.350236][ T1377] loop2: detected capacity change from 0 to 40427 [ 84.358562][ T1377] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(301990400) [ 84.367705][ T1377] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 84.376167][ T1377] F2FS-fs (loop2): fault_injection options not supported [ 84.383269][ T1377] F2FS-fs (loop2): fault_type options not supported [ 84.390515][ T1377] F2FS-fs (loop2): invalid crc value [ 84.397064][ T1377] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.432907][ T1377] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 84.440124][ T1377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.468432][ T1377] syz.2.242: attempt to access beyond end of device [ 84.468432][ T1377] loop2: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 84.491620][ T28] audit: type=1400 audit(2000000021.500:531): avc: denied { connect } for pid=1382 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.547108][ T280] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 84.576327][ T280] usb 5-1: USB disconnect, device number 5 [ 84.582454][ T102] udevd[102]: worker [432] terminated by signal 7 (Bus error) [ 84.590445][ T102] udevd[102]: worker [432] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 84.616211][ T288] syz-executor: attempt to access beyond end of device [ 84.616211][ T288] loop2: rw=2049, sector=45128, nr_sectors = 16 limit=40427 [ 84.631484][ T102] udevd[102]: worker [327] terminated by signal 7 (Bus error) [ 84.643929][ T102] udevd[102]: worker [327] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0' [ 84.656012][ T102] udevd[102]: worker [431] terminated by signal 7 (Bus error) [ 84.663559][ T102] udevd[102]: worker [431] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1' [ 84.675266][ T102] udevd[102]: worker [1395] terminated by signal 7 (Bus error) [ 84.704904][ T897] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.810249][ T1401] loop2: detected capacity change from 0 to 128 [ 84.819069][ T1403] netlink: 104 bytes leftover after parsing attributes in process `syz.3.247'. [ 84.838841][ T1401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.864546][ T1401] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.885573][ T1403] Write-error on swap-device (8:0:806286) [ 84.891777][ T1403] Write-error on swap-device (8:0:806294) [ 84.895988][ T897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config May 18 03:33:41 [ 84.908422][ T897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 syzkaller kern.alert kernel: [ [ 84.920576][ T897] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 84.885573][ T14[ 84.930755][ T897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 03] Write-error [ 84.940136][ T897] usb 2-1: Product: syz on swap-device ([ 84.945794][ T897] usb 2-1: Manufacturer: syz [ 84.948123][ T1403] Write-error on swap-device (8:0:806302) 8:0:806286) May[ 84.958021][ T897] usb 2-1: SerialNumber: syz 18 03:33:41 syzkaller kern.alert kernel: [ 84.891777][ T1403] Write-error on swap-device (8:0:806294) May 18 03:33:41 syzkaller kern.alert kernel: [ 84.948123][ T1403] Write-error on swap-device (8:0:806302) [ 85.004941][ T1403] Write-error on swap-device (8:0:806310) [ 85.010728][ T1403] Write-error on swap-device (8:0:806318) May 18 03:33:42 syzkaller kern.alert kernel: [ 85.004941][ T1403] Write-error on swap-device ([ 85.024928][ T1403] Write-error on swap-device (8:0:806326) 8:0:806310) May[ 85.031255][ T1403] Write-error on swap-device (8:0:806334) 18 03:33:42 syzkaller kern.alert kernel: [ 85.010728][ T1403] Write-error on [ 85.045366][ T1403] Write-error on swap-device (8:0:806342) swap-device (8:0:806318) May 18 03:33:42 syzkaller kern.alert kernel: [ 85.024928][ T1403] Write-error on swap-device (8:0:806326) May 18 03:33:42 syzkaller kern.alert kernel: [ 85.031255][ T1403] Write-error on swap-device (8:0:806334) May 18 03:33[ 85.073610][ T1403] Write-error on swap-device (8:0:806350) :42 syzkaller kern.alert kernel: [ 85.045366][ T1403] Write-error on swap-device (8:0:806342) May 18 03:33:42 syzkaller kern.alert kernel: [ 85.073610][ T1403] Write-error on swap-device (8:0:806350) [ 85.097126][ T1403] Write-error on swap-device (8:0:806358) May 18 03:33:42 syzkaller kern.alert kernel: [ 85.097126][ T1403] Write-error on swap-device (8:0:806358) [ 85.162415][ T288] EXT4-fs (loop2): unmounting filesystem. [ 85.172577][ T897] usb 2-1: 0:1 : does not exist [ 85.177601][ T897] usb 2-1: 0:2 : does not exist [ 85.194895][ T897] usb 2-1: unit 5 not found! [ 85.198244][ T1420] EXT4-fs error: 117 callbacks suppressed [ 85.198259][ T1420] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.249: Detected aborted journal [ 85.201775][ T897] usb 2-1: unit 0 not found! [ 85.214131][ T1420] EXT4-fs: 83 callbacks suppressed [ 85.214149][ T1420] EXT4-fs (sda1): Remounting filesystem read-only [ 85.245016][ T1420] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.249: Detected aborted journal [ 85.246014][ T897] usb 2-1: USB disconnect, device number 5 [ 85.271744][ T1420] EXT4-fs (sda1): Remounting filesystem read-only [ 85.614877][ T567] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 85.680785][ T1429] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.250: Detected aborted journal [ 85.697807][ T1430] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.251: Detected aborted journal [ 85.704907][ T1429] EXT4-fs (sda1): Remounting filesystem read-only [ 85.715196][ T1430] EXT4-fs (sda1): Remounting filesystem read-only [ 85.716060][ T1430] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.251: Detected aborted journal [ 85.733669][ T1429] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.250: Detected aborted journal [ 85.743365][ T1430] EXT4-fs (sda1): Remounting filesystem read-only [ 85.763828][ T1429] EXT4-fs (sda1): Remounting filesystem read-only [ 85.791499][ T1430] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.251: Detected aborted journal [ 85.802592][ T1430] EXT4-fs (sda1): Remounting filesystem read-only [ 85.815370][ T1430] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.251: Detected aborted journal [ 85.816800][ T567] usb 3-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.834903][ T1430] EXT4-fs (sda1): Remounting filesystem read-only [ 85.852090][ T1434] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.253: Detected aborted journal [ 85.863088][ T567] usb 3-1: config 1 interface 0 has no altsetting 0 [ 85.863286][ T1434] EXT4-fs (sda1): Remounting filesystem read-only [ 85.876589][ T1430] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.251: Detected aborted journal [ 85.881316][ T567] usb 3-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40 [ 85.900516][ T1435] loop4: detected capacity change from 0 to 512 [ 85.919147][ T567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.927313][ T567] usb 3-1: Product: syz [ 85.928153][ T1430] EXT4-fs (sda1): Remounting filesystem read-only [ 85.932766][ T1435] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.253: bad orphan inode 15 [ 85.949651][ T567] usb 3-1: Manufacturer: syz [ 85.954343][ T567] usb 3-1: SerialNumber: syz [ 85.959428][ T1435] ext4_test_bit(bit=14, block=5) = 0 [ 85.974150][ T28] audit: type=1400 audit(2000000022.980:532): avc: denied { watch watch_reads } for pid=1430 comm="syz.0.251" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 86.013460][ T1435] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.053386][ T290] EXT4-fs (loop4): unmounting filesystem. [ 86.138718][ T1439] loop4: detected capacity change from 0 to 1024 [ 86.158146][ T1439] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.177904][ T1439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.189782][ T28] audit: type=1400 audit(2000000023.200:533): avc: denied { mounton } for pid=1438 comm="syz.4.254" path="/47/file1/proc" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.212613][ T28] audit: type=1400 audit(2000000023.200:534): avc: denied { map } for pid=1438 comm="syz.4.254" path="/47/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.274902][ T309] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 86.274916][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 86.383896][ T28] audit: type=1400 audit(2000000023.390:535): avc: denied { rmdir } for pid=290 comm="syz-executor" name="proc" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.406564][ T290] EXT4-fs (loop4): unmounting filesystem. [ 86.434986][ T309] usb 1-1: device descriptor read/64, error -71 [ 86.441706][ T571] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.476912][ T1451] syz.4.257[1451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.477038][ T1451] syz.4.257[1451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.644854][ T571] usb 2-1: Using ep0 maxpacket: 8 [ 86.677517][ T571] usb 2-1: unable to get BOS descriptor or descriptor too short [ 86.695637][ T571] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.716324][ T571] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 86.725483][ T309] usb 1-1: device descriptor read/64, error -71 [ 86.744864][ T571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.753067][ T571] usb 2-1: Product: syz [ 86.761436][ T571] usb 2-1: Manufacturer: syz [ 86.771287][ T571] usb 2-1: SerialNumber: syz [ 86.985194][ T571] usb 2-1: unit 3 not found! [ 86.990067][ T571] usb 2-1: unit 10 not found! [ 86.994922][ T309] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 87.016741][ T571] usb 2-1: USB disconnect, device number 6 [ 87.065514][ T102] udevd[102]: worker [1465] terminated by signal 7 (Bus error) [ 87.073322][ T102] udevd[102]: worker [1465] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1' [ 87.165081][ T309] usb 1-1: device descriptor read/64, error -71 [ 87.255279][ T1466] udevd[1466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.286257][ T102] udevd[102]: worker [1466] terminated by signal 7 (Bus error) [ 87.295993][ T102] udevd[102]: worker [1466] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0' [ 87.434867][ T309] usb 1-1: device descriptor read/64, error -71 [ 87.555079][ T309] usb usb1-port1: attempt power cycle [ 87.774855][ T897] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 87.934894][ T897] usb 2-1: device descriptor read/64, error -71 [ 87.974913][ T309] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 88.019038][ T309] usb 1-1: device descriptor read/8, error -71 [ 88.176099][ T309] usb 1-1: device descriptor read/8, error -71 [ 88.204876][ T897] usb 2-1: device descriptor read/64, error -71 [ 88.231077][ T567] usbhid 3-1:1.0: can't add hid device: -71 [ 88.238580][ T567] usbhid: probe of 3-1:1.0 failed with error -71 [ 88.278218][ T567] usb 3-1: USB disconnect, device number 6 [ 88.282635][ T1490] FAULT_INJECTION: forcing a failure. [ 88.282635][ T1490] name failslab, interval 1, probability 0, space 