last executing test programs: 5m27.014149755s ago: executing program 1 (id=2900): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2d, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m26.612654322s ago: executing program 1 (id=2906): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x80000000, 0x0) 5m26.255205958s ago: executing program 1 (id=2909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) fstatfs(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 5m26.18827318s ago: executing program 1 (id=2910): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000600)='./file0\x00', 0x2144840, 0x0, 0x3, 0x0, &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(0x0, &(0x7f0000000880)='./file0/../file0\x00', 0x0, 0x2000, 0x0) 5m26.17865228s ago: executing program 1 (id=2911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 5m26.111958304s ago: executing program 1 (id=2916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") 5m26.037360337s ago: executing program 32 (id=2916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") 1m34.679723894s ago: executing program 4 (id=6036): syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x2d, 0x0, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x403}}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000700), 0x0) 1m31.781141128s ago: executing program 4 (id=6059): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.780946698s ago: executing program 4 (id=6060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) 1m31.780670208s ago: executing program 4 (id=6061): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000640)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b46ea5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9"], 0x1, 0x5514, &(0x7f0000013680)="$eJzs3M1rI2UcB/Bf2u2+uxbx4G0HFqGFTdh0X9Dbqrv4gl2KLwdPmiZpyG6SKU2a1p48eBQP/iei4Mmjf4MHz97Eg+JNWMk8U9n6gkqzjd1+PjD9zjyZ/Ob3hNLyTEICOLEWs19+qsSlOBcR8xFxMaLYr5Rb4XaK5yLickTMPbJVyvHfB05HxPmIuDQpnmpWyoc+uzq+cvPHN37++tszpy58/tV3s5s1MGvPR0R/M+3v9FPmnZT3y/HGuFtk/8a4zPRA/0F5nKfcaa8XFXYa++c1irzeSefnm9vDSW70Gs1JdrobxfjmIF1wOO7s1ymecL+xVRy32utFdod5kZ291NfuXvrbtjccpTqtst6HRfkYjfYzjbd322k+mw+KbA5G5Xiqm7fau5Mcl1leLpp5r1X0sX6YV/r/7c3uYHs3G7e3ht18kN2s1V+o1W9V61t5qz1q36g2+q1bN7KlTm9yWnXUbvRvd/K802vXmnl/OVvqNJvVej1butNe7zYGWb1eu167Vr25XO5dzV69927Wa2VLk3y5O9gedXvDbCPfytIzlrOV2vUXl7Mr9ezt1bVs7a27d1fX3nn/znv3Xlp9/ZXypD+1lS2tXFtZqdavVVfqy8d3/pP/9f9p/h+XTU9x/nAolVk3AHD8WP8D0/fwH8847uv/sP6fCuv/kz1/OBTrfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE+v7hS9eK3YW0/GFcvypcuiZ8rgSEXMR8fAvzMfpAzXnyzoLf3P+wh96+KYSRYXJNc6U2/mIuF1uvz79uF8FAAAAeHJ9+dHlT9NqPf1YnHVDHKV002bu4gdTqleJiIXFH6ZQJcqbTfHs4btKJr/fp2J3StWKG1hnp1Qs3XI7Na1q/8r8gTj7SFRSzB1pOwAAwJE4uBI42lUIAAAAR+mTWTfAbBTvtJafxS8/wH8mRfmG4LkDRwAAAMAxVJl1AwAAAMBjV6z/ff8fAAAAPNnS9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAb+zcTU7qUBQH8NOWvsf7yiPGuVtxBstwCQ4dGhbgJlgCbsENsAacuQQDhrYoNZgY+xXJ75e0t7chf06ZnXtJAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALj3my9n97cVd05zNtpl2ngYAAAA4Zp0vZ8XFpJz/qe7/q26dVfMkItKIONa7Z/GjlplVOfkHn8/f1fAQUSTsvuNndfyOiMvqeP7f9a8AAAAAp2s1X0zLbr08TYYuiO6NX6/KRZv071VLyUlE5JOnrwdss4NJujudt1BWYZc8ipuW0ooFrHFLYeWS26ittE/JasP4YEjKIe21HAAAoBf1TqDfLgQAAIA+XQ9dAMNIYr+Vud8LLv55/7Yh+Ks2AwAAAL6hZOgCAAAAgM4V/b/3/wEAAMBpK9//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJfW+XK2mi+mTXM222baeRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF/bnHQVCIAzCYO/6zmTuf1hp0NTUpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf3yiqOADg39lfWJRYq+mhxmjiQS9SFgS5etA0HvwTTJqyYHXxB/QghJj04s30ZsLF6NEYE0298T9whoQL3jj0gIknD5qZnWkfK+giMLPtfj7Jm/ed2WHe9w1N0++8aQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMrO23txO9/Mj+JWeezG3StreX9zrM9d27q1lLc8zupMen94Kd3JFptLBAAAgNnRrur7iLjd3V7J+9Z8Uf93q3Pymv+7I6O4qufH6/6qr2r/vP36y50XdgeaH42TX/Ts+nBw7J+pdJ7cLKfbs/95Rqe488Wzl3bxH9J6b/P5nW5xP7Ovr19/p1eEh+rIFgD4P45WfRlUPw/lfb/JxACYGZ2k8K7q//Z8szkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1KG3GU9XcRYRS529OHfz7pW1oh/bv7Z1a6lqp65e3UqvmV+iGxFn14eDY3VNZB+4eOnyx6vD4eDCfYO5iHjAR48evBwRj//K8XD/6oMJzol47HMX1Bi0yq/1aclnfwQNf2MCAODA6ZYtr+tvd7dX8mPZQsRf399b/7+WxJHW/2N9Wv/f+fDUjXSstP7v1zbDKfHNkQd+tLxx/rPli5cuv7F+fvXc4NzgkzeP99/qnzh98uTp5eJZybInJgAAADyaXtnS+r+1ELEztv5/OIljwvr/82/7X6ZjtWe5/v8Xe4t+TWcCAAAw25575Y/fs/scz3q9+GJ1Y+NCf7Td3T8+2jaQ6kM7VLa0/m8vNJ0VAAAAUIedzeye9f8zSRwTrv8/88OLP6XXbEfEXLn+f3Tt0+GZ+qbTkD8nOquOXyd+4lMFAABgqs2VLV3/7xbv/7d2X3loRcTrrxZhVv4ZwInq//a7X/2YjpW+/3+ixjlOo9bi6H4U/WJEZ7HpjAAAADjInipbXuz/1t1e+ejnw+/3vP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULe/AwAA///lFT7r") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 1m29.301121515s ago: executing program 4 (id=6080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) 1m28.47916339s ago: executing program 4 (id=6095): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m28.299131968s ago: executing program 33 (id=6095): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.268748608s ago: executing program 3 (id=7144): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000002840)={'veth0_to_batadv\x00', &(0x7f0000002780)=@ethtool_eeprom={0xb, 0x4, 0x5, 0x3c, "426426cc58c03d9d39ab5630a52118dcfaaca12bb0bec8ba40dd9b5f36c919e1b93153f8f4e7a487551934c35d6ba4a3e84623183199fddf6b1ac492"}}) 6.99847498s ago: executing program 5 (id=7146): mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 5.772528672s ago: executing program 3 (id=7154): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x5, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}, {0x1, 0x7, 0xe, 0x1}, {0xfff9, 0x9, 0x9, 0x10000}, {0x598, 0xc, 0xff}, {0x7f, 0x80, 0x6, 0x8d7b}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0xfffffffd, 0x0, 0xffffffff}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x34}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="0003ffffffff03000000030000002a000980080002"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x8050) syz_usb_control_io$uac1(r0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 4.510292016s ago: executing program 2 (id=7168): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fdffffff00000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bind$tipc(r0, 0x0, 0x0) dup3(r1, r0, 0x0) 4.339565404s ago: executing program 2 (id=7169): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x3, 'w'}]}}}], 0x18}}], 0x1, 0x46000) 4.264294577s ago: executing program 2 (id=7170): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 4.126261783s ago: executing program 3 (id=7171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x0, 0x0) readv(r4, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000500)=""/143, 0x8f}], 0x2) 3.861984314s ago: executing program 6 (id=7176): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa3) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 3.859173915s ago: executing program 0 (id=7177): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)={0x14, 0x35, 0x1, 0x70bd29, 0x25dfdbfe, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40008010) 3.825177166s ago: executing program 0 (id=7178): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) 3.824779956s ago: executing program 5 (id=7179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 3.824303036s ago: executing program 6 (id=7180): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000002840)={'veth0_to_batadv\x00', &(0x7f0000002780)=@ethtool_eeprom={0xb, 0x4, 0x5, 0x3c, "426426cc58c03d9d39ab5630a52118dcfaaca12bb0bec8ba40dd9b5f36c919e1b93153f8f4e7a487551934c35d6ba4a3e84623183199fddf6b1ac492"}}) 3.186130954s ago: executing program 3 (id=7181): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1b, &(0x7f0000000fc0)={0x25, 0x10000, 0x89}) 3.137142606s ago: executing program 3 (id=7182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 3.136771116s ago: executing program 3 (id=7183): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xe}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0x1, 0xff, 0x8, 0x82, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf6}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x81, 0xffffffffefffff15, 0x3, 0x5, 0x3, 0xb37f]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) 3.002389552s ago: executing program 0 (id=7184): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.925191975s ago: executing program 5 (id=7185): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2.903015396s ago: executing program 5 (id=7186): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2.866860777s ago: executing program 6 (id=7187): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x5, 0x1, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.865930307s ago: executing program 5 (id=7188): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 2.503457053s ago: executing program 6 (id=7189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(r0, 0x24, 0x0) 1.198407939s ago: executing program 0 (id=7190): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 1.158847181s ago: executing program 2 (id=7191): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0xc0}}], 0x1, 0x80) 1.15861708s ago: executing program 0 (id=7192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), 0x0}, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 1.158541731s ago: executing program 6 (id=7193): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0xfffffffffffffffc, &(0x7f0000000280)) 1.126296772s ago: executing program 2 (id=7194): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x183281) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0xf, 0x5, 0x9, 0x0, 0x10000, 0x0}) 1.125840262s ago: executing program 0 (id=7195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 1.101747063s ago: executing program 6 (id=7196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) 1.009831737s ago: executing program 2 (id=7197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xd, 0x3, 0x8, [{@multicast2, 0x80000}]}]}}}], 0x20}, 0x4000810) 0s ago: executing program 5 (id=7198): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000002840)={'veth0_to_batadv\x00', &(0x7f0000002780)=@ethtool_eeprom={0xb, 0x4, 0x5, 0x3c, "426426cc58c03d9d39ab5630a52118dcfaaca12bb0bec8ba40dd9b5f36c919e1b93153f8f4e7a487551934c35d6ba4a3e84623183199fddf6b1ac492"}}) kernel console output (not intermixed with test programs): 374.101493][T11490] x_tables: duplicate underflow at hook 1 [ 374.155877][T11490] loop0: detected capacity change from 0 to 512 [ 374.172604][T11490] FAT-fs (loop0): bogus number of FAT sectors [ 374.178752][T11490] FAT-fs (loop0): Can't find a valid FAT filesystem [ 374.280485][ T28] audit: type=1326 audit(372.033:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 374.326884][ T28] audit: type=1326 audit(372.033:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 374.357180][ T28] audit: type=1400 audit(374.313:733): avc: denied { map } for pid=11496 comm="syz.5.4426" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.374746][T11503] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4430'. [ 374.390944][ T6162] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 375.051000][T11530] SELinux: security_context_str_to_sid () failed with errno=-22 [ 378.194282][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4462'. [ 378.676482][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4477'. [ 378.982994][ T28] audit: type=1326 audit(378.963:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.5.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 379.018607][T11622] loop0: detected capacity change from 0 to 40427 [ 379.024559][ T28] audit: type=1326 audit(378.963:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.5.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 379.055507][T11622] F2FS-fs (loop0): fault_type options not supported [ 379.056577][ T28] audit: type=1326 audit(378.983:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.5.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 379.065304][T11622] F2FS-fs (loop0): fault_injection options not supported [ 379.085948][ T28] audit: type=1326 audit(378.983:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.5.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 379.095333][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4486'. [ 379.115250][ T28] audit: type=1326 audit(378.983:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.5.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 379.167827][T11622] F2FS-fs (loop0): Image doesn't support compression [ 379.181225][ T28] audit: type=1326 audit(378.983:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.5.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 379.206659][T11622] F2FS-fs (loop0): invalid crc value [ 379.210755][T11649] loop5: detected capacity change from 0 to 512 [ 379.218782][T11649] EXT4-fs: Ignoring removed mblk_io_submit option [ 379.226065][T11649] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 379.226223][T11622] F2FS-fs (loop0): Found nat_bits in checkpoint [ 379.236008][ T28] audit: type=1326 audit(378.983:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.5.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 379.265636][ T28] audit: type=1326 audit(378.993:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.5.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 379.288837][T11649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 379.307532][T11649] EXT4-fs (loop5): orphan cleanup on readonly fs [ 379.312871][T11651] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4489'. [ 379.323173][T11649] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4488: bg 0: block 361: padding at end of block bitmap is not set [ 379.377424][T11622] F2FS-fs (loop0): Start checkpoint disabled! [ 379.397825][T11649] EXT4-fs (loop5): Remounting filesystem read-only [ 379.410266][T11622] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 379.418588][T11649] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 379.470432][T11649] EXT4-fs (loop5): Remounting filesystem read-only [ 379.476960][T11649] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.4488: attempt to clear invalid blocks 33619980 len 1 [ 379.640251][T11649] EXT4-fs (loop5): Remounting filesystem read-only [ 379.656787][T11649] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.4488: invalid indirect mapped block 1811939328 (level 0) [ 379.742385][T11649] EXT4-fs (loop5): Remounting filesystem read-only [ 379.753580][T11649] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.4488: invalid indirect mapped block 2185560079 (level 1) [ 379.767980][T11649] EXT4-fs (loop5): Remounting filesystem read-only [ 379.784847][T11649] EXT4-fs (loop5): 1 truncate cleaned up [ 379.790634][T11649] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 379.998112][T11678] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.4488: dx entry: limit 0 != root limit 125 [ 380.010069][T11678] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.4488: Corrupt directory, running e2fsck is recommended [ 380.298494][T11682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4501'. [ 380.571298][ T7739] EXT4-fs (loop5): unmounting filesystem. [ 380.839016][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4513'. [ 380.971245][T11717] syz.5.4517[11717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.971318][T11717] syz.5.4517[11717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.071552][T11724] loop0: detected capacity change from 0 to 512 [ 381.107595][T11724] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.117029][T11724] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 381.202279][T11724] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 381.289321][T11724] EXT4-fs (loop0): orphan cleanup on readonly fs [ 381.297679][T11724] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4519: bg 0: block 361: padding at end of block bitmap is not set [ 381.337759][T11724] EXT4-fs (loop0): Remounting filesystem read-only [ 381.349311][T11724] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 381.359537][T11724] EXT4-fs (loop0): Remounting filesystem read-only [ 381.371859][T11724] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.4519: attempt to clear invalid blocks 33619980 len 1 [ 381.388525][T11724] EXT4-fs (loop0): Remounting filesystem read-only [ 381.395519][T11724] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4519: invalid indirect mapped block 1811939328 (level 0) [ 381.409934][T11724] EXT4-fs (loop0): Remounting filesystem read-only [ 381.416543][T11724] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4519: invalid indirect mapped block 2185560079 (level 1) [ 381.478897][T11724] EXT4-fs (loop0): Remounting filesystem read-only [ 381.492049][T11724] EXT4-fs (loop0): 1 truncate cleaned up [ 381.499144][T11739] bridge: RTM_NEWNEIGH with invalid ether address [ 381.505815][T11724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 381.591014][T11743] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4524'. [ 381.763309][T11747] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.4519: dx entry: limit 0 != root limit 125 [ 381.775278][T11747] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4519: Corrupt directory, running e2fsck is recommended [ 381.982717][T11745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4527'. [ 382.210800][T11761] syz.2.4531[11761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.210875][T11761] syz.2.4531[11761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.016061][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4537'. [ 383.045138][T11777] netlink: 'syz.3.4537': attribute type 16 has an invalid length. [ 383.053030][T11777] netlink: 'syz.3.4537': attribute type 17 has an invalid length. [ 383.065135][T11777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.577375][ T8052] EXT4-fs (loop0): unmounting filesystem. [ 383.681342][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4542'. [ 383.692674][T11792] 9pnet_fd: Insufficient options for proto=fd [ 383.978399][T11809] loop0: detected capacity change from 0 to 512 [ 383.985252][T11809] EXT4-fs: Ignoring removed mblk_io_submit option [ 383.992194][T11809] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 384.011059][T11809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 384.021250][T11809] EXT4-fs (loop0): orphan cleanup on readonly fs [ 384.027845][T11809] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4553: bg 0: block 361: padding at end of block bitmap is not set [ 384.043194][T11812] syz.4.4552[11812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.043263][T11812] syz.4.4552[11812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.055279][T11809] EXT4-fs (loop0): Remounting filesystem read-only [ 384.073575][T11809] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 384.082684][T11809] EXT4-fs (loop0): Remounting filesystem read-only [ 