last executing test programs: 10m18.288723545s ago: executing program 4 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x42, &(0x7f0000001d80)=ANY=[@ANYBLOB="aaaa003400000028d76a31f60b0a0000000005907864010101ac1414aa860cffffffff01", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f00000001c0), 0x1003) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, 0x0) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20080058) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x13, 0x4, &(0x7f0000001bc0)=ANY=[], &(0x7f0000001c00)='syzkaller\x00', 0x4, 0x99, &(0x7f0000001c40)=""/153}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xe, 0x16, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x5e3f8b2d08cbb781) setxattr$security_ima(&(0x7f0000000280)='./trace\x00', &(0x7f00000012c0), &(0x7f0000001d00)=ANY=[@ANYBLOB="04035671d45252b601f3f00fbc7607a8457fa8267cd19d96bab915639178901077016ef58b182ef05ec9bbeece8f5a62800f79e9a60765b0149bca5a58b163369b5f1a8f8606881d"], 0x13, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r1, 0x2, &(0x7f0000001dc0)="000000000000000000000000000000790000000001ccc539ebad6b8dc9e612c646f8b0072a0fa4b8c396788c7f22c36ee3104a9b1369f6cacc51308dfa289c16829db37ce6254fdc44830d4babd897fbffc62d4ebebe3db366d84dab3d0355a06018f0b528122ca631a33aa378df822f5501a614c6d89a13b65da05eb50f352eb09974809f832eddd9a52fc17f6320e644d507e81b1e53f0193b4c3cd234bcb04e89bc3fe26d0820d34ded870f8675ead64a3a919ad9a86c4f8d11634b4e58e566a321813b42e45649ba58a255336442b78ca470dc86c718b289602bca56aedf46832a77465848ca95161fb44dfc2d223abfa95d62e8dd05f758a838abe2c41b0db6914a65cfd3b35638f3e799906dca4e") write(r4, &(0x7f0000000180)='traceon', 0x7) 10m17.360146699s ago: executing program 4 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x0) 10m17.296947125s ago: executing program 4 (id=110): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) bind$packet(r0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="0100000000", 0x5) 10m17.291693376s ago: executing program 4 (id=111): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000140)={0x11, 0xf5, r2, 0x1, 0x0, 0x6, @local}, 0x14) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x280c4cb, &(0x7f0000000200)=ANY=[], 0x1, 0x23b, &(0x7f0000000240)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000004000000000000930100b80bd80b82cefac4575aff8632cb000000615f5f615f600015412b929efcae2fb74da0f815b097cebbb485b5d89309f7f26e76240aff5f83ad7fb1a37ac1801944421133b2023f53af2707"], 0x0, 0x2c, 0x0, 0x9}, 0x28) listxattr(&(0x7f0000000540)='./file2\x00', 0x0, 0x300) creat(&(0x7f0000000580)='./file3/file0\x00', 0xc2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d570020005001300000000000800050000000000050008000900010005000a000000000008000400ff0300000800b5a5", @ANYRES32, @ANYBLOB="08551b48", @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24044891}, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m17.072009118s ago: executing program 4 (id=112): socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000001480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000014c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001500)=0x2) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000001540)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000015c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001640), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001680), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000016c0)=0x2) io_uring_setup(0x9c, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f00000001c0), 0x40000000000017d, 0x888) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000001000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0xfffd, 0x0, @private1}, 0x0, {[0x1, 0x2, 0x0, 0x0, 0x9, 0x40000000, 0x3]}}, 0x5c) bind$802154_raw(r3, &(0x7f00000011c0)={0x24, @long}, 0x14) clock_nanosleep(0x4, 0x0, &(0x7f0000001440)={0x77359400}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ntfs3\x00', 0x81402, &(0x7f0000000140)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02') setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000001100)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, {0xa, 0x0, 0x4, @remote}, 0x10, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000001180)=0x6, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x408d00, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_setup(0x517d, &(0x7f0000000040)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) eventfd(0xb0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m16.904860255s ago: executing program 4 (id=113): mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x4b0e1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'virt_wifi0\x00', 0xc1eb461a2917d087}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000480)={'bridge0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0xfffffff9, r1}, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f00000005c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005b80)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000005bc0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@fwd={0x6}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f, 0x30]}}, &(0x7f0000005c00)=""/246, 0x3a, 0xf6, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 10m16.819765304s ago: executing program 32 (id=113): mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x4b0e1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'virt_wifi0\x00', 0xc1eb461a2917d087}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000480)={'bridge0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0xfffffff9, r1}, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f00000005c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005b80)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000005bc0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@fwd={0x6}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f, 0x30]}}, &(0x7f0000005c00)=""/246, 0x3a, 0xf6, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 49.241429366s ago: executing program 1 (id=2661): prlimit64(0x0, 0xe, &(0x7f0000005480)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000054c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000005500)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000005540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000055c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000005640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000005680), 0x4000087, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0xc, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmmsg$sock(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="0100000003000000640000000000000000000000000000000000000000000000000000000000000001000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) 46.71744842s ago: executing program 1 (id=2665): mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x4b0e1000) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'virt_wifi0\x00', 0xc1eb461a2917d087}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000480)={'bridge0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f00000005c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005b80)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000005bc0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 43.678488607s ago: executing program 1 (id=2670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) setns(0xc9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x10106, 0x2, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011"], 0x74}}, 0x0) getpgid(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000007c0)={'syz_tun\x00', &(0x7f0000000800)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x3, 0x0, 0x3]}}) syz_open_procfs(0x0, &(0x7f0000000840)='fdinfo\x00') r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000640)='./file0\x00', 0x200000, &(0x7f00000008c0)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000a40)="$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") fcntl$lock(r4, 0x25, &(0x7f0000000e00)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}}, {{&(0x7f0000000300)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4080}}], 0x2, 0x400c0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43.64421328s ago: executing program 1 (id=2671): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) socket(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r1, 0x4) creat(&(0x7f0000000880)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r4, 0x25, 0x2, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000840)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010102}, @address_request={0x11, 0x0, 0x0, 0xfffffffd}}}}}, 0x0) 43.44737008s ago: executing program 1 (id=2676): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x3a) r0 = open(0x0, 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000001300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001340)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001380)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000001400)='./file0\x00', 0x884c, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x0, 0x3b4, &(0x7f0000000500)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) connect$unix(r2, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000001b00)=ANY=[@ANYBLOB="010000000a00000005200000070000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x2020600) unshare(0x2020600) 34.942144957s ago: executing program 1 (id=2688): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000dc0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) syz_genetlink_get_family_id$wireguard(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x8884}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) memfd_create(&(0x7f0000001080)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xa3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@I\n\x11\tt\x99\xeb\xe8p]d\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x81\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7..\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbfD\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xe8m\xcf\xed\xf6\xb2\xa1\xa9\xb4\x0f\xb8\x9d\x93\xb1\xeeK\xf4\xb3|\x96G|d>\xf4V.\xa6\x12yta\xca\xd6\x12x\x8e\xfel\xaa\xda]\xaa\x91Z\xdd\xf0\a\xce\x83\x9b\x1e\xc0J0\xa8\x97\x85\xfd\x9c=<\xae\x907U\x9c\x8a\x9b\x13\xa66jp\xed\xe8\xe6\xf1\xac\x01{\x02\x85\x01\x96\xae\xa6H5\x12\xff]\xc2\x8d\x97/\xc8\x05\xb0\xd6\xd2C\xdf\xf63\xae\x9a\x84\xcc\x16\x16\xfb\xbd\x03F\xc6\b)6\xd3\xf5}\xef\xaf\xbd.\xc5\n\x9dj \x1b\xff8\xfd\xed\xb8\xe7Y\xe8j\x1e\xe7J\xaf\xf0\xf9\xac\x91\xd0\x05@\x82\x13+\x97\xd1\xe9\n\xdb\xf2r#\xf8\xfc\xc9\xfe\x84\x94.~\x0e\xdd\x1c', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7, 0xb}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 20.125193731s ago: executing program 2 (id=2708): mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$inet6(0xa, 0x3, 0xff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002440)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000071109200000000009500"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb579b67d261e0a0c}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000000000000080000000004"], 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000b00)={0x0, 0x17}, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)="929835e740d6a600000000000000010100000002000040", 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x38880, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 19.092218865s ago: executing program 2 (id=2711): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) socket(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r1, 0x4) creat(&(0x7f0000000880)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r4, 0x25, 0x2, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000840)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010102}, @address_request={0x11, 0x0, 0x0, 0xfffffffd}}}}}, 0x0) 16.189786998s ago: executing program 2 (id=2716): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x3a) r0 = open(0x0, 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000001300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001340)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001380)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000001400)='./file0\x00', 0x884c, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x0, 0x3b4, &(0x7f0000000500)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) connect$unix(r2, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000001b00)=ANY=[@ANYBLOB="010000000a00000005200000070000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x2020600) unshare(0x2020600) 16.189324968s ago: executing program 3 (id=2717): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x3a0001c, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f00000004c0)={[{@nodioread_nolock}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'debug_want_extra_isize'}}, {@euid_lt}]}, 0xfe, 0x2a4, &(0x7f0000000a80)="$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") socket(0x1a, 0x800, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="010000"], 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x22020600) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000d40)="10131400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000d80)={0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000640)="63eced8e46dc3f01000000000000", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) syz_open_dev$evdev(&(0x7f0000000dc0), 0x0, 0x0) fsopen(&(0x7f0000000e00)='binfmt_misc\x00', 0x1) 16.187986318s ago: executing program 5 (id=2718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) setns(0xc9, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x10106, 0x2, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011"], 0x74}}, 0x0) getpgid(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000007c0)={'syz_tun\x00', &(0x7f0000000800)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x3, 0x0, 0x3]}}) syz_open_procfs(0x0, &(0x7f0000000840)='fdinfo\x00') r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000640)='./file0\x00', 0x200000, &(0x7f00000008c0)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000a40)="$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") fcntl$lock(r4, 0x25, &(0x7f0000000e00)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}}, {{&(0x7f0000000300)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4080}}], 0x2, 0x400c0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.039202864s ago: executing program 5 (id=2720): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000dc0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x80002c1, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x8884}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) memfd_create(&(0x7f0000001080)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xa3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@I\n\x11\tt\x99\xeb\xe8p]d\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x81\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7..\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbfD\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xe8m\xcf\xed\xf6\xb2\xa1\xa9\xb4\x0f\xb8\x9d\x93\xb1\xeeK\xf4\xb3|\x96G|d>\xf4V.\xa6\x12yta\xca\xd6\x12x\x8e\xfel\xaa\xda]\xaa\x91Z\xdd\xf0\a\xce\x83\x9b\x1e\xc0J0\xa8\x97\x85\xfd\x9c=<\xae\x907U\x9c\x8a\x9b\x13\xa66jp\xed\xe8\xe6\xf1\xac\x01{\x02\x85\x01\x96\xae\xa6H5\x12\xff]\xc2\x8d\x97/\xc8\x05\xb0\xd6\xd2C\xdf\xf63\xae\x9a\x84\xcc\x16\x16\xfb\xbd\x03F\xc6\b)6\xd3\xf5}\xef\xaf\xbd.\xc5\n\x9dj \x1b\xff8\xfd\xed\xb8\xe7Y\xe8j\x1e\xe7J\xaf\xf0\xf9\xac\x91\xd0\x05@\x82\x13+\x97\xd1\xe9\n\xdb\xf2r#\xf8\xfc\xc9\xfe\x84\x94.~\x0e\xdd\x1c', 0x1) fspick(0xffffffffffffffff, &(0x7f0000001300)='.\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') mount(0x0, &(0x7f0000000d40)='.\x00', &(0x7f0000000180)='fusectl\x00', 0x800000, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/57, 0x39, 0x40000000009) r4 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000200)=0x79, 0x4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 10.51128551s ago: executing program 0 (id=2721): mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$inet6(0xa, 0x3, 0xff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002440)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000071109200000000009500"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb579b67d261e0a0c}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000000000000080000000004"], 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000b00)={0x0, 0x17}, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)="929835e740d6a600000000000000010100000002000040", 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x38880, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 10.51090403s ago: executing program 2 (id=2722): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(r1, r3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x20004851) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002940)={0x30, r5, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41000}, 0x0) 10.51058267s ago: executing program 3 (id=2723): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) syz_genetlink_get_family_id$wireguard(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x8884}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) memfd_create(&(0x7f0000001080)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xa3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@I\n\x11\tt\x99\xeb\xe8p]d\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x81\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7..\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbfD\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xe8m\xcf\xed\xf6\xb2\xa1\xa9\xb4\x0f\xb8\x9d\x93\xb1\xeeK\xf4\xb3|\x96G|d>\xf4V.\xa6\x12yta\xca\xd6\x12x\x8e\xfel\xaa\xda]\xaa\x91Z\xdd\xf0\a\xce\x83\x9b\x1e\xc0J0\xa8\x97\x85\xfd\x9c=<\xae\x907U\x9c\x8a\x9b\x13\xa66jp\xed\xe8\xe6\xf1\xac\x01{\x02\x85\x01\x96\xae\xa6H5\x12\xff]\xc2\x8d\x97/\xc8\x05\xb0\xd6\xd2C\xdf\xf63\xae\x9a\x84\xcc\x16\x16\xfb\xbd\x03F\xc6\b)6\xd3\xf5}\xef\xaf\xbd.