last executing test programs: 1m0.693434736s ago: executing program 3 (id=50): syz_emit_ethernet(0x68, &(0x7f0000000240)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000136, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x70bd29}, 0x20}, 0x1, 0x0, 0x0, 0x2c044000}, 0x0) 59.468453984s ago: executing program 3 (id=54): socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd25, 0x25dfdbfd, {0x2, 0x20, 0x2, 0xcb, r7}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0xfffffffe}]}, 0x30}}, 0xc000) 57.76249223s ago: executing program 3 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) timer_getoverrun(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}], [], 0x2c}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x4, 0x98, 0x56, 0x20, 0xa5c, 0x6422, 0xee8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd0, 0x7, 0x2, 0xf7, 0x89, 0xdf, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}, {{0x9, 0x5, 0x7, 0x301151bc8652c9db, 0x200, 0x6, 0x3, 0x80}}]}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f00000003c0)="8b39bc29ad0efd228341bebd7acebc74ba74fa7e57a53e42b8579e4e718ed0b657c01d6657774a4b10f01de907661ac3b20916e4932fd2a090832bb9b8b8ac343e4e931ad3149b6d3d6f994ab4f8fcd76e9d2d04fb37f4a487d217cef91d9a4512f2e6566a563cbfe0e76e3b33a1d50b5981bbe1bb13a588cc0549cd48274704dd60a8014aefe0dc2232748af99635c99057c3ea9f50720b178ec925190b499459e0ceab7c023de94c9a5cb94486dac2676493b871b59e5eded668b8689ac0a0e465e6520e9ca755e9e3b672ced356e68171c271a753a7b6d7") fdatasync(r1) 54.893432664s ago: executing program 3 (id=64): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf2503000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x51}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x801) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r4 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x8000) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000240)) 54.740636736s ago: executing program 3 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 54.294705254s ago: executing program 3 (id=68): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) 53.288810707s ago: executing program 32 (id=68): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) 12.421603801s ago: executing program 4 (id=222): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020b11837000000000000010902240001000000000904004a0103000200092100000d0122030009058103"], 0x0) 8.465345521s ago: executing program 1 (id=239): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010004, 0x0, 0x390}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$clear(0x3, 0xfffffffffffffffd) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x4, 0x3, {{0x16, 0x4, 0x3, 0x38, 0x58, 0x67, 0x0, 0xe, 0x2b, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}, {[@lsrr={0x83, 0xb, 0xa5, [@private=0xa010101, @empty]}, @rr={0x7, 0x7, 0x27, [@local]}, @end, @end, @rr={0x7, 0x17, 0x8b, [@local, @remote, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp={0x44, 0x18, 0xb9, 0x0, 0x4, [0x4, 0x48f, 0x1b3, 0x9, 0x7fffffff]}]}}}}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0000007a0000000700000005000000a0000100", @ANYRES32=r6, @ANYBLOB="0100"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0300000004000000010000000d00"/24, @ANYRES32, @ANYBLOB="1902f9be1ba3efa69295c376091902cc2934bccf1e6a105bb0e11a4906b0fd1d27f352625a1431e5898e2507deedf756bbf1a1e7a603f4357097c7d483ed7d8c898fcac3fbacebc7f1bf70c959a7f49fd8a04bbcde0e4310d677"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) 6.629984779s ago: executing program 4 (id=242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x2, 0x0, 0x0, 0x0, 0x2129, &(0x7f0000000480)='ip6erspan0\x00', 0x6, 0x5, 0x1ff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 6.59057568s ago: executing program 5 (id=244): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=862,discard,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f56f6a4218b646f74732c646f74732c776f646f74722c6e6f646f74732c6e872c6e6f646f74732c6e6f646f74732c636803000000000000007865642c6e6f646f6769643d0000000000000000000c8b4599962e73b812fa5b3bbd75302f7c4d768fc9ed318efda1102ef9f615131bae51a9bb241e63c081cf47f551ee4ca033d8a879bdad296b258c36e511", @ANYRESHEX=0x0, @ANYBLOB=',nodots,showexec,flush,flush,dots,sys_immutable,\x00'], 0x1, 0x201, &(0x7f0000000780)="$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") ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0, 0xf0}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs(r6, &(0x7f0000000280)='attr/sockcreate\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) openat$ashmem(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.91468001s ago: executing program 5 (id=245): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x2, 0x2, '\x00', 0xc94}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf3, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='mm_page_alloc\x00', r7}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.705150753s ago: executing program 4 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64=r2, @ANYBLOB="d761946a06b4a98d6eeb092b145f29133a4b8f913201acef1693b5ddd31872128f87f589560ba8f08fed5ef35933f0ece90cdf5e00e750cb6eab826504cabd2573b383e61c964c50129f370a05d51df1a63472b477370c6b316a5f99206cf5404d5bf15b697ebbb93d93a2e8d18887f70f7a1b1d56e9cfea66bd7c22ca2996", @ANYRES32=r2, @ANYRES32=r5, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 5.665418914s ago: executing program 5 (id=248): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.26271866s ago: executing program 1 (id=250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) 4.302811115s ago: executing program 1 (id=251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000"], 0x18, 0x85}, 0x8810) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fcntl$notify(r1, 0x402, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = eventfd2(0xffffffff, 0x1) write$eventfd(r3, &(0x7f0000000080)=0xffffffff00000000, 0x8) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f00000005c0)=0x80) read$eventfd(r3, &(0x7f0000000040), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r1}, 0x0, &(0x7f00000013c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000036d6f71783a67535cf93a815f8d3f9493a1c3261555ed17430ec2d052257aca959cc37f6f915d7ec8eaa7821347cc8e9da369f16a449a7383b58a7a45a6e240d700dcee6418288f252858b0b8081248dbf6ed8b7183ba01fc3c5c970a7b56578ae3c9029ca9e58ecfdef1edf6e7d9f7d6049108452809c38ccd31ab387ab6cc85a942d87b9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x2000000}, 0x20) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x2, 0xff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x13, 0xf, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x64, 0x0, 0x71, 0x2f, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000200)=0x7ffffffc) 4.230551426s ago: executing program 5 (id=253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="186f205005000000000000000000a800"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x161000, 0x80) getdents(r4, &(0x7f0000000300)=""/28, 0x1c) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nombcache}, {@minixdf}]}, 0x2, 0x4f3, &(0x7f00000005c0)="$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") 4.221278296s ago: executing program 4 (id=254): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0xe5) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x81) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000a65519f15b91ee0000000000f9000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x88c43) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x403, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefd, 0x6, 0x3, 0x0, 0x5, 0x4, 0x4, 0x4, 0x3c5b, 0x1, 0x20, 0x5, 0x1, 0x1f461e2c, 0x12, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0xfffffffd, 0x71, 0x7, 0x400b, 0x1, 0x7, 0x3, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0xd4, 0x801, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2ff, 0x3, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x8, 0x2f, 0x5, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x4, 0x8000, 0x2009, 0x0, 0x401, 0x4, 0x1, 0xff, 0x10005, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x6, 0x8000, 0x1, 0xfe000000, 0xffff, 0x5, 0x7f, 0x9, 0x7f, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x6, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d00, 0x6, 0x38, 0x800003, 0x200, 0xffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x100, 0x6, 0x1c, 0x120010, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffe, 0x5, 0xce7, 0x80000000, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0xaf5, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1c, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x204, 0xffff3441, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) readahead(0xffffffffffffffff, 0x3ff, 0x9) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x204611, &(0x7f0000000580)=ANY=[], 0x1, 0x5519, &(0x7f00000079c0)="$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") 4.114816677s ago: executing program 1 (id=255): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r6) write$cgroup_subtree(r7, &(0x7f0000003100)=ANY=[], 0x10448) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.93977742s ago: executing program 2 (id=256): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) 3.684681434s ago: executing program 2 (id=257): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 3.675242274s ago: executing program 5 (id=258): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x2, 0x0, 0x0, 0x0, 0x2129, &(0x7f0000000480)='ip6erspan0\x00', 0x6, 0x5, 0x1ff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 3.669937694s ago: executing program 2 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x40, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 3.497856587s ago: executing program 4 (id=260): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x11, 0x0, 0x0, 0x0, 0xfffffd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.729950749s ago: executing program 5 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) timer_getoverrun(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x4, 0x98, 0x56, 0x20, 0xa5c, 0x6422, 0xee8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd0, 0x7, 0x2, 0xf7, 0x89, 0xdf, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}, {{0x9, 0x5, 0x7, 0x301151bc8652c9db, 0x200, 0x6, 0x3, 0x80}}]}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f00000003c0)="8b39bc29ad0efd228341bebd7acebc74ba74fa7e57a53e42b8579e4e718ed0b657c01d6657774a4b10f01de907661ac3b20916e4932fd2a090832bb9b8b8ac343e4e931ad3149b6d3d6f994ab4f8fcd76e9d2d04fb37f4a487d217cef91d9a4512f2e6566a563cbfe0e76e3b33a1d50b5981bbe1bb13a588cc0549cd48274704dd60a8014aefe0dc2232748af99635c99057c3ea9f50720b178ec925190b499459e0ceab7c023de94c9a5cb94486dac2676493b871b59e5eded668b8689ac0a0e465e6520e9ca755e9e3b672ced356e68171c271a753a7b6d7") fdatasync(r1) 2.62708014s ago: executing program 2 (id=262): socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd25, 0x25dfdbfd, {0x2, 0x20, 0x2, 0xcb, r7}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0xfffffffe}]}, 0x30}}, 0xc000) 2.506493532s ago: executing program 0 (id=263): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000000030000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xffffffffffffffff) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) 2.476622153s ago: executing program 0 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64=r2, @ANYBLOB="d761946a06b4a98d6eeb092b145f29133a4b8f913201acef1693b5ddd31872128f87f589560ba8f08fed5ef35933f0ece90cdf5e00e750cb6eab826504cabd2573b383e61c964c50129f370a05d51df1a63472b477370c6b316a5f99206cf5404d5bf15b697ebbb93d93a2e8d18887f70f7a1b1d56e9cfea66bd7c22ca2996", @ANYRES32=r2, @ANYRES32=r5, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.812504553s ago: executing program 0 (id=265): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000"], 0x18, 0x85}, 0x8810) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fcntl$notify(r1, 0x402, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = eventfd2(0xffffffff, 0x1) write$eventfd(r3, &(0x7f0000000080)=0xffffffff00000000, 0x8) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f00000005c0)=0x80) read$eventfd(r3, &(0x7f0000000040), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r1}, 0x0, &(0x7f00000013c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000036d6f71783a67535cf93a815f8d3f9493a1c3261555ed17430ec2d052257aca959cc37f6f915d7ec8eaa7821347cc8e9da369f16a449a7383b58a7a45a6e240d700dcee6418288f252858b0b8081248dbf6ed8b7183ba01fc3c5c970a7b56578ae3c9029ca9e58ecfdef1edf6e7d9f7d6049108452809c38ccd31ab387ab6cc85a942d87b9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x2000000}, 0x20) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x2, 0xff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x13, 0xf, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x64, 0x0, 0x71, 0x2f, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000200)=0x7ffffffc) 1.693145955s ago: executing program 2 (id=266): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x29000000, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9e}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x7, 0x96, &(0x7f0000000580)=""/150, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x0, 0xa, 0x8}, 0x10, 0x9ec0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000006c0)=[{0x1, 0x3, 0x0, 0x8539d2d4c3d6247d}, {0x2, 0x3, 0xa, 0x4}, {0x5, 0x3, 0x10, 0x1}, {0x0, 0x2, 0x9, 0x4}], 0x10, 