384.089214][T11809] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.4553: attempt to clear invalid blocks 33619980 len 1 [ 384.103481][T11809] EXT4-fs (loop0): Remounting filesystem read-only [ 384.113562][T11809] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4553: invalid indirect mapped block 1811939328 (level 0) [ 384.127850][T11809] EXT4-fs (loop0): Remounting filesystem read-only [ 384.134447][T11809] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4553: invalid indirect mapped block 2185560079 (level 1) [ 384.149056][T11809] EXT4-fs (loop0): Remounting filesystem read-only [ 384.155994][T11809] EXT4-fs (loop0): 1 truncate cleaned up [ 384.161878][T11809] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 384.315714][T11815] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.4553: dx entry: limit 0 != root limit 125 [ 384.327715][T11815] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4553: Corrupt directory, running e2fsck is recommended [ 385.417614][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4557'. [ 385.578440][T11835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4562'. [ 385.594974][T11831] 9pnet_fd: Insufficient options for proto=fd [ 385.614023][ T8052] EXT4-fs (loop0): unmounting filesystem. [ 386.133706][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4560'. [ 386.243981][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4573'. [ 386.332369][T11869] loop3: detected capacity change from 0 to 512 [ 386.358780][T11869] EXT4-fs: Ignoring removed mblk_io_submit option [ 386.375604][T11869] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 386.397748][T11869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 386.410081][T11869] EXT4-fs (loop3): orphan cleanup on readonly fs [ 386.416771][T11869] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4575: bg 0: block 361: padding at end of block bitmap is not set [ 386.432648][T11869] EXT4-fs (loop3): Remounting filesystem read-only [ 386.439539][T11869] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 386.448485][T11869] EXT4-fs (loop3): Remounting filesystem read-only [ 386.455096][T11869] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.4575: attempt to clear invalid blocks 33619980 len 1 [ 386.468692][T11869] EXT4-fs (loop3): Remounting filesystem read-only [ 386.477312][T11869] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4575: invalid indirect mapped block 1811939328 (level 0) [ 386.491619][T11869] EXT4-fs (loop3): Remounting filesystem read-only [ 386.498158][T11869] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4575: invalid indirect mapped block 2185560079 (level 1) [ 386.512362][T11869] EXT4-fs (loop3): Remounting filesystem read-only [ 386.518980][T11869] EXT4-fs (loop3): 1 truncate cleaned up [ 386.524715][T11869] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 386.550163][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4576'. [ 386.567005][T11874] 9pnet_fd: Insufficient options for proto=fd [ 386.637006][ T28] audit: type=1400 audit(386.613:742): avc: denied { bind } for pid=11877 comm="syz.4.4579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 386.726813][T11882] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.4575: dx entry: limit 0 != root limit 125 [ 386.738706][T11882] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4575: Corrupt directory, running e2fsck is recommended [ 386.834547][T11880] 9pnet_fd: Insufficient options for proto=fd [ 386.992345][ T28] audit: type=1400 audit(386.613:743): avc: denied { name_bind } for pid=11877 comm="syz.4.4579" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 387.278482][T11890] syz.0.4583[11890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.278560][T11890] syz.0.4583[11890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.309678][ T28] audit: type=1400 audit(386.613:744): avc: denied { node_bind } for pid=11877 comm="syz.4.4579" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 387.344441][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4584'. [ 387.455872][ T8133] EXT4-fs (loop3): unmounting filesystem. [ 387.474990][T11902] 9pnet_fd: Insufficient options for proto=fd [ 387.569772][T11914] 9pnet_fd: Insufficient options for proto=fd [ 387.913946][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4598'. [ 387.987657][T11930] syz.5.4602[11930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.987732][T11930] syz.5.4602[11930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.070827][T11944] syz.5.4608[11944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.090997][T11944] syz.5.4608[11944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.395134][T11956] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4612'. [ 388.504279][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4613'. [ 388.513607][T11962] syz.5.4615[11962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.513679][T11962] syz.5.4615[11962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.914781][T11975] __nla_validate_parse: 1 callbacks suppressed [ 388.914804][T11975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4620'. [ 388.984132][T11985] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4624'. [ 389.011934][T11987] syz.3.4625[11987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.012012][T11987] syz.3.4625[11987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.800141][T11996] fuse: Unknown parameter 'euid' [ 389.847218][T11998] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11998 comm=syz.0.4629 [ 389.860580][T11998] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11998 comm=syz.0.4629 [ 390.261512][T12007] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4631'. [ 390.271604][T12007] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4631'. [ 390.280826][T12007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4631'. [ 390.913078][T12021] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4638'. [ 390.913235][T12025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4635'. [ 391.178520][T12037] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12037 comm=syz.0.4644 [ 391.191703][T12037] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12037 comm=syz.0.4644 [ 391.221904][T12036] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4640'. [ 391.734658][T12058] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4649'. [ 391.744047][T12058] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4649'. [ 392.279999][T12067] 9pnet_fd: Insufficient options for proto=fd [ 392.382282][T12076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12076 comm=syz.5.4656 [ 392.395877][T12076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12076 comm=syz.5.4656 [ 393.718239][T12100] 9pnet_fd: Insufficient options for proto=fd [ 393.981983][T12124] __nla_validate_parse: 4 callbacks suppressed [ 393.982038][T12124] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4672'. [ 394.701092][T12139] 9pnet_fd: Insufficient options for proto=fd [ 394.723718][T12145] bpf_get_probe_write_proto: 4 callbacks suppressed [ 394.723738][T12145] syz.4.4684[12145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.731950][T12145] syz.4.4684[12145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.161224][T12170] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4694'. [ 395.541964][T12194] netlink: 'syz.3.4700': attribute type 16 has an invalid length. [ 395.549891][T12194] netlink: 'syz.3.4700': attribute type 17 has an invalid length. [ 395.571376][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.928851][ T28] audit: type=1400 audit(395.903:745): avc: denied { create } for pid=12199 comm="syz.2.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 395.963719][ T28] audit: type=1400 audit(395.913:746): avc: denied { bind } for pid=12199 comm="syz.2.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 395.991754][T12210] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4713'. [ 396.839628][T12224] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4717'. [ 396.848723][T12224] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4717'. [ 396.857827][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4717'. [ 397.154336][ T337] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 397.339720][ T337] usb 1-1: Using ep0 maxpacket: 32 [ 397.345657][T12243] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4727'. [ 397.460594][ T337] usb 1-1: unable to get BOS descriptor or descriptor too short [ 397.469731][ T337] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 397.478190][ T337] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 397.488519][ T337] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 397.497649][ T337] usb 1-1: config 128 has no interface number 0 [ 397.503960][ T337] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 397.515191][ T337] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.515796][T12254] syz.3.4728[12254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.525413][ T337] usb 1-1: config 128 interface 127 has no altsetting 0 [ 397.526997][ T337] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 397.613619][T12257] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4729'. [ 397.961932][T12258] netlink: 'syz.4.4730': attribute type 16 has an invalid length. [ 397.970037][T12258] netlink: 'syz.4.4730': attribute type 17 has an invalid length. [ 398.003108][T12258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.011341][T12258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.191879][T12254] syz.3.4728[12254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.213300][ T337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.332357][ T337] usb 1-1: Product: syz [ 398.355189][ T337] usb 1-1: Manufacturer: syz [ 398.371001][ T337] usb 1-1: SerialNumber: syz [ 399.085568][ T337] usb 1-1: USB disconnect, device number 26 [ 399.102487][ T6162] udevd[6162]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 399.836595][T12297] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4742'. [ 399.896895][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4745'. [ 399.916606][T12300] netlink: 'syz.2.4745': attribute type 16 has an invalid length. [ 399.924606][T12300] netlink: 'syz.2.4745': attribute type 17 has an invalid length. [ 399.951650][T12300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 399.965966][T12302] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4746'. [ 400.553684][T12312] syz.3.4751[12312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.553762][T12312] syz.3.4751[12312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.590205][T12316] syz.5.4748[12316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.601722][T12316] syz.5.4748[12316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.022321][ T28] audit: type=1400 audit(401.943:747): avc: denied { setopt } for pid=12338 comm="syz.5.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 402.346735][T12351] 9pnet_fd: Insufficient options for proto=fd [ 402.364117][T12352] syz.4.4757[12352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.364202][T12352] syz.4.4757[12352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.425986][T12352] loop4: detected capacity change from 0 to 128 [ 402.997598][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4767'. [ 403.009298][T12358] netlink: 'syz.2.4767': attribute type 16 has an invalid length. [ 403.017225][T12358] netlink: 'syz.2.4767': attribute type 17 has an invalid length. [ 403.030705][T12358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.169745][T12352] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 403.401127][T12368] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12368 comm=syz.2.4770 [ 403.414508][T12368] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12368 comm=syz.2.4770 [ 403.463594][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4774'. [ 403.473554][T12375] syz.3.4771[12375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.473622][T12375] syz.3.4771[12375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.522136][T12377] syz.5.4775[12377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.535856][T12377] syz.5.4775[12377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.666376][ T28] audit: type=1326 audit(403.643:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.5.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 403.702560][ T28] audit: type=1326 audit(403.643:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.5.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 403.726142][ T28] audit: type=1326 audit(403.653:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.5.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 403.749877][ T28] audit: type=1326 audit(403.653:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.5.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 403.774531][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4786'. [ 403.800310][ T28] audit: type=1326 audit(403.653:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.5.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 404.129439][T12425] fuse: Unknown parameter 'euid' [ 404.599642][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4799'. [ 404.698171][T12441] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4804'. [ 405.130399][T12459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12459 comm=syz.3.4809 [ 405.143802][T12459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12459 comm=syz.3.4809 [ 405.180244][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4811'. [ 405.987905][T12474] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4817'. [ 406.015541][T12481] bpf_get_probe_write_proto: 4 callbacks suppressed [ 406.015570][T12481] syz.3.4821[12481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.030032][T12481] syz.3.4821[12481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.145647][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4822'. [ 406.217908][T12489] fuse: Unknown parameter 'euid' [ 406.488115][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4830'. [ 406.591550][T12508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12508 comm=syz.5.4829 [ 406.608254][T12508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12508 comm=syz.5.4829 [ 407.063892][T12513] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4833'. [ 407.611754][T12534] syz.0.4843[12534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.611832][T12534] syz.0.4843[12534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.320761][T12539] fuse: Unknown parameter 'euid' [ 408.350708][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4841'. [ 408.380251][T12540] netlink: 'syz.5.4841': attribute type 16 has an invalid length. [ 408.388721][T12540] netlink: 'syz.5.4841': attribute type 17 has an invalid length. [ 408.729978][T12540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 408.737278][T12540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 408.841096][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): 5@ÿ: link becomes ready [ 408.977573][T12540] syz.5.4841 (12540) used greatest stack depth: 20272 bytes left [ 409.010312][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 409.023917][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 409.060824][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 409.094146][T12554] syz.5.4847[12554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.094220][T12554] syz.5.4847[12554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.206016][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.311146][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 409.321351][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.332289][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.357117][T12550] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4848'. [ 409.417470][T12561] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4851'. [ 409.817350][T12581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12581 comm=syz.0.4858 [ 409.894688][T12581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12581 comm=syz.0.4858 [ 411.255495][T12630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4879'. [ 411.533758][ T28] audit: type=1400 audit(411.513:753): avc: denied { bind } for pid=12635 comm="syz.0.