\xc5\n\x9dj \x1b\xff8\xfd\xed\xb8\xe7Y\xe8j\x1e\xe7J\xaf\xf0\xf9\xac\x91\xd0\x05@\x82\x13+\x97\xd1\xe9\n\xdb\xf2r#\xf8\xfc\xc9\xfe\x84\x94.~\x0e\xdd\x1c', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7, 0xb}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 10.51028436s ago: executing program 5 (id=2724): syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_sb_set_mnt_opts\x00') r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_ext={0x1c, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0xed, 0x82, &(0x7f0000000500)=""/130, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xe, 0x4, 0x4}, 0x10, 0x52a0, 0xffffffffffffffff, 0x7, &(0x7f0000000f80), &(0x7f0000000fc0)=[{0x5, 0x4, 0x7, 0x7}, {0x3, 0x1, 0x6, 0x8}, {0x3, 0x40003, 0xffffffff, 0x9}, {0x1, 0x4, 0x8, 0x4}, {0x4, 0x4, 0x4, 0x18}, {0x5, 0x5, 0xb, 0xa}, {0xffffffff, 0x3, 0x7, 0x6}], 0x10, 0xa0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) io_setup(0x4, &(0x7f00000001c0)) socket$xdp(0x2c, 0x3, 0x0) r4 = fsopen(&(0x7f00000005c0)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000640)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000680)='\x00', &(0x7f00000006c0)='(!\xef(.(\\-]\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000008c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) fstat(r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r7, &(0x7f0000000900)=""/142, 0x8e) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x80000e, 0x2072, r2, 0xd0fb8000) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f00000009c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0) read(r4, 0x0, 0xfffffea1) 8.343998819s ago: executing program 0 (id=2725): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=@base={0xa, 0x1, 0x200, 0x7f}, 0x50) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f00000000c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x2]}, 0x8, 0x80000) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000006040)={0x0, 0x21}, &(0x7f0000006080)) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000060c0)=@base={0x10, 0x4, 0x8, 0xd, 0x0, r3, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000006180)={&(0x7f00000061c0)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000006240)={&(0x7f0000006280)=@newtfilter={0x68, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff3, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1018}, {0x1000}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='H%IP']}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.343472239s ago: executing program 3 (id=2726): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) getpeername(r2, 0x0, &(0x7f0000000e80)) poll(&(0x7f00000014c0)=[{r2, 0x5208}, {r2, 0x8400}, {r2, 0x1410}, {r2, 0xc1}, {}, {r2, 0x10}, {r0, 0x8001}], 0x7, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000001200)='./proc\x00', &(0x7f0000001240)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_mount_image$fuse(0x0, &(0x7f00000012c0)='./file0\x00', 0x14a48a, 0x0, 0x21, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000001340)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000013c0)='./file0\x00', 0x0, 0x2018840, &(0x7f0000001440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) write(r3, &(0x7f0000001480)='9', 0x1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x200408cc}, 0x4000001) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff3"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r5, 0x18000000000002a0, 0xfe, 0x60, &(0x7f0000000d80)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000e80), &(0x7f0000000ec0)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @multicast}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002600)={r5, 0x0, 0x9d, 0x99, &(0x7f0000000fc0)="ba23c5c02f4c340f5d3ea997ffdf87e0ccd04e7fb722e17e1a03ffb2fe5d9bb612f7cc3f38408d521ce8b2745dcedc8dec983db04c839887a6cfbb1acbb6faa2377e6266ffd1dd0a9ff2c954d95dd3547deae840af5b63b91eed8c7eb8cb172fcb1bdfe8deeb89f6c405f329e4468b5bbc7ace482c65fcef276fd8af17d5eb903a7a442bddb07581003f8b771358f4dd07ac38ea655b6fc0b0b21d0c8e", &(0x7f0000001080)=""/153, 0x5, 0x0, 0x67, 0x1000, &(0x7f0000001140)="e4c11bbae9636acdac1cab472bae50209e558e50f66d533351e6d9349194a5529273b6260ccba818aaaab4e315095cd346581f07823e7e7957b4b5e68b7954afec8fa31d2ca0e384744839cb8e5123b8665f2d219e5d13154088b7dcc0235fd307ce4a50f55df6", &(0x7f0000001600)="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", 0x3, 0x0, 0x9}, 0x50) request_key(&(0x7f0000001580)='asymmetric\x00', &(0x7f00000015c0)={'syz', 0x1}, 0x0, 0x0) 6.626155232s ago: executing program 0 (id=2727): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) socket(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r1, 0x4) creat(&(0x7f0000000880)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r4, 0x25, 0x2, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000840)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010102}, @address_request={0x11, 0x0, 0x0, 0xfffffffd}}}}}, 0x0) 6.625411512s ago: executing program 2 (id=2728): mmap(&(0x7f0000b23000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x4b0e1000) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'virt_wifi0\x00', 0xc1eb461a2917d087}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000480)={'bridge0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffff9, r1}, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f00000005c0)="$eJzs3E2LG3UYAPBnsrt9ty7iwVsHirALTWi2L+jJqi2+YEvx5eBJs0ka0iaZZZOma089eBQPfhNR8OTRz+BBj3oTD4o3oZKZWe32RbtuNsu2vx/MPDP//PPMM0MIPDMhATy1FtM/fkvieByOiLmIOJZEvp2US8SdiAvF3Bci4kREVO5ZknL874EDEXEkIo5Pkhc5k/KlL06NT5779e3fv/3+4PzRL7/5YU9PHNhTL0ZEf63YvtUvYtYp4vVyvDHu5rF/dlzGtS05+lkxfqu9mme41dic18jjmU4xP1u7OZzEa71GcxI73Wv5+NqgOOBw3NnMM3lDer2xnu+32qt57A6zPHZuF8fduF18t90ejoo8rTLfJ3n6GI02YzHe3mgX57N2I4/NwagcL/JmrfbGJI7LWB4umlmvldex+j8v8j7wTndwcyMdt9eH3WyQnqvVX6rVz1fr61mrPWqfrTb6rfNn06VObzKtOmo3+hc6WdbptWvNrL+cLnWazWq9ni5dbK92G4O0Xq+dqZ2unlsut06lb1z5IO210qVJfK07uDnq9obptWw9Ld6xnK7Uzry8nJ6sp+9dvppefffSpctX3//o4odXXr381uvlpAfKSpdWTq+sVOunqyv15afo/D8ti97G+ScPH/7px51dNig84gP2aPO7UwfAPvJA/x/39/+h/wembif9f/9Gub87/X88Tv8f0+z/Jy2V/v+/+9/Ktvrf41PpfxdC/7+L5w87su3+P3dg6nUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBzPy989Wa+sVjsHy3HnymHniv3k4ioRMTdh5iLA1tyzpV5Fh4xf+G+Gr5LIs8wOcbBcjkSERfK5c9nd/sqAAAAwJPr6zsnPi+69WK1uNcFMUvFTZvKsY+nlC+JiIXFX6aUrTJZPT+lZPnnez42ppQtv4F1aErJiltu89PK9ljmtoRD94SkCJWZlgMAAMzE1k5gtl0IAAAAs/TZv776yszqYMaS2HyUufksOP/l/T8PBA9PVnfv+3E/AAAAsJ8ke10AAAAAsOvy/t///wEAAMCTrfj/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgL3bu50ZtIIoD8LPBQP4pKMo9reQGZaSEHHMMFJAmKIG0kAaogUg5pIQVrLBnkbwL0moZYy36Psn2znj18wxweWNpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLf6v1/PfPL78uzdntL5NnNgAAAMAp22o9r/+YNu13qf9D6vqU2kVElBFxqnYfxKiVOUg51Zn/rx6N4U9EnXDoH6fjbUR8Tcfdx64/BQAAALhdm+Vq1lTrzSktAfzrd1RcSbNoU77/limviIhq+j9TWnk4fc4UVv++h/EjU1q9gDXJFNYsuQ1P3xvlekjboHV5mMmi/hLrVtnNcwEAgD61K4EzVQgAAAA34HvfA+Aanpb2xfF0fM84bi7pheCbVgsAAAB4hYq+BwAAAAB0rq7/u9n/b/Ki/f8K+/8BAABAds3+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW63nm+Vqdu7+4pk5u/1l8s0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHv25xiFYRgKouAmkZK4M7r/Yc2CXbp2MwOCx99KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCd1/nyvuLT2JOMXhuz55Xk26nx69T4d25sMxnr6d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzsz0sKhEAQRMGc8b+Tvv9hJUHPIEIENDyqqEUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzs289rHFUcAPA3O9lNU1uMUQJGpUoPerHptrb2KqIED/4JQkg3Nbq12uZgS7Dm4k1y7kX0IogISrzlf+i5gV7qrYccInjyEJlfyWyybX6QzKzN5wNv33ffTt6PmWXJd98sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhbX3wquNPI6Th9EsLtoerC/MJPXqtjqxsvRwIilJHA0Xraff2OvYG/GhLGFQvVZ+cma8vokAAADwrDi96xFxkd+HEB41l6eSujGa5v/N4pgk5/8x7yrK27bn/avrCyfylyaK/P/PPx6/tDnQaJyOk3Q6O9ftnN85laEDL/N/7vldjxhKz3z63UucXpDGR4svrjXT8xl9f//+B600HK5itgDAQZwr6jwo/h9K6nadEwPg2BgqJd5F/h+P1jsnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCqsLYbnijgKIUwMbcWJ1fWFmX71t0sPJ1bycvnevaVyn0kXzRDC7Fy3c75ntOEjX89gKs7mnc+nu93OzVu3qw7OhBD6vHR3b38e59N/4jGtEEJPy9mX+/TzyR7G2tbPjiB/e4Zqz+FIsr5dD456WqIdJ/z9jUwdb4BDDlpPukyN/PocxaAjlV/33qB47x1+z/v5LDmun6EAAOxHMy9JJvqouTyVtEVjIWz81Jv/v1mKQ0/ev3E3a8mer5Ty/8efXn5QHquc/7e3mk8d9RoH3eT89S8nb92+8/bc9elrnWudL9650H63ffHKpUtXJtPvSiZnQ2PbNyYAAACwH628lPP/kT77/ydLcXjK/n+2JZzl/1/90P6mPFbcP/8/9rY2/eqeCQAAwHHU2oxeeP2fv6M+R0StVvh6en7+Zjt73Hx+IXusdLoHNJyXcv4fj9U9KwAAAKAKa4tRz/7/1VIcnrL/X77//9Qvr/xW7jPO7i24EULonJu50b1a3XIGWu+Pfn+Oj+KHyulArbpXCgAAQF1G8lLe/2+OJfl/Y/OWh0YI4a2zIfyb/4Y/7DH/jz/87tfyWOX7/y9WusrB0xjPzkdaj4cwNF73jAAAAHiWnchLkuz/1Vye+uz3kx+33P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULX/AgAA//9KES1X") r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000005bc0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 6.625099332s ago: executing program 3 (id=2729): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, 0x0, 0x0, 0x0, 0x1) setreuid(0xffffffffffffffff, 0xee01) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x1000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.624796932s ago: executing program 5 (id=2730): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000005500)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000005540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000055c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000005640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000005680), 0x4000087, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmmsg$sock(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="0100000003000000640000000000000000000000000000000000000000000000000000000000000001000000000000000200000001", 0x35}], 0x1}}], 0x2, 0x0) 4.787460057s ago: executing program 0 (id=2731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) setns(0xc9, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x10106, 0x2, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011"], 0x74}}, 0x0) getpgid(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000007c0)={'syz_tun\x00', &(0x7f0000000800)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x3, 0x0, 0x3]}}) syz_open_procfs(0x0, &(0x7f0000000840)='fdinfo\x00') r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000640)='./file0\x00', 0x200000, &(0x7f00000008c0)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000a40)="$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") fcntl$lock(r4, 0x25, &(0x7f0000000e00)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}}, {{&(0x7f0000000300)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4080}}], 0x2, 0x400c0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.786224898s ago: executing program 2 (id=2732): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x3a) r0 = open(0x0, 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000001300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001340)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001380)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000001400)='./file0\x00', 0x884c, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x0, 0x3b4, &(0x7f0000000500)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) connect$unix(r2, &(0x7f0000001a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000001b00)=ANY=[@ANYBLOB="010000000a00000005200000070000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x2020600) unshare(0x2020600) 4.785933528s ago: executing program 3 (id=2733): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x3a0001c, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f00000004c0)={[{@nodioread_nolock}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'debug_want_extra_isize'}}, {@euid_lt}]}, 0xfe, 0x2a4, &(0x7f0000000a80)="$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") socket(0x1a, 0x800, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="010000"], 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x22020600) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000d40)="10131400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000d80)={0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000640)="63eced8e46dc3f01000000000000", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) syz_open_dev$evdev(&(0x7f0000000dc0), 0x0, 0x0) fsopen(&(0x7f0000000e00)='binfmt_misc\x00', 0x1) 4.785661928s ago: executing program 5 (id=2734): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000dc0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x80002c1, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x8884}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) memfd_create(&(0x7f0000001080)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xa3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@I\n\x11\tt\x99\xeb\xe8p]d\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x81\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7..\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbfD\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xe8m\xcf\xed\xf6\xb2\xa1\xa9\xb4\x0f\xb8\x9d\x93\xb1\xeeK\xf4\xb3|\x96G|d>\xf4V.\xa6\x12yta\xca\xd6\x12x\x8e\xfel\xaa\xda]\xaa\x91Z\xdd\xf0\a\xce\x83\x9b\x1e\xc0J0\xa8\x97\x85\xfd\x9c=<\xae\x907U\x9c\x8a\x9b\x13\xa66jp\xed\xe8\xe6\xf1\xac\x01{\x02\x85\x01\x96\xae\xa6H5\x12\xff]\xc2\x8d\x97/\xc8\x05\xb0\xd6\xd2C\xdf\xf63\xae\x9a\x84\xcc\x16\x16\xfb\xbd\x03F\xc6\b)6\xd3\xf5}\xef\xaf\xbd.\xc5\n\x9dj \x1b\xff8\xfd\xed\xb8\xe7Y\xe8j\x1e\xe7J\xaf\xf0\xf9\xac\x91\xd0\x05@\x82\x13+\x97\xd1\xe9\n\xdb\xf2r#\xf8\xfc\xc9\xfe\x84\x94.~\x0e\xdd\x1c', 0x1) fspick(0xffffffffffffffff, &(0x7f0000001300)='.\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') mount(0x0, &(0x7f0000000d40)='.\x00', &(0x7f0000000180)='fusectl\x00', 0x800000, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/57, 0x39, 0x40000000009) r4 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000200)=0x79, 0x4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 2.030212755s ago: executing program 0 (id=2735): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x4) mount(0x0, 0x0, &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$inet6(0xa, 0x3, 0xff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002440)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000071109200000000009500"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb579b67d261e0a0c}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000000000000080000000004"], 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000b00)={0x0, 0x17}, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)="929835e740d6a600000000000000010100000002000040", 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x38880, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 613.74µs ago: executing program 0 (id=2736): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) syz_genetlink_get_family_id$wireguard(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x8884}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) memfd_create(&(0x7f0000001080)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xa3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@I\n\x11\tt\x99\xeb\xe8p]d\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x81\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7..\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbfD\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xe8m\xcf\xed\xf6\xb2\xa1\xa9\xb4\x0f\xb8\x9d\x93\xb1\xeeK\xf4\xb3|\x96G|d>\xf4V.\xa6\x12yta\xca\xd6\x12x\x8e\xfel\xaa\xda]\xaa\x91Z\xdd\xf0\a\xce\x83\x9b\x1e\xc0J0\xa8\x97\x85\xfd\x9c=<\xae\x907U\x9c\x8a\x9b\x13\xa66jp\xed\xe8\xe6\xf1\xac\x01{\x02\x85\x01\x96\xae\xa6H5\x12\xff]\xc2\x8d\x97/\xc8\x05\xb0\xd6\xd2C\xdf\xf63\xae\x9a\x84\xcc\x16\x16\xfb\xbd\x03F\xc6\b)6\xd3\xf5}\xef\xaf\xbd.\xc5\n\x9dj \x1b\xff8\xfd\xed\xb8\xe7Y\xe8j\x1e\xe7J\xaf\xf0\xf9\xac\x91\xd0\x05@\x82\x13+\x97\xd1\xe9\n\xdb\xf2r#\xf8\xfc\xc9\xfe\x84\x94.