0x8, @void, @value}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0xaf84b4381f27b0f9, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) close(r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a3aad2b0e1ac55f842b7db84b976254644d745ef9e150eae32eb8ea53b671002a7aee5b3cbcee737e4789ea5de148b9ff75e7b463f4f228d0ec3bbd42e3ef94d2017e92ec6c68e644700964fd48547238f5a97d8bc1e2d3230012f9f4cd962b2ebfe2e935eaa370e53da841dfc3666c706b25c92a7fe82ddea5d0fd89ea0cc4da4eb83b2e419fbcd35", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) clock_getres(0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0xc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102020000102505a1a44000010203010902ae00010108b805090400900402060001052406000005240003000d240f0101000000100004000b6a241301d44bf44303657d50285d45"], 0x0) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffe}) setpriority(0x1, 0x0, 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) 1.634822665s ago: executing program 0 (id=267): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0402}]}) r0 = epoll_create1(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0xb0000004}) dup3(r0, r2, 0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xbfd, 0x0, 0x0) 1.383599579s ago: executing program 1 (id=268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x2, 0x0, 0x0, 0x0, 0x2129, &(0x7f0000000480)='ip6erspan0\x00', 0x6, 0x5, 0x1ff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 1.226126642s ago: executing program 0 (id=269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) 980.489075ms ago: executing program 4 (id=270): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) r3 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x4040080) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x2a, 0x2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYRES32=r6], 0x2c, 0x3) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") execve(&(0x7f00000001c0)='./bus\x00', &(0x7f00000014c0)={[&(0x7f0000000200)='f2fs\x00', &(0x7f0000000280)=']@\x00']}, &(0x7f0000001600)={[&(0x7f0000001500)='gcm(aes)\x00', &(0x7f0000001540)='(:\x00', &(0x7f0000001580)='system.posix_acl_access\x00', &(0x7f00000015c0)='@\x00']}) r7 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r7, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r7, 0x8, 0x0, 0x10000) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg$netlink(r3, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000000540)=ANY=[], 0x10}, {&(0x7f00000004c0)={0x38, 0x11, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x28, 0x125, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @uid=0xee01}, @typed={0xa, 0xbe, 0x0, 0x0, @str='/,W\\%\x00'}, @typed={0x8, 0x18, 0x0, 0x0, @pid}, @nested={0x4, 0x46}, @nested={0x4, 0x130}]}]}, 0x38}], 0x2, 0x0, 0x0, 0x44011}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1154, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff7838}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x105c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "50d9bec49ab620bb46ba06b42872f4f0dd77b34a749b52270ec7"}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa6e}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1154}, 0x1, 0x0, 0x0, 0x90}, 0x4000042) 128.275418ms ago: executing program 2 (id=271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x2, 0x0, 0x0, 0x0, 0x2129, &(0x7f0000000480)='ip6erspan0\x00', 0x6, 0x5, 0x1ff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 9.93592ms ago: executing program 0 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x40, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 1 (id=273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x2, 0x0, 0x0, 0x0, 0x2129, &(0x7f0000000480)='ip6erspan0\x00', 0x6, 0x5, 0x1ff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.60' (ED25519) to the list of known hosts. [ 20.424990][ T30] audit: type=1400 audit(1750379714.633:64): avc: denied { mounton } for pid=259 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.426629][ T259] cgroup: Unknown subsys name 'net' [ 20.449035][ T30] audit: type=1400 audit(1750379714.633:65): avc: denied { mount } for pid=259 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.477701][ T30] audit: type=1400 audit(1750379714.663:66): avc: denied { unmount } for pid=259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.478431][ T259] cgroup: Unknown subsys name 'devices' [ 20.592168][ T259] cgroup: Unknown subsys name 'hugetlb' [ 20.597797][ T259] cgroup: Unknown subsys name 'rlimit' [ 20.800139][ T30] audit: type=1400 audit(1750379715.013:67): avc: denied { setattr } for pid=259 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.824085][ T30] audit: type=1400 audit(1750379715.013:68): avc: denied { mounton } for pid=259 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.837384][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.850471][ T30] audit: type=1400 audit(1750379715.013:69): avc: denied { mount } for pid=259 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.883114][ T30] audit: type=1400 audit(1750379715.063:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.911570][ T30] audit: type=1400 audit(1750379715.063:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.949140][ T30] audit: type=1400 audit(1750379715.153:72): avc: denied { read } for pid=259 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.976675][ T30] audit: type=1400 audit(1750379715.153:73): avc: denied { open } for pid=259 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.976746][ T259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.927703][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.935357][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.944526][ T283] device bridge_slave_0 entered promiscuous mode [ 21.960650][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.968916][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.977858][ T281] device bridge_slave_0 entered promiscuous mode [ 21.985903][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.994050][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.003435][ T281] device bridge_slave_1 entered promiscuous mode [ 22.010137][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.017924][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.025625][ T283] device bridge_slave_1 entered promiscuous mode [ 22.091232][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.099204][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.107796][ T282] device bridge_slave_0 entered promiscuous mode [ 22.115681][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.122979][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.131801][ T282] device bridge_slave_1 entered promiscuous mode [ 22.218188][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.225703][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.234449][ T285] device bridge_slave_0 entered promiscuous mode [ 22.247920][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.255228][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.264592][ T284] device bridge_slave_0 