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 411.579220][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4883'. [ 411.618683][T12646] syz.2.4886[12646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.618757][T12646] syz.2.4886[12646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.641036][T12646] syz.2.4886[12646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.660199][T12646] syz.2.4886[12646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.764682][T12662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4891'. [ 411.845367][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4893'. [ 411.855682][T12667] netlink: 'syz.2.4893': attribute type 16 has an invalid length. [ 411.863617][T12667] netlink: 'syz.2.4893': attribute type 17 has an invalid length. [ 411.876639][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 412.130932][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4896'. [ 412.333586][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4907'. [ 412.374965][T12698] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4909'. [ 412.406915][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4910'. [ 412.820631][T12718] loop3: detected capacity change from 0 to 16 [ 412.831643][T12718] erofs: Unknown parameter '01777777777777777777777ÿÿÿÿ000000000000000000000000000000000000000000000000000000000000000000' [ 413.747792][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4922'. [ 414.287213][T12749] syz.5.4920[12749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.287294][T12749] syz.5.4920[12749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.397280][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 414.422232][T12758] netlink: 'syz.2.4924': attribute type 16 has an invalid length. [ 414.430098][T12758] netlink: 'syz.2.4924': attribute type 17 has an invalid length. [ 414.443530][T12758] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 415.564465][T12791] syz.0.4943[12791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.564542][T12791] syz.0.4943[12791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.734516][T12796] fuse: Unknown parameter 'euid' [ 415.967144][T12803] syz.2.4945[12803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.967238][T12803] syz.2.4945[12803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.975799][T12855] tipc: Started in network mode [ 416.999997][T12855] tipc: Node identity ff75, cluster identity 4711 [ 417.006586][T12855] tipc: Enabling of bearer rejected, failed to enable media [ 418.315126][T12910] __nla_validate_parse: 4 callbacks suppressed [ 418.315143][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4994'. [ 418.330250][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4994'. [ 418.423015][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5005'. [ 418.649986][T12940] 9pnet_fd: Insufficient options for proto=fd [ 418.893513][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5015'. [ 418.906128][T12963] netlink: 'syz.3.5015': attribute type 16 has an invalid length. [ 418.914032][T12963] netlink: 'syz.3.5015': attribute type 17 has an invalid length. [ 418.928017][T12963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.173202][T12969] 9pnet_fd: Insufficient options for proto=fd [ 419.200603][T12971] syz.0.5022[12971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.200674][T12971] syz.0.5022[12971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.497488][T12975] fuse: Unknown parameter 'euid' [ 419.852718][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5031'. [ 420.314671][T13009] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5038'. [ 420.407123][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5048'. [ 420.470226][T13049] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5056'. [ 420.475941][ T28] audit: type=1400 audit(420.453:754): avc: denied { mounton } for pid=13050 comm="syz.3.5057" path="/418/file0" dev="tmpfs" ino=2186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 420.574681][T13062] loop4: detected capacity change from 0 to 1024 [ 420.589401][T13062] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 420.647252][T13062] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 420.674038][T13077] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5068'. [ 420.683728][T13062] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 420.701387][T13062] EXT4-fs (loop4): Remounting filesystem read-only [ 420.707619][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5069'. [ 420.718167][ T7917] EXT4-fs (loop4): unmounting filesystem. [ 420.799994][T13094] syz.4.5076[13094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.800065][T13094] syz.4.5076[13094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.079611][T13103] fuse: Unknown parameter 'euid' [ 422.439140][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.460475][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 422.531579][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 422.540103][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 422.548267][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 422.649408][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 422.733952][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 422.776861][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 422.805105][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 423.717979][T13188] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5111'. [ 423.758545][ T28] audit: type=1326 audit(423.733:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.5.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 423.846919][ T28] audit: type=1326 audit(423.763:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.5.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 423.870467][ T28] audit: type=1326 audit(423.763:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.5.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 424.213475][T13221] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5125'. [ 425.156600][T13237] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 426.576695][ T28] audit: type=1400 audit(426.553:758): avc: denied { write } for pid=13287 comm="syz.2.5151" path="socket:[57431]" dev="sockfs" ino=57431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 426.621324][ T19] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 427.166484][ T6] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 427.252531][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 427.300790][ T19] usb 5-1: unable to get BOS descriptor or descriptor too short [ 427.309231][ T19] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 427.318705][ T19] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 427.329026][ T19] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 427.338147][ T19] usb 5-1: config 128 has no interface number 0 [ 427.344733][ T19] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 427.357319][ T19] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.367870][ T19] usb 5-1: config 128 interface 127 has no altsetting 0 [ 427.381060][ T19] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 427.393527][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.404498][ T19] usb 5-1: Product: syz [ 427.408890][ T19] usb 5-1: Manufacturer: syz [ 427.413701][ T19] usb 5-1: SerialNumber: syz [ 427.438239][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.480848][ T6] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.491852][ T6] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.504767][ T6] usb 6-1: config 0 interface 0 has no altsetting 0 [ 427.511735][ T6] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 427.529335][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.564628][ T6] usb 6-1: config 0 descriptor?? [ 427.631364][ T19] usb 5-1: USB disconnect, device number 35 [ 427.648596][ T6162] udevd[6162]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 427.659991][T13338] bridge: RTM_NEWNEIGH with invalid ether address [ 427.719886][T13341] syz.0.5171[13341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.719979][T13341] syz.0.5171[13341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.986579][ T6] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 428.005073][ T6] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 428.012162][ T6] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 428.019211][ T6] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 428.026290][ T6] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 428.033968][ T6] sunplus 0003:04FC:05D8.0006: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.5-1/input0 [ 428.148007][T13350] loop4: detected capacity change from 0 to 1024 [ 428.155188][T13350] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 428.171670][T13350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 428.182856][T13350] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 428.198643][T13350] EXT4-fs (loop4): Remounting filesystem read-only [ 428.200412][ T19] usb 6-1: USB disconnect, device number 7 [ 428.213108][ T7917] EXT4-fs (loop4): unmounting filesystem. [ 428.689662][T13379] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5188'. [ 428.855482][T13399] loop5: detected capacity change from 0 to 512 [ 428.862995][T13399] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 428.875332][T13400] syz.0.5191[13400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.875403][T13400] syz.0.5191[13400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.903593][ T28] audit: type=1400 audit(428.883:759): avc: denied { mounton } for pid=13398 comm="syz.5.5197" path="/520/file0/file0" dev="loop5" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 428.970589][T13407] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5200'. [ 429.506680][T13432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5210'. [ 429.518599][T13432] netlink: 'syz.5.5210': attribute type 16 has an invalid length. [ 429.526509][T13432] netlink: 'syz.5.5210': attribute type 17 has an invalid length. [ 429.540091][T13432] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 429.731287][ T28] audit: type=1326 audit(429.713:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 429.782217][T13436] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5212'. [ 429.814690][ T28] audit: type=1326 audit(429.753:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 429.825138][T13444] syz.0.5216[13444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.837742][T13444] syz.0.5216[13444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.842247][ T28] audit: type=1326 audit(429.753:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 430.364309][T13453] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5217'. [ 430.558892][T13463] syz.3.5220[13463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 430.559294][T13463] syz.3.5220[13463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 430.584370][T13463] loop3: detected capacity change from 0 to 128 [ 430.605305][T13463] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 431.292370][ T28] audit: type=1326 audit(431.273:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.2.5225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e2a18f749 code=0x0 [ 431.465497][T13485] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5231'. [ 431.497830][ T28] audit: type=1326 audit(431.473:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.520997][T13483] syz.3.5226[13483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.521059][T13483] syz.3.5226[13483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.535492][ T28] audit: type=1326 audit(431.473:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.570662][ T28] audit: type=1326 audit(431.473:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.593756][ T28] audit: type=1326 audit(431.473:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.616918][ T28] audit: type=1326 audit(431.473:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.646032][ T28] audit: type=1326 audit(431.473:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.669420][ T28] audit: type=1326 audit(431.503:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.692513][ T28] audit: type=1326 audit(431.503:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.715948][ T28] audit: type=1326 audit(431.533:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.803151][ T28] audit: type=1326 audit(431.533:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.827558][ T28] audit: type=1326 audit(431.533:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.5.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 431.919621][ T39] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 432.029462][T13503] loop0: detected capacity change from 0 to 128 [ 432.053386][T13503] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 432.099813][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 432.110963][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.121315][ T39] usb 6-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 432.151723][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.178073][ T39] usb 6-1: config 0 descriptor?? [ 432.436367][ T39] usbhid 6-1:0.0: can't add hid device: -71 [ 432.444378][ T39] usbhid: probe of 6-1:0.0 failed with error -71 [ 432.460686][ T39] usb 6-1: USB disconnect, device number 8 [ 433.509571][T13534] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5246'. [ 433.519189][T13534] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5246'. [ 433.528268][T13534] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5246'. [ 433.730668][T13539] bpf_get_probe_write_proto: 4 callbacks suppressed [ 433.730687][T13539] syz.0.5250[13539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.762002][T13539] syz.0.5250[13539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.327076][T13569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 434.380878][T13540] syz.3.5249[13540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.380954][T13540] syz.3.5249[13540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.482178][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5270'. [ 435.801203][T13598] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5273'. [ 436.581402][T13603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 436.744519][T13619] bridge: RTM_NEWNEIGH with invalid ether address [ 436.763059][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5286'. [ 437.368783][T13632] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5287'. [ 437.378520][T13632] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5287'. [ 437.387649][T13632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5287'. [ 438.116899][T13639] loop2: detected capacity change from 0 to 512 [ 438.176362][T13649] syz.5.5293[13649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.176433][T13649] syz.5.5293[13649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.213772][T13645] syz.0.5283[13645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.225300][T13645] syz.0.5283[13645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.257083][T13639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 438.270567][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.714578][ T28] audit: type=1400 audit(438.693:775): avc: denied { write } for pid=13638 comm="syz.2.5289" path="/470/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 438.749916][T13639] syz.2.5289[13639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.749964][T13639] syz.2.5289[13639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.847492][ T7980] EXT4-fs (loop2): unmounting filesystem. [ 439.869211][T13684] loop5: detected capacity change from 0 to 512 [ 439.880504][T13684] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 441.041820][T13699] syz.3.5306[13699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.041899][T13699] syz.3.5306[13699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.187144][T13702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.215480][T13704] bridge: RTM_NEWNEIGH with invalid ether address [ 441.254366][T13708] syz.2.5312[13708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.254421][T13708] syz.2.5312[13708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.784135][T13717] 9pnet_fd: Insufficient options for proto=fd [ 441.972206][T13721] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5316'. [ 442.294116][T13735] 9pnet_fd: Insufficient options for proto=fd [ 442.314897][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 442.471129][T13747] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5328'. [ 442.819679][T13757] loop3: detected capacity change from 0 to 512 [ 442.826325][T13757] EXT4-fs: Ignoring removed mblk_io_submit option [ 442.866771][T13755] syz.2.5326[13755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.866843][T13755] syz.2.5326[13755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.881760][T13757] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 443.048830][T13757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 443.117315][T13757] EXT4-fs (loop3): orphan cleanup on readonly fs [ 443.124356][T13757] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5331: bg 0: block 361: padding at end of block bitmap is not set [ 443.139093][T13757] EXT4-fs (loop3): Remounting filesystem read-only [ 443.149464][T13757] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 443.158596][T13757] EXT4-fs (loop3): Remounting filesystem read-only [ 443.165246][T13757] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.5331: attempt to clear invalid blocks 33619980 len 1 [ 443.246987][T13757] EXT4-fs (loop3): Remounting filesystem read-only [ 443.253896][T13757] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5331: invalid indirect mapped block 1811939328 (level 0) [ 443.271419][T13757] EXT4-fs (loop3): Remounting filesystem read-only [ 443.278209][T13757] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5331: invalid indirect mapped block 2185560079 (level 1) [ 443.307620][T13766] 9pnet_fd: Insufficient options for proto=fd [ 443.314105][T13757] EXT4-fs (loop3): Remounting filesystem read-only [ 443.433308][T13757] EXT4-fs (loop3): 1 truncate cleaned up [ 443.439097][T13757] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 443.821518][T13775] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.5331: dx entry: limit 0 != root limit 125 [ 443.833522][T13775] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5331: Corrupt directory, running e2fsck is recommended [ 444.578430][ T8133] EXT4-fs (loop3): unmounting filesystem. [ 444.629612][ T1053] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 444.684245][T13799] loop3: detected capacity change from 0 to 1024 [ 444.700584][T13799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 444.727244][T13799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 444.830636][ T1053] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.841599][ T1053] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.854639][ T1053] usb 1-1: config 0 interface 0 has no altsetting 0 [ 444.861317][ T1053] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 444.870529][ T1053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.893739][ T1053] usb 1-1: config 0 descriptor?? [ 446.148090][ T1053] usbhid 1-1:0.0: can't add hid device: -71 [ 446.154850][ T1053] usbhid: probe of 1-1:0.0 failed with error -71 [ 446.166814][ T8133] EXT4-fs (loop3): unmounting filesystem. [ 446.189313][ T1053] usb 1-1: USB disconnect, device number 27 [ 446.220871][T13825] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5354'. [ 446.224169][T13821] loop5: detected capacity change from 0 to 1024 [ 446.262536][T13821] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 446.301349][T13821] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 446.329611][ T7739] EXT4-fs (loop5): unmounting filesystem. [ 446.370273][T13833] syz.2.5355[13833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.370341][T13833] syz.2.5355[13833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.862649][T13857] syz.4.5365[13857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.874643][T13857] syz.4.5365[13857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.234470][T13861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5367'. [ 447.281697][T13865] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5369'. [ 447.294689][T13869] loop3: detected capacity change from 0 to 512 [ 447.321977][T13869] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 447.347397][T13869] fuse: Bad value for 'fd' [ 447.383288][ T28] audit: type=1326 audit(447.363:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 447.406219][ T28] audit: type=1326 audit(447.363:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 447.430433][ T28] audit: type=1326 audit(447.383:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 447.459011][ T28] audit: type=1326 audit(447.383:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 447.482595][ T28] audit: type=1326 audit(447.383:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 447.505577][ T28] audit: type=1326 audit(447.383:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 447.530200][ T28] audit: type=1326 audit(447.383:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 