~\x0e\xdd\x1c', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7, 0xb}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 305.59µs ago: executing program 3 (id=2737): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(r1, r3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x20004851) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002940)={0x30, r5, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41000}, 0x0) 0s ago: executing program 5 (id=2738): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=@base={0xa, 0x1, 0x200, 0x7f}, 0x50) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f00000000c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x2]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000004000)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000006040)={0x0, 0x21}, &(0x7f0000006080)) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000060c0)=@base={0x10, 0x4, 0x8, 0xd, 0x0, r1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000006180)={&(0x7f00000061c0)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000006240)={&(0x7f0000006280)=@newtfilter={0x68, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff3, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1018}, {0x1000}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='H%IP']}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): .578657][ T3330] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 211.586645][ T3330] RBP: 00007f786e437b70 R08: 0000000000000010 R09: 0000000000000000 [ 211.594648][ T3330] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 211.602632][ T3330] R13: 00007f786e626038 R14: 00007f786e625fa0 R15: 00007ffd35452098 [ 211.610628][ T3330] [ 211.835996][ T3331] netlink: 68 bytes leftover after parsing attributes in process `syz.2.825'. [ 211.937378][ T3329] device batadv_slave_0 left promiscuous mode [ 213.076712][ T3364] loop2: detected capacity change from 0 to 512 [ 213.107462][ T3364] EXT4-fs (loop2): Test dummy encryption mode enabled [ 213.142965][ T3364] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.2.835: corrupted xattr block 95 [ 213.151676][ T3368] loop0: detected capacity change from 0 to 512 [ 213.189401][ T3364] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.835: bg 0: block 7: invalid block bitmap [ 213.202749][ T3368] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 213.217271][ T3364] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 213.236273][ T3368] EXT4-fs (loop0): 1 truncate cleaned up [ 213.236476][ T3364] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2918: inode #11: comm syz.2.835: corrupted xattr block 95 [ 213.242411][ T3368] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 213.262982][ T486] usb 1-1: USB disconnect, device number 4 [ 213.269124][ T3364] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 213.287308][ T3364] EXT4-fs (loop2): 1 orphan inode deleted [ 213.293092][ T3364] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.440888][ T288] EXT4-fs (loop0): unmounting filesystem. [ 213.845094][ T290] EXT4-fs (loop2): unmounting filesystem. [ 214.093708][ T3395] loop0: detected capacity change from 0 to 256 [ 215.566344][ T3408] loop2: detected capacity change from 0 to 512 [ 215.608967][ T3408] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.652760][ T3408] EXT4-fs (loop2): 1 truncate cleaned up [ 215.662587][ T3408] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 215.752361][ T290] EXT4-fs (loop2): unmounting filesystem. [ 218.200945][ T3445] tipc: Started in network mode [ 218.205888][ T3445] tipc: Node identity 4, cluster identity 4711 [ 218.212057][ T3445] tipc: Node number set to 4 [ 218.912407][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 218.912427][ T28] audit: type=1326 audit(2000000024.577:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.3.858" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810239fb19 code=0x7fc00000 [ 219.208035][ T28] audit: type=1400 audit(2000000024.897:979): avc: denied { write } for pid=3459 comm="syz.0.863" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.238761][ T3460] device dummy0 entered promiscuous mode [ 219.259369][ T3460] device vlan2 entered promiscuous mode [ 220.695083][ T3475] xt_CT: No such helper "pptp" [ 220.800890][ T3482] loop2: detected capacity change from 0 to 512 [ 220.851057][ T3480] loop5: detected capacity change from 0 to 512 [ 220.857808][ T3485] SELinux: Context : is not valid (left unmapped). [ 220.884739][ T28] audit: type=1400 audit(2000000026.577:980): avc: denied { relabelto } for pid=3484 comm="syz.1.872" name="rdma.current" dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 220.927593][ T3480] EXT4-fs: Ignoring removed orlov option [ 220.991584][ T3480] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 221.023174][ T28] audit: type=1400 audit(2000000026.607:981): avc: denied { associate } for pid=3484 comm="syz.1.872" name="rdma.current" dev="tmpfs" ino=1095 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 221.054909][ T3480] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 221.086138][ T3490] 9pnet_fd: Insufficient options for proto=fd [ 221.098962][ T3482] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 221.115667][ T3482] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.186103][ T3480] EXT4-fs (loop5): group descriptors corrupted! [ 221.296326][ T3490] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.340299][ T28] audit: type=1400 audit(2000000026.647:982): avc: denied { unlink } for pid=286 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 221.414821][ T28] audit: type=1400 audit(2000000026.757:983): avc: denied { setopt } for pid=3488 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.434266][ T28] audit: type=1400 audit(2000000026.767:984): avc: denied { ioctl } for pid=3488 comm="syz.1.873" path="socket:[25295]" dev="sockfs" ino=25295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.458555][ T3493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.870'. [ 221.466506][ T28] audit: type=1400 audit(2000000027.057:985): avc: denied { ioctl } for pid=3481 comm="syz.2.871" path="/166/file1/file1" dev="loop2" ino=15 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.491289][ T3493] netlink: 40 bytes leftover after parsing attributes in process `syz.5.870'. [ 221.512561][ T3493] netlink: 40 bytes leftover after parsing attributes in process `syz.5.870'. [ 221.546788][ T290] EXT4-fs (loop2): unmounting filesystem. [ 221.589498][ T28] audit: type=1400 audit(2000000027.227:986): avc: denied { block_suspend } for pid=3479 comm="syz.5.870" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.089904][ T3501] loop0: detected capacity change from 0 to 512 [ 222.169195][ T3501] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 222.182584][ T3501] EXT4-fs (loop0): 1 truncate cleaned up [ 222.188358][ T3501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 222.588828][ T3508] 9pnet_fd: Insufficient options for proto=fd [ 223.333113][ T288] EXT4-fs (loop0): unmounting filesystem. [ 223.559193][ T3525] device syzkaller0 entered promiscuous mode [ 223.569362][ T28] audit: type=1400 audit(2000000029.257:987): avc: denied { relabelfrom } for pid=3524 comm="syz.0.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 223.894183][ T3529] overlayfs: failed to clone lowerpath [ 223.975298][ T3534] overlayfs: failed to clone lowerpath [ 224.239587][ T3535] netlink: 208 bytes leftover after parsing attributes in process `syz.3.883'. [ 225.008808][ T3537] netlink: 208 bytes leftover after parsing attributes in process `syz.1.885'. [ 225.586724][ T3541] loop2: detected capacity change from 0 to 512 [ 225.600773][ T3541] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 225.654583][ T3545] loop0: detected capacity change from 0 to 512 [ 225.682968][ T3541] EXT4-fs (loop2): 1 truncate cleaned up [ 225.688658][ T3541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 225.712583][ T3545] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 225.832856][ T3545] EXT4-fs (loop0): 1 truncate cleaned up [ 225.848822][ T3545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 227.321406][ T288] EXT4-fs (loop0): unmounting filesystem. [ 228.532423][ T3562] loop0: detected capacity change from 0 to 40427 [ 228.547448][ T3562] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 228.555554][ T3562] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 228.571917][ T3562] F2FS-fs (loop0): invalid crc value [ 228.578538][ T3562] F2FS-fs (loop0): Found nat_bits in checkpoint [ 228.824750][ T3562] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 228.889747][ T3562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 229.281521][ T3587] overlayfs: failed to clone lowerpath [ 229.461002][ T3593] netlink: 208 bytes leftover after parsing attributes in process `syz.3.897'. [ 229.830899][ T3595] loop5: detected capacity change from 0 to 512 [ 229.935134][ T3595] ext4: Unknown parameter 'subj_type' [ 230.442484][ T290] EXT4-fs (loop2): unmounting filesystem. [ 230.485197][ T3605] loop2: detected capacity change from 0 to 512 [ 230.545504][ T308] kworker/u4:3: attempt to access beyond end of device [ 230.545504][ T308] loop0: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 230.562868][ T3458] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.615336][ T308] kworker/u4:3: attempt to access beyond end of device [ 230.615336][ T308] loop0: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 231.493569][ T308] kworker/u4:3: attempt to access beyond end of device [ 231.493569][ T308] loop0: rw=1, sector=49152, nr_sectors = 3872 limit=40427 [ 231.565566][ T308] kworker/u4:3: attempt to access beyond end of device [ 231.565566][ T308] loop0: rw=1, sector=53024, nr_sectors = 224 limit=40427 [ 231.638978][ T308] kworker/u4:3: attempt to access beyond end of device [ 231.638978][ T308] loop0: rw=1, sector=57344, nr_sectors = 4480 limit=40427 [ 231.844509][ T308] kworker/u4:3: attempt to access beyond end of device [ 231.844509][ T308] loop0: rw=1, sector=61824, nr_sectors = 56 limit=40427 [ 233.010440][ T3630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.910'. [ 233.055393][ T3632] overlayfs: failed to clone lowerpath [ 233.421921][ T3639] netlink: 208 bytes leftover after parsing attributes in process `syz.3.912'. [ 233.627938][ T3647] loop2: detected capacity change from 0 to 512 [ 233.759892][ T3647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 234.039150][ T3647] EXT4-fs (loop2): 1 truncate cleaned up [ 234.121854][ T3647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.351353][ T3644] loop5: detected capacity change from 0 to 40427 [ 234.515529][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 234.515554][ T28] audit: type=1400 audit(2000000040.207:989): avc: denied { getopt } for pid=3651 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 234.688255][ T3650] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.153210][ T3676] overlayfs: unrecognized mount option "/" or missing value [ 235.243310][ T28] audit: type=1400 audit(2000000040.937:990): avc: denied { accept } for pid=3679 comm="syz.5.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.311104][ T28] audit: type=1400 audit(2000000040.957:991): avc: denied { ioctl } for pid=3679 comm="syz.5.923" path="socket:[25541]" dev="sockfs" ino=25541 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.682165][ T3673] loop0: detected capacity change from 0 to 40427 [ 235.796418][ T3673] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 235.892712][ T3673] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 235.999434][ T3673] F2FS-fs (loop0): invalid crc value [ 236.152304][ T3673] F2FS-fs (loop0): Found nat_bits in checkpoint [ 236.502097][ T3673] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 236.597658][ T3673] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 236.907663][ T290] EXT4-fs (loop2): unmounting filesystem. [ 236.930035][ T3699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.926'. [ 236.944689][ T28] audit: type=1400 audit(2000000042.637:992): avc: denied { create } for pid=3698 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.976130][ T28] audit: type=1400 audit(2000000042.657:993): avc: denied { mount } for pid=3698 comm="syz.2.926" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 236.999438][ T28] audit: type=1400 audit(2000000042.657:994): avc: denied { bind } for pid=3698 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 237.038310][ T308] kworker/u4:3: attempt to access beyond end of device [ 237.038310][ T308] loop0: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 237.070810][ T308] kworker/u4:3: attempt to access beyond end of device [ 237.070810][ T308] loop0: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 237.085233][ T3701] loop5: detected capacity change from 0 to 512 [ 237.095261][ T308] kworker/u4:3: attempt to access beyond end of device [ 237.095261][ T308] loop0: rw=1, sector=49152, nr_sectors = 2512 limit=40427 [ 237.110036][ T3701] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 237.148926][ T3701] EXT4-fs (loop5): 1 truncate cleaned up [ 237.160139][ T3701] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 237.304038][ T3708] loop0: detected capacity change from 0 to 512 [ 237.690064][ T3710] 9pnet_fd: Insufficient options for proto=fd [ 238.583369][ T706] EXT4-fs (loop5): unmounting filesystem. [ 238.602047][ T28] audit: type=1400 audit(2000000044.297:995): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.660187][ T3720] overlayfs: unrecognized mount option "/" or missing value [ 238.674480][ T3719] overlayfs: failed to clone upperpath [ 238.689689][ T3719] device batadv_slave_0 entered promiscuous mode [ 238.712808][ T3717] device batadv_slave_0 left promiscuous mode [ 238.754199][ T3723] loop2: detected capacity change from 0 to 512 [ 241.322804][ T28] audit: type=1400 audit(2000000047.017:996): avc: denied { setopt } for pid=3748 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.342806][ T3749] netlink: 204 bytes leftover after parsing attributes in process `syz.0.940'. [ 241.409587][ T3742] loop5: detected capacity change from 0 to 40427 [ 241.420845][ T3751] loop0: detected capacity change from 0 to 512 [ 241.435722][ T3742] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 241.451884][ T3742] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 241.512034][ T3742] F2FS-fs (loop5): invalid crc value [ 241.601521][ T3742] F2FS-fs (loop5): Found nat_bits in checkpoint [ 241.607872][ T28] audit: type=1400 audit(2000000047.287:997): avc: denied { write } for pid=3758 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 241.658520][ T3762] loop0: detected capacity change from 0 to 512 [ 241.670386][ T28] audit: type=1400 audit(2000000047.357:998): avc: denied { read } for pid=3763 comm="syz.1.945" path="socket:[26654]" dev="sockfs" ino=26654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 241.745157][ T3742] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 241.757734][ T3742] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 241.826180][ T28] audit: type=1400 audit(2000000047.517:999): avc: denied { write } for pid=3763 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.861810][ T28] audit: type=1400 audit(2000000047.537:1000): avc: denied { read } for pid=3763 comm="syz.1.945" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.913387][ T3770] overlayfs: unrecognized mount option "/" or missing value [ 243.240930][ T3783] device batadv_slave_0 entered promiscuous mode [ 243.407315][ T3781] device batadv_slave_0 left promiscuous mode [ 243.860683][ T3785] device batadv_slave_0 entered promiscuous mode [ 243.868595][ T3784] device batadv_slave_0 left promiscuous mode [ 244.090319][ T3793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.360082][ T3796] overlayfs: failed to clone upperpath [ 244.380885][ T3796] device batadv_slave_0 entered promiscuous mode [ 244.399047][ T2933] kworker/u4:7: attempt to access beyond end of device [ 244.399047][ T2933] loop5: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 244.422576][ T2933] kworker/u4:7: attempt to access beyond end of device [ 244.422576][ T2933] loop5: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 244.426418][ T3795] device batadv_slave_0 left promiscuous mode [ 244.446109][ T2933] kworker/u4:7: attempt to access beyond end of device [ 244.446109][ T2933] loop5: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 244.463849][ T2933] kworker/u4:7: attempt to access beyond end of device [ 244.463849][ T2933] loop5: rw=1, sector=51200, nr_sectors = 1112 limit=40427 [ 244.465945][ T3802] loop0: detected capacity change from 0 to 512 [ 244.491838][ T3802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.499493][ T3802] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 244.511306][ T28] audit: type=1400 audit(2000000050.207:1001): avc: denied { mount } for pid=3803 comm="syz.3.961" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 244.536723][ T3802] EXT4-fs (loop0): 1 truncate cleaned up [ 244.544681][ T3802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 244.651892][ T1164] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 244.951789][ T3820] device batadv_slave_0 entered promiscuous mode [ 244.964225][ T1164] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 245.005801][ T3819] device batadv_slave_0 left promiscuous mode [ 245.013379][ T1164] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.072948][ T1164] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 245.082534][ T1164] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 245.091742][ T1164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.100740][ T1164] usb 3-1: config 0 descriptor?? [ 245.108220][ T1164] usb 3-1: Found UVC 9.00 device (046d:0825) [ 245.115329][ T1164] usb 3-1: No streaming interface found for terminal 2. [ 245.352645][ T288] EXT4-fs (loop0): unmounting filesystem. [ 245.445517][ T3833] tmpfs: Unknown parameter 'rootcontext' [ 245.452978][ T28] audit: type=1400 audit(2000000051.147:1002): avc: denied { watch watch_reads } for pid=3832 comm="syz.0.968" path="/188/control" dev="tmpfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 245.513776][ T3835] overlayfs: failed to clone lowerpath [ 245.531617][ T3833] loop0: detected capacity change from 0 to 256 [ 245.547411][ T3833] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2f7d533e, utbl_chksum : 0xe619d30d) [ 245.653044][ T3843] overlayfs: failed to clone upperpath [ 245.659413][ T3843] device batadv_slave_0 entered promiscuous mode [ 245.667026][ T3842] device batadv_slave_0 left promiscuous mode [ 247.871962][ T315] usb 3-1: USB disconnect, device number 8 [ 247.922057][ T3869] netlink: 208 bytes leftover after parsing attributes in process `syz.5.976'. [ 248.244209][ T3873] loop2: detected capacity change from 0 to 512 [ 248.330341][ T3873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 248.349614][ T3873] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.363604][ T3879] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 248.402858][ T3879] device batadv_slave_0 entered promiscuous mode [ 248.531873][ T3879] FAULT_INJECTION: forcing a failure. [ 248.531873][ T3879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.552031][ T3879] CPU: 1 PID: 3879 Comm: syz.0.979 Tainted: G W syzkaller #0 [ 248.560844][ T3879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 248.570928][ T3879] Call Trace: [ 248.574219][ T3879] [ 248.577192][ T3879] __dump_stack+0x21/0x24 [ 248.581551][ T3879] dump_stack_lvl+0x110/0x170 [ 248.586254][ T3879] ? __cfi_dump_stack_lvl+0x8/0x8 [ 248.591301][ T3879] dump_stack+0x15/0x24 [ 248.595470][ T3879] should_fail_ex+0x3bf/0x510 [ 248.600178][ T3879] should_fail+0xb/0x10 [ 248.604340][ T3879] should_fail_usercopy+0x1a/0x20 [ 248.609372][ T3879] _copy_from_user+0x1e/0xc0 [ 248.613971][ T3879] packet_setsockopt+0x8f6/0x1230 [ 248.619012][ T3879] ? __cfi_packet_setsockopt+0x10/0x10 [ 248.624482][ T3879] ? selinux_socket_setsockopt+0x282/0x360 [ 248.630299][ T3879] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 248.635404][ T3886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.636472][ T3879] ? __fget_files+0x2d1/0x330 [ 248.636506][ T3879] ? security_socket_setsockopt+0x93/0xb0 [ 248.654950][ T3879] ? __cfi_packet_setsockopt+0x10/0x10 [ 248.660444][ T3879] __sys_setsockopt+0x2ff/0x4e0 [ 248.665501][ T3879] ? __cfi___sys_setsockopt+0x10/0x10 [ 248.670957][ T3879] ? __this_cpu_preempt_check+0x13/0x20 [ 248.670991][ T3886] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.978: iget: bad i_size value: 2533274857506816 [ 248.676546][ T3879] ? xfd_validate_state+0x70/0x150 [ 248.676579][ T3879] ? __kasan_check_write+0x14/0x20 [ 248.699234][ T3879] ? fpregs_restore_userregs+0x128/0x260 [ 248.705020][ T3879] __x64_sys_setsockopt+0xbf/0xd0 [ 248.710102][ T3879] x64_sys_call+0x124/0x9a0 [ 248.714642][ T3879] do_syscall_64+0x4c/0xa0 [ 248.719081][ T3879] ? clear_bhb_loop+0x30/0x80 [ 248.723822][ T3879] ? clear_bhb_loop+0x30/0x80 [ 248.728533][ T3879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.734457][ T3879] RIP: 0033:0x7f1e5db9fb19 [ 248.738912][ T3879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.758537][ T3879] RSP: 002b:00007f1e5ea6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 248.766981][ T3879] RAX: ffffffffffffffda RBX: 00007f1e5de25fa0 RCX: 00007f1e5db9fb19 [ 248.774982][ T3879] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 248.782980][ T3879] RBP: 00007f1e5dc37b70 R08: 0000000000000010 R09: 0000000000000000 [ 248.790978][ T3879] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 248.799145][ T3879] R13: 00007f1e5de26038 R14: 00007f1e5de25fa0 R15: 00007fff9530e1f8 [ 248.807164][ T3879] [ 248.843887][ T3877] device batadv_slave_0 left promiscuous mode [ 248.877913][ T3890] device batadv_slave_0 entered promiscuous mode [ 248.952152][ T3887] device batadv_slave_0 left promiscuous mode [ 249.374317][ T290] EXT4-fs (loop2): unmounting filesystem. [ 250.352243][ T3907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.231710][ T3911] loop5: detected capacity change from 0 to 512 [ 251.286511][ T3916] loop2: detected capacity change from 0 to 512 [ 251.299678][ T3919] overlayfs: failed to clone lowerpath [ 251.456506][ T3916] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 252.493820][ T3929] netlink: 208 bytes leftover after parsing attributes in process `syz.3.994'. [ 252.739853][ T3931] loop5: detected capacity change from 0 to 512 [ 252.771323][ T3931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.799371][ T3931] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 252.840992][ T3931] EXT4-fs (loop5): 1 truncate cleaned up [ 252.847239][ T3931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 253.363734][ T3926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.995'. [ 253.863588][ T706] EXT4-fs (loop5): unmounting filesystem. [ 254.028389][ T3957] loop5: detected capacity change from 0 to 512 [ 254.129805][ T3957] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 254.259512][ T3957] EXT4-fs (loop5): 1 truncate cleaned up [ 254.366543][ T3957] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 255.176943][ T3968] overlayfs: failed to clone upperpath [ 255.217297][ T3968] device batadv_slave_0 entered promiscuous mode [ 255.532813][ T706] EXT4-fs (loop5): unmounting filesystem. [ 255.544286][ T3967] device batadv_slave_0 left promiscuous mode [ 255.699268][ T28] audit: type=1400 audit(2000000061.387:1003): avc: denied { create } for pid=3977 comm="syz.5.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 256.206761][ T28] audit: type=1400 audit(2000000061.897:1004): avc: denied { create } for pid=3987 comm="syz.5.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 256.621808][ T1164] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 256.812965][ T1164] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 256.831909][ T1164] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.858906][ T1164] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 256.877393][ T1164] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 256.891826][ T1164] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.921607][ T1164] usb 6-1: config 0 descriptor?? [ 256.928344][ T1164] usb 6-1: Found UVC 9.00 device (046d:0825) [ 256.945366][ T1164] usb 6-1: No streaming interface found for terminal 2. [ 257.054304][ T3999] loop0: detected capacity change from 0 to 512 [ 257.424524][ T4005] loop2: detected capacity change from 0 to 40427 [ 257.436473][ T4005] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 257.445209][ T4005] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 257.463132][ T4005] F2FS-fs (loop2): invalid crc value [ 257.470800][ T4005] F2FS-fs (loop2): Found nat_bits in checkpoint [ 257.511489][ T4005] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 257.518647][ T4005] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 257.762382][ T4014] xt_hashlimit: max too large, truncated to 1048576 [ 257.807401][ T417] kworker/u4:4: attempt to access beyond end of device [ 257.807401][ T417] loop2: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 257.849151][ T417] kworker/u4:4: attempt to access beyond end of device [ 257.849151][ T417] loop2: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 257.887401][ T417] kworker/u4:4: attempt to access beyond end of device [ 257.887401][ T417] loop2: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 257.918711][ T417] kworker/u4:4: attempt to access beyond end of device [ 257.918711][ T417] loop2: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 257.939558][ T417] kworker/u4:4: attempt to access beyond end of device [ 257.939558][ T417] loop2: rw=1, sector=57344, nr_sectors = 2048 limit=40427 [ 257.973507][ T417] kworker/u4:4: attempt to access beyond end of device [ 257.973507][ T417] loop2: rw=1, sector=59392, nr_sectors = 2064 limit=40427 [ 257.994576][ T417] kworker/u4:4: attempt to access beyond end of device [ 257.994576][ T417] loop2: rw=1, sector=61456, nr_sectors = 2048 limit=40427 [ 258.028570][ T417] kworker/u4:4: attempt to access beyond end of device [ 258.028570][ T417] loop2: rw=1, sector=63504, nr_sectors = 152 limit=40427 [ 258.188144][ T28] audit: type=1326 audit(2000000063.877:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.1021" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5db9fb19 code=0x7ffc0000 [ 258.291831][ T28] audit: type=1326 audit(2000000063.917:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.1021" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5db9fb19 code=0x7ffc0000 [ 258.351818][ T28] audit: type=1326 audit(2000000063.917:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.1021" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f1e5db9fb19 code=0x7ffc0000 [ 258.462657][ T28] audit: type=1326 audit(2000000063.917:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.1021" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5db9fb19 code=0x7ffc0000 [ 258.666715][ T28] audit: type=1326 audit(2000000063.917:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.1021" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5db9fb19 code=0x7ffc0000 [ 258.713914][ T28] audit: type=1326 audit(2000000063.917:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.1021" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e5db9fb19 code=0x7ffc0000 [ 258.747213][ T28] audit: type=1326 audit(2000000063.917:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.1021" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5db9fb19 code=0x7ffc0000 [ 258.772348][ T28] audit: type=1326 audit(2000000063.917:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4023 comm="syz.0.1021" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e5db9fb19 code=0x7ffc0000 [ 259.285178][ T4056] loop0: detected capacity change from 0 to 512 [ 259.947561][ T4063] loop5: detected capacity change from 0 to 512 [ 259.974394][ T4063] EXT4-fs (loop5): Test dummy encryption mode enabled [ 260.004035][ T4063] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 260.022131][ T1164] usb 6-1: USB disconnect, device number 8 [ 260.028814][ T4063] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.1032: bad orphan inode 131083 [ 260.042015][ T4063] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 260.118776][ T4071] loop0: detected capacity change from 0 to 512 [ 260.153663][ T4071] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 260.162996][ T4071] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.250295][ T4070] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.1033: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 260.449394][ T4070] EXT4-fs (loop0): Remounting filesystem read-only [ 261.173504][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 261.173518][ T28] audit: type=1400 audit(2000000066.867:1024): avc: denied { getopt } for pid=4085 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.212493][ T706] EXT4-fs (loop5): unmounting filesystem. [ 261.234016][ T4089] loop5: detected capacity change from 0 to 512 [ 261.252492][ T288] EXT4-fs (loop0): unmounting filesystem. [ 261.263854][ T4083] loop2: detected capacity change from 0 to 40427 [ 261.293106][ T4083] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 261.306789][ T4089] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1037: missing EA_INODE flag [ 261.319999][ T4096] loop0: detected capacity change from 0 to 16 [ 261.326826][ T4096] erofs: (device loop0): mounted with root inode @ nid 36. [ 261.334016][ T4089] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1037: error while reading EA inode 12 err=-117 [ 261.334256][ T4089] EXT4-fs (loop5): 1 orphan inode deleted [ 261.334277][ T4089] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 261.364079][ T4083] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 261.394697][ T4083] F2FS-fs (loop2): invalid crc value [ 261.420431][ T4083] F2FS-fs (loop2): Found nat_bits in checkpoint [ 261.431489][ T4096] tipc: Started in network mode [ 261.436575][ T4096] tipc: Node identity 4, cluster identity 4711 [ 261.442755][ T4096] tipc: Node number set to 4 [ 261.475850][ T4083] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 261.484650][ T4083] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 262.273207][ T28] audit: type=1400 audit(2000000067.967:1025): avc: denied { ioctl } for pid=4107 comm="syz.1.1040" path="socket:[28370]" dev="sockfs" ino=28370 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.443401][ T706] EXT4-fs (loop5): unmounting filesystem. [ 262.696089][ T4061] syz.3.1031 (4061) used greatest stack depth: 19584 bytes left [ 262.790681][ T4117] veth0_to_bridge: mtu less than device minimum [ 263.017733][ T4113] loop5: detected capacity change from 0 to 40427 [ 263.033090][ T4113] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 263.080890][ T4113] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 263.090032][ T4113] F2FS-fs (loop5): invalid crc value [ 263.097906][ T4113] F2FS-fs (loop5): Found nat_bits in checkpoint [ 263.137033][ T4113] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 263.144267][ T4113] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 263.503580][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.591891][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 263.606665][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.616986][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 263.648728][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.709833][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.747530][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.789635][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.825417][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.913747][ T4138] loop5: detected capacity change from 0 to 512 [ 263.985103][ T4138] EXT4-fs (loop5): Test dummy encryption mode enabled [ 263.998041][ T4138] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1048: inode has both inline data and extents flags [ 264.012911][ T4138] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1048: couldn't read orphan inode 15 (err -117) [ 264.025144][ T4138] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 264.036246][ T4138] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 264.054543][ T706] EXT4-fs (loop5): unmounting filesystem. [ 264.250526][ T4143] overlayfs: missing 'lowerdir' [ 264.344860][ T28] audit: type=1400 audit(2000000070.037:1026): avc: denied { name_bind } for pid=4144 comm="syz.3.1051" src=19971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 264.507490][ T4157] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1050'. [ 264.728057][ T28] audit: type=1400 audit(2000000070.417:1027): avc: denied { getattr } for pid=4145 comm="syz.2.1052" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=28415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 266.873583][ T4177] loop5: detected capacity change from 0 to 512 [ 268.244017][ T4202] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1062'. [ 269.453955][ T4221] overlayfs: missing 'lowerdir' [ 270.803888][ T4236] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1068'. [ 271.430863][ T4247] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 271.487808][ T4247] xt_hashlimit: size too large, truncated to 1048576 [ 271.496586][ T4250] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 271.538178][ T4250] device batadv_slave_0 entered promiscuous mode [ 271.568085][ T4250] FAULT_INJECTION: forcing a failure. [ 271.568085][ T4250] name failslab, interval 1, probability 0, space 0, times 0 [ 271.618197][ T4250] CPU: 1 PID: 4250 Comm: syz.5.1078 Tainted: G W syzkaller #0 [ 271.627098][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 271.637171][ T4250] Call Trace: [ 271.640458][ T4250] [ 271.643395][ T4250] __dump_stack+0x21/0x24 [ 271.647736][ T4250] dump_stack_lvl+0x110/0x170 [ 271.652426][ T4250] ? __cfi_dump_stack_lvl+0x8/0x8 [ 271.657501][ T4250] ? __kasan_check_read+0x11/0x20 [ 271.662546][ T4250] dump_stack+0x15/0x24 [ 271.666738][ T4250] should_fail_ex+0x3bf/0x510 [ 271.671469][ T4250] __should_failslab+0xac/0xf0 [ 271.676260][ T4250] should_failslab+0x9/0x20 [ 271.680774][ T4250] __kmem_cache_alloc_node+0x3d/0x2d0 [ 271.686167][ T4250] ? packet_mc_add+0x12d/0x930 [ 271.690965][ T4250] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 271.696696][ T4250] ? packet_mc_add+0x12d/0x930 [ 271.701473][ T4250] kmalloc_trace+0x29/0xb0 [ 271.705916][ T4250] packet_mc_add+0x12d/0x930 [ 271.710613][ T4250] packet_setsockopt+0xc4e/0x1230 [ 271.715651][ T4250] ? __cfi_packet_setsockopt+0x10/0x10 [ 271.721134][ T4250] ? proc_fail_nth_write+0x180/0x200 [ 271.726448][ T4250] ? selinux_socket_setsockopt+0x282/0x360 [ 271.732285][ T4250] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 271.738585][ T4250] ? __fget_files+0x2d1/0x330 [ 271.743655][ T4250] ? security_socket_setsockopt+0x93/0xb0 [ 271.749413][ T4250] ? __cfi_packet_setsockopt+0x10/0x10 [ 271.754894][ T4250] __sys_setsockopt+0x2ff/0x4e0 [ 271.759777][ T4250] ? __cfi___sys_setsockopt+0x10/0x10 [ 271.765272][ T4250] ? __this_cpu_preempt_check+0x13/0x20 [ 271.770856][ T4250] ? xfd_validate_state+0x70/0x150 [ 271.775990][ T4250] ? __kasan_check_write+0x14/0x20 [ 271.781109][ T4250] ? fpregs_restore_userregs+0x128/0x260 [ 271.786759][ T4250] __x64_sys_setsockopt+0xbf/0xd0 [ 271.791819][ T4250] x64_sys_call+0x124/0x9a0 [ 271.796344][ T4250] do_syscall_64+0x4c/0xa0 [ 271.800766][ T4250] ? clear_bhb_loop+0x30/0x80 [ 271.805462][ T4250] ? clear_bhb_loop+0x30/0x80 [ 271.810154][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.816067][ T4250] RIP: 0033:0x7f786e39fb19 [ 271.820491][ T4250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.840101][ T4250] RSP: 002b:00007f786f1f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.848552][ T4250] RAX: ffffffffffffffda RBX: 00007f786e625fa0 RCX: 00007f786e39fb19 [ 271.856541][ T4250] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 271.864514][ T4250] RBP: 00007f786e437b70 R08: 0000000000000010 R09: 0000000000000000 [ 271.872495][ T4250] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 271.880479][ T4250] R13: 00007f786e626038 R14: 00007f786e625fa0 R15: 00007ffd35452098 [ 271.888474][ T4250] [ 272.317940][ T4249] device batadv_slave_0 left promiscuous mode [ 274.056646][ T4283] device syzkaller0 entered promiscuous mode [ 274.119618][ T4293] loop2: detected capacity change from 0 to 512 [ 274.231849][ T4300] overlayfs: failed to clone lowerpath [ 274.341830][ T1164] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 274.544337][ T1164] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 274.561816][ T1164] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.578568][ T1164] usb 6-1: Product: syz [ 274.588285][ T1164] usb 6-1: Manufacturer: syz [ 274.610315][ T1164] usb 6-1: SerialNumber: syz [ 274.851172][ T1164] usb 6-1: unknown interface protocol 0xf, assuming v1 [ 274.864675][ T1164] usb 6-1: cannot find UAC_HEADER [ 274.888250][ T1164] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 274.908420][ T1164] usb 6-1: USB disconnect, device number 9 [ 275.177617][ T4288] udevd[4288]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 276.698771][ T4333] xt_hashlimit: max too large, truncated to 1048576 [ 277.657325][ T4340] overlayfs: failed to clone lowerpath [ 277.757023][ T4339] loop5: detected capacity change from 0 to 8192 [ 277.844044][ T4339] loop5: p1 < > p3 < p5 > p4 [ 277.852767][ T4339] loop5: p4 size 3081 extends beyond EOD, truncated [ 277.879603][ T4339] loop5: p5 size 3081 extends beyond EOD, truncated [ 278.262304][ T4344] loop0: detected capacity change from 0 to 40427 [ 278.272526][ T315] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 278.285986][ T4344] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 278.307310][ T4344] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 278.471945][ T4344] F2FS-fs (loop0): invalid crc value [ 278.556473][ T4344] F2FS-fs (loop0): Found nat_bits in checkpoint [ 278.731871][ T315] usb 6-1: Using ep0 maxpacket: 32 [ 278.738579][ T315] usb 6-1: config 4 has an invalid interface number: 237 but max is 0 [ 278.747170][ T4344] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 278.754360][ T315] usb 6-1: config 4 has no interface number 0 [ 278.757916][ T4344] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 278.770263][ T315] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 278.790892][ T315] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 278.826557][ T315] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 278.851802][ T315] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 278.871809][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 278.898452][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 278.916074][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 278.927843][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 278.938812][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 278.949970][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 278.960889][ T315] usb 6-1: config 4 interface 237 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 278.971833][ T315] usb 6-1: config 4 interface 237 has no altsetting 0 [ 278.986146][ T315] usb 6-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=cb.e6 [ 279.013864][ T315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.037176][ T315] usb 6-1: Product: syz [ 279.041558][ T315] usb 6-1: Manufacturer: 﫥꩛⨭모솟덺礮䭭ﴒ搶揪脁ἵक़鵁퀂➶랯ϓꢃ㒳猶췚ਜ球９◎✲뾐딚솾老餠퇾䙅赜酆쒊ꀪ﫯畿 [ 279.077001][ T315] usb 6-1: SerialNumber: syz [ 279.294094][ T4352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.308120][ T4352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.318618][ T4374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1113'. [ 279.352622][ T315] ftdi_sio 6-1:4.237: FTDI USB Serial Device converter detected [ 279.372292][ T315] ftdi_sio ttyUSB0: unknown device type: 0xcbe6 [ 279.400210][ T315] usb 6-1: USB disconnect, device number 10 [ 279.417759][ T315] ftdi_sio 6-1:4.237: device disconnected [ 279.456334][ T4371] loop0: detected capacity change from 0 to 40427 [ 279.471267][ T4371] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 279.485369][ T4371] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 279.502149][ T4371] F2FS-fs (loop0): invalid crc value [ 279.517570][ T4371] F2FS-fs (loop0): Found nat_bits in checkpoint [ 279.554330][ T4371] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 279.561470][ T4371] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 279.864263][ T4385] loop2: detected capacity change from 0 to 512 [ 280.467637][ T4392] xt_hashlimit: max too large, truncated to 1048576 [ 280.494519][ T4396] device-mapper: table: 252:3: snapshot: Cannot get COW device (-ENODEV) [ 280.503476][ T4396] device-mapper: ioctl: error adding target to table [ 280.631053][ T28] audit: type=1400 audit(2000000086.317:1028): avc: denied { create } for pid=4400 comm="syz.3.1120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 280.632329][ T4401] netlink: 'syz.3.1120': attribute type 3 has an invalid length. [ 280.714732][ T4401] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1120'. [ 280.741101][ T28] audit: type=1400 audit(2000000086.427:1029): avc: denied { accept } for pid=4400 comm="syz.3.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 280.770396][ T28] audit: type=1400 audit(2000000086.457:1030): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 280.860534][ T4414] loop0: detected capacity change from 0 to 512 [ 281.013117][ T4404] loop5: detected capacity change from 0 to 40427 [ 281.030598][ T4404] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 281.043784][ T4404] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 281.067292][ T4404] F2FS-fs (loop5): invalid crc value [ 281.074523][ T4404] F2FS-fs (loop5): Found nat_bits in checkpoint [ 281.113087][ T4404] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 281.120251][ T4404] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 281.294143][ T4423] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 281.304316][ T4423] device batadv_slave_0 entered promiscuous mode [ 281.311000][ T4423] FAULT_INJECTION: forcing a failure. [ 281.311000][ T4423] name failslab, interval 1, probability 0, space 0, times 0 [ 281.324272][ T4423] CPU: 0 PID: 4423 Comm: syz.5.1126 Tainted: G W syzkaller #0 [ 281.333156][ T4423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 281.343228][ T4423] Call Trace: [ 281.346516][ T4423] [ 281.349456][ T4423] __dump_stack+0x21/0x24 [ 281.353806][ T4423] dump_stack_lvl+0x110/0x170 [ 281.358497][ T4423] ? __cfi_dump_stack_lvl+0x8/0x8 [ 281.363537][ T4423] ? __kasan_check_read+0x11/0x20 [ 281.368581][ T4423] dump_stack+0x15/0x24 [ 281.372748][ T4423] should_fail_ex+0x3bf/0x510 [ 281.377437][ T4423] __should_failslab+0xac/0xf0 [ 281.382224][ T4423] should_failslab+0x9/0x20 [ 281.386761][ T4423] __kmem_cache_alloc_node+0x3d/0x2d0 [ 281.392155][ T4423] ? packet_mc_add+0x12d/0x930 [ 281.396929][ T4423] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 281.402665][ T4423] ? packet_mc_add+0x12d/0x930 [ 281.407445][ T4423] kmalloc_trace+0x29/0xb0 [ 281.411871][ T4423] packet_mc_add+0x12d/0x930 [ 281.416477][ T4423] packet_setsockopt+0xc4e/0x1230 [ 281.421520][ T4423] ? __cfi_packet_setsockopt+0x10/0x10 [ 281.427022][ T4423] ? proc_fail_nth_write+0x180/0x200 [ 281.432327][ T4423] ? selinux_socket_setsockopt+0x282/0x360 [ 281.438153][ T4423] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 281.444330][ T4423] ? __fget_files+0x2d1/0x330 [ 281.449047][ T4423] ? security_socket_setsockopt+0x93/0xb0 [ 281.454799][ T4423] ? __cfi_packet_setsockopt+0x10/0x10 [ 281.460282][ T4423] __sys_setsockopt+0x2ff/0x4e0 [ 281.465166][ T4423] ? __cfi___sys_setsockopt+0x10/0x10 [ 281.470560][ T4423] ? __this_cpu_preempt_check+0x13/0x20 [ 281.476134][ T4423] ? xfd_validate_state+0x70/0x150 [ 281.481290][ T4423] ? __kasan_check_write+0x14/0x20 [ 281.486430][ T4423] ? fpregs_restore_userregs+0x128/0x260 [ 281.492092][ T4423] __x64_sys_setsockopt+0xbf/0xd0 [ 281.497149][ T4423] x64_sys_call+0x124/0x9a0 [ 281.501672][ T4423] do_syscall_64+0x4c/0xa0 [ 281.506098][ T4423] ? clear_bhb_loop+0x30/0x80 [ 281.510792][ T4423] ? clear_bhb_loop+0x30/0x80 [ 281.515488][ T4423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.521407][ T4423] RIP: 0033:0x7f786e39fb19 [ 281.525841][ T4423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.545476][ T4423] RSP: 002b:00007f786f1f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.553917][ T4423] RAX: ffffffffffffffda RBX: 00007f786e625fa0 RCX: 00007f786e39fb19 [ 281.561909][ T4423] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 281.569984][ T4423] RBP: 00007f786e437b70 R08: 0000000000000010 R09: 0000000000000000 [ 281.577982][ T4423] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 281.585970][ T4423] R13: 00007f786e626038 R14: 00007f786e625fa0 R15: 00007ffd35452098 [ 281.593964][ T4423] [ 281.655390][ T4422] device batadv_slave_0 left promiscuous mode [ 281.753454][ T4436] xt_hashlimit: max too large, truncated to 1048576 [ 282.023735][ T4437] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1128'. [ 282.147993][ T4444] loop0: detected capacity change from 0 to 512 [ 282.167693][ T4444] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 282.184322][ T4444] EXT4-fs (loop0): 1 truncate cleaned up [ 282.190145][ T4444] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 282.313663][ T4426] loop2: detected capacity change from 0 to 40427 [ 282.320749][ T4426] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 282.328727][ T4426] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 282.337639][ T4426] F2FS-fs (loop2): invalid crc value [ 282.346696][ T4426] F2FS-fs (loop2): Found nat_bits in checkpoint [ 282.401379][ T4426] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 282.408597][ T4426] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 283.049185][ T4468] loop2: detected capacity change from 0 to 512 [ 284.032541][ T4476] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 284.084287][ T4476] device batadv_slave_0 entered promiscuous mode [ 284.118564][ T4476] FAULT_INJECTION: forcing a failure. [ 284.118564][ T4476] name failslab, interval 1, probability 0, space 0, times 0 [ 284.168627][ T4476] CPU: 1 PID: 4476 Comm: syz.5.1139 Tainted: G W syzkaller #0 [ 284.177529][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 284.187688][ T4476] Call Trace: [ 284.191001][ T4476] [ 284.193933][ T4476] __dump_stack+0x21/0x24 [ 284.198277][ T4476] dump_stack_lvl+0x110/0x170 [ 284.202971][ T4476] ? __cfi_dump_stack_lvl+0x8/0x8 [ 284.208010][ T4476] ? unwind_get_return_address+0x4d/0x90 [ 284.213677][ T4476] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 284.219852][ T4476] dump_stack+0x15/0x24 [ 284.224015][ T4476] should_fail_ex+0x3bf/0x510 [ 284.228698][ T4476] __should_failslab+0xac/0xf0 [ 284.233475][ T4476] should_failslab+0x9/0x20 [ 284.237984][ T4476] kmem_cache_alloc_node+0x42/0x330 [ 284.243214][ T4476] ? __alloc_skb+0xe8/0x4a0 [ 284.247727][ T4476] __alloc_skb+0xe8/0x4a0 [ 284.252072][ T4476] rtmsg_ifinfo_build_skb+0x75/0x180 [ 284.257376][ T4476] rtmsg_ifinfo+0x7a/0x130 [ 284.261809][ T4476] __dev_notify_flags+0xe0/0x5b0 [ 284.266772][ T4476] ? __cfi___dev_notify_flags+0x10/0x10 [ 284.272355][ T4476] ? __kasan_check_read+0x11/0x20 [ 284.277407][ T4476] __dev_set_promiscuity+0x184/0x5e0 [ 284.282732][ T4476] dev_set_promiscuity+0x4d/0x100 [ 284.287777][ T4476] packet_mc_add+0x613/0x930 [ 284.292388][ T4476] packet_setsockopt+0xc4e/0x1230 [ 284.297422][ T4476] ? __cfi_packet_setsockopt+0x10/0x10 [ 284.302901][ T4476] ? selinux_socket_setsockopt+0x282/0x360 [ 284.308752][ T4476] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 284.314928][ T4476] ? __fget_files+0x2d1/0x330 [ 284.319657][ T4476] ? security_socket_setsockopt+0x93/0xb0 [ 284.325438][ T4476] ? __cfi_packet_setsockopt+0x10/0x10 [ 284.330931][ T4476] __sys_setsockopt+0x2ff/0x4e0 [ 284.335806][ T4476] ? __cfi___sys_setsockopt+0x10/0x10 [ 284.341203][ T4476] ? __this_cpu_preempt_check+0x13/0x20 [ 284.346774][ T4476] ? xfd_validate_state+0x70/0x150 [ 284.351899][ T4476] ? __kasan_check_write+0x14/0x20 [ 284.357029][ T4476] ? fpregs_restore_userregs+0x128/0x260 [ 284.362685][ T4476] __x64_sys_setsockopt+0xbf/0xd0 [ 284.367742][ T4476] x64_sys_call+0x124/0x9a0 [ 284.372259][ T4476] do_syscall_64+0x4c/0xa0 [ 284.376682][ T4476] ? clear_bhb_loop+0x30/0x80 [ 284.381373][ T4476] ? clear_bhb_loop+0x30/0x80 [ 284.386056][ T4476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.391967][ T4476] RIP: 0033:0x7f786e39fb19 [ 284.396390][ T4476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.416010][ T4476] RSP: 002b:00007f786f1f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.424448][ T4476] RAX: ffffffffffffffda RBX: 00007f786e625fa0 RCX: 00007f786e39fb19 [ 284.432434][ T4476] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 284.440410][ T4476] RBP: 00007f786e437b70 R08: 0000000000000010 R09: 0000000000000000 [ 284.448391][ T4476] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 284.456463][ T4476] R13: 00007f786e626038 R14: 00007f786e625fa0 R15: 00007ffd35452098 [ 284.464458][ T4476] [ 284.500019][ T4475] device batadv_slave_0 left promiscuous mode [ 284.572998][ T4489] veth0_to_bridge: mtu less than device minimum [ 284.829416][ T288] EXT4-fs (loop0): unmounting filesystem. [ 285.020975][ T4493] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1145'. [ 285.528509][ T4500] ./dev/sda1: Can't open blockdev [ 285.663655][ T4511] loop5: detected capacity change from 0 to 512 [ 285.941026][ T4511] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 286.007094][ T4516] loop0: detected capacity change from 0 to 512 [ 286.017714][ T4511] EXT4-fs (loop5): 1 truncate cleaned up [ 286.029539][ T4511] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 286.042488][ T4288] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 286.135657][ T4511] 9pnet_fd: Insufficient options for proto=fd [ 286.175423][ T706] EXT4-fs (loop5): unmounting filesystem. [ 286.214621][ T4524] loop5: detected capacity change from 0 to 512 [ 286.242105][ T4524] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 286.269277][ T4524] EXT4-fs (loop5): 1 truncate cleaned up [ 286.279615][ T4524] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 286.321817][ T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 286.511868][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 286.528024][ T6] usb 3-1: config 4 has an invalid interface number: 237 but max is 0 [ 286.557517][ T6] usb 3-1: config 4 has no interface number 0 [ 286.582000][ T6] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 286.609734][ T6] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 286.630951][ T6] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 286.655033][ T6] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 286.677196][ T6] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 286.710105][ T6] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 286.738319][ T6] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 286.766504][ T6] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 286.796761][ T6] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 286.834783][ T6] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 286.871559][ T6] usb 3-1: config 4 interface 237 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 286.907224][ T6] usb 3-1: config 4 interface 237 has no altsetting 0 [ 286.922189][ T6] usb 3-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=cb.e6 [ 286.938860][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.953478][ T6] usb 3-1: Product: syz [ 286.960972][ T6] usb 3-1: Manufacturer: 﫥꩛⨭모솟덺礮䭭ﴒ搶揪脁ἵक़鵁퀂➶랯ϓꢃ㒳猶췚ਜ球９◎✲뾐딚솾老餠퇾䙅赜酆쒊ꀪ﫯畿 [ 287.031810][ T6] usb 3-1: SerialNumber: syz [ 287.250135][ T4519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.269337][ T4519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.317196][ T6] ftdi_sio 3-1:4.237: FTDI USB Serial Device converter detected [ 287.334064][ T6] ftdi_sio ttyUSB0: unknown device type: 0xcbe6 [ 287.364863][ T6] usb 3-1: USB disconnect, device number 9 [ 287.381025][ T6] ftdi_sio 3-1:4.237: device disconnected [ 288.170071][ T706] EXT4-fs (loop5): unmounting filesystem. [ 288.186966][ T4543] loop0: detected capacity change from 0 to 512 [ 288.873909][ T4556] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 288.883935][ T28] audit: type=1400 audit(2000000094.577:1031): avc: denied { relabelto } for pid=4555 comm="syz.2.1163" name="file0" dev="tmpfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0" [ 288.887497][ T4556] overlayfs: './file0' not a directory [ 288.912622][ T28] audit: type=1400 audit(2000000094.577:1032): avc: denied { associate } for pid=4555 comm="syz.2.1163" name="file0" dev="tmpfs" ino=1241 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:logrotate_exec_t:s0" [ 288.955257][ T28] audit: type=1400 audit(2000000094.637:1033): avc: denied { create } for pid=4555 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 288.976536][ T28] audit: type=1400 audit(2000000094.637:1034): avc: denied { getopt } for pid=4555 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 288.996908][ T28] audit: type=1400 audit(2000000094.647:1035): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0" [ 289.063683][ T28] audit: type=1326 audit(2000000094.757:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.1166" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e5db9fb19 code=0x0 [ 289.415589][ T4571] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1168'. [ 289.425543][ T28] audit: type=1400 audit(2000000095.117:1037): avc: denied { read } for pid=4570 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.485536][ T4574] veth0_to_bridge: mtu less than device minimum [ 289.520425][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.661838][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 289.680416][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.757067][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 289.859771][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.072356][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.098304][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.130225][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.162976][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.196544][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 290.228167][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 290.383024][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 290.410035][ T28] audit: type=1400 audit(2000000096.097:1038): avc: denied { write } for pid=4583 comm="syz.5.1171" name="config" dev="proc" ino=4026533024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 290.544793][ T28] audit: type=1400 audit(2000000096.237:1039): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 290.602859][ T6] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 290.621826][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.645108][ T6] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 290.664660][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 290.705097][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.725606][ T6] usb 3-1: config 0 descriptor?? [ 290.747146][ T6] usb 3-1: Found UVC 9.00 device (046d:0825) [ 291.134547][ T6] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 291.157723][ T4594] loop0: detected capacity change from 0 to 40427 [ 291.172472][ T4594] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 291.189323][ T4594] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 291.198103][ T4594] F2FS-fs (loop0): invalid crc value [ 291.204967][ T4594] F2FS-fs (loop0): Found nat_bits in checkpoint [ 291.252030][ T4594] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 291.266688][ T4594] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 291.502461][ T6] uvcvideo 3-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 291.513788][ T6] uvcvideo 3-1:0.1: Failed to initialize the device (-5). [ 291.528562][ T6] usb 3-1: USB disconnect, device number 10 [ 291.657931][ T308] kworker/u4:3: attempt to access beyond end of device [ 291.657931][ T308] loop0: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 291.697430][ T308] kworker/u4:3: attempt to access beyond end of device [ 291.697430][ T308] loop0: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 291.741707][ T308] kworker/u4:3: attempt to access beyond end of device [ 291.741707][ T308] loop0: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 291.779714][ T308] kworker/u4:3: attempt to access beyond end of device [ 291.779714][ T308] loop0: rw=1, sector=51200, nr_sectors = 1016 limit=40427 [ 291.821650][ T4607] loop5: detected capacity change from 0 to 40427 [ 291.891099][ T4607] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 291.898990][ T4607] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 291.915539][ T4607] F2FS-fs (loop5): invalid crc value [ 291.958267][ T4607] F2FS-fs (loop5): Found nat_bits in checkpoint [ 292.145615][ T4607] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 292.215991][ T4607] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 292.279370][ T4626] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 292.312668][ T4626] device batadv_slave_0 entered promiscuous mode [ 292.327415][ T4626] FAULT_INJECTION: forcing a failure. [ 292.327415][ T4626] name fail_futex, interval 1, probability 0, space 0, times 1 [ 292.386161][ T4626] CPU: 0 PID: 4626 Comm: syz.2.1181 Tainted: G W syzkaller #0 [ 292.395063][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 292.405145][ T4626] Call Trace: [ 292.408446][ T4626] [ 292.411388][ T4626] __dump_stack+0x21/0x24 [ 292.415737][ T4626] dump_stack_lvl+0x110/0x170 [ 292.420427][ T4626] ? __cfi_dump_stack_lvl+0x8/0x8 [ 292.425467][ T4626] ? resched_curr+0x1c5/0x3a0 [ 292.430160][ T4626] ? __cfi_resched_curr+0x10/0x10 [ 292.435218][ T4626] dump_stack+0x15/0x24 [ 292.439403][ T4626] should_fail_ex+0x3bf/0x510 [ 292.444107][ T4626] should_fail+0xb/0x10 [ 292.448280][ T4626] get_futex_key+0x143/0xb10 [ 292.452920][ T4626] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 292.459788][ T4626] ? __cfi_get_futex_key+0x10/0x10 [ 292.464993][ T4626] ? probe_sched_wakeup+0x71/0x90 [ 292.470253][ T4626] ? ttwu_do_wakeup+0x468/0x490 [ 292.475146][ T4626] futex_wait_setup+0xb8/0x260 [ 292.479956][ T4626] ? __cfi_futex_wait_setup+0x10/0x10 [ 292.485453][ T4626] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 292.491288][ T4626] ? futex_setup_timer+0xb0/0xc0 [ 292.496266][ T4626] futex_wait+0x1ce/0x900 [ 292.500627][ T4626] ? __cfi_futex_wait+0x10/0x10 [ 292.505513][ T4626] ? __cfi_futex_wake+0x10/0x10 [ 292.510394][ T4626] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 292.516580][ T4626] do_futex+0x2e2/0x430 [ 292.520771][ T4626] ? __cfi_do_futex+0x10/0x10 [ 292.525479][ T4626] __se_sys_futex+0x136/0x310 [ 292.530178][ T4626] ? __x64_sys_futex+0x100/0x100 [ 292.535142][ T4626] ? xfd_validate_state+0x70/0x150 [ 292.540387][ T4626] __x64_sys_futex+0xe5/0x100 [ 292.545116][ T4626] x64_sys_call+0x7ec/0x9a0 [ 292.549656][ T4626] do_syscall_64+0x4c/0xa0 [ 292.554095][ T4626] ? clear_bhb_loop+0x30/0x80 [ 292.558804][ T4626] ? clear_bhb_loop+0x30/0x80 [ 292.563540][ T4626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.569461][ T4626] RIP: 0033:0x7fbe76f9fb19 [ 292.573900][ T4626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.593526][ T4626] RSP: 002b:00007fbe77f1c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 292.601965][ T4626] RAX: ffffffffffffffda RBX: 00007fbe77225fa8 RCX: 00007fbe76f9fb19 [ 292.609950][ T4626] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbe77225fa8 [ 292.617942][ T4626] RBP: 00007fbe77225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 292.625936][ T4626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.633997][ T4626] R13: 00007fbe77226038 R14: 00007ffc8be146c0 R15: 00007ffc8be147a8 [ 292.641984][ T4626] [ 292.692456][ T4625] device batadv_slave_0 left promiscuous mode [ 292.723928][ T4632] overlayfs: failed to clone upperpath [ 292.736601][ T4632] device batadv_slave_0 entered promiscuous mode [ 292.753213][ T4631] device batadv_slave_0 left promiscuous mode [ 292.795999][ T10] kworker/u4:1: attempt to access beyond end of device [ 292.795999][ T10] loop5: rw=1, sector=77824, nr_sectors = 2096 limit=40427 [ 292.832318][ T4638] xt_hashlimit: max too large, truncated to 1048576 [ 292.844301][ T10] kworker/u4:1: attempt to access beyond end of device [ 292.844301][ T10] loop5: rw=1, sector=79920, nr_sectors = 2000 limit=40427 [ 292.902554][ T10] kworker/u4:1: attempt to access beyond end of device [ 292.902554][ T10] loop5: rw=1, sector=49152, nr_sectors = 1192 limit=40427 [ 294.606987][ T4669] loop2: detected capacity change from 0 to 512 [ 294.682431][ T4288] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 295.081132][ T4676] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 295.209333][ T4676] device batadv_slave_0 entered promiscuous mode [ 295.300532][ T4674] device batadv_slave_0 left promiscuous mode [ 295.370956][ T4676] FAULT_INJECTION: forcing a failure. [ 295.370956][ T4676] name fail_futex, interval 1, probability 0, space 0, times 0 [ 295.533929][ T4676] CPU: 1 PID: 4676 Comm: syz.0.1197 Tainted: G W syzkaller #0 [ 295.542835][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 295.552905][ T4676] Call Trace: [ 295.556190][ T4676] [ 295.559150][ T4676] __dump_stack+0x21/0x24 [ 295.563498][ T4676] dump_stack_lvl+0x110/0x170 [ 295.568190][ T4676] ? __cfi_dump_stack_lvl+0x8/0x8 [ 295.573228][ T4676] dump_stack+0x15/0x24 [ 295.577398][ T4676] should_fail_ex+0x3bf/0x510 [ 295.582094][ T4676] should_fail+0xb/0x10 [ 295.586271][ T4676] get_futex_key+0x170/0xb10 [ 295.590900][ T4676] ? __schedule+0xcbb/0x1700 [ 295.595514][ T4676] ? __cfi_get_futex_key+0x10/0x10 [ 295.600642][ T4676] ? release_firmware_map_entry+0x190/0x190 [ 295.606630][ T4676] futex_wake+0x150/0x8e0 [ 295.611057][ T4676] ? __kasan_check_read+0x11/0x20 [ 295.616094][ T4676] ? preempt_schedule_irq+0xca/0x120 [ 295.621395][ T4676] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 295.627122][ T4676] ? __cfi_futex_wake+0x10/0x10 [ 295.631988][ T4676] ? __schedule+0xcbb/0x1700 [ 295.636618][ T4676] ? sysvec_reschedule_ipi+0x78/0x80 [ 295.641922][ T4676] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 295.647570][ T4676] do_futex+0x2bf/0x430 [ 295.651739][ T4676] ? __cfi_do_futex+0x10/0x10 [ 295.656430][ T4676] ? __kasan_check_write+0x14/0x20 [ 295.661553][ T4676] mm_release+0x195/0x2d0 [ 295.665901][ T4676] ? exit_mm_release+0x30/0x30 [ 295.670693][ T4676] ? futex_exit_release+0x119/0x1e0 [ 295.675919][ T4676] exit_mm_release+0x25/0x30 [ 295.680535][ T4676] do_exit+0x8de/0x29f0 [ 295.684707][ T4676] ? __schedule+0xcbb/0x1700 [ 295.689310][ T4676] ? __cfi_do_exit+0x10/0x10 [ 295.693930][ T4676] ? plist_check_list+0x255/0x270 [ 295.698976][ T4676] ? _raw_spin_lock+0x94/0xf0 [ 295.703675][ T4676] ? __kasan_check_write+0x14/0x20 [ 295.708910][ T4676] ? _raw_spin_lock_irq+0x95/0xf0 [ 295.713944][ T4676] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 295.719516][ T4676] do_group_exit+0x21b/0x2e0 [ 295.724124][ T4676] ? __kasan_check_write+0x14/0x20 [ 295.729264][ T4676] ? recalc_sigpending+0x168/0x1c0 [ 295.734403][ T4676] get_signal+0x167c/0x1700 [ 295.738932][ T4676] ? __cfi_get_signal+0x10/0x10 [ 295.743805][ T4676] ? __switch_to+0x56f/0x1070 [ 295.748496][ T4676] arch_do_signal_or_restart+0xd1/0x11c0 [ 295.754136][ T4676] ? __this_cpu_preempt_check+0x13/0x20 [ 295.759694][ T4676] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 295.766387][ T4676] ? probe_sched_switch+0x63/0x90 [ 295.771420][ T4676] ? _raw_spin_unlock+0x4c/0x70 [ 295.776282][ T4676] ? finish_task_switch+0x16b/0x7c0 [ 295.781506][ T4676] ? switch_mm_irqs_off+0x724/0x960 [ 295.786725][ T4676] ? __schedule+0xcbb/0x1700 [ 295.791321][ T4676] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 295.797486][ T4676] ? __kasan_check_read+0x11/0x20 [ 295.802518][ T4676] exit_to_user_mode_loop+0x7a/0xb0 [ 295.807726][ T4676] exit_to_user_mode_prepare+0x87/0xd0 [ 295.813194][ T4676] syscall_exit_to_user_mode+0x1a/0x30 [ 295.818664][ T4676] do_syscall_64+0x58/0xa0 [ 295.823092][ T4676] ? clear_bhb_loop+0x30/0x80 [ 295.827872][ T4676] ? clear_bhb_loop+0x30/0x80 [ 295.832588][ T4676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.838499][ T4676] RIP: 0033:0x7f1e5db9fb19 [ 295.842933][ T4676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.862549][ T4676] RSP: 002b:00007f1e5ea6b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 295.870977][ T4676] RAX: fffffffffffffe00 RBX: 00007f1e5de25fa8 RCX: 00007f1e5db9fb19 [ 295.878967][ T4676] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e5de25fa8 [ 295.886948][ T4676] RBP: 00007f1e5de25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 295.894930][ T4676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.902908][ T4676] R13: 00007f1e5de26038 R14: 00007fff9530e110 R15: 00007fff9530e1f8 [ 295.910896][ T4676] [ 296.242368][ T4687] loop2: detected capacity change from 0 to 512 [ 296.498496][ T4691] overlayfs: failed to clone upperpath [ 296.504964][ T4691] device batadv_slave_0 entered promiscuous mode [ 296.513012][ T4690] device batadv_slave_0 left promiscuous mode [ 297.193301][ T4709] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 297.203480][ T4709] device batadv_slave_0 entered promiscuous mode [ 297.209982][ T4709] FAULT_INJECTION: forcing a failure. [ 297.209982][ T4709] name fail_futex, interval 1, probability 0, space 0, times 0 [ 297.223077][ T4709] CPU: 1 PID: 4709 Comm: syz.2.1209 Tainted: G W syzkaller #0 [ 297.231955][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 297.242072][ T4709] Call Trace: [ 297.245395][ T4709] [ 297.248337][ T4709] __dump_stack+0x21/0x24 [ 297.252702][ T4709] dump_stack_lvl+0x110/0x170 [ 297.257375][ T4709] ? __cfi_dump_stack_lvl+0x8/0x8 [ 297.262425][ T4709] dump_stack+0x15/0x24 [ 297.266636][ T4709] should_fail_ex+0x3bf/0x510 [ 297.271326][ T4709] should_fail+0xb/0x10 [ 297.275480][ T4709] get_futex_key+0x143/0xb10 [ 297.280098][ T4709] ? __cfi_get_futex_key+0x10/0x10 [ 297.285242][ T4709] ? ttwu_queue_wakelist+0x307/0x4d0 [ 297.290534][ T4709] futex_wait_setup+0xb8/0x260 [ 297.295306][ T4709] ? __cfi_futex_wait_setup+0x10/0x10 [ 297.300714][ T4709] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 297.306559][ T4709] ? futex_setup_timer+0xb0/0xc0 [ 297.311564][ T4709] futex_wait+0x1ce/0x900 [ 297.315931][ T4709] ? __cfi_futex_wait+0x10/0x10 [ 297.320818][ T4709] ? __cfi_futex_wake+0x10/0x10 [ 297.325697][ T4709] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 297.331882][ T4709] do_futex+0x2e2/0x430 [ 297.336054][ T4709] ? __cfi_do_futex+0x10/0x10 [ 297.340748][ T4709] __se_sys_futex+0x136/0x310 [ 297.345471][ T4709] ? __x64_sys_futex+0x100/0x100 [ 297.350426][ T4709] ? xfd_validate_state+0x70/0x150 [ 297.355562][ T4709] __x64_sys_futex+0xe5/0x100 [ 297.360260][ T4709] x64_sys_call+0x7ec/0x9a0 [ 297.364783][ T4709] do_syscall_64+0x4c/0xa0 [ 297.369266][ T4709] ? clear_bhb_loop+0x30/0x80 [ 297.373960][ T4709] ? clear_bhb_loop+0x30/0x80 [ 297.378656][ T4709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.384563][ T4709] RIP: 0033:0x7fbe76f9fb19 [ 297.389340][ T4709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.408963][ T4709] RSP: 002b:00007fbe77f1c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 297.417401][ T4709] RAX: ffffffffffffffda RBX: 00007fbe77225fa8 RCX: 00007fbe76f9fb19 [ 297.425387][ T4709] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbe77225fa8 [ 297.433367][ T4709] RBP: 00007fbe77225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 297.441441][ T4709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.449434][ T4709] R13: 00007fbe77226038 R14: 00007ffc8be146c0 R15: 00007ffc8be147a8 [ 297.457443][ T4709] [ 297.602614][ T4708] device batadv_slave_0 left promiscuous mode [ 297.880958][ T4719] loop0: detected capacity change from 0 to 512 [ 298.636492][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.558984][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.377444][ T4739] veth0_to_bridge: mtu less than device minimum [ 301.789425][ T4756] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 301.808886][ T4756] device batadv_slave_0 entered promiscuous mode [ 301.825784][ T4756] FAULT_INJECTION: forcing a failure. [ 301.825784][ T4756] name failslab, interval 1, probability 0, space 0, times 0 [ 301.858018][ T4756] CPU: 0 PID: 4756 Comm: syz.5.1223 Tainted: G W syzkaller #0 [ 301.866958][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 301.877038][ T4756] Call Trace: [ 301.880334][ T4756] [ 301.883276][ T4756] __dump_stack+0x21/0x24 [ 301.887654][ T4756] dump_stack_lvl+0x110/0x170 [ 301.892337][ T4756] ? __cfi_dump_stack_lvl+0x8/0x8 [ 301.897460][ T4756] ? __kasan_check_read+0x11/0x20 [ 301.902527][ T4756] dump_stack+0x15/0x24 [ 301.906709][ T4756] should_fail_ex+0x3bf/0x510 [ 301.911395][ T4756] __should_failslab+0xac/0xf0 [ 301.916174][ T4756] should_failslab+0x9/0x20 [ 301.920696][ T4756] __kmem_cache_alloc_node+0x3d/0x2d0 [ 301.926106][ T4756] ? packet_mc_add+0x12d/0x930 [ 301.930889][ T4756] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 301.936621][ T4756] ? packet_mc_add+0x12d/0x930 [ 301.941404][ T4756] kmalloc_trace+0x29/0xb0 [ 301.945836][ T4756] packet_mc_add+0x12d/0x930 [ 301.950450][ T4756] packet_setsockopt+0xc4e/0x1230 [ 301.955531][ T4756] ? __cfi_packet_setsockopt+0x10/0x10 [ 301.961000][ T4756] ? proc_fail_nth_write+0x180/0x200 [ 301.966289][ T4756] ? selinux_socket_setsockopt+0x282/0x360 [ 301.972103][ T4756] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 301.978268][ T4756] ? __fget_files+0x2d1/0x330 [ 301.982958][ T4756] ? security_socket_setsockopt+0x93/0xb0 [ 301.988690][ T4756] ? __cfi_packet_setsockopt+0x10/0x10 [ 301.994262][ T4756] __sys_setsockopt+0x2ff/0x4e0 [ 301.999125][ T4756] ? __cfi___sys_setsockopt+0x10/0x10 [ 302.004512][ T4756] ? __this_cpu_preempt_check+0x13/0x20 [ 302.010071][ T4756] ? xfd_validate_state+0x70/0x150 [ 302.015214][ T4756] ? __kasan_check_write+0x14/0x20 [ 302.020334][ T4756] ? fpregs_restore_userregs+0x128/0x260 [ 302.025986][ T4756] __x64_sys_setsockopt+0xbf/0xd0 [ 302.031021][ T4756] x64_sys_call+0x124/0x9a0 [ 302.035534][ T4756] do_syscall_64+0x4c/0xa0 [ 302.040050][ T4756] ? clear_bhb_loop+0x30/0x80 [ 302.044737][ T4756] ? clear_bhb_loop+0x30/0x80 [ 302.049427][ T4756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.055331][ T4756] RIP: 0033:0x7f786e39fb19 [ 302.059757][ T4756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.079389][ T4756] RSP: 002b:00007f786f1f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.087812][ T4756] RAX: ffffffffffffffda RBX: 00007f786e625fa0 RCX: 00007f786e39fb19 [ 302.095796][ T4756] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 302.103772][ T4756] RBP: 00007f786e437b70 R08: 0000000000000010 R09: 0000000000000000 [ 302.111756][ T4756] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 302.119751][ T4756] R13: 00007f786e626038 R14: 00007f786e625fa0 R15: 00007ffd35452098 [ 302.127733][ T4756] [ 302.196491][ T4755] device batadv_slave_0 left promiscuous mode [ 302.428447][ T4774] loop5: detected capacity change from 0 to 512 [ 302.601811][ T733] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 302.791775][ T733] usb 1-1: Using ep0 maxpacket: 32 [ 302.798174][ T733] usb 1-1: config 4 has an invalid interface number: 237 but max is 0 [ 302.806707][ T733] usb 1-1: config 4 has no interface number 0 [ 302.813009][ T733] usb 1-1: config 4 interface 237 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 302.824972][ T733] usb 1-1: config 4 interface 237 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 302.836227][ T733] usb 1-1: config 4 interface 237 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 302.847444][ T733] usb 1-1: config 4 interface 237 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 302.858785][ T733] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 302.869821][ T733] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 302.880846][ T733] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 302.891895][ T733] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 302.903085][ T733] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 302.914128][ T733] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 302.925391][ T733] usb 1-1: config 4 interface 237 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 302.936314][ T733] usb 1-1: config 4 interface 237 has no altsetting 0 [ 302.945185][ T733] usb 1-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=cb.e6 [ 302.954536][ T733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.962763][ T733] usb 1-1: Product: syz [ 302.967128][ T733] usb 1-1: Manufacturer: 﫥꩛⨭모솟덺礮䭭ﴒ搶揪脁ἵक़鵁퀂➶랯ϓꢃ㒳猶췚ਜ球９◎✲뾐딚솾老餠퇾䙅赜酆쒊ꀪ﫯畿 [ 302.984266][ T733] usb 1-1: SerialNumber: syz [ 303.138795][ T4786] loop2: detected capacity change from 0 to 1024 [ 303.159367][ T4786] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 303.173696][ T4786] EXT4-fs error (device loop2): ext4_get_journal_inode:5749: inode #32: comm syz.2.1233: iget: special inode unallocated [ 303.191380][ T4786] EXT4-fs (loop2): no journal found [ 303.196651][ T4786] EXT4-fs (loop2): can't get journal size [ 303.203464][ T4786] EXT4-fs (loop2): filesystem is read-only [ 303.209308][ T4786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 303.233307][ T4768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.243750][ T4786] EXT4-fs (loop2): shut down requested (2) [ 303.251187][ T28] audit: type=1400 audit(2000000108.937:1040): avc: denied { ioctl } for pid=4785 comm="syz.2.1233" path="socket:[29396]" dev="sockfs" ino=29396 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 303.264449][ T4768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.282883][ T4786] netlink: 'syz.2.1233': attribute type 2 has an invalid length. [ 303.352410][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.672428][ T290] EXT4-fs (loop2): unmounting filesystem. [ 304.217567][ T28] audit: type=1400 audit(2000000108.977:1041): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 304.249998][ T733] ftdi_sio 1-1:4.237: FTDI USB Serial Device converter detected [ 304.281769][ T28] audit: type=1400 audit(2000000108.977:1042): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.308364][ T4797] veth0_to_bridge: mtu less than device minimum [ 304.315247][ T733] ftdi_sio ttyUSB0: unknown