0, times 0 [ 88.297692][ T1490] CPU: 1 PID: 1490 Comm: syz.2.267 Not tainted syzkaller #0 [ 88.305012][ T1490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 88.316042][ T1490] Call Trace: [ 88.319354][ T1490] [ 88.323522][ T1490] __dump_stack+0x21/0x24 [ 88.327888][ T1490] dump_stack_lvl+0x110/0x170 [ 88.330691][ T28] audit: type=1400 audit(2000000025.340:536): avc: denied { ioctl } for pid=1493 comm="syz.3.269" path="socket:[20329]" dev="sockfs" ino=20329 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.332596][ T1490] ? __cfi_dump_stack_lvl+0x8/0x8 [ 88.362973][ T1490] ? __cfi_vfs_write+0x10/0x10 [ 88.367776][ T1490] dump_stack+0x15/0x24 [ 88.371957][ T1490] should_fail_ex+0x3bf/0x510 [ 88.376666][ T1490] __should_failslab+0xac/0xf0 [ 88.379795][ T1502] IPv6: addrconf: prefix option has invalid lifetime [ 88.381467][ T1490] should_failslab+0x9/0x20 [ 88.392831][ T1490] __kmem_cache_alloc_node+0x3d/0x2d0 [ 88.398328][ T1490] ? __se_sys_memfd_create+0xf2/0x3c0 [ 88.403698][ T1490] ? ksys_write+0x1fa/0x260 [ 88.408194][ T1490] ? __se_sys_memfd_create+0xf2/0x3c0 [ 88.413569][ T1490] __kmalloc+0xa4/0x1e0 [ 88.417716][ T1490] ? strnlen_user+0x10d/0x190 [ 88.422386][ T1490] __se_sys_memfd_create+0xf2/0x3c0 [ 88.427577][ T1490] __x64_sys_memfd_create+0x5b/0x70 [ 88.432763][ T1490] x64_sys_call+0x235/0x9a0 [ 88.437270][ T1490] do_syscall_64+0x4c/0xa0 [ 88.441675][ T1490] ? clear_bhb_loop+0x30/0x80 [ 88.444876][ T309] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 88.446341][ T1490] ? clear_bhb_loop+0x30/0x80 [ 88.458625][ T1490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.464508][ T1490] RIP: 0033:0x7ff9a619fb19 [ 88.468913][ T1490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.475974][ T309] usb 1-1: device descriptor read/8, error -71 [ 88.488718][ T1490] RSP: 002b:00007ff9a7013e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 88.488748][ T1490] RAX: ffffffffffffffda RBX: 000000000000048b RCX: 00007ff9a619fb19 [ 88.488761][ T1490] RDX: 00007ff9a7013ee0 RSI: 0000000000000000 RDI: 00007ff9a6237d63 [ 88.488773][ T1490] RBP: 0000200000000240 R08: 00000000ffffffff R09: 0000000000000000 [ 88.488786][ T1490] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000000c0 [ 88.535445][ T1490] R13: 00007ff9a7013ee0 R14: 00007ff9a7013ea0 R15: 0000200000000180 [ 88.543437][ T1490] [ 88.618017][ T1508] device dummy0 entered promiscuous mode [ 88.623781][ T1508] device macsec1 entered promiscuous mode [ 88.630732][ T1508] device dummy0 left promiscuous mode [ 88.641222][ T28] audit: type=1400 audit(2000000025.650:537): avc: denied { map } for pid=1511 comm="syz.3.274" path="socket:[20356]" dev="sockfs" ino=20356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.663180][ T1512] overlayfs: failed to clone upperpath [ 88.666428][ T309] usb 1-1: device descriptor read/8, error -71 [ 88.676761][ T1512] overlayfs: failed to clone upperpath [ 88.756394][ T897] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 88.769172][ T1522] x_tables: duplicate underflow at hook 4 [ 88.776829][ T28] audit: type=1400 audit(2000000025.790:538): avc: denied { getopt } for pid=1513 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.796284][ T309] usb usb1-port1: unable to enumerate USB device [ 88.914881][ T897] usb 2-1: device descriptor read/64, error -71 [ 88.964904][ T567] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 89.164868][ T567] usb 3-1: Using ep0 maxpacket: 32 [ 89.171249][ T567] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 89.179511][ T567] usb 3-1: config 0 has no interface number 0 [ 89.185667][ T567] usb 3-1: config 0 interface 184 has no altsetting 0 [ 89.193980][ T567] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 89.194872][ T897] usb 2-1: device descriptor read/64, error -71 [ 89.203086][ T567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.217472][ T567] usb 3-1: Product: syz [ 89.221638][ T567] usb 3-1: Manufacturer: syz [ 89.226254][ T567] usb 3-1: SerialNumber: syz [ 89.231627][ T567] usb 3-1: config 0 descriptor?? [ 89.237432][ T567] smsc75xx v1.0.0 [ 89.324938][ T897] usb usb2-port1: attempt power cycle [ 89.555064][ T1537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 89.734866][ T897] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 89.765313][ T1555] loop4: detected capacity change from 0 to 512 [ 89.772516][ T897] usb 2-1: device descriptor read/8, error -71 [ 89.788078][ T1555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 89.797680][ T1555] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.810538][ T28] audit: type=1400 audit(2000000026.820:539): avc: denied { ioctl } for pid=1554 comm="syz.4.282" path="/54/bus/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.845154][ T290] EXT4-fs (loop4): unmounting filesystem. [ 89.929947][ T897] usb 2-1: device descriptor read/8, error -71 [ 89.935166][ T1572] netlink: 'syz.3.286': attribute type 3 has an invalid length. [ 89.945447][ T1572] netlink: 'syz.3.286': attribute type 3 has an invalid length. [ 90.024974][ T28] audit: type=1400 audit(2000000027.040:540): avc: denied { setattr } for pid=1577 comm="syz.3.287" name="RAW" dev="sockfs" ino=20718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.204857][ T897] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 90.245940][ T897] usb 2-1: device descriptor read/8, error -71 [ 90.254885][ T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.289669][ T1516] loop2: detected capacity change from 0 to 40427 [ 90.299648][ T1516] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 90.307736][ T1516] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 90.322924][ T1516] F2FS-fs (loop2): invalid crc value [ 90.353461][ T1516] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 16 [ 90.362433][ T1516] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 90.405920][ T897] usb 2-1: device descriptor read/8, error -71 [ 90.454905][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 90.466304][ T1590] EXT4-fs error: 82 callbacks suppressed [ 90.466321][ T1590] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.288: Detected aborted journal [ 90.485749][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.500247][ T1590] EXT4-fs: 67 callbacks suppressed [ 90.500263][ T1590] EXT4-fs (sda1): Remounting filesystem read-only [ 90.501393][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.512300][ T1590] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.288: Detected aborted journal [ 90.524403][ T1516] loop2: detected capacity change from 0 to 128 [ 90.534909][ T897] usb usb2-port1: unable to enumerate USB device [ 90.549431][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.559791][ T1593] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.289: Detected aborted journal [ 90.571533][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.571794][ T1590] EXT4-fs (sda1): Remounting filesystem read-only [ 90.579630][ T19] usb 5-1: Product: syz [ 90.586155][ T1593] EXT4-fs (sda1): Remounting filesystem read-only [ 90.588037][ T1593] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.289: Detected aborted journal [ 90.591016][ T19] usb 5-1: Manufacturer: syz [ 90.602803][ T1516] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.608138][ T19] usb 5-1: SerialNumber: syz [ 90.615276][ T1593] EXT4-fs (sda1): Remounting filesystem read-only [ 90.632618][ T1516] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.644412][ T1593] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.289: Detected aborted journal [ 90.662051][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 90.663739][ T1593] EXT4-fs (sda1): Remounting filesystem read-only [ 90.680392][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 90.680666][ T1593] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.289: Detected aborted journal [ 90.686930][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 90.698059][ T1593] EXT4-fs (sda1): Remounting filesystem read-only [ 90.734786][ T1593] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.289: Detected aborted journal [ 90.746175][ T1596] end_swap_bio_write: 3061 callbacks suppressed [ 90.746192][ T1596] Write-error on swap-device (8:0:808830) [ 90.758392][ T1596] Write-error on swap-device (8:0:808838) [ 90.764314][ T1596] Write-error on swap-device (8:0:808846) [ 90.770111][ T1596] Write-error on swap-device (8:0:808854) [ 90.775895][ T1596] Write-error on swap-device (8:0:808862) [ 90.781673][ T1596] Write-error on swap-device (8:0:808870) [ 90.784881][ T1593] EXT4-fs (sda1): Remounting filesystem read-only [ 90.787539][ T1596] Write-error on swap-device (8:0:808878) [ 90.794023][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 90.799814][ T1596] Write-error on swap-device (8:0:810422) [ 90.811976][ T1596] Write-error on swap-device (8:0:810430) [ 90.817773][ T1596] Write-error on swap-device (8:0:810438) [ 90.824879][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 90.837153][ T1569] EXT4-fs (sda1): Remounting filesystem read-only May 18 03:33:20 syzkaller kern.alert kernel: [ 90.746192][ T1596] Write-error on swap-device (8:0:808830) May 18 03:33:20 syzkaller kern.alert kernel: [ 90.758392][ T1596] Write-error on [ 90.861505][ T19] usb 5-1: 0:2 : does not exist swap-device (8:0:808838) May 18 03:33:20 syzkaller kern.alert kernel: [ 90.76[ 90.873474][ T19] usb 5-1: 5:0: failed to get current value for ch 0 (-22) 4314][ T1596] Write-error on swap-device (8:0:808846) May 18 03:33:20 syzkaller kern.alert kernel: [ 90.770111][ T1596] Write-error on swap-device (8:0:808854) May 18 03:33:20 syzkaller kern.alert kernel: [ 90.775895][ T1596] Write-error on swap-device (8:0:808862) May 18 03:33:20 syzkaller kern.alert kernel: [ 90.781673][ T1596] Write-error[ 90.911281][ T19] usb 5-1: USB disconnect, device number 6 on swap-device (8:0:808870) May 18 03:33:20 syzkaller kern.alert kernel: [ 90.787539][ T1596] Write-error on swap-device (8:0:808878) May 18 03:33:20 syzkaller kern.alert kernel: [ 90.799814][ T1596] Write-error on swap-device (8:0:810422) May 18 03:33:20 syzkaller kern.alert kernel: [ 90.811976][ T1596] Write-error on swap-device (8:0:810430) May 18 03:33:20 syzkaller kern.alert kernel: [ 90.817773][ T1596] Write-error on swap-device (8:0:810438) [ 90.999038][ T28] audit: type=1400 audit(2000000000.270:541): avc: denied { setopt } for pid=1593 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.535176][ T1599] loop0: detected capacity change from 0 to 131072 [ 91.549897][ T1599] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 5) [ 91.573862][ T1599] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 91.588774][ T1599] F2FS-fs (loop0): invalid crc value [ 91.607413][ T1599] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.670874][ T1599] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 91.680933][ T1599] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.903530][ T567] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 91.918932][ T288] EXT4-fs (loop2): unmounting filesystem. [ 91.928237][ T567] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 91.950533][ T567] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 91.966300][ T567] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 91.976467][ T567] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 91.987908][ T567] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 91.997725][ T567] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 91.997765][ T1642] loop2: detected capacity change from 0 to 512 [ 92.094782][ T1644] loop1: detected capacity change from 0 to 2048 [ 92.156421][ T1644] loop1: p1 < > p4 [ 92.184564][ T1642] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.296: bad orphan inode 15 [ 92.206516][ T1644] loop1: p4 size 722688 extends beyond EOD, truncated [ 92.231021][ T28] audit: type=1400 audit(2000000001.490:542): avc: denied { create } for pid=1637 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.574727][ T1642] ext4_test_bit(bit=14, block=5) = 0 [ 92.642719][ T1642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.901185][ T288] EXT4-fs (loop2): unmounting filesystem. [ 93.105346][ T567] usb 3-1: USB disconnect, device number 7 [ 93.121043][ T1656] loop2: detected capacity change from 0 to 128 [ 93.127909][ T1656] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4605: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 93.141658][ T1656] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 93.142780][ T28] audit: type=1400 audit(2000000002.410:543): avc: denied { ioctl } for pid=1657 comm="syz.4.302" path="socket:[20793]" dev="sockfs" ino=20793 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.197712][ T1475] udevd[1475]: incorrect ext4 checksum on /dev/loop2 [ 93.208676][ T1658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 93.312608][ T28] audit: type=1326 audit(2000000002.580:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f0fb9fb19 code=0x0 [ 93.544868][ T309] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 93.680649][ T1648] loop0: detected capacity change from 0 to 131072 [ 93.697592][ T1648] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.704848][ T309] usb 2-1: device descriptor read/64, error -71 [ 93.766971][ T1648] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 93.784897][ T28] audit: type=1400 audit(2000000003.050:545): avc: denied { write } for pid=1647 comm="syz.0.293" name="encrypted_dir" dev="loop0" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 93.807829][ T28] audit: type=1400 audit(2000000003.060:546): avc: denied { add_name } for pid=1647 comm="syz.0.293" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 93.807936][ T1648] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 93.915328][ T1678] overlayfs: failed to clone upperpath [ 93.928129][ T28] audit: type=1400 audit(2000000003.200:547): avc: denied { name_bind } for pid=1677 comm="syz.3.305" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 93.957768][ T28] audit: type=1400 audit(2000000003.230:548): avc: denied { node_bind } for pid=1677 comm="syz.3.305" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 93.984929][ T309] usb 2-1: device descriptor read/64, error -71 [ 94.008381][ T28] audit: type=1400 audit(2000000003.270:549): avc: denied { map } for pid=1681 comm="syz.3.307" path="socket:[20887]" dev="sockfs" ino=20887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.081693][ T1694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 94.090947][ T28] audit: type=1400 audit(2000000003.270:550): avc: denied { read } for pid=1681 comm="syz.3.307" path="socket:[20887]" dev="sockfs" ino=20887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.158507][ T28] audit: type=1400 audit(2000000003.400:551): avc: denied { accept } for pid=1687 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.164660][ T1700] loop0: detected capacity change from 0 to 512 [ 94.180229][ T1710] netlink: 'syz.2.316': attribute type 49 has an invalid length. [ 94.192351][ T1700] EXT4-fs: Ignoring removed nobh option [ 94.197433][ T28] audit: type=1400 audit(2000000003.400:552): avc: denied { create } for pid=1690 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.206498][ T1700] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 94.217989][ T28] audit: type=1400 audit(2000000003.400:553): avc: denied { read } for pid=1687 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.254033][ T1700] EXT4-fs (loop0): Remounting filesystem read-only [ 94.262625][ T28] audit: type=1400 audit(2000000003.530:554): avc: denied { sqpoll } for pid=1722 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.266783][ T1700] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.304: invalid indirect mapped block 4278190080 (level 0) [ 94.296058][ T309] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 94.304592][ T1700] EXT4-fs (loop0): Remounting filesystem read-only [ 94.316560][ T1710] device team_slave_1 entered promiscuous mode [ 94.322884][ T1700] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.304: invalid indirect mapped block 1 (level 1) [ 94.326234][ T1725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 94.340206][ T1700] EXT4-fs (loop0): Remounting filesystem read-only [ 94.352069][ T1700] EXT4-fs (loop0): 1 truncate cleaned up [ 94.357903][ T1700] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.380910][ T289] EXT4-fs (loop0): unmounting filesystem. [ 94.391708][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 94.416659][ T1736] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.423836][ T1736] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.453879][ T1734] IPv6: NLM_F_REPLACE set, but no existing node found! [ 94.474956][ T309] usb 2-1: device descriptor read/64, error -71 [ 94.664994][ T567] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 94.744882][ T309] usb 2-1: device descriptor read/64, error -71 [ 94.834927][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 94.856283][ T567] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.864354][ T567] usb 1-1: not running at top speed; connect to a high speed hub [ 94.872286][ T309] usb usb2-port1: attempt power cycle [ 94.878982][ T567] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 94.891325][ T567] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 94.900620][ T567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.908653][ T567] usb 1-1: Product: syz [ 94.912867][ T567] usb 1-1: Manufacturer: syz [ 94.917628][ T567] usb 1-1: SerialNumber: syz [ 94.923090][ T1739] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.532439][ T278] EXT4-fs error: 115 callbacks suppressed [ 95.532468][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 95.572763][ T571] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.580329][ T309] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 95.589467][ T278] EXT4-fs: 89 callbacks suppressed [ 95.589482][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 95.589693][ T567] usb 1-1: MIDIStreaming interface descriptor not found [ 95.595109][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 95.614831][ T567] usb 1-1: too many endpoints [ 95.624988][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 95.634942][ T309] usb 2-1: device descriptor read/8, error -71 [ 95.653097][ T102] udevd[102]: worker [1475] terminated by signal 7 (Bus error) [ 95.661570][ T567] usb 1-1: USB disconnect, device number 11 [ 95.667717][ T102] udevd[102]: worker [1475] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 95.688503][ T102] udevd[102]: worker [1476] terminated by signal 7 (Bus error) [ 95.696491][ T102] udevd[102]: worker [1476] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0' [ 95.710334][ T1750] loop2: detected capacity change from 0 to 40427 [ 95.755317][ T1477] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.764966][ T571] usb 5-1: Using ep0 maxpacket: 8 [ 95.772168][ T571] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.786336][ T309] usb 2-1: device descriptor read/8, error -71 [ 95.799064][ T571] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 95.810104][ T571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.818879][ T571] usb 5-1: Product: syz [ 95.823163][ T571] usb 5-1: Manufacturer: syz [ 95.823409][ T1752] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.327: Detected aborted journal [ 95.827806][ T571] usb 5-1: SerialNumber: syz [ 95.835222][ T102] udevd[102]: worker [1477] terminated by signal 7 (Bus error) [ 95.839007][ T1752] EXT4-fs (sda1): Remounting filesystem read-only [ 95.843467][ T102] udevd[102]: worker [1477] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 95.854325][ T1753] loop2: detected capacity change from 0 to 512 [ 95.874739][ T1753] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 1025)! [ 95.885411][ T1753] EXT4-fs (loop2): group descriptors corrupted! [ 95.885621][ T1473] udevd[1473]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.946820][ T1752] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.327: Detected aborted journal [ 95.957815][ T1752] EXT4-fs (sda1): Remounting filesystem read-only [ 95.972831][ T1754] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.328: Detected aborted journal [ 95.983781][ T1754] EXT4-fs (sda1): Remounting filesystem read-only [ 95.991536][ T1754] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.328: Detected aborted journal [ 96.002485][ T1754] EXT4-fs (sda1): Remounting filesystem read-only [ 96.007822][ T1746] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.325: Detected aborted journal [ 96.017255][ T280] hid-generic 0003:1234:5678.0004: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 96.019972][ T1746] EXT4-fs (sda1): Remounting filesystem read-only [ 96.054923][ T309] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 96.063944][ T1741] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.323: Detected aborted journal [ 96.075310][ T1741] EXT4-fs (sda1): Remounting filesystem read-only [ 96.106813][ T1756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.329: Detected aborted journal [ 96.115902][ T1757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.330: Detected aborted journal [ 96.118422][ T1756] EXT4-fs (sda1): Remounting filesystem read-only [ 96.129531][ T1757] EXT4-fs (sda1): Remounting filesystem read-only [ 96.141724][ T309] usb 2-1: device descriptor read/8, error -71 [ 97.074034][ T1784] rejected, failed to enable media [ 98.092869][ T102] udevd[102]: worker [1473] terminated by signal 7 (Bus error) [ 98.105541][ T571] usb 5-1: USB disconnect, device number 7 [ 98.122756][ T102] udevd[102]: worker [1473] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0' [ 98.215267][ T1821] syz.4.346[1821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.215356][ T1821] syz.4.346[1821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.239223][ T1826] udevd[1826]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 98.260086][ T309] hub 2-1:4.0: 4 ports detected [ 98.268092][ T309] hub 2-1:4.0: insufficient power available to use all downstream ports [ 98.302753][ T102] udevd[102]: worker [1817] terminated by signal 7 (Bus error) [ 98.319009][ T102] udevd[102]: worker [1817] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2' [ 98.335484][ T1828] udevd[1828]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.347972][ T102] udevd[102]: worker [1825] terminated by signal 7 (Bus error) [ 98.380541][ T102] udevd[102]: worker [1825] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1' [ 98.422277][ T102] udevd[102]: worker [1824] terminated by signal 7 (Bus error) [ 98.442610][ T102] udevd[102]: worker [1824] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1' [ 98.461236][ T309] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 99.908477][ T309] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 100.899445][ T1830] end_swap_bio_write: 839 callbacks suppressed [ 100.899467][ T1830] Write-error on swap-device (8:0:810270) [ 100.911668][ T84] EXT4-fs error: 78 callbacks suppressed [ 100.911684][ T84] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm syslogd: reading directory lblock 0 [ 100.947211][ T1828] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 101.533754][ T1815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.346: Detected aborted journal [ 101.545240][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 101.548587][ T1815] EXT4-fs: 63 callbacks suppressed [ 101.548599][ T1815] EXT4-fs (sda1): Remounting filesystem read-only [ 101.566978][ T1828] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 101.582194][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 101.595176][ T309] usb 2-1: USB disconnect, device number 15 [ 101.602595][ T1830] Write-error on swap-device (8:0:793014) [ 101.610790][ T1830] Write-error on swap-device (8:0:793022) [ 101.613939][ T1828] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 101.616612][ T1815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.346: Detected aborted journal May 18 03:33:30 [ 101.639460][ T84] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm syslogd: reading directory lblock 0 syzkaller kern.a[ 101.651853][ T278] EXT4-fs (sda1): Remounting filesystem read-only lert kernel: [ [ 101.659792][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 101.664933][ T1831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=1831 comm=syz.0.347 100.899467][ T1830] Write-error on swap-device ([ 101.688387][ T1815] EXT4-fs (sda1): Remounting filesystem read-only 8:0:810270) May 18 03:33:30 syzkaller kern.alert kernel: [ 101.602595][ T1830] Write-error on swap-device (8:0:793014) May 18 03:33:30 syzkaller kern.alert kernel: [ 101.610790][ T1830] Write-error on swap-device (8:0:793022) [ 101.717976][ T1830] Write-error on swap-device (8:0:793030) [ 101.723780][ T1830] Write-error on swap-device (8:0:793038) May 18 03:33:31 syzkaller kern.a[ 101.732519][ T1843] EXT4-fs (sda1): Remounting filesystem read-only lert kernel: [ 101.717976][ T18[ 101.741879][ T1831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=1831 comm=syz.0.347 30] Write-error on swap-device ([ 101.757231][ T1843] EXT4-fs (sda1): Remounting filesystem read-only 8:0:793030) May[ 101.765152][ T1830] Write-error on swap-device (8:0:793046) 18 03:33:31 syzkaller kern.alert kernel: [ 101.723780][ T1830][ 101.776990][ T1844] EXT4-fs (sda1): Remounting filesystem read-only Write-error on [ 101.778235][ T1846] EXT4-fs (sda1): Remounting filesystem read-only swap-device (8:0:793038) May 18 03:33:31 syzkaller kern.alert kernel: [ 101.76[ 101.797634][ T28] kauditd_printk_skb: 22 callbacks suppressed 5152][ T1830] Wr[ 101.797650][ T28] audit: type=1400 audit(2000000011.070:577): avc: denied { read } for pid=1843 comm="syz.4.350" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 ite-error on swap-device (8:0:79[ 101.830817][ T1830] Write-error on swap-device (8:0:793054) 3046) [ 101.838850][ T1830] Write-error on swap-device (8:0:793062) [ 101.859389][ T1830] Write-error on swap-device (8:0:793070) [ 101.893115][ T1830] Write-error on swap-device (8:0:793078) [ 101.902361][ T1846] EXT4-fs (sda1): Remounting filesystem read-only [ 101.914580][ T28] audit: type=1400 audit(2000000011.070:578): avc: denied { open } for pid=1843 comm="syz.4.350" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 May 18 03:33:31 syzkaller kern.alert kernel: [ 101.830817][ T1830] Write-error on swap-device (8:0:793054) May 18 03:33:31 syzkaller kern.alert kernel: [ 101.838850][ T1830] Write-error on swap-device (8:0:793062) May 18 03:33:31 syzkaller kern.alert kernel: [ 101.859389][ T1830] Write-error on swap-device (8:0:793070) May 18 03:33:31 syzkaller kern.alert kernel: [ 101.893115][ T1830] Write-error on swap-device (8:0:793078) [ 102.005729][ T1844] EXT4-fs (sda1): Remounting filesystem read-only [ 102.166065][ T1852] EXT4-fs (sda1): Remounting filesystem read-only [ 102.508529][ T1867] loop0: detected capacity change from 0 to 512 [ 102.554084][ T1867] EXT4-fs: journaled quota format not specified [ 102.588138][ T1828] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.756674][ T28] audit: type=1400 audit(2000000012.030:579): avc: denied { getopt } for pid=1855 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.758415][ T1857] loop4: detected capacity change from 0 to 256 [ 102.804625][ T1857] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 102.827252][ T308] kworker/u4:3: attempt to access beyond end of device [ 102.827252][ T308] loop2: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 102.842390][ T308] kworker/u4:3: attempt to access beyond end of device [ 102.842390][ T308] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 102.857467][ T1857] 9pnet_fd: Insufficient options for proto=fd [ 102.884903][ T571] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 102.996118][ T1876] syz.4.361[1876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.996198][ T1876] syz.4.361[1876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.079288][ T571] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.118671][ T1878] loop2: detected capacity change from 0 to 512 [ 103.125260][ T571] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 103.136602][ T28] audit: type=1400 audit(2000000012.410:580): avc: denied { bind } for pid=1877 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.381431][ T571] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.413415][ T1889] loop2: detected capacity change from 0 to 256 [ 104.414321][ T571] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 104.431540][ T571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.446452][ T1902] loop0: Can't mount, would change RO state [ 104.447511][ T28] audit: type=1400 audit(2000000013.720:581): avc: denied { mounton } for pid=1901 comm="syz.4.365" path="/72/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 104.454910][ T571] usb 1-1: Product: syz [ 104.484900][ T571] usb 1-1: Manufacturer: syz [ 104.492323][ T1889] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 104.497557][ T571] usb 1-1: SerialNumber: syz [ 104.599675][ T1899] loop1: detected capacity change from 0 to 512 [ 104.686559][ T28] audit: type=1400 audit(2000000013.960:582): avc: denied { ioctl } for pid=1920 comm="syz.3.372" path="socket:[23825]" dev="sockfs" ino=23825 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.717158][ T571] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 104.730480][ T571] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 104.747810][ T571] usb 1-1: USB disconnect, device number 13 [ 104.760425][ T28] audit: type=1400 audit(2000000014.030:583): avc: denied { mount } for pid=1922 comm="syz.3.373" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 104.854848][ T310] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.888861][ T1931] syz.3.376[1931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.888942][ T1931] syz.3.376[1931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.975679][ T1828] udevd[1828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.054843][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 105.061184][ T310] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.082364][ T310] usb 5-1: config 0 has no interface number 0 [ 105.101617][ T310] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 105.133472][ T310] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 105.163322][ T310] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 105.189448][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.213415][ T310] usb 5-1: Product: syz [ 105.226067][ T310] usb 5-1: Manufacturer: syz [ 105.230686][ T310] usb 5-1: SerialNumber: syz [ 105.256207][ T310] usb 5-1: config 0 descriptor?? [ 106.906097][ T1929] EXT4-fs error: 87 callbacks suppressed [ 106.906116][ T1929] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.376: Detected aborted journal [ 106.912099][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 106.927615][ T1934] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.377: Detected aborted journal [ 107.895248][ T1934] EXT4-fs: 57 callbacks suppressed [ 107.895268][ T1934] EXT4-fs (sda1): Remounting filesystem read-only [ 107.907065][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 107.915006][ T1929] EXT4-fs (sda1): Remounting filesystem read-only [ 107.928087][ T1934] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.377: Detected aborted journal [ 107.934987][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 107.944843][ T1934] EXT4-fs (sda1): Remounting filesystem read-only [ 107.959562][ T310] usb 5-1: USB disconnect, device number 8 [ 107.970813][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 107.971196][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 107.982633][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 108.002082][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 108.014087][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 108.026710][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 108.033266][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 108.040135][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 108.050612][ T1936] EXT4-fs (sda1): Remounting filesystem read-only [ 108.052356][ T1937] EXT4-fs (sda1): Remounting filesystem read-only [ 108.063395][ T1936] EXT4-fs (sda1): Remounting filesystem read-only [ 108.070767][ T1940] printk: console [ttyS0] disabled SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=5 req=452 state=1 status=67 (errno 11: Resource temporarily unavailable)