447.553104][ T28] audit: type=1326 audit(447.383:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 447.577306][ T28] audit: type=1326 audit(447.383:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 447.609643][ T28] audit: type=1326 audit(447.383:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409698f749 code=0x7ffc0000 [ 447.619725][ T226] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 447.647638][T13892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5381'. [ 447.906399][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5382'. [ 447.945607][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'. [ 447.959654][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'. [ 448.050886][ T226] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.062136][ T226] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.079356][ T226] usb 6-1: config 0 interface 0 has no altsetting 0 [ 448.086149][ T226] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 448.095323][ T226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.105911][ T226] usb 6-1: config 0 descriptor?? [ 448.245567][T13922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5394'. [ 448.817128][ T226] usbhid 6-1:0.0: can't add hid device: -71 [ 448.823197][ T226] usbhid: probe of 6-1:0.0 failed with error -71 [ 448.831178][ T226] usb 6-1: USB disconnect, device number 9 [ 448.941439][T13936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5398'. [ 448.966109][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 448.990694][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 449.516743][T13963] syz.2.5407[13963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.516789][T13963] syz.2.5407[13963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.574629][T13968] loop3: detected capacity change from 0 to 1024 [ 449.595820][T13968] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 449.612321][T13968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 449.623126][T13968] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 449.641540][T13968] EXT4-fs (loop3): Remounting filesystem read-only [ 449.653244][ T8133] EXT4-fs (loop3): unmounting filesystem. [ 449.993960][T13995] loop4: detected capacity change from 0 to 1024 [ 450.007477][T13995] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 450.224109][T13995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 450.298568][ T7917] EXT4-fs (loop4): unmounting filesystem. [ 451.823167][T14028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14028 comm=syz.0.5432 [ 451.836442][T14028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14028 comm=syz.0.5432 [ 452.500707][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 453.386299][T14062] __nla_validate_parse: 7 callbacks suppressed [ 453.386318][T14062] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5450'. [ 453.447438][T14076] 9pnet_fd: Insufficient options for proto=fd [ 453.450747][T14074] loop0: detected capacity change from 0 to 512 [ 453.462205][T14078] netlink: 'syz.2.5456': attribute type 12 has an invalid length. [ 453.591230][T14074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 453.605866][T14089] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5459'. [ 453.720846][T14074] syz.0.5455[14074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.721543][T14074] syz.0.5455[14074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.945308][ T8052] EXT4-fs (loop0): unmounting filesystem. [ 454.474401][T14134] loop2: detected capacity change from 0 to 4096 [ 454.502420][T14134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 454.572480][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 454.572495][ T28] audit: type=1400 audit(454.553:789): avc: denied { link } for pid=14133 comm="syz.2.5477" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 454.614390][T14137] loop4: detected capacity change from 0 to 512 [ 454.621461][ T7980] EXT4-fs (loop2): unmounting filesystem. [ 454.673974][T14137] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 454.756862][T14137] syz.4.5478[14137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.756933][T14137] syz.4.5478[14137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.801604][T14128] loop0: detected capacity change from 0 to 40427 [ 454.883529][T14128] F2FS-fs (loop0): Found nat_bits in checkpoint [ 454.924422][ T7917] EXT4-fs (loop4): unmounting filesystem. [ 455.047088][T14128] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 455.529937][ T28] audit: type=1400 audit(455.393:790): avc: denied { nlmsg_read } for pid=14162 comm="syz.4.5485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 455.703940][T14128] tmpfs: Unknown parameter 'nolazytime/binder0' [ 455.704011][ T28] audit: type=1400 audit(455.683:791): avc: denied { mounton } for pid=14127 comm="syz.0.5474" path="/410/file0/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 455.750334][T14174] netlink: 'syz.2.5490': attribute type 12 has an invalid length. [ 455.800542][ T8052] syz-executor: attempt to access beyond end of device [ 455.800542][ T8052] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 455.965075][T14182] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5489'. [ 455.974973][T14182] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5489'. [ 455.984098][T14182] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5489'. [ 456.100934][T14181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5494'. [ 457.706435][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5512'. [ 458.072996][T14255] netlink: 'syz.0.5523': attribute type 12 has an invalid length. [ 458.159000][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5525'. [ 458.168743][T14265] netlink: 'syz.2.5525': attribute type 16 has an invalid length. [ 458.176628][T14265] netlink: 'syz.2.5525': attribute type 17 has an invalid length. [ 458.186089][T14265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 458.281638][T14271] syz.5.5524[14271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.282233][T14271] syz.5.5524[14271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.588530][T14293] loop4: detected capacity change from 0 to 512 [ 458.606981][T14293] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 458.644397][T14296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5540'. [ 458.664282][ T28] audit: type=1326 audit(458.643:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 458.690680][ T28] audit: type=1326 audit(458.643:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 458.713760][ T28] audit: type=1326 audit(458.643:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 458.740209][ T28] audit: type=1326 audit(458.673:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 458.763229][ T28] audit: type=1326 audit(458.673:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 458.786016][ T28] audit: type=1326 audit(458.673:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0410bc2005 code=0x7ffc0000 [ 458.844332][ T28] audit: type=1326 audit(458.823:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 459.061388][T14314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14314 comm=syz.2.5545 [ 459.074527][T14314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14314 comm=syz.2.5545 [ 460.870494][T14324] netlink: 'syz.2.5550': attribute type 12 has an invalid length. [ 460.933950][T14339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 460.980864][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5560'. [ 461.018706][T14343] syz.3.5554[14343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.018753][T14343] syz.3.5554[14343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.082285][T14353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14353 comm=syz.5.5561 [ 461.107173][T14353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14353 comm=syz.5.5561 [ 462.260049][T14385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 462.290322][T14378] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.297718][T14378] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.354634][T14392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14392 comm=syz.4.5576 [ 462.369677][T14392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14392 comm=syz.4.5576 [ 462.497830][T14378] device bridge_slave_0 entered promiscuous mode [ 462.583805][ T7321] tipc: Disabling bearer [ 462.589331][ T7321] tipc: Left network mode [ 462.602252][T14378] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.658157][T14378] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.743804][T14378] device bridge_slave_1 entered promiscuous mode [ 463.293012][T14378] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.300096][T14378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.307367][T14378] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.314411][T14378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.323386][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.332733][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.387997][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.396600][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.415577][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.425017][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.433735][ T5314] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.441569][ T5314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.449037][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.457706][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.466026][ T5314] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.473060][ T5314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.482893][T14419] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5586'. [ 463.494684][T14422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.509978][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 463.521514][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.534986][ T7321] device veth1_macvtap left promiscuous mode [ 463.542226][ T7321] device veth0_vlan left promiscuous mode [ 463.550934][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 463.550946][ T28] audit: type=1400 audit(463.533:801): avc: denied { mounton } for pid=14427 comm="syz.3.5590" path="/539/file0" dev="tmpfs" ino=2813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 463.551133][T14428] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 463.589223][T14428] FAT-fs (loop7): unable to read boot sector [ 463.644902][T14436] loop3: detected capacity change from 0 to 512 [ 463.652797][T14436] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 463.752561][T14440] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14440 comm=syz.0.5593 [ 463.767504][T14440] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14440 comm=syz.0.5593 [ 464.658729][T14378] device veth0_vlan entered promiscuous mode [ 464.687139][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.695929][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.705548][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.714474][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.742673][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.754915][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.763579][T14446] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5597'. [ 464.776137][T14378] device veth1_macvtap entered promiscuous mode [ 464.787119][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.805290][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.830115][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 464.838341][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.846575][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 464.862263][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 464.870531][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 464.888947][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 464.897458][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 464.915796][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5606'. [ 465.023163][T14482] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5613'. [ 465.117079][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5614'. [ 465.126629][T14489] netlink: 'syz.5.5614': attribute type 16 has an invalid length. [ 465.134518][T14489] netlink: 'syz.5.5614': attribute type 17 has an invalid length. [ 465.144633][T14489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 465.151938][T14489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 465.164154][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 465.176863][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 465.202005][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 465.218377][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 465.236664][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 465.253486][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 465.265344][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 465.273717][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 465.611919][T14519] tipc: Started in network mode [ 465.619720][T14519] tipc: Node identity ff, cluster identity 4711 [ 465.634240][T14519] tipc: Enabling of bearer rejected, failed to enable media [ 465.777498][T14535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.040125][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5651'. [ 466.071725][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5651'. [ 466.081494][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5651'. [ 466.122639][T14567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.584256][T14592] netlink: 'syz.3.5665': attribute type 12 has an invalid length. [ 466.724729][T14603] loop3: detected capacity change from 0 to 512 [ 466.744205][T14603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 466.947576][T14610] loop5: detected capacity change from 0 to 512 [ 466.999948][T14610] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 467.210208][ T8133] EXT4-fs (loop3): unmounting filesystem. [ 467.233157][T14610] fuse: Bad value for 'fd' [ 467.270531][T14623] netlink: 'syz.3.5677': attribute type 12 has an invalid length. [ 467.280602][ T28] audit: type=1326 audit(467.263:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14624 comm="syz.2.5678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e2a18f749 code=0x0 [ 467.358112][T14634] tipc: Enabling of bearer rejected, failed to enable media [ 467.370356][T14636] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5682'. [ 467.507242][T14651] loop5: detected capacity change from 0 to 512 [ 467.525641][T14651] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 467.610432][T14651] fuse: Bad value for 'fd' [ 467.656002][T14663] tipc: Started in network mode [ 467.688908][T14663] tipc: Node identity ff, cluster identity 4711 [ 467.708424][T14663] tipc: Enabling of bearer rejected, failed to enable media [ 468.100419][T14640] loop2: detected capacity change from 0 to 40427 [ 468.261433][T14640] F2FS-fs (loop2): Found nat_bits in checkpoint [ 468.342505][T14640] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 468.375993][T14640] tmpfs: Unknown parameter 'nolazytime/binder0' [ 468.390424][ T7980] syz-executor: attempt to access beyond end of device [ 468.390424][ T7980] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 469.149846][T14732] loop2: detected capacity change from 0 to 512 [ 469.158085][T14732] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 469.252396][ T28] audit: type=1400 audit(469.233:803): avc: denied { setopt } for pid=14743 comm="syz.2.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 469.305044][T14752] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5732'. [ 470.399600][ T851] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 470.580760][ T851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.729837][ T28] audit: type=1400 audit(470.633:804): avc: denied { ioctl } for pid=14814 comm="syz.4.5757" path="socket:[61611]" dev="sockfs" ino=61611 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 470.796767][ T851] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 470.805921][ T851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.827386][ T851] usb 6-1: config 0 descriptor?? [ 471.291217][ T851] logitech-hidpp-device 0003:046D:C086.0007: item fetching failed at offset 0/3 [ 471.576772][ T851] logitech-hidpp-device 0003:046D:C086.0007: hidpp_probe:parse failed [ 471.585317][ T851] logitech-hidpp-device: probe of 0003:046D:C086.0007 failed with error -22 [ 471.595665][ T851] usb 6-1: USB disconnect, device number 10 [ 471.860781][T14840] loop3: detected capacity change from 0 to 40427 [ 471.922344][T14840] F2FS-fs (loop3): Found nat_bits in checkpoint [ 471.964220][T14840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 472.017152][T14840] tmpfs: Unknown parameter 'nolazytime/binder0' [ 472.059876][ T8133] syz-executor: attempt to access beyond end of device [ 472.059876][ T8133] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 472.184134][T14887] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5786'. [ 472.427229][ T28] audit: type=1400 audit(472.403:805): avc: denied { getopt } for pid=14897 comm="syz.3.5790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.691126][T14908] loop3: detected capacity change from 0 to 40427 [ 472.731260][T14908] F2FS-fs (loop3): Found nat_bits in checkpoint [ 472.786505][T14924] loop4: detected capacity change from 0 to 512 [ 472.808119][T14924] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.824039][T14908] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 472.839288][T14908] tmpfs: Unknown parameter 'nolazytime/binder0' [ 472.869860][ T8133] syz-executor: attempt to access beyond end of device [ 472.869860][ T8133] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 473.162075][T14952] syz.3.5805[14952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.162413][T14952] syz.3.5805[14952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.207505][T14952] loop3: detected capacity change from 0 to 128 [ 473.294573][T14952] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 474.011193][T14963] loop0: detected capacity change from 0 to 512 [ 474.060295][T14963] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 474.300962][T14976] loop3: detected capacity change from 0 to 256 [ 474.331507][T14976] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d) [ 474.450021][T14965] loop4: detected capacity change from 0 to 40427 [ 474.490446][T14965] F2FS-fs (loop4): Found nat_bits in checkpoint [ 475.205811][T14998] loop3: detected capacity change from 0 to 512 [ 475.468147][T14965] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 475.489497][T14998] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 475.572931][T14965] tmpfs: Unknown parameter 