device type: 0xcbe6 [ 304.339820][ T28] audit: type=1400 audit(2000000108.977:1043): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.380613][ T733] usb 1-1: USB disconnect, device number 5 [ 304.396782][ T28] audit: type=1400 audit(2000000108.977:1044): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.424103][ T733] ftdi_sio 1-1:4.237: device disconnected [ 304.440741][ T28] audit: type=1400 audit(2000000108.977:1045): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.461374][ T28] audit: type=1400 audit(2000000108.977:1046): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.484605][ T28] audit: type=1400 audit(2000000108.977:1047): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 305.061077][ T4805] loop0: detected capacity change from 0 to 512 [ 305.114906][ T4790] loop5: detected capacity change from 0 to 40427 [ 305.143600][ T4790] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 305.151426][ T4790] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 305.160116][ T4790] F2FS-fs (loop5): invalid crc value [ 305.222626][ T4790] F2FS-fs (loop5): Found nat_bits in checkpoint [ 305.281142][ T4790] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 305.291807][ T4790] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 305.708195][ T417] kworker/u4:4: attempt to access beyond end of device [ 305.708195][ T417] loop5: rw=1, sector=77824, nr_sectors = 2064 limit=40427 [ 305.746679][ T417] kworker/u4:4: attempt to access beyond end of device [ 305.746679][ T417] loop5: rw=1, sector=79888, nr_sectors = 2032 limit=40427 [ 305.832161][ T417] kworker/u4:4: attempt to access beyond end of device [ 305.832161][ T417] loop5: rw=1, sector=49152, nr_sectors = 4072 limit=40427 [ 305.854021][ T417] kworker/u4:4: attempt to access beyond end of device [ 305.854021][ T417] loop5: rw=1, sector=53224, nr_sectors = 24 limit=40427 [ 305.897751][ T417] kworker/u4:4: attempt to access beyond end of device [ 305.897751][ T417] loop5: rw=1, sector=57344, nr_sectors = 2888 limit=40427 [ 307.331796][ T315] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 307.512674][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 307.595421][ T315] usb 3-1: config 4 has an invalid interface number: 237 but max is 0 [ 307.604026][ T315] usb 3-1: config 4 has no interface number 0 [ 307.610146][ T315] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 307.621195][ T315] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 307.632191][ T315] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 307.643128][ T315] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 307.654168][ T315] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 307.716472][ T315] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 307.739106][ T315] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 307.760971][ T315] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 307.791818][ T315] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 307.820719][ T315] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 307.849892][ T315] usb 3-1: config 4 interface 237 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 307.886158][ T315] usb 3-1: config 4 interface 237 has no altsetting 0 [ 307.908455][ T315] usb 3-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=cb.e6 [ 307.936344][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.959242][ T315] usb 3-1: Product: syz [ 307.972258][ T315] usb 3-1: Manufacturer: 﫥꩛⨭모솟덺礮䭭ﴒ搶揪脁ἵक़鵁퀂➶랯ϓꢃ㒳猶췚ਜ球９◎✲뾐딚솾老餠퇾䙅赜酆쒊ꀪ﫯畿 [ 308.021158][ T315] usb 3-1: SerialNumber: syz [ 308.232961][ T4857] loop0: detected capacity change from 0 to 512 [ 308.246037][ T4837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.290627][ T4837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.332605][ T315] ftdi_sio 3-1:4.237: FTDI USB Serial Device converter detected [ 308.349871][ T315] ftdi_sio ttyUSB0: unknown device type: 0xcbe6 [ 308.366129][ T315] usb 3-1: USB disconnect, device number 11 [ 308.374274][ T315] ftdi_sio 3-1:4.237: device disconnected [ 308.894904][ T4865] loop2: detected capacity change from 0 to 512 [ 309.076896][ T4870] loop0: detected capacity change from 0 to 512 [ 310.025522][ T4883] loop0: detected capacity change from 0 to 512 [ 310.055640][ T4883] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 310.090072][ T4883] EXT4-fs (loop0): 1 truncate cleaned up [ 310.108355][ T4883] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 310.448997][ T4894] overlayfs: failed to clone lowerpath [ 311.493927][ T4896] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1261'. [ 311.528040][ T288] EXT4-fs (loop0): unmounting filesystem. [ 312.330121][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 312.670273][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 312.852539][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.860892][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 313.077356][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.156553][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.245936][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.332760][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.418779][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.692518][ T28] audit: type=1400 audit(2000000119.377:1048): avc: denied { create } for pid=4910 comm="syz.0.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 313.856680][ T4930] loop0: detected capacity change from 0 to 512 [ 313.880504][ T4930] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 313.918540][ T4930] EXT4-fs (loop0): 1 truncate cleaned up [ 313.942002][ T4930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 313.978742][ T4930] 9pnet_fd: Insufficient options for proto=fd [ 313.997113][ T288] EXT4-fs (loop0): unmounting filesystem. [ 314.276924][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.431873][ T318] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 314.611949][ T318] usb 1-1: Using ep0 maxpacket: 32 [ 314.619596][ T318] usb 1-1: config 4 has an invalid interface number: 237 but max is 0 [ 314.714392][ T318] usb 1-1: config 4 has no interface number 0 [ 314.791082][ T318] usb 1-1: config 4 interface 237 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 315.026462][ T318] usb 1-1: config 4 interface 237 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 315.062420][ T318] usb 1-1: config 4 interface 237 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 315.101798][ T318] usb 1-1: config 4 interface 237 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 315.127555][ T318] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 315.148752][ T318] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 315.169912][ T318] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 315.191028][ T318] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 315.215905][ T318] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 315.235648][ T318] usb 1-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 315.246668][ T318] usb 1-1: config 4 interface 237 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 315.257556][ T318] usb 1-1: config 4 interface 237 has no altsetting 0 [ 315.271838][ T318] usb 1-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=cb.e6 [ 315.281029][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.298286][ T318] usb 1-1: Product: syz [ 315.307079][ T318] usb 1-1: Manufacturer: 﫥꩛⨭모솟덺礮䭭ﴒ搶揪脁ἵक़鵁퀂➶랯ϓꢃ㒳猶췚ਜ球９◎✲뾐딚솾老餠퇾䙅赜酆쒊ꀪ﫯畿 [ 315.341654][ T318] usb 1-1: SerialNumber: syz [ 315.379442][ T4954] veth0_to_bridge: mtu less than device minimum [ 315.554527][ T4939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.571959][ T4939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.660534][ T318] ftdi_sio 1-1:4.237: FTDI USB Serial Device converter detected [ 315.682088][ T318] ftdi_sio ttyUSB0: unknown device type: 0xcbe6 [ 315.691263][ T318] usb 1-1: USB disconnect, device number 6 [ 315.710351][ T318] ftdi_sio 1-1:4.237: device disconnected [ 315.785647][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 315.922275][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.038570][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.045719][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.290135][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.534635][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.541753][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.655813][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 316.739331][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.792247][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 316.800529][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.808906][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.844322][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.872983][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.893160][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.611567][ T4988] loop5: detected capacity change from 0 to 512 [ 317.651230][ T4988] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 317.731408][ T4988] EXT4-fs (loop5): 1 truncate cleaned up [ 317.739227][ T4988] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 319.017209][ T706] EXT4-fs (loop5): unmounting filesystem. [ 319.051273][ T4999] loop5: detected capacity change from 0 to 512 [ 319.066595][ T4999] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 319.163173][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.517047][ T4999] EXT4-fs (loop5): 1 truncate cleaned up [ 319.585431][ T4999] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 320.261922][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.945324][ T5028] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1297'. [ 321.980317][ T5031] loop0: detected capacity change from 0 to 512 [ 321.994373][ T5031] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 322.036720][ T5031] EXT4-fs (loop0): 1 truncate cleaned up [ 322.052161][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 322.230584][ T5035] 9pnet_fd: Insufficient options for proto=fd [ 322.424778][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.883024][ T5042] loop2: detected capacity change from 0 to 512 [ 323.515409][ T288] EXT4-fs (loop0): unmounting filesystem. [ 323.905566][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.665783][ T706] EXT4-fs (loop5): unmounting filesystem. [ 324.693832][ T5068] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1309'. [ 324.711791][ T5068] batadv_slave_0: Caught tx_queue_len zero misconfig [ 325.547116][ T28] audit: type=1400 audit(2000000131.237:1049): avc: denied { mount } for pid=5116 comm="syz.3.1330" name="/" dev="configfs" ino=11155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 325.570323][ T28] audit: type=1400 audit(2000000131.237:1050): avc: denied { search } for pid=5116 comm="syz.3.1330" name="/" dev="configfs" ino=11155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 325.593003][ T28] audit: type=1400 audit(2000000131.237:1051): avc: denied { read } for pid=5116 comm="syz.3.1330" name="/" dev="configfs" ino=11155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 325.623588][ T5119] overlayfs: failed to clone lowerpath [ 325.634850][ T28] audit: type=1400 audit(2000000131.237:1052): avc: denied { open } for pid=5116 comm="syz.3.1330" path="/" dev="configfs" ino=11155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 325.659405][ T5121] loop0: detected capacity change from 0 to 512 [ 325.669663][ T5121] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 325.703451][ T5121] EXT4-fs (loop0): 1 truncate cleaned up [ 325.715855][ T5121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 325.893008][ T5128] 9pnet_fd: Insufficient options for proto=fd [ 326.591012][ T288] EXT4-fs (loop0): unmounting filesystem. [ 326.751079][ T5137] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1335'. [ 326.848943][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.013486][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 328.412101][ T5163] lo: Caught tx_queue_len zero misconfig [ 328.877623][ T5176] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1346'. [ 328.896939][ T5176] batadv_slave_0: Caught tx_queue_len zero misconfig [ 329.817545][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.312029][ T5201] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1352'. [ 331.538299][ T5205] loop2: detected capacity change from 0 to 512 [ 331.974841][ T315] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 332.098267][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.711825][ T315] usb 6-1: Using ep0 maxpacket: 32 [ 333.718557][ T315] usb 6-1: config 4 has an invalid interface number: 237 but max is 0 [ 333.734164][ T315] usb 6-1: config 4 has no interface number 0 [ 333.746601][ T315] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 333.768644][ T315] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 333.791633][ T315] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 333.812738][ T315] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 333.835140][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 333.857320][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 333.875665][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 333.886628][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 333.897584][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 333.908523][ T315] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 333.919431][ T315] usb 6-1: config 4 interface 237 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 333.957738][ T315] usb 6-1: config 4 interface 237 has no altsetting 0 [ 333.973290][ T315] usb 6-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=cb.e6 [ 334.001788][ T315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.018750][ T315] usb 6-1: Product: syz [ 334.031770][ T315] usb 6-1: Manufacturer: 﫥꩛⨭모솟덺礮䭭ﴒ搶揪脁ἵक़鵁퀂➶랯ϓꢃ㒳猶췚ਜ球９◎✲뾐딚솾老餠퇾䙅赜酆쒊ꀪ﫯畿 [ 334.069082][ T315] usb 6-1: SerialNumber: syz [ 334.208134][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 334.312770][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.395148][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.122523][ T315] ftdi_sio 6-1:4.237: FTDI USB Serial Device converter detected [ 335.130547][ T315] ftdi_sio ttyUSB0: unknown device type: 0xcbe6 [ 335.154560][ T315] usb 6-1: USB disconnect, device number 11 [ 335.172114][ T315] ftdi_sio 6-1:4.237: device disconnected [ 335.225840][ T5257] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1368'. [ 335.234969][ T5257] batadv_slave_0: Caught tx_queue_len zero misconfig [ 335.557711][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.653211][ T5274] loop5: detected capacity change from 0 to 512 [ 336.692107][ T5274] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 336.752993][ T5274] EXT4-fs (loop5): 1 truncate cleaned up [ 336.764199][ T5274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 336.952532][ T5281] 9pnet_fd: Insufficient options for proto=fd [ 337.522927][ T706] EXT4-fs (loop5): unmounting filesystem. [ 338.154772][ T5295] loop0: detected capacity change from 0 to 512 [ 338.223623][ T5295] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 338.273256][ T5295] EXT4-fs (loop0): 1 truncate cleaned up [ 338.289149][ T5295] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 338.382613][ T318] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 338.981200][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.086156][ T288] EXT4-fs (loop0): unmounting filesystem. [ 339.141940][ T318] usb 6-1: Using ep0 maxpacket: 32 [ 339.150243][ T318] usb 6-1: config 4 has an invalid interface number: 237 but max is 0 [ 339.367056][ T318] usb 6-1: config 4 has no interface number 0 [ 339.401786][ T318] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 339.439954][ T318] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 339.481388][ T318] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 339.532999][ T318] usb 6-1: config 4 interface 237 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 339.574620][ T318] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 339.618440][ T318] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 339.659740][ T318] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 339.701123][ T318] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 339.752954][ T318] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 339.784035][ T318] usb 6-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 339.815158][ T318] usb 6-1: config 4 interface 237 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 339.833216][ T5313] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.851811][ T318] usb 6-1: config 4 interface 237 has no altsetting 0 [ 339.869932][ T318] usb 6-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=cb.e6 [ 339.887923][ T318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.905471][ T318] usb 6-1: Product: syz [ 339.915368][ T318] usb 6-1: Manufacturer: 﫥꩛⨭모솟덺礮䭭ﴒ搶揪脁ἵक़鵁퀂➶랯ϓꢃ㒳猶췚ਜ球９◎✲뾐딚솾老餠퇾䙅赜酆쒊ꀪ﫯畿 [ 339.948391][ T5308] loop0: detected capacity change from 0 to 40427 [ 339.961867][ T5308] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 339.968040][ T318] usb 6-1: SerialNumber: syz [ 339.973448][ T5308] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 339.995924][ T5308] F2FS-fs (loop0): invalid crc value [ 340.005336][ T5308] F2FS-fs (loop0): Found nat_bits in checkpoint [ 340.072147][ T5308] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 340.081453][ T5308] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 340.194963][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.205339][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.223936][ T318] ftdi_sio 6-1:4.237: FTDI USB Serial Device converter detected [ 340.234046][ T318] ftdi_sio ttyUSB0: unknown device type: 0xcbe6 [ 340.245196][ T318] usb 6-1: USB disconnect, device number 12 [ 340.265699][ T318] ftdi_sio 6-1:4.237: device disconnected [ 340.274748][ T10] kworker/u4:1: attempt to access beyond end of device [ 340.274748][ T10] loop0: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 340.294845][ T10] kworker/u4:1: attempt to access beyond end of device [ 340.294845][ T10] loop0: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 340.314949][ T10] kworker/u4:1: attempt to access beyond end of device [ 340.314949][ T10] loop0: rw=1, sector=49152, nr_sectors = 2056 limit=40427 [ 340.339520][ T10] kworker/u4:1: attempt to access beyond end of device [ 340.339520][ T10] loop0: rw=1, sector=51208, nr_sectors = 2040 limit=40427 [ 340.359297][ T10] kworker/u4:1: attempt to access beyond end of device [ 340.359297][ T10] loop0: rw=1, sector=57344, nr_sectors = 368 limit=40427 [ 340.917763][ T5338] veth0_to_bridge: mtu less than device minimum [ 342.268880][ T5356] loop2: detected capacity change from 0 to 512 [ 342.561155][ T5364] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1394'. [ 343.265282][ T5365] loop0: detected capacity change from 0 to 40427 [ 343.287300][ T5365] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 343.321775][ T5365] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 343.344227][ T5365] F2FS-fs (loop0): invalid crc value [ 343.381765][ T5365] F2FS-fs (loop0): Found nat_bits in checkpoint [ 343.489442][ T5365] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 343.504236][ T5365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 343.767890][ T487] kworker/u4:5: attempt to access beyond end of device [ 343.767890][ T487] loop0: rw=1, sector=77824, nr_sectors = 2056 limit=40427 [ 343.805885][ T487] kworker/u4:5: attempt to access beyond end of device [ 343.805885][ T487] loop0: rw=1, sector=79880, nr_sectors = 2040 limit=40427 [ 343.838619][ T487] kworker/u4:5: attempt to access beyond end of device [ 343.838619][ T487] loop0: rw=1, sector=49152, nr_sectors = 2904 limit=40427 [ 345.667047][ T5408] loop0: detected capacity change from 0 to 512 [ 345.776296][ T5405] loop2: detected capacity change from 0 to 40427 [ 345.784335][ T5405] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 345.792492][ T5405] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 345.801215][ T5405] F2FS-fs (loop2): invalid crc value [ 345.808204][ T5405] F2FS-fs (loop2): Found nat_bits in checkpoint [ 345.865085][ T5405] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 345.872341][ T5405] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 345.983727][ T5416] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1408'. [ 346.350547][ T2933] kworker/u4:7: attempt to access beyond end of device [ 346.350547][ T2933] loop2: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 346.378454][ T2933] kworker/u4:7: attempt to access beyond end of device [ 346.378454][ T2933] loop2: rw=1, sector=79872, nr_sectors = 1016 limit=40427 [ 346.565219][ T5428] loop0: detected capacity change from 0 to 512 [ 346.687070][ T5428] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 346.724378][ T5428] EXT4-fs (loop0): 1 truncate cleaned up [ 346.730114][ T5428] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 346.936586][ T5437] 9pnet_fd: Insufficient options for proto=fd [ 347.073236][ T740] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 347.314834][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.632290][ T288] EXT4-fs (loop0): unmounting filesystem. [ 348.640974][ T5444] loop5: detected capacity change from 0 to 512 [ 348.671853][ T740] usb 3-1: Using ep0 maxpacket: 32 [ 348.678471][ T740] usb 3-1: config 4 has an invalid interface number: 237 but max is 0 [ 348.705743][ T740] usb 3-1: config 4 has no interface number 0 [ 348.731801][ T740] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 348.751820][ T740] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 348.781983][ T740] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 348.813203][ T740] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 348.841839][ T740] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 348.876954][ T740] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 348.897935][ T740] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 348.926114][ T740] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 348.958856][ T740] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 348.979909][ T740] usb 3-1: config 4 interface 237 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 348.991077][ T740] usb 3-1: config 4 interface 237 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 349.007596][ T740] usb 3-1: config 4 interface 237 has no altsetting 0 [ 349.035321][ T740] usb 3-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=cb.e6 [ 349.044494][ T740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.060300][ T740] usb 3-1: Product: syz [ 349.064992][ T740] usb 3-1: Manufacturer: 﫥꩛⨭모솟덺礮䭭ﴒ搶揪脁ἵक़鵁퀂➶랯ϓꢃ㒳猶췚ਜ球９◎✲뾐딚솾老餠퇾䙅赜酆쒊ꀪ﫯畿 [ 349.102079][ T740] usb 3-1: SerialNumber: syz [ 349.234352][ T5459] loop0: detected capacity change from 0 to 512 [ 349.427333][ T5434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.460378][ T5434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.681485][ T5466] overlayfs: failed to resolve './file2': -2 [ 349.683322][ T740] ftdi_sio 3-1:4.237: FTDI USB Serial Device converter detected [ 349.695673][ T740] ftdi_sio ttyUSB0: unknown device type: 0xcbe6 [ 349.698193][ T5466] device batadv_slave_0 entered promiscuous mode [ 349.716421][ T740] usb 3-1: USB disconnect, device number 12 [ 349.721132][ T5465] device batadv_slave_0 left promiscuous mode [ 349.728910][ T740] ftdi_sio 3-1:4.237: device disconnected [ 349.753114][ T5468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1424'. [ 349.983544][ T5471] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1425'. [ 350.122897][ T5475] loop0: detected capacity change from 0 to 512 [ 350.806928][ T5486] loop2: detected capacity change from 0 to 40427 [ 350.815415][ T5486] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 350.825902][ T5486] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 350.834848][ T5486] F2FS-fs (loop2): invalid crc value [ 350.844728][ T5486] F2FS-fs (loop2): Found nat_bits in checkpoint [ 350.852622][ T5493] loop5: detected capacity change from 0 to 256 [ 350.920863][ T5486] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 350.928229][ T5486] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 350.944356][ T5493] exfat: Deprecated parameter 'utf8' [ 351.033374][ T5493] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 351.201121][ T2933] kworker/u4:7: attempt to access beyond end of device [ 351.201121][ T2933] loop2: rw=1, sector=77824, nr_sectors = 2224 limit=40427 [ 351.240575][ T2933] kworker/u4:7: attempt to access beyond end of device [ 351.240575][ T2933] loop2: rw=1, sector=80048, nr_sectors = 1872 limit=40427 [ 351.282021][ T2933] kworker/u4:7: attempt to access beyond end of device [ 351.282021][ T2933] loop2: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 351.301663][ T2933] kworker/u4:7: attempt to access beyond end of device [ 351.301663][ T2933] loop2: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 351.322168][ T2933] kworker/u4:7: attempt to access beyond end of device [ 351.322168][ T2933] loop2: rw=1, sector=57344, nr_sectors = 2224 limit=40427 [ 351.346673][ T2933] kworker/u4:7: attempt to access beyond end of device [ 351.346673][ T2933] loop2: rw=1, sector=59568, nr_sectors = 4304 limit=40427 [ 351.463878][ T5513] device bridge_slave_1 entered promiscuous mode [ 351.488401][ T5510] loop5: detected capacity change from 0 to 40427 [ 351.503741][ T5510] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 351.519794][ T5510] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 351.528946][ T5510] F2FS-fs (loop5): invalid crc value [ 351.556733][ T5510] F2FS-fs (loop5): Found nat_bits in checkpoint [ 351.822395][ T5510] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 351.862552][ T5510] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 352.107967][ T5524] loop2: detected capacity change from 0 to 40427 [ 352.123471][ T5524] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 352.133461][ T2933] kworker/u4:7: attempt to access beyond end of device [ 352.133461][ T2933] loop5: rw=1, sector=77824, nr_sectors = 3176 limit=40427 [ 352.140768][ T5524] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 352.156976][ T2933] kworker/u4:7: attempt to access beyond end of device [ 352.156976][ T2933] loop5: rw=1, sector=81000, nr_sectors = 920 limit=40427 [ 352.163426][ T5524] F2FS-fs (loop2): invalid crc value [ 352.177681][ T5524] F2FS-fs (loop2): Found nat_bits in checkpoint [ 352.183866][ T2933] kworker/u4:7: attempt to access beyond end of device [ 352.183866][ T2933] loop5: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 352.203087][ T2933] kworker/u4:7: attempt to access beyond end of device [ 352.203087][ T2933] loop5: rw=1, sector=51200, nr_sectors = 1752 limit=40427 [ 352.231012][ T5524] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 352.238265][ T5524] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 352.354998][ T5546] overlayfs: failed to clone lowerpath [ 352.636476][ T10] kworker/u4:1: attempt to access beyond end of device [ 352.636476][ T10] loop2: rw=1, sector=77824, nr_sectors = 2056 limit=40427 [ 352.651524][ T5552] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1447'. [ 352.692659][ T10] kworker/u4:1: attempt to access beyond end of device [ 352.692659][ T10] loop2: rw=1, sector=79880, nr_sectors = 2040 limit=40427 [ 352.732917][ T10] kworker/u4:1: attempt to access beyond end of device [ 352.732917][ T10] loop2: rw=1, sector=49152, nr_sectors = 2056 limit=40427 [ 352.775342][ T10] kworker/u4:1: attempt to access beyond end of device [ 352.775342][ T10] loop2: rw=1, sector=51208, nr_sectors = 2040 limit=40427 [ 352.817725][ T10] kworker/u4:1: attempt to access beyond end of device [ 352.817725][ T10] loop2: rw=1, sector=57344, nr_sectors = 2056 limit=40427 [ 352.857213][ T10] kworker/u4:1: attempt to access beyond end of device [ 352.857213][ T10] loop2: rw=1, sector=59400, nr_sectors = 2048 limit=40427 [ 353.844192][ T5570] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.557463][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 355.582296][ T5600] veth0_to_bridge: mtu less than device minimum [ 355.980777][ T5606] lo: Caught tx_queue_len zero misconfig [ 356.290388][ T5617] loop0: detected capacity change from 0 to 256 [ 356.307721][ T5617] exfat: Deprecated parameter 'utf8' [ 356.315897][ T5617] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 356.478577][ T5621] loop0: detected capacity change from 0 to 40427 [ 356.485160][ T2702] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 356.493496][ T5621] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 356.501450][ T5621] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 356.510359][ T5621] F2FS-fs (loop0): invalid crc value [ 356.517287][ T5621] F2FS-fs (loop0): Found nat_bits in checkpoint [ 356.546121][ T5621] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 356.553272][ T5621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 356.710503][ T2702] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 356.719365][ T2702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.730053][ T2702] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 356.739411][ T2702] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 356.748749][ T2702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.768391][ T2702] usb 6-1: config 0 descriptor?? [ 356.775832][ T2702] usb 6-1: Found UVC 9.00 device (046d:0825) [ 356.854011][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.183648][ T2702] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 357.227852][ T2933] bio_check_eod: 5 callbacks suppressed [ 357.227886][ T2933] kworker/u4:7: attempt to access beyond end of device [ 357.227886][ T2933] loop0: rw=1, sector=57344, nr_sectors = 4088 limit=40427 [ 357.797597][ T5635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.860107][ T2933] kworker/u4:7: attempt to access beyond end of device [ 357.860107][ T2933] loop0: rw=1, sector=61432, nr_sectors = 4104 limit=40427 [ 358.212230][ T2933] kworker/u4:7: attempt to access beyond end of device [ 358.212230][ T2933] loop0: rw=1, sector=65536, nr_sectors = 4096 limit=40427 [ 358.275787][ T2933] kworker/u4:7: attempt to access beyond end of device [ 358.275787][ T2933] loop0: rw=1, sector=69632, nr_sectors = 8 limit=40427 [ 358.335021][ T2933] kworker/u4:7: attempt to access beyond end of device [ 358.335021][ T2933] loop0: rw=1, sector=69640, nr_sectors = 8 limit=40427 [ 358.392611][ T2933] kworker/u4:7: attempt to access beyond end of device [ 358.392611][ T2933] loop0: rw=1, sector=69648, nr_sectors = 8 limit=40427 [ 358.451219][ T2933] kworker/u4:7: attempt to access beyond end of device [ 358.451219][ T2933] loop0: rw=1, sector=69656, nr_sectors = 8 limit=40427 [ 358.510210][ T2933] kworker/u4:7: attempt to access beyond end of device [ 358.510210][ T2933] loop0: rw=1, sector=69664, nr_sectors = 8 limit=40427 [ 358.567313][ T2933] kworker/u4:7: attempt to access beyond end of device [ 358.567313][ T2933] loop0: rw=1, sector=69672, nr_sectors = 8 limit=40427 [ 358.632515][ T5652] veth0_to_bridge: mtu less than device minimum [ 358.643903][ T2933] kworker/u4:7: attempt to access beyond end of device [ 358.643903][ T2933] loop0: rw=1, sector=69680, nr_sectors = 8 limit=40427 [ 358.676144][ T2702] uvcvideo 6-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 358.692251][ T2702] uvcvideo 6-1:0.1: Failed to initialize the device (-5). [ 358.735177][ T2702] usb 6-1: USB disconnect, device number 13 [ 358.966911][ T5660] loop0: detected capacity change from 0 to 512 [ 358.991302][ T5660] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 359.915766][ T5677] lo: Caught tx_queue_len zero misconfig [ 360.481608][ T5674] loop0: detected capacity change from 0 to 40427 [ 360.493871][ T5674] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 360.512003][ T5674] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 360.520692][ T5674] F2FS-fs (loop0): invalid crc value [ 361.037590][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.532851][ T5674] F2FS-fs (loop0): Found nat_bits in checkpoint [ 361.648555][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.881434][ T5674] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 361.891438][ T5674] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 362.588930][ T5702] veth0_to_bridge: mtu less than device minimum [ 362.977322][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.277127][ T417] bio_check_eod: 175 callbacks suppressed [ 363.277513][ T417] kworker/u4:4: attempt to access beyond end of device [ 363.277513][ T417] loop0: rw=1, sector=77824, nr_sectors = 2128 limit=40427 [ 363.680186][ T417] kworker/u4:4: attempt to access beyond end of device [ 363.680186][ T417] loop0: rw=1, sector=79952, nr_sectors = 1968 limit=40427 [ 363.756158][ T417] kworker/u4:4: attempt to access beyond end of device [ 363.756158][ T417] loop0: rw=1, sector=49152, nr_sectors = 240 limit=40427 [ 364.044217][ T5724] loop0: detected capacity change from 0 to 512 [ 364.082009][ T5724] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 365.101794][ T1164] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 365.194139][ T28] audit: type=1400 audit(2000000170.887:1053): avc: denied { watch } for pid=5741 comm="syz.5.1499" path="/263/cgroup" dev="tmpfs" ino=1542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 365.253806][ T5742] loop5: detected capacity change from 0 to 8192 [ 365.266269][ T5742] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 365.274329][ T5742] FAT-fs (loop5): Filesystem has been set read-only [ 365.286561][ T28] audit: type=1400 audit(2000000170.977:1054): avc: denied { create } for pid=5741 comm="syz.5.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 365.293449][ T1164] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 365.328154][ T28] audit: type=1400 audit(2000000171.017:1055): avc: denied { bind } for pid=5741 comm="syz.5.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 365.396976][ T1164] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.421259][ T1164] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 365.443418][ T1164] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 365.467025][ T1164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.553954][ T1164] usb 3-1: config 0 descriptor?? [ 365.831338][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.639731][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.671071][ T1164] usb 3-1: Found UVC 9.00 device (046d:0825) [ 367.107830][ T1164] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 367.126156][ T5764] veth0_to_bridge: mtu less than device minimum [ 367.682556][ T5777] loop0: detected capacity change from 0 to 512 [ 367.712690][ T5777] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 368.076662][ T1164] uvcvideo 3-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 368.094383][ T1164] uvcvideo 3-1:0.1: Failed to initialize the device (-5). [ 368.121780][ T1164] usb 3-1: USB disconnect, device number 13 [ 368.474165][ T5785] loop0: detected capacity change from 0 to 512 [ 369.038660][ T5787] loop0: detected capacity change from 0 to 40427 [ 369.045226][ T740] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 369.073606][ T5787] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 369.101661][ T5787] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 369.112014][ T5787] F2FS-fs (loop0): invalid crc value [ 369.142654][ T5787] F2FS-fs (loop0): Found nat_bits in checkpoint [ 369.192013][ T5787] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 369.199086][ T5787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 369.231787][ T740] usb 3-1: Using ep0 maxpacket: 32 [ 369.239502][ T740] usb 3-1: config 4 has an invalid interface number: 237 but max is 0 [ 369.249341][ T5797] printk: console [ttyS0] disabled [ 369.255990][ T740] usb 3-1: config 4 has no interface number 0 [ 369.271993][ T740] usb 3-1: config 4 interface 237 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=1 req=2701 state=1 status=67 (errno 9: Bad file descriptor)