'nolazytime/binder0' [ 475.594496][ T7917] syz-executor: attempt to access beyond end of device [ 475.594496][ T7917] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 475.599643][ T28] audit: type=1326 audit(475.573:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15010 comm="syz.0.5833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f631918f749 code=0x0 [ 476.233468][T15037] loop4: detected capacity change from 0 to 40427 [ 476.264444][T15037] F2FS-fs (loop4): Found nat_bits in checkpoint [ 476.315312][T15037] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 476.351271][T15037] tmpfs: Unknown parameter 'nolazytime/binder0' [ 476.363448][ T7917] syz-executor: attempt to access beyond end of device [ 476.363448][ T7917] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 476.481557][T15049] loop0: detected capacity change from 0 to 512 [ 476.525030][T15049] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 476.595893][T15055] bridge: RTM_NEWNEIGH with invalid ether address [ 477.238986][T15079] syz.2.5860[15079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.239060][T15079] syz.2.5860[15079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.271961][T15073] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.290950][T15073] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.298463][T15073] device bridge_slave_0 entered promiscuous mode [ 477.305668][T15073] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.312832][T15073] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.320401][T15073] device bridge_slave_1 entered promiscuous mode [ 477.418581][T15068] loop4: detected capacity change from 0 to 40427 [ 477.453231][T15073] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.460311][T15073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.467612][T15073] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.474663][T15073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.494775][T15068] F2FS-fs (loop4): Found nat_bits in checkpoint [ 477.569481][T15068] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 477.601065][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.609187][T15068] tmpfs: Unknown parameter 'nolazytime/binder0' [ 477.616042][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.623792][ T7917] syz-executor: attempt to access beyond end of device [ 477.623792][ T7917] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 477.644622][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.663225][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.671737][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.679059][ T6521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.687517][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.696568][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.703617][ T6521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.723069][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.739882][T15097] bridge: RTM_NEWNEIGH with invalid ether address [ 477.757803][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.805569][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.955990][T15073] device veth0_vlan entered promiscuous mode [ 478.095300][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5861'. [ 478.117189][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.142171][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.160721][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.168815][T15111] netlink: 'syz.2.5861': attribute type 16 has an invalid length. [ 478.176925][T15111] netlink: 'syz.2.5861': attribute type 17 has an invalid length. [ 478.187344][T15111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 478.217294][ T7321] device veth1_macvtap left promiscuous mode [ 478.224663][ T7321] device veth0_vlan left promiscuous mode [ 478.412400][T15073] device veth1_macvtap entered promiscuous mode [ 478.421680][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 478.430620][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 478.438706][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 478.461150][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 478.474071][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 478.484971][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 478.493627][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 478.516834][T15121] loop4: detected capacity change from 0 to 512 [ 478.536553][T15121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 478.549346][T15121] syz.4.5870[15121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.549412][T15121] syz.4.5870[15121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.639242][ T7917] EXT4-fs (loop4): unmounting filesystem. [ 478.770760][T15142] binfmt_misc: register: failed to install interpreter file ./file0 [ 478.792231][T15147] syz.3.5880[15147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.792307][T15147] syz.3.5880[15147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.826161][T15136] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.844807][T15136] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.853683][T15136] device bridge_slave_0 entered promiscuous mode [ 478.909448][T15136] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.968630][T15136] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.990973][T15136] device bridge_slave_1 entered promiscuous mode [ 479.916219][ T7321] tipc: Left network mode [ 480.028248][T15172] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5889'. [ 480.137318][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.145344][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.154070][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 480.163516][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.172075][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.181070][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.353518][T15192] syz.0.5893[15192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.353592][T15192] syz.0.5893[15192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.370116][ T1633] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.388563][ T1633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.397582][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.407279][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.422648][T15192] loop0: detected capacity change from 0 to 128 [ 480.431195][T15192] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 480.487632][ T1633] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.494727][ T1633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.586110][T15178] netlink: 'syz.4.5892': attribute type 12 has an invalid length. [ 480.616879][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.729622][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.818510][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.079095][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5894'. [ 481.121815][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5894'. [ 481.319674][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5895'. [ 481.341861][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 481.352961][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.362858][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5895'. [ 481.378534][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.396338][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.421065][T15136] device veth0_vlan entered promiscuous mode [ 481.439683][T15213] device bridge0 entered promiscuous mode [ 481.451284][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.464693][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.829066][T15136] device veth1_macvtap entered promiscuous mode [ 481.895337][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 481.903131][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 481.911522][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 481.919934][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 481.928152][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 481.939207][T15212] device bridge0 left promiscuous mode [ 482.067312][ T7321] device veth1_macvtap left promiscuous mode [ 482.077860][ T7321] device veth0_vlan left promiscuous mode [ 482.139451][T15229] syz.2.5872[15229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 482.139929][T15229] syz.2.5872[15229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.115947][T15277] bridge: RTM_NEWNEIGH with invalid ether address [ 483.143136][T15279] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5927'. [ 483.416639][ T851] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 483.610741][ T851] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.621877][ T851] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.635463][ T851] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.642342][ T851] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 483.659153][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.692813][ T851] usb 5-1: config 0 descriptor?? [ 483.760989][T15306] syz.5.5936[15306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.761330][T15306] syz.5.5936[15306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.792590][T15306] loop5: detected capacity change from 0 to 128 [ 484.127180][T15306] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 484.556525][ T851] usbhid 5-1:0.0: can't add hid device: -71 [ 484.562515][ T851] usbhid: probe of 5-1:0.0 failed with error -71 [ 484.622663][ T851] usb 5-1: USB disconnect, device number 36 [ 484.770306][T15320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5943'. [ 484.779484][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5943'. [ 484.795570][T15327] loop0: detected capacity change from 0 to 256 [ 484.815328][T15327] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 484.839618][T15327] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 484.870617][T15327] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 485.238412][ T6] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 485.574727][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5950'. [ 485.702230][T15347] netlink: 'syz.5.5950': attribute type 16 has an invalid length. [ 485.711317][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 485.732703][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 485.752318][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 485.768178][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 485.772911][T15347] netlink: 'syz.5.5950': attribute type 17 has an invalid length. [ 485.789899][T15347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 485.808963][ T6] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 485.825290][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.826713][T15356] loop2: detected capacity change from 0 to 512 [ 485.847324][T15356] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 486.061976][ T6] usb 4-1: Product: syz [ 486.066207][ T6] usb 4-1: Manufacturer: syz [ 486.070862][ T6] usb 4-1: SerialNumber: syz [ 486.076084][ T6] usb 4-1: config 0 descriptor?? [ 486.082267][ T6] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 486.458377][T15314] loop3: detected capacity change from 0 to 256 [ 486.465045][ T28] audit: type=1326 audit(486.383:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.4.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 486.527610][T15314] exfat: Unknown parameter '' [ 486.549478][ T28] audit: type=1326 audit(486.383:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.4.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 486.597233][ T6] scsi host1: usb-storage 4-1:0.0 [ 486.611895][ T28] audit: type=1326 audit(486.383:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.4.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 486.661636][T15381] bridge: RTM_NEWNEIGH with invalid ether address [ 486.666143][ T28] audit: type=1326 audit(486.383:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.4.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 486.702597][T15385] loop0: detected capacity change from 0 to 512 [ 486.707143][ T28] audit: type=1326 audit(486.383:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.4.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0410b8f749 code=0x7ffc0000 [ 486.730998][T15385] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 486.766736][T11816] usb 4-1: USB disconnect, device number 29 [ 488.112619][T15404] loop3: detected capacity change from 0 to 512 [ 488.131861][T15389] loop4: detected capacity change from 0 to 40427 [ 488.216708][T15413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15413 comm=syz.5.5970 [ 488.231692][T15413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15413 comm=syz.5.5970 [ 488.319329][T15412] loop0: detected capacity change from 0 to 1024 [ 488.425363][T15404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 488.446715][T15412] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 488.461613][T15389] F2FS-fs (loop4): Found nat_bits in checkpoint [ 488.584164][T15412] EXT4-fs (loop0): orphan cleanup on readonly fs [ 488.653095][T15389] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 488.662657][T15412] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 488.785905][T15412] EXT4-fs warning (device loop0): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 488.996823][T15389] tmpfs: Unknown parameter 'nolazytime/binder0' [ 489.005028][T15073] EXT4-fs (loop3): unmounting filesystem. [ 489.013317][T15412] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 489.037133][T15412] EXT4-fs (loop0): 1 truncate cleaned up [ 489.043849][ T7917] syz-executor: attempt to access beyond end of device [ 489.043849][ T7917] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 489.063245][T15412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 489.163128][ T8052] EXT4-fs (loop0): unmounting filesystem. [ 489.168961][T15429] bridge: RTM_NEWNEIGH with invalid ether address [ 489.304865][T15445] loop4: detected capacity change from 0 to 512 [ 489.332563][T15445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 489.855280][ T7917] EXT4-fs (loop4): unmounting filesystem. [ 490.001492][T15467] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15467 comm=syz.4.5990 [ 490.016257][T15467] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15467 comm=syz.4.5990 [ 490.292175][T15470] bridge: RTM_NEWNEIGH with invalid ether address [ 490.987952][T15484] tipc: Started in network mode [ 490.999717][T15484] tipc: Node identity 0f75, cluster identity 4711 [ 491.030598][T15484] tipc: Enabling of bearer rejected, failed to enable media [ 491.062297][T15465] loop2: detected capacity change from 0 to 40427 [ 491.083100][T15465] F2FS-fs (loop2): Found nat_bits in checkpoint [ 491.125774][T15465] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 491.563685][T15527] tipc: Enabling of bearer rejected, failed to enable media [ 491.576131][ T28] audit: type=1326 audit(491.553:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.3.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 491.655953][T15532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15532 comm=syz.2.6012 [ 491.673391][T15532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15532 comm=syz.2.6012 [ 492.164854][ T28] audit: type=1326 audit(491.553:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.3.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 492.649381][T15540] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6018'. [ 492.827334][T15542] loop2: detected capacity change from 0 to 512 [ 492.850012][T15542] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 492.892563][T15542] fuse: Unknown parameter 'group_i00000000000000000000' [ 492.906527][ T28] audit: type=1326 audit(491.603:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.3.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 492.943622][ T28] audit: type=1326 audit(491.603:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.3.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 492.979885][ T28] audit: type=1326 audit(491.603:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.3.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 493.003038][ T28] audit: type=1326 audit(491.603:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.3.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 493.033349][ T28] audit: type=1326 audit(491.603:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.3.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 493.061977][ T28] audit: type=1326 audit(491.603:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.3.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 493.374951][ T28] audit: type=1326 audit(491.603:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.3.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 493.399325][ T28] audit: type=1326 audit(491.603:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.3.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 493.438245][T15550] syz.3.6024[15550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.438316][T15550] syz.3.6024[15550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.557595][T15576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15576 comm=syz.2.6032 [ 493.584644][T15576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15576 comm=syz.2.6032 [ 495.794052][T15609] syz.2.6043[15609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.794738][T15609] syz.2.6043[15609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.927426][T15626] tipc: Enabling of bearer rejected, failed to enable media [ 496.219641][T12011] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 496.420731][T12011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.436998][T12011] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 496.443873][T15632] loop5: detected capacity change from 0 to 2048 [ 496.446381][T12011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.468419][T12011] usb 1-1: config 0 descriptor?? [ 496.490589][T15632] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 496.623038][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 496.623068][ T28] audit: type=1400 audit(496.603:837): avc: denied { map } for pid=15631 comm="syz.5.6051" path="/75/file0/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 496.698285][T15632] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6051: bg 0: block 234: padding at end of block bitmap is not set [ 496.756397][T15632] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1974 with error 28 [ 496.789621][T15632] EXT4-fs (loop5): This should not happen!! Data will be lost [ 496.789621][T15632] [ 496.799320][T15632] EXT4-fs (loop5): Total free blocks count 0 [ 496.805557][T15632] EXT4-fs (loop5): Free/Dirty block details [ 496.811573][T15632] EXT4-fs (loop5): free_blocks=0 [ 496.816561][T15632] EXT4-fs (loop5): dirty_blocks=1984 [ 496.822032][T15632] EXT4-fs (loop5): Block reservation details [ 496.828061][T15632] EXT4-fs (loop5): i_reserved_data_blocks=124 [ 496.885878][T12011] usbhid 1-1:0.0: can't add hid device: -71 [ 496.891929][T12011] usbhid: probe of 1-1:0.0 failed with error -71 [ 496.903928][T12011] usb 1-1: USB disconnect, device number 28 [ 496.968516][T14378] EXT4-fs (loop5): unmounting filesystem. [ 497.410064][T15656] syz.2.6057[15656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.410112][T15656] syz.2.6057[15656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.844028][T15691] IPv6: sit1: Disabled Multicast RS [ 498.900342][T15698] bridge: RTM_NEWNEIGH with invalid ether address [ 499.197786][T15665] loop4: detected capacity change from 0 to 40427 [ 499.246225][T15665] F2FS-fs (loop4): Found nat_bits in checkpoint [ 499.874639][T15665] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 499.915142][ T7917] syz-executor: attempt to access beyond end of device [ 499.915142][ T7917] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 499.929342][ T7917] syz-executor: attempt to access beyond end of device [ 499.929342][ T7917] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 499.947743][ T7917] syz-executor: attempt to access beyond end of device [ 499.947743][ T7917] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 500.047547][T15728] bridge: RTM_NEWNEIGH with invalid ether address [ 500.500534][T15735] IPv6: sit1: Disabled Multicast RS [ 500.531673][ T452] tipc: Left network mode [ 501.251995][T15764] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.259059][T15764] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.266420][T15764] device bridge_slave_0 entered promiscuous mode [ 501.273219][T15764] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.280389][T15764] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.287744][T15764] device bridge_slave_1 entered promiscuous mode [ 501.332934][T15764] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.339991][T15764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.347257][T15764] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.354303][T15764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.378379][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 501.389613][ T226] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 501.401563][ T1633] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.408972][ T1633] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.418605][ T452] device veth1_macvtap left promiscuous mode [ 501.424687][ T452] device veth0_vlan left promiscuous mode [ 501.500169][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.508516][ T1633] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.515575][ T1633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.530099][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.539894][ T1633] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.546954][ T1633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.567284][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 501.575728][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 501.584956][ T226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.596127][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 501.604425][ T226] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 501.613950][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 501.621834][ T226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.634155][ T226] usb 3-1: config 0 descriptor?? [ 501.640559][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.649694][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.660570][T15764] device veth0_vlan entered promiscuous mode [ 501.668075][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.676498][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.685602][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.693296][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.734542][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 501.742999][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.752722][T15764] device veth1_macvtap entered promiscuous mode [ 502.090652][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 502.117390][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 502.175958][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 502.195930][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 502.204696][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 502.262877][ T226] usbhid 3-1:0.0: can't add hid device: -71 [ 502.270138][ T226] usbhid: probe of 3-1:0.0 failed with error -71 [ 502.283056][ T226] usb 3-1: USB disconnect, device number 20 [ 502.305407][T15805] loop6: detected capacity change from 0 to 512 [ 502.362939][T15805] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 502.590112][T15813] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6113'. [ 502.601204][T15764] EXT4-fs (loop6): unmounting filesystem. [ 502.617184][T15815] tipc: Started in network mode [ 502.622230][T15815] tipc: Node identity 0f75, cluster identity 4711 [ 502.629783][T15815] tipc: Enabling of bearer rejected, failed to enable media [ 503.479807][T15834] syz.0.6119[15834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.479878][T15834] syz.0.6119[15834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.495256][T15834] loop0: detected capacity change from 0 to 128 [ 503.546962][T15834] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 505.905746][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6121'. [ 505.919729][T15835] netlink: 'syz.3.6121': attribute type 16 has an invalid length. [ 505.927582][T15835] netlink: 'syz.3.6121': attribute type 17 has an invalid length. [ 505.941722][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.949099][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 506.115123][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 506.265410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 506.283158][T15846] loop3: detected capacity change from 0 to 512 [ 506.310373][T15846] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 506.322910][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 506.331106][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 506.339489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 506.361482][T15846] fuse: Bad value for 'fd' [ 506.366274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 506.382706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 506.396826][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 506.664385][T15843] netlink: 'syz.5.6126': attribute type 12 has an invalid length. [ 506.709920][T15850] tipc: Started in network mode [ 506.717958][T15850] tipc: Node identity 0f75, cluster identity 4711 [ 506.724522][T15850] tipc: Enabling of bearer rejected, failed to enable media [ 507.014350][T15862] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6133'. [ 507.560372][T15836] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 508.409617][ T28] audit: type=1400 audit(507.573:838): avc: denied { mounton } for pid=15872 comm="syz.6.6136" path="/5/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 509.357299][T15883] loop5: detected capacity change from 0 to 512 [ 509.364709][T15836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.395916][T15836] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 509.426394][T15883] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 509.447955][T15836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.488077][T15883] fuse: Bad value for 'fd' [ 509.509947][T15836] usb 3-1: config 0 descriptor?? [ 509.562515][ T28] audit: type=1400 audit(509.543:839): avc: denied { unmount } for pid=15764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 509.588366][T15890] tipc: Enabling of bearer rejected, failed to enable media [ 509.616630][T15897] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 509.647226][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6142'. [ 509.749091][T15918] loop6: detected capacity change from 0 to 512 [ 510.405977][T15918] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.6145: bg 0: block 5: invalid block bitmap [ 510.419236][T15917] tipc: Started in network mode [ 510.424617][T15917] tipc: Node identity 0f75, cluster identity 4711 [ 510.431867][T15836] usbhid 3-1:0.0: can't add hid device: -71 [ 510.437809][T15918] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 510.439684][T15917] tipc: Enabling of bearer rejected, failed to enable media [ 510.447009][T15836] usbhid: probe of 3-1:0.0 failed with error -71 [ 510.459823][T15918] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.6145: invalid indirect mapped block 3 (level 2) [ 510.471805][T15836] usb 3-1: USB disconnect, device number 21 [ 510.489696][T15918] EXT4-fs (loop6): 1 orphan inode deleted [ 510.566074][T15918] EXT4-fs (loop6): 1 truncate cleaned up [ 510.598372][T15918] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 511.325823][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6162'. [ 511.339062][T15764] EXT4-fs (loop6): unmounting filesystem. [ 511.400253][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6164'. [ 511.409750][T15949] netlink: 'syz.5.6164': attribute type 16 has an invalid length. [ 511.417570][T15949] netlink: 'syz.5.6164': attribute type 17 has an invalid length. [ 511.427192][T15949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.457883][T15951] tipc: New replicast peer: 255.255.255.83 [ 511.471492][ T28] audit: type=1400 audit(511.453:840): avc: denied { load_policy } for pid=15947 comm="syz.0.6167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 511.497309][T15948] SELinux: failed to load policy [ 511.503046][T15951] tipc: Enabled bearer , priority 10 [ 511.552070][T15953] loop6: detected capacity change from 0 to 128 [ 511.594390][T15953] syz.6.6166: attempt to access beyond end of device [ 511.594390][T15953] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 512.120837][T15953] syz.6.6166: attempt to access beyond end of device [ 512.120837][T15953] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 512.140235][T15953] syz.6.6166: attempt to access beyond end of device [ 512.140235][T15953] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 512.154436][T15953] syz.6.6166: attempt to access beyond end of device [ 512.154436][T15953] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 512.168523][T15953] syz.6.6166: attempt to access beyond end of device [ 512.168523][T15953] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 512.183291][T15953] syz.6.6166: attempt to access beyond end of device [ 512.183291][T15953] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 512.246136][T15976] loop6: detected capacity change from 0 to 512 [ 512.856662][ T1053] tipc: Node number set to 259325952 [ 512.967161][T15976] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.6178: bg 0: block 5: invalid block bitmap [ 513.030418][T15976] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 513.100694][T15976] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.6178: invalid indirect mapped block 3 (level 2) [ 513.159178][T15976] EXT4-fs (loop6): 1 orphan inode deleted [ 513.165113][T15976] EXT4-fs (loop6): 1 truncate cleaned up [ 513.175031][T15976] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 513.204630][T15764] EXT4-fs (loop6): unmounting filesystem. [ 513.238447][T16004] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6186'. [ 513.270292][ T28] audit: type=1326 audit(513.253:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 513.330066][ T28] audit: type=1326 audit(513.253:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 513.824446][ T28] audit: type=1326 audit(513.253:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 513.865957][ T28] audit: type=1326 audit(513.253:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 513.889586][ T1053] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 513.946166][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6192'. [ 513.962964][ T28] audit: type=1326 audit(513.253:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 513.989096][ T28] audit: type=1326 audit(513.253:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 514.025454][ T28] audit: type=1326 audit(513.253:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 514.062119][ T28] audit: type=1326 audit(513.253:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 514.091662][ T28] audit: type=1326 audit(513.253:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 514.115877][ T1053] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 514.125852][ T1053] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 514.132976][T16028] loop5: detected capacity change from 0 to 512 [ 514.146211][T16030] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6199'. [ 514.152237][ T28] audit: type=1326 audit(513.253:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 514.159017][ T1053] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 514.195990][T16030] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6199'. [ 514.214462][ T28] audit: type=1326 audit(513.253:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 514.229653][T16028] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 514.237837][ T1053] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 514.267146][ T28] audit: type=1326 audit(513.253:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f79c398f749 code=0x7ffc0000 [ 514.291532][T14378] EXT4-fs (loop5): unmounting filesystem. [ 514.294899][ T1053] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 514.318532][ T1053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.339727][ T1053] usb 3-1: Product: syz [ 514.349661][ T1053] usb 3-1: Manufacturer: syz [ 514.359634][ T1053] usb 3-1: SerialNumber: syz [ 514.365495][ T1053] usb 3-1: config 0 descriptor?? [ 514.413658][ T1053] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 514.618678][T15994] loop2: detected capacity change from 0 to 256 [ 514.628280][T15994] exfat: Unknown parameter '' [ 514.634729][ T1053] scsi host1: usb-storage 3-1:0.0 [ 514.908138][ T1053] usb 3-1: USB disconnect, device number 22 [ 515.078561][T16067] xt_hashlimit: overflow, try lower: 3/0 [ 515.283954][T16085] bridge: RTM_NEWNEIGH with invalid ether address [ 515.991543][T16120] loop3: detected capacity change from 0 to 512 [ 516.008685][T16120] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777e_ro, [ 516.477617][T16138] loop6: detected capacity change from 0 to 512 [ 516.490283][T16138] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 516.528569][T16138] fuse: Unknown parameter 'use00000000000000000000' [ 516.624020][T16155] netlink: 'syz.2.6245': attribute type 12 has an invalid length. [ 517.430084][T16177] loop0: detected capacity change from 0 to 512 [ 517.441973][T16177] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 517.466694][T16177] fuse: Unknown parameter 'use00000000000000000000' [ 517.581375][T16188] hub 2-0:1.0: USB hub found [ 517.586249][T16188] hub 2-0:1.0: 1 port detected [ 517.831637][T16204] loop2: detected capacity change from 0 to 512 [ 517.838272][T16204] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 517.931865][T16204] fuse: Unknown parameter 'user_i00000000000000000000' [ 517.959954][T16211] loop2: detected capacity change from 0 to 16 [ 518.061534][T16211] erofs: (device loop2): mounted with root inode @ nid 36. [ 518.227528][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6268'. [ 518.250898][T16219] loop5: detected capacity change from 0 to 512 [ 518.284508][T16219] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 518.341462][T14378] EXT4-fs (loop5): unmounting filesystem. [ 519.547439][T16244] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6278'. [ 520.101467][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 520.101489][ T28] audit: type=1326 audit(520.073:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 520.513432][T16267] loop0: detected capacity change from 0 to 512 [ 520.689880][ T28] audit: type=1326 audit(520.183:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 520.712982][ T28] audit: type=1326 audit(520.193:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 520.746117][ T28] audit: type=1326 audit(520.193:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 520.784316][T16267] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 520.832492][ T28] audit: type=1326 audit(520.213:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 520.855449][ T28] audit: type=1326 audit(520.223:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 520.881217][T16275] IPv6: sit1: Disabled Multicast RS [ 520.890744][ T28] audit: type=1326 audit(520.223:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 520.990636][ T28] audit: type=1326 audit(520.223:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 520.992274][ T8052] EXT4-fs (loop0): unmounting filesystem. [ 521.016073][ T28] audit: type=1326 audit(520.753:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 521.072403][ T28] audit: type=1326 audit(520.753:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 521.205114][T16299] netlink: 340 bytes leftover after parsing attributes in process `syz.6.6296'. [ 521.629262][T16303] loop2: detected capacity change from 0 to 40427 [ 521.647350][T16303] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 521.676420][T16303] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 521.719756][T16303] F2FS-fs (loop2): Found nat_bits in checkpoint [ 521.791670][T16303] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 521.804073][T16303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 521.896837][T16303] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 522.364609][T16319] 9pnet_fd: Insufficient options for proto=fd [ 522.632418][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6313'. [ 522.830850][T16347] bridge: RTM_NEWNEIGH with invalid ether address [ 522.880135][T16355] loop3: detected capacity change from 0 to 512 [ 522.926867][T16355] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 522.970427][T15073] EXT4-fs (loop3): unmounting filesystem. [ 523.917846][T16368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6323'. [ 524.114048][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6326'. [ 524.354718][T16396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 524.380671][T16396] device bridge_slave_0 left promiscuous mode [ 524.387454][T16396] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.418137][T16396] device bridge_slave_1 left promiscuous mode [ 524.433591][T16396] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.671284][T16408] IPv6: sit1: Disabled Multicast RS [ 524.717980][T16412] tipc: Failed to remove unknown binding: 66,1,1/0:3406544267/3406544269 [ 524.728140][T16412] tipc: Failed to remove unknown binding: 66,1,1/0:3406544267/3406544269 [ 524.737424][T16412] tipc: Failed to remove unknown binding: 66,1,1/0:3406544267/3406544269 [ 526.275082][T16449] x_tables: duplicate underflow at hook 1 [ 526.287125][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 526.295283][ T28] audit: type=1400 audit(526.263:893): avc: denied { read } for pid=16442 comm="syz.6.6356" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 526.340312][ T28] audit: type=1400 audit(526.263:894): avc: denied { open } for pid=16442 comm="syz.6.6356" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 526.438786][T16449] loop6: detected capacity change from 0 to 128 [ 526.541004][ T28] audit: type=1400 audit(526.263:895): avc: denied { ioctl } for pid=16442 comm="syz.6.6356" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.992821][T16500] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6377'. [ 528.140909][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6371'. [ 528.178831][T16503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 528.187709][T16503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 528.249751][ T28] audit: type=1400 audit(528.203:896): avc: denied { read } for pid=16483 comm="syz.3.6371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 528.284869][ T851] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 528.977331][T16514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6380'. [ 528.991273][ T851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 529.016107][ T851] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 529.033027][ T851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 529.049421][ T851] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 529.067819][ T851] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 529.119590][ T851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.127688][ T851] usb 7-1: Product: syz [ 529.139571][ T851] usb 7-1: Manufacturer: syz [ 529.144202][ T851] usb 7-1: SerialNumber: syz [ 529.149438][ T851] usb 7-1: config 0 descriptor?? [ 529.409866][T16529] IPv6: sit1: Disabled Multicast RS [ 529.438452][ T851] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 529.446981][T16531] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6388'. [ 529.472066][T16473] loop6: detected capacity change from 0 to 256 [ 529.487287][T16473] exfat: Unknown parameter '' [ 529.531060][ T351] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 529.547481][ T851] scsi host1: usb-storage 7-1:0.0 [ 529.586096][T16520] tmpfs: Unknown parameter 'nolazytime/binder0' [ 529.744462][ T851] usb 7-1: USB disconnect, device number 2 [ 529.779615][ T19] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 529.980703][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.991562][ T19] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 530.006302][ T19] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 530.020894][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.030023][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 530.038000][ T19] usb 4-1: SerialNumber: syz [ 530.264026][ T19] usb 4-1: USB disconnect, device number 30 [ 530.930825][T16588] loop3: detected capacity change from 0 to 512 [ 530.939872][T16588] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 530.987208][T16588] fuse: Unknown parameter '0x0000000000000005' [ 531.199517][T16607] loop3: detected capacity change from 0 to 512 [ 531.281085][T16607] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 531.325586][T15073] EXT4-fs (loop3): unmounting filesystem. [ 531.349427][T16617] IPv6: sit2: Disabled Multicast RS [ 531.537429][T16634] tipc: Failed to remove unknown binding: 66,1,1/0:3276649315/3276649317 [ 531.556506][T16636] loop5: detected capacity change from 0 to 512 [ 531.575001][T16636] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 531.622257][T14378] EXT4-fs (loop5): unmounting filesystem. [ 531.747114][T16647] syz.0.6425[16647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.747198][T16647] syz.0.6425[16647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.791843][T16649] IPv6: sit1: Disabled Multicast RS [ 533.418468][T16686] netlink: 'syz.2.6449': attribute type 12 has an invalid length. [ 533.472323][T16691] tipc: Failed to remove unknown binding: 66,1,1/0:1958904619/1958904621 [ 533.890044][T16729] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6467'. [ 535.061893][T16768] loop6: detected capacity change from 0 to 512 [ 535.106129][T16768] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 535.185453][T16771] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6480'. [ 535.398969][T15764] EXT4-fs (loop6): unmounting filesystem. [ 536.597309][T16807] hub 2-0:1.0: USB hub found [ 536.602143][T16807] hub 2-0:1.0: 1 port detected [ 538.032202][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6513'. [ 538.612629][ T452] tipc: Left network mode [ 538.639068][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.649775][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.686733][T16872] device bridge_slave_0 entered promiscuous mode [ 538.716313][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.723902][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.732056][T16872] device bridge_slave_1 entered promiscuous mode [ 538.805675][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.812828][T16872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.820254][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.827305][T16872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.884185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 538.897513][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.932108][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.962636][T16872] device veth0_vlan entered promiscuous mode [ 538.977329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 538.997878][ T28] audit: type=1400 audit(538.973:897): avc: denied { call } for pid=16896 comm="syz.3.6526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 538.997885][T16897] binder_alloc: 16896: binder_alloc_buf, no vma [ 539.001233][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 539.127799][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 539.135599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 539.143120][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 539.151459][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.158483][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.165921][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 539.174642][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.181696][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.190210][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 539.199051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 539.370417][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.379967][T16872] device veth1_macvtap entered promiscuous mode [ 539.389064][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 539.399236][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 539.424462][T16911] 9pnet_fd: Insufficient options for proto=fd [ 539.492039][T16917] netlink: 'syz.2.6532': attribute type 12 has an invalid length. [ 539.775330][T16923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6531'. [ 540.548982][ T452] device veth1_macvtap left promiscuous mode [ 540.568574][ T452] device veth0_vlan left promiscuous mode [ 541.306208][T16968] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6550'. [ 541.744127][ T28] audit: type=1326 audit(541.723:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.3.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 541.787504][ T28] audit: type=1326 audit(541.753:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.3.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 541.819585][ T28] audit: type=1326 audit(541.753:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.3.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 541.856816][ T28] audit: type=1326 audit(541.753:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.3.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 541.918579][ T28] audit: type=1326 audit(541.753:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.3.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 542.045486][ T28] audit: type=1326 audit(541.753:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.3.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 542.095059][ T28] audit: type=1326 audit(541.753:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.3.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 542.414064][ T28] audit: type=1326 audit(541.753:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.3.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6a1cb8f749 code=0x7ffc0000 [ 542.532989][ T28] audit: type=1326 audit(541.803:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.3.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6a1cbc2005 code=0x7ffc0000 [ 542.821069][T17017] loop2: detected capacity change from 0 to 40427 [ 543.039503][T17017] F2FS-fs (loop2): Found nat_bits in checkpoint [ 543.218191][T17017] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 543.422732][T17017] tmpfs: Unknown parameter 'nolazytime/binder0' [ 543.468126][T15136] syz-executor: attempt to access beyond end of device [ 543.468126][T15136] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 543.610848][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6587'. [ 543.904217][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6596'. [ 543.913878][T17081] netlink: 'syz.5.6596': attribute type 16 has an invalid length. [ 543.921763][T17081] netlink: 'syz.5.6596': attribute type 17 has an invalid length. [ 543.931560][T17081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 545.185906][T17102] 9pnet_fd: Insufficient options for proto=fd [ 545.269606][T17072] tmpfs: Unknown parameter 'nolazytime/binder0' [ 545.367419][T17118] overlayfs: failed to resolve './bus': -2 [ 546.125327][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 546.125340][ T28] audit: type=1400 audit(546.103:976): avc: denied { read } for pid=17125 comm="syz.5.6614" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 546.340469][ T28] audit: type=1400 audit(546.193:977): avc: denied { open } for pid=17125 comm="syz.5.6614" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 546.400317][T17144] 9pnet_fd: Insufficient options for proto=fd [ 546.522011][T17155] netlink: 'syz.3.6625': attribute type 12 has an invalid length. [ 546.801640][T17183] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6634'. [ 546.810925][T17183] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6634'. [ 546.819993][T17183] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6634'. [ 547.215734][T17186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6633'. [ 547.724418][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6639'. [ 547.797288][T17198] hub 2-0:1.0: USB hub found [ 547.802432][T17198] hub 2-0:1.0: 1 port detected [ 548.107294][T17215] loop3: detected capacity change from 0 to 512 [ 548.160855][T17215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 548.230990][T15073] EXT4-fs (loop3): unmounting filesystem. [ 548.575793][ T851] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 548.781586][ T851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 548.791512][ T851] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 548.801305][ T851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 548.811127][ T851] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 548.822528][ T851] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 548.837553][ T851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.852788][ T851] usb 3-1: Product: syz [ 548.860368][ T851] usb 3-1: Manufacturer: syz [ 548.869082][ T851] usb 3-1: SerialNumber: syz [ 548.878959][ T851] usb 3-1: config 0 descriptor?? [ 548.888325][ T851] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 549.091923][T17225] loop2: detected capacity change from 0 to 256 [ 549.116063][T17225] exfat: Unknown parameter '' [ 549.152882][ T851] scsi host1: usb-storage 3-1:0.0 [ 549.349107][ T499] usb 3-1: USB disconnect, device number 23 [ 549.599866][ T851] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 549.843001][T17284] hub 2-0:1.0: USB hub found [ 549.848069][T17284] hub 2-0:1.0: 1 port detected [ 550.013139][ T851] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 550.024278][ T851] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.033392][ T851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 550.041430][ T851] usb 1-1: SerialNumber: syz [ 550.068760][ T851] cdc_acm 1-1:1.0: skipping garbage [ 550.078216][ T851] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 550.276633][ T851] usb 1-1: USB disconnect, device number 29 [ 550.918636][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6686'. [ 550.929763][T17317] device lo entered promiscuous mode [ 551.188691][T17337] hub 2-0:1.0: USB hub found [ 551.193883][T17337] hub 2-0:1.0: 1 port detected [ 551.954970][T17370] overlayfs: unrecognized mount option "verity=on" or missing value [ 552.014717][T17380] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6712'. [ 552.921544][T17400] netlink: 'syz.6.6721': attribute type 12 has an invalid length. [ 553.250308][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6727'. [ 553.259826][T17418] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6727'. [ 554.594097][T17429] loop5: detected capacity change from 0 to 40427 [ 554.613002][T17429] F2FS-fs (loop5): Found nat_bits in checkpoint [ 554.679680][ T1053] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 554.779643][T17429] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 554.805210][T17429] tmpfs: Unknown parameter 'nolazytime/binder0' [ 554.816372][T14378] syz-executor: attempt to access beyond end of device [ 554.816372][T14378] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 554.859652][ T1762] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 554.868422][ T1053] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.878634][ T1053] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.889213][ T1053] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.898338][ T1053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.906813][ T1053] usb 1-1: Product: syz [ 554.911153][ T1053] usb 1-1: Manufacturer: syz [ 554.915784][ T1053] usb 1-1: SerialNumber: syz [ 554.930042][T17446] netlink: 'syz.5.6736': attribute type 12 has an invalid length. [ 555.050771][ T1762] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 555.062404][ T1762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.073630][ T1762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.088033][ T1762] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 555.167880][ T1053] usb 1-1: 0:2 : does not exist [ 555.173263][ T1762] usb 4-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 555.182456][ T1762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.194759][ T1762] usb 4-1: config 0 descriptor?? [ 555.199949][ T1053] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 555.214140][ T1053] usb 1-1: USB disconnect, device number 30 [ 555.540724][ T6162] udevd[6162]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 555.621074][ T1762] wacom 0003:056A:0015.0008: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 555.631353][ T1762] wacom 0003:056A:0015.0008: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.3-1/input0 [ 555.643410][ T1762] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0015.0008/input/input4 [ 555.656536][ T28] audit: type=1400 audit(555.633:978): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1929 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.700270][ T28] audit: type=1400 audit(555.633:979): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1929 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.731311][ T28] audit: type=1400 audit(555.703:980): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1929 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.827536][ T19] usb 4-1: USB disconnect, device number 31 [ 555.916139][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6744'. [ 556.047353][T17472] hub 2-0:1.0: USB hub found [ 556.052538][T17472] hub 2-0:1.0: 1 port detected [ 556.212259][T17480] 9pnet_fd: Insufficient options for proto=fd [ 556.274055][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6747'. [ 556.283532][T17489] netlink: 'syz.0.6747': attribute type 16 has an invalid length. [ 556.291401][T17489] netlink: 'syz.0.6747': attribute type 17 has an invalid length. [ 556.302409][T17489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 556.309702][T17489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 556.328300][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 556.344876][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.392301][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 556.400616][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 556.416272][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 556.424929][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 556.434080][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 556.442416][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.277193][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6767'. [ 558.667329][ T28] audit: type=1400 audit(558.643:981): avc: denied { ioctl } for pid=17564 comm="syz.5.6783" path="/dev/input/event2" dev="devtmpfs" ino=277 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 558.747450][T17571] syz.3.6786[17571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.747497][T17571] syz.3.6786[17571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.760203][T17571] loop3: detected capacity change from 0 to 128 [ 558.779131][T17571] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 558.799192][ T19] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 558.898902][ T6162] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 559.080771][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.090946][ T19] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 559.100010][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.114350][ T19] usb 1-1: config 0 descriptor?? [ 560.266170][T17643] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 560.798797][ T28] audit: type=1400 audit(560.773:982): avc: denied { bind } for pid=17666 comm="syz.5.6825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 560.832874][ T851] usb 1-1: USB disconnect, device number 31 [ 560.954102][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6827'. [ 560.963603][T17677] netlink: 'syz.0.6827': attribute type 16 has an invalid length. [ 560.971475][T17677] netlink: 'syz.0.6827': attribute type 17 has an invalid length. [ 560.981200][T17677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 561.163475][ T28] audit: type=1400 audit(561.143:983): avc: denied { setattr } for pid=17693 comm="syz.6.6836" name="NETLINK" dev="sockfs" ino=71611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 561.222379][T17698] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6838'. [ 561.264562][T17705] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6842'. [ 561.330372][T17715] IPv6: NLM_F_CREATE should be specified when creating new route [ 563.062969][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6855'. [ 563.087067][T17736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6853'. [ 563.183302][T17750] netlink: 'syz.2.6861': attribute type 12 has an invalid length. [ 563.306513][T17765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6868'. [ 563.439685][ T453] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 563.526142][T17779] overlayfs: failed to clone upperpath [ 563.660560][ T453] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.673789][ T453] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 563.699607][ T453] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 563.708640][ T453] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.721889][ T453] usb 7-1: config 0 descriptor?? [ 563.727675][ T453] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 563.929785][ T453] usb 7-1: USB disconnect, device number 3 [ 564.048736][T17795] netlink: 'syz.5.6878': attribute type 2 has an invalid length. [ 564.108577][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6880'. [ 564.283344][T17807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6883'. [ 564.292867][T17807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6883'. [ 564.303486][T17807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6883'. [ 565.264548][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6890'. [ 565.348037][T17831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6892'. [ 565.749600][ T19] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 565.980472][ T19] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 565.990609][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.999729][ T19] usb 1-1: Product: syz [ 566.012189][ T19] usb 1-1: Manufacturer: syz [ 566.017833][ T19] usb 1-1: SerialNumber: syz [ 566.272367][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6904'. [ 566.371983][ T19] rtl8150 1-1:1.0: couldn't reset the device [ 566.380311][ T19] rtl8150: probe of 1-1:1.0 failed with error -5 [ 566.397354][ T19] usb 1-1: USB disconnect, device number 32 [ 566.899379][T17903] loop5: detected capacity change from 0 to 512 [ 566.918415][T17903] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 566.946231][T17903] syz.5.6925[17903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.946297][T17903] syz.5.6925[17903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.968593][T14378] EXT4-fs (loop5): unmounting filesystem. [ 567.331096][T17927] device gretap0 entered promiscuous mode [ 568.479581][ T851] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 568.660646][ T851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.671664][ T851] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 568.681320][ T851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.690114][ T851] usb 1-1: config 0 descriptor?? [ 568.860035][ T1762] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 569.300880][ T1762] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 569.309190][ T1762] usb 4-1: config 0 has no interface number 0 [ 569.315355][ T1762] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 569.326822][ T1762] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 569.336114][ T1762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.345159][ T1762] usb 4-1: config 0 descriptor?? [ 569.373416][ T28] audit: type=1326 audit(569.353:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.5.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69578f749 code=0x7ffc0000 [ 569.400810][ T851] logitech-hidpp-device 0003:046D:C086.0009: unknown main item tag 0x0 [ 569.410291][ T28] audit: type=1326 audit(569.353:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.5.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69578f749 code=0x7ffc0000 [ 569.433935][ T851] logitech-hidpp-device 0003:046D:C086.0009: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 569.499579][ T28] audit: type=1326 audit(569.373:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.5.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa69578f749 code=0x7ffc0000 [ 569.539587][ T28] audit: type=1326 audit(569.373:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.5.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69578f749 code=0x7ffc0000 [ 569.553012][ T851] usb 4-1: USB disconnect, device number 32 [ 569.584801][ T28] audit: type=1326 audit(569.373:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.5.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69578f749 code=0x7ffc0000 [ 569.590551][T18000] loop5: detected capacity change from 0 to 40427 [ 569.610070][ T1053] usb 1-1: USB disconnect, device number 33 [ 569.650220][T18000] F2FS-fs (loop5): Found nat_bits in checkpoint [ 569.673162][T18000] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 569.710368][T18000] tmpfs: Unknown parameter 'nolazytime/binder0' [ 569.731983][T14378] syz-executor: attempt to access beyond end of device [ 569.731983][T14378] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 569.923433][T18019] __nla_validate_parse: 8 callbacks suppressed [ 569.923450][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6971'. [ 570.430606][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6983'. [ 571.099921][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6996'. [ 572.869629][ T28] audit: type=1400 audit(572.653:989): avc: denied { ioctl } for pid=18116 comm="syz.5.7012" path="socket:[73482]" dev="sockfs" ino=73482 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 572.931483][T18128] IPv6: sit1: Disabled Multicast RS [ 572.935557][T18113] loop6: detected capacity change from 0 to 40427 [ 572.944460][T18130] tipc: Failed to remove unknown binding: 66,1,1/0:4157206983/4157206985 [ 572.964550][T18113] F2FS-fs (loop6): Found nat_bits in checkpoint [ 572.991343][T18130] tipc: Failed to remove unknown binding: 66,1,1/0:4157206983/4157206985 [ 573.011383][T18130] tipc: Failed to remove unknown binding: 66,1,1/0:4157206983/4157206985 [ 573.028744][T18113] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 573.066954][T18113] tmpfs: Unknown parameter 'nolazytime/binder0' [ 573.077702][T15764] syz-executor: attempt to access beyond end of device [ 573.077702][T15764] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 573.189964][ T28] audit: type=1400 audit(573.173:990): avc: denied { create } for pid=18147 comm="syz.6.7022" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 573.211189][T18148] tmpfs: Unsupported parameter 'mpol' [ 573.231648][ T28] audit: type=1400 audit(573.193:991): avc: denied { mounton } for pid=18147 comm="syz.6.7022" path="/160/file0" dev="tmpfs" ino=872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 573.356139][ T28] audit: type=1400 audit(573.333:992): avc: denied { getopt } for pid=18156 comm="syz.5.7027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 573.418969][T18163] IPv6: sit1: Disabled Multicast RS [ 573.629861][T18170] syz.2.7031[18170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.629940][T18170] syz.2.7031[18170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.025997][T18167] loop5: detected capacity change from 0 to 40427 [ 574.050933][T18167] F2FS-fs (loop5): Found nat_bits in checkpoint [ 574.082524][T18167] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 574.098358][T18167] tmpfs: Unknown parameter 'nolazytime/binder0' [ 574.109502][T14378] syz-executor: attempt to access beyond end of device [ 574.109502][T14378] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 574.432787][T18204] loop3: detected capacity change from 0 to 40427 [ 574.460928][T18204] F2FS-fs (loop3): Found nat_bits in checkpoint [ 574.479643][ T453] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 574.499155][T18204] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 574.515010][T18204] tmpfs: Unknown parameter 'nolazytime/binder0' [ 574.527338][T15073] syz-executor: attempt to access beyond end of device [ 574.527338][T15073] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 574.690648][ T453] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 574.701750][ T453] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.711685][ T453] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.718426][ T453] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 574.736482][ T453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.747441][ T453] usb 6-1: config 0 descriptor?? [ 575.170069][ T453] uclogic 0003:28BD:0075.000A: interface is invalid, ignoring [ 575.375624][ T453] usb 6-1: USB disconnect, device number 11 [ 575.933299][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7059'. [ 575.972554][ T28] audit: type=1400 audit(575.953:993): avc: denied { read write } for pid=18249 comm="syz.5.7062" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 575.995822][ T28] audit: type=1400 audit(575.983:994): avc: denied { open } for pid=18249 comm="syz.5.7062" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 576.019009][ T28] audit: type=1400 audit(575.983:995): avc: denied { ioctl } for pid=18249 comm="syz.5.7062" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 576.081270][ T28] audit: type=1400 audit(576.053:996): avc: denied { ioctl } for pid=18253 comm="syz.5.7064" path="socket:[74638]" dev="sockfs" ino=74638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 576.107227][T18259] netlink: 'syz.5.7066': attribute type 12 has an invalid length. [ 576.157711][ T28] audit: type=1400 audit(576.133:997): avc: denied { create } for pid=18264 comm="syz.6.7070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 576.282896][T18287] netlink: 'syz.6.7079': attribute type 12 has an invalid length. [ 577.114612][T18307] overlayfs: failed to clone upperpath [ 577.186961][T18318] netlink: 'syz.5.7091': attribute type 12 has an invalid length. [ 578.178691][T18348] netlink: 'syz.5.7103': attribute type 12 has an invalid length. [ 578.179819][T18350] loop6: detected capacity change from 0 to 512 [ 578.212502][ T28] audit: type=1400 audit(578.193:998): avc: denied { lock } for pid=18352 comm="syz.0.7105" path="socket:[74948]" dev="sockfs" ino=74948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 578.251270][ T28] audit: type=1400 audit(578.233:999): avc: denied { unmount } for pid=16872 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 578.280371][T18350] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 578.345676][T18350] syz.6.7104[18350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.345727][T18350] syz.6.7104[18350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.350069][ T28] audit: type=1400 audit(578.253:1000): avc: denied { write } for pid=18362 comm="syz.0.7108" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 578.451272][T18372] overlayfs: failed to clone upperpath [ 578.661049][T15764] EXT4-fs (loop6): unmounting filesystem. [ 579.184568][ T28] audit: type=1400 audit(579.163:1001): avc: denied { mount } for pid=18387 comm="syz.5.7117" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 579.212081][ T28] audit: type=1400 audit(579.163:1002): avc: denied { unmount } for pid=14378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 579.258876][T18396] loop5: detected capacity change from 0 to 512 [ 579.291613][T18396] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 579.305910][T18396] syz.5.7121[18396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.306038][T18396] syz.5.7121[18396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.330121][T18402] tipc: Failed to remove unknown binding: 66,1,1/0:1405151646/1405151648 [ 579.351454][T18402] tipc: Failed to remove unknown binding: 66,1,1/0:1405151646/1405151648 [ 579.359938][T18402] tipc: Failed to remove unknown binding: 66,1,1/0:1405151646/1405151648 [ 579.369816][T14378] EXT4-fs (loop5): unmounting filesystem. [ 580.068049][T18413] tmpfs: Unknown parameter 'nolazytime/binder0' [ 580.440254][T18431] syz.0.7133[18431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 580.440321][T18431] syz.0.7133[18431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.345719][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7135'. [ 581.431405][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7138'. [ 582.248185][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 582.248200][ T28] audit: type=1326 audit(582.223:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18472 comm="syz.2.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7c18f749 code=0x7ffc0000 [ 582.277470][ T28] audit: type=1326 audit(582.253:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18472 comm="syz.2.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7c18f749 code=0x7ffc0000 [ 582.301206][ T28] audit: type=1326 audit(582.253:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18472 comm="syz.2.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7c18f749 code=0x7ffc0000 [ 582.324372][ T28] audit: type=1326 audit(582.253:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18472 comm="syz.2.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7c18f749 code=0x7ffc0000 [ 582.342491][T18476] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7151'. [ 582.347571][ T28] audit: type=1326 audit(582.273:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18472 comm="syz.2.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4d7c18f749 code=0x7ffc0000 [ 582.379982][ T28] audit: type=1326 audit(582.273:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18472 comm="syz.2.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7c18f749 code=0x7ffc0000 [ 582.404770][ T28] audit: type=1326 audit(582.273:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18472 comm="syz.2.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7c18f749 code=0x7ffc0000 [ 582.429345][ T28] audit: type=1326 audit(582.273:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18472 comm="syz.2.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d7c18f749 code=0x7ffc0000 [ 582.470093][ T28] audit: type=1326 audit(582.273:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18472 comm="syz.2.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d7c18f749 code=0x7ffc0000 [ 582.493800][T18479] syz.0.7150[18479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.493869][T18479] syz.0.7150[18479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 583.524999][T18495] tipc: Failed to remove unknown binding: 66,1,1/0:3959046191/3959046193 [ 583.602461][T18495] tipc: Failed to remove unknown binding: 66,1,1/0:3959046191/3959046193 [ 583.611968][T18495] tipc: Failed to remove unknown binding: 66,1,1/0:3959046191/3959046193 [ 583.620741][ T1762] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 583.810614][ T1762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 583.820455][ T1762] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 583.830316][ T1762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 583.840010][ T1762] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 583.850939][ T1762] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 583.860030][ T1762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.868026][ T1762] usb 4-1: Product: syz [ 583.872222][ T1762] usb 4-1: Manufacturer: syz [ 583.876801][ T1762] usb 4-1: SerialNumber: syz [ 583.881920][ T1762] usb 4-1: config 0 descriptor?? [ 583.887482][ T1762] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 584.090966][ T1762] scsi host1: usb-storage 4-1:0.0 [ 584.208293][T18519] bridge0: port 3(veth1_macvtap) entered blocking state [ 584.215423][T18519] bridge0: port 3(veth1_macvtap) entered disabled state [ 584.292992][ T1762] usb 4-1: USB disconnect, device number 33 [ 584.749164][T18529] tipc: Failed to remove unknown binding: 66,1,1/0:2130150406/2130150408 [ 584.760719][T18529] tipc: Failed to remove unknown binding: 66,1,1/0:2130150406/2130150408 [ 584.771023][T18529] tipc: Failed to remove unknown binding: 66,1,1/0:2130150406/2130150408 [ 585.214312][T18537] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7172'. [ 586.041947][ T28] audit: type=1400 audit(586.023:1019): avc: denied { map } for pid=18564 comm="syz.3.7183" path="socket:[76069]" dev="sockfs" ino=76069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 588.116225][ T28] audit: type=1400 audit(588.093:1020): avc: denied { mount } for pid=18594 comm="syz.6.7196" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 589.462735][ T43] tipc: Left network mode [ 590.000071][ T43] device bridge_slave_1 left promiscuous mode [ 590.006211][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.013684][ T43] device bridge_slave_0 left promiscuous mode [ 590.019844][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.027786][ T43] device veth1_macvtap left promiscuous mode [ 590.033866][ T43] device veth0_vlan left promiscuous mode [ 590.363877][ T43] tipc: Disabling bearer [ 590.368976][ T43] tipc: Left network mode [ 590.373608][ T43] tipc: Left network mode [ 590.377982][ T43] tipc: Left network mode [ 590.890529][ T43] device bridge_slave_1 left promiscuous mode [ 590.896630][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.904070][ T43] device bridge_slave_0 left promiscuous mode [ 590.910233][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.917777][ T43] device bridge_slave_1 left promiscuous mode [ 590.923947][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.931243][ T43] device bridge_slave_0 left promiscuous mode [ 590.937317][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.945440][ T43] device bridge_slave_1 left promiscuous mode [ 590.951869][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.959153][ T43] device bridge_slave_0 left promiscuous mode [ 590.965354][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.973456][ T43] device veth1_macvtap left promiscuous mode [ 590.979441][ T43] device veth0_vlan left promiscuous mode [ 590.985614][ T43] device veth1_macvtap left promiscuous mode [ 590.991620][ T43] device veth0_vlan left promiscuous mode [ 590.997616][ T43] device veth1_macvtap left promiscuous mode [ 591.003665][ T43] device veth0_vlan left promiscuous mode [ 591.009775][ T43] device veth1_macvtap left promiscuous mode [ 591.015762][ T43] device veth0_vlan left promiscuous mode