entered promiscuous mode [ 22.275557][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.283538][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.292010][ T285] device bridge_slave_1 entered promiscuous mode [ 22.308367][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.315478][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.323999][ T284] device bridge_slave_1 entered promiscuous mode [ 22.445710][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.453974][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.462008][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.469330][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.523243][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.531141][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.538843][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.546647][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.557266][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.564458][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.572140][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.579208][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.618028][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.626158][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.634632][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.644038][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.674201][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.681843][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.689555][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.698074][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.708045][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.717713][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.726930][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.734806][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.743328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.751117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.774066][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.782902][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.793132][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.800742][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.808450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.818699][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.825943][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.833833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.842505][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.849973][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.857668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.866118][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.873726][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.902494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.914489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.923376][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.930484][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.938286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.948217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.957258][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.966706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.975625][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.983226][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.005220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.013548][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.021504][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.030919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.039566][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.047156][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.054735][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.063472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.071966][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.080176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.088353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.097511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.106128][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.113462][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.139504][ T283] device veth0_vlan entered promiscuous mode [ 23.147209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.157067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.166968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.177352][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.187416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.196231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.204901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.213767][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.221499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.246949][ T281] device veth0_vlan entered promiscuous mode [ 23.254768][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.263708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.272088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.281175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.289668][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.296929][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.304760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.313569][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.321808][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.328966][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.336788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.345188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.354149][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.362426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.370728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.379103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.387272][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.396019][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.404579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.412870][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.428812][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.437678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.455326][ T283] device veth1_macvtap entered promiscuous mode [ 23.467056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.476483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.486628][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.506157][ T285] device veth0_vlan entered promiscuous mode [ 23.515662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.524193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.532380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.541285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.549955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.558723][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.567274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.576947][ T281] device veth1_macvtap entered promiscuous mode [ 23.591432][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.600540][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.610361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.619642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.630799][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.651245][ T284] device veth0_vlan entered promiscuous mode [ 23.661608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.672009][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.682315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.697144][ T285] device veth1_macvtap entered promiscuous mode [ 23.709285][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.720269][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.730465][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.740959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.750701][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.761503][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.771136][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.793681][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.802489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.811458][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 23.811733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.829043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.838520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.847404][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.874747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.904301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.915537][ T284] device veth1_macvtap entered promiscuous mode [ 23.923334][ T282] device veth0_vlan entered promiscuous mode [ 23.950541][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.965324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.980722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.014504][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.025527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.036648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.053243][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.111001][ T282] device veth1_macvtap entered promiscuous mode [ 24.205612][ T315] loop3: detected capacity change from 0 to 1024 [ 25.184352][ T315] ======================================================= [ 25.184352][ T315] WARNING: The mand mount option has been deprecated and [ 25.184352][ T315] and is ignored by this kernel. Remove the mand [ 25.184352][ T315] option from the mount to silence this warning. [ 25.184352][ T315] ======================================================= [ 25.221960][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.237457][ T315] EXT4-fs (loop3): Ignoring removed nobh option [ 25.244228][ T315] EXT4-fs (loop3): Ignoring removed bh option [ 25.251206][ T315] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.480525][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 25.480555][ T30] audit: type=1400 audit(1750379719.493:117): avc: denied { mount } for pid=308 comm="syz.0.1" name="/" dev="overlay" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.685004][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.873286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.985720][ T315] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 26.295166][ T30] audit: type=1400 audit(1750379720.133:118): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.316439][ T30] audit: type=1400 audit(1750379720.283:119): avc: denied { write } for pid=311 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.339307][ T30] audit: type=1400 audit(1750379720.283:120): avc: denied { add_name } for pid=311 comm="syz.3.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.419559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.455290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.471902][ T333] loop2: detected capacity change from 0 to 256 [ 26.483221][ T30] audit: type=1400 audit(1750379720.283:121): avc: denied { create } for pid=311 comm="syz.3.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.544619][ T30] audit: type=1400 audit(1750379720.303:122): avc: denied { append } for pid=311 comm="syz.3.4" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.571064][ T30] audit: type=1400 audit(1750379720.303:123): avc: denied { open } for pid=311 comm="syz.3.4" path="/0/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.589815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.620173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.650745][ T333] FAT-fs (loop2): bogus number of FAT sectors [ 26.669679][ T333] FAT-fs (loop2): Can't find a valid FAT filesystem [ 26.743039][ T30] audit: type=1400 audit(1750379720.923:124): avc: denied { create } for pid=330 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.994899][ T30] audit: type=1400 audit(1750379720.923:125): avc: denied { write } for pid=330 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.039924][ T30] audit: type=1400 audit(1750379720.923:126): avc: denied { read } for pid=330 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.689808][ T316] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.740778][ T343] loop4: detected capacity change from 0 to 40427 [ 27.767851][ T343] F2FS-fs (loop4): invalid crc value [ 27.804025][ T343] F2FS-fs (loop4): Found nat_bits in checkpoint [ 27.879847][ T343] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 27.939847][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 27.959789][ T327] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.979226][ T338] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 28.059830][ T316] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 28.069275][ T316] usb 4-1: config 0 has no interface number 0 [ 28.092199][ T316] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 28.110433][ T341] syz.1.2 (341) used greatest stack depth: 22368 bytes left [ 28.123861][ T316] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 28.148659][ T359] loop1: detected capacity change from 0 to 256 [ 28.158962][ T316] usb 4-1: config 0 interface 41 has no altsetting 0 [ 28.218597][ T284] attempt to access beyond end of device [ 28.218597][ T284] loop4: rw=2049, want=45104, limit=40427 [ 28.235782][ T327] usb 3-1: Using ep0 maxpacket: 16 [ 28.262430][ T359] FAT-fs (loop1): bogus number of FAT sectors [ 28.289959][ T359] FAT-fs (loop1): Can't find a valid FAT filesystem [ 28.330229][ T316] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 28.349109][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.360611][ T316] usb 4-1: Product: syz [ 28.365297][ T316] usb 4-1: Manufacturer: syz [ 28.370341][ T316] usb 4-1: SerialNumber: syz [ 28.379854][ T327] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.381872][ T316] usb 4-1: config 0 descriptor?? [ 28.400229][ T327] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.429773][ T327] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 28.429861][ T345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.474961][ T327] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 28.481496][ T345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.583803][ T327] usb 3-1: config 1 interface 0 has no altsetting 0 [ 28.790517][ T327] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0201, bcdDevice= 0.40 [ 28.835502][ T327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.016377][ T327] usb 3-1: Product: syz [ 29.026433][ T327] usb 3-1: Manufacturer: syz [ 29.036391][ T345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.044574][ T327] usb 3-1: SerialNumber: syz [ 29.051330][ T345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.758734][ T349] tipc: Started in network mode [ 29.827392][ T349] tipc: Node identity , cluster identity 4711 [ 30.435828][ T349] tipc: Failed to obtain node identity [ 30.450806][ T349] tipc: Enabling of bearer rejected, failed to enable media [ 30.470760][ T377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 30.489959][ T377] device bridge_slave_1 left promiscuous mode [ 30.511169][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.531483][ T377] device bridge_slave_0 left promiscuous mode [ 30.548123][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.570201][ T372] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.595104][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 30.595122][ T30] audit: type=1400 audit(1750379724.803:140): avc: denied { read } for pid=344 comm="syz.3.9" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.636889][ T345] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.676704][ T30] audit: type=1400 audit(1750379724.843:141): avc: denied { open } for pid=344 comm="syz.3.9" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.711449][ T30] audit: type=1400 audit(1750379724.843:142): avc: denied { ioctl } for pid=344 comm="syz.3.9" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.744648][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.819900][ T327] usb 3-1: 0:2 : does not exist [ 30.827291][ T327] usb 3-1: unit 3 not found! [ 30.861604][ T327] usb 3-1: USB disconnect, device number 2 [ 30.879866][ T372] usb 5-1: Using ep0 maxpacket: 16 [ 30.919835][ T316] Error reading MAC address [ 30.939877][ T345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 30.948267][ T345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 30.999789][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 30.999823][ T372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.019108][ T372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.030323][ T372] usb 5-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 31.041568][ T372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.052154][ T372] usb 5-1: config 0 descriptor?? [ 31.149855][ T60] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 31.170344][ T60] usb 1-1: config 0 has no interface number 0 [ 31.177793][ T60] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 31.189064][ T60] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 31.203037][ T60] usb 1-1: config 0 interface 41 has no altsetting 0 [ 31.239825][ T316] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 31.256029][ T316] usb 4-1: USB disconnect, device number 2 [ 31.369875][ T60] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 31.415439][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.424345][ T60] usb 1-1: Product: syz [ 31.428780][ T60] usb 1-1: Manufacturer: syz [ 31.435724][ T60] usb 1-1: SerialNumber: syz [ 31.447168][ T60] usb 1-1: config 0 descriptor?? [ 31.470080][ T366] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 31.487820][ T366] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 31.503950][ T375] loop4: detected capacity change from 0 to 512 [ 31.564967][ T384] loop2: detected capacity change from 0 to 40427 [ 31.602412][ T375] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 31.616469][ T384] F2FS-fs (loop2): invalid crc value [ 31.635742][ T375] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.651123][ T375] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.663672][ T375] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.676295][ T375] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 31.685826][ T384] F2FS-fs (loop2): Found nat_bits in checkpoint [ 31.723294][ T366] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 31.732713][ T366] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 31.746090][ T384] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 31.870261][ T30] audit: type=1326 audit(1750379726.083:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=389 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 31.976687][ T30] audit: type=1326 audit(1750379726.083:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=389 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 32.049977][ T30] audit: type=1326 audit(1750379726.123:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=389 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 32.124059][ T30] audit: type=1326 audit(1750379726.123:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=389 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 32.187389][ T375] Zero length message leads to an empty skb [ 32.193831][ T30] audit: type=1326 audit(1750379726.123:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=389 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 32.222725][ T30] audit: type=1326 audit(1750379726.123:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=389 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 32.251421][ T372] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 32.260231][ T372] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 32.268695][ T372] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 32.276291][ T372] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 32.283592][ T372] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 32.291579][ T30] audit: type=1326 audit(1750379726.123:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=389 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 32.318007][ T372] wacom 0003:056A:0318.0001: item fetching failed at offset 10/11 [ 32.328373][ T372] wacom 0003:056A:0318.0001: parse failed [ 32.334796][ T372] wacom: probe of 0003:056A:0318.0001 failed with error -22 [ 32.468023][ T283] attempt to access beyond end of device [ 32.468023][ T283] loop2: rw=2049, want=45104, limit=40427 [ 32.570336][ T372] usb 5-1: USB disconnect, device number 2 [ 32.869804][ T60] Error reading MAC address [ 32.895468][ T394] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 32.908189][ T394] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 33.209803][ T60] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 33.225896][ T60] usb 1-1: USB disconnect, device number 2 [ 33.564776][ T302] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.567083][ T414] loop2: detected capacity change from 0 to 40427 [ 33.783730][ T414] F2FS-fs (loop2): invalid crc value [ 33.904603][ T316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.941013][ T414] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.980766][ T414] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 33.988583][ T414] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 34.020539][ T414] attempt to access beyond end of device [ 34.020539][ T414] loop2: rw=2049, want=53256, limit=40427 [ 34.032907][ T302] usb 2-1: Using ep0 maxpacket: 32 [ 34.048164][ T414] attempt to access beyond end of device [ 34.048164][ T414] loop2: rw=0, want=53256, limit=40427 [ 34.085382][ T283] attempt to access beyond end of device [ 34.085382][ T283] loop2: rw=2049, want=45104, limit=40427 [ 34.149834][ T316] usb 5-1: Using ep0 maxpacket: 32 [ 34.159893][ T302] usb 2-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.171513][ T302] usb 2-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.181909][ T302] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.188905][ T302] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 34.205336][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.217030][ T302] usb 2-1: config 0 descriptor?? [ 34.279851][ T316] usb 5-1: config 0 has an invalid interface number: 208 but max is 0 [ 34.288229][ T316] usb 5-1: config 0 has no interface number 0 [ 34.294913][ T316] usb 5-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 34.306296][ T316] usb 5-1: config 0 interface 208 has no altsetting 0 [ 34.508125][ T316] usb 5-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 34.529032][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.549279][ T316] usb 5-1: Product: syz [ 34.553939][ T316] usb 5-1: Manufacturer: syz [ 34.828039][ T372] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.987787][ T435] loop2: detected capacity change from 0 to 40427 [ 35.015393][ T435] F2FS-fs (loop2): invalid crc value [ 35.070969][ T435] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.159614][ T435] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.169752][ T372] usb 1-1: Using ep0 maxpacket: 32 [ 35.289857][ T372] usb 1-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.315132][ T372] usb 1-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.336337][ T372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.356329][ T372] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 35.389564][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.425396][ T372] usb 1-1: config 0 descriptor?? [ 35.451128][ T316] usb 5-1: SerialNumber: syz [ 35.460292][ T316] usb 5-1: config 0 descriptor?? [ 35.500653][ T316] ftdi_sio 5-1:0.208: FTDI USB Serial Device converter detected [ 35.509072][ T316] usb 5-1: Detected FT-X [ 35.514723][ T302] usbhid 2-1:0.0: can't add hid device: -71 [ 35.529382][ T302] usbhid: probe of 2-1:0.0 failed with error -71 [ 35.537508][ T302] usb 2-1: USB disconnect, device number 2 [ 35.632162][ T283] attempt to access beyond end of device [ 35.632162][ T283] loop2: rw=2049, want=45104, limit=40427 [ 36.001513][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 36.001532][ T30] audit: type=1326 audit(1750379730.213:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=409 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 36.069797][ T316] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 36.099865][ T316] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 36.183253][ T316] ftdi_sio 5-1:0.208: GPIO initialisation failed: -71 [ 36.230542][ T316] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 36.239960][ T302] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.417201][ T30] audit: type=1326 audit(1750379730.253:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=409 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 36.457341][ T316] usb 5-1: USB disconnect, device number 3 [ 36.467633][ T316] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 36.475570][ T30] audit: type=1326 audit(1750379730.253:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=409 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 36.495163][ T316] ftdi_sio 5-1:0.208: device disconnected [ 36.563411][ T30] audit: type=1326 audit(1750379730.253:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=409 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 36.587008][ T30] audit: type=1326 audit(1750379730.253:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=409 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 36.614531][ T302] usb 2-1: Using ep0 maxpacket: 32 [ 37.240251][ T30] audit: type=1326 audit(1750379730.253:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=409 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 38.071969][ T302] usb 2-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.088513][ T302] usb 2-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.091042][ T372] usbhid 1-1:0.0: can't add hid device: -71 [ 38.101925][ T302] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.122261][ T302] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 38.132225][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.160550][ T302] usb 2-1: config 0 descriptor?? [ 38.170695][ T30] audit: type=1326 audit(1750379730.253:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=409 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 38.200385][ T372] usbhid: probe of 1-1:0.0 failed with error -71 [ 38.209273][ T372] usb 1-1: USB disconnect, device number 3 [ 38.454980][ T30] audit: type=1326 audit(1750379730.253:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=409 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 38.643788][ T30] audit: type=1326 audit(1750379730.253:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=409 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f15e044c8e7 code=0x7ffc0000 [ 38.691344][ T30] audit: type=1326 audit(1750379730.253:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=409 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15e03f1b19 code=0x7ffc0000 [ 38.877740][ T486] loop4: detected capacity change from 0 to 40427 [ 38.916512][ T486] F2FS-fs (loop4): invalid crc value [ 39.067757][ T486] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.199608][ T486] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 39.225070][ T486] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 39.330742][ T479] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 39.404732][ T486] attempt to access beyond end of device [ 39.404732][ T486] loop4: rw=2049, want=53256, limit=40427 [ 39.461778][ T486] attempt to access beyond end of device [ 39.461778][ T486] loop4: rw=0, want=53256, limit=40427 [ 39.548067][ T284] attempt to access beyond end of device [ 39.548067][ T284] loop4: rw=2049, want=45104, limit=40427 [ 39.600221][ T302] usbhid 2-1:0.0: can't add hid device: -71 [ 39.618838][ T479] usb 3-1: Using ep0 maxpacket: 32 [ 39.625712][ T302] usbhid: probe of 2-1:0.0 failed with error -71 [ 39.662660][ T302] usb 2-1: USB disconnect, device number 3 [ 39.740016][ T479] usb 3-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.759909][ T479] usb 3-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.782656][ T479] usb 3-1: config 0 interface 0 has no altsetting 0 [ 39.790034][ T479] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 39.800977][ T479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.815944][ T479] usb 3-1: config 0 descriptor?? [ 40.279767][ T302] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 40.330136][ T506] syz.0.45 (506) used greatest stack depth: 21280 bytes left [ 40.369815][ T479] usbhid 3-1:0.0: can't add hid device: -71 [ 40.386571][ T479] usbhid: probe of 3-1:0.0 failed with error -71 [ 40.399063][ T479] usb 3-1: USB disconnect, device number 3 [ 40.449677][ T513] netlink: 'syz.1.47': attribute type 12 has an invalid length. [ 40.529755][ T302] usb 5-1: Using ep0 maxpacket: 32 [ 40.989796][ T302] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.002009][ T302] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.031579][ T302] usb 5-1: config 0 interface 0 has no altsetting 0 [ 41.051690][ T302] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 41.130080][ T522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 41.139798][ T522] device bridge_slave_1 left promiscuous mode [ 41.141213][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.149455][ T522] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.160300][ T302] usb 5-1: config 0 descriptor?? [ 41.929199][ T522] device bridge_slave_0 left promiscuous mode [ 42.048015][ T522] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.339768][ T479] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 44.049752][ T479] usb 1-1: Using ep0 maxpacket: 32 [ 44.069877][ T302] usbhid 5-1:0.0: can't add hid device: -71 [ 44.087645][ T302] usbhid: probe of 5-1:0.0 failed with error -71 [ 44.096834][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 44.096849][ T30] audit: type=1326 audit(1750379738.303:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 44.146282][ T302] usb 5-1: USB disconnect, device number 4 [ 44.158980][ T30] audit: type=1326 audit(1750379738.343:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 44.190450][ T30] audit: type=1326 audit(1750379738.343:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 44.217192][ T30] audit: type=1326 audit(1750379738.343:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 44.241217][ T30] audit: type=1326 audit(1750379738.343:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 44.265892][ T30] audit: type=1326 audit(1750379738.343:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 44.270063][ T479] usb 1-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.298783][ T30] audit: type=1326 audit(1750379738.343:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 44.300969][ T479] usb 1-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.334328][ T479] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.341099][ T479] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 44.350423][ T30] audit: type=1326 audit(1750379738.343:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 44.350708][ T479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.374033][ T364] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.489153][ T30] audit: type=1326 audit(1750379738.343:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 44.650837][ T30] audit: type=1326 audit(1750379738.343:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c29c929 code=0x7ffc0000 [ 44.670972][ T479] usb 1-1: config 0 descriptor?? [ 44.679846][ T364] usb 3-1: Using ep0 maxpacket: 16 [ 44.799834][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.811348][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.821145][ T364] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 44.830745][ T364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.845210][ T364] usb 3-1: config 0 descriptor?? [ 44.869798][ T302] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 45.178859][ T302] usb 4-1: Using ep0 maxpacket: 32 [ 45.329880][ T479] usbhid 1-1:0.0: can't add hid device: -71 [ 45.336968][ T479] usbhid: probe of 1-1:0.0 failed with error -71 [ 45.349795][ T302] usb 4-1: config 0 has an invalid interface number: 208 but max is 0 [ 45.365235][ T544] loop2: detected capacity change from 0 to 512 [ 45.377489][ T302] usb 4-1: config 0 has no interface number 0 [ 45.390504][ T479] usb 1-1: USB disconnect, device number 4 [ 45.398463][ T302] usb 4-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 45.425702][ T544] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 45.440241][ T302] usb 4-1: config 0 interface 208 has no altsetting 0 [ 45.451465][ T544] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.469615][ T544] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.505629][ T544] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 45.969926][ T302] usb 4-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 46.024797][ T302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.067891][ T302] usb 4-1: Product: syz [ 46.087090][ T302] usb 4-1: Manufacturer: syz [ 46.098472][ T302] usb 4-1: SerialNumber: syz [ 46.116081][ T302] usb 4-1: config 0 descriptor?? [ 46.172218][ T302] ftdi_sio 4-1:0.208: FTDI USB Serial Device converter detected [ 46.298478][ T302] usb 4-1: Detected FT-X [ 46.372958][ T479] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 46.410005][ T302] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 46.412151][ T364] wacom 0003:056A:0318.0002: unknown main item tag 0x0 [ 46.426689][ T364] wacom 0003:056A:0318.0002: unknown main item tag 0x0 [ 46.434988][ T364] wacom 0003:056A:0318.0002: unknown main item tag 0x0 [ 46.440144][ T302] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 46.444042][ T364] wacom 0003:056A:0318.0002: unknown main item tag 0x0 [ 46.459936][ T364] wacom 0003:056A:0318.0002: unknown main item tag 0x0 [ 46.468377][ T364] wacom 0003:056A:0318.0002: item fetching failed at offset 10/11 [ 46.477126][ T364] wacom 0003:056A:0318.0002: parse failed [ 46.479880][ T302] ftdi_sio 4-1:0.208: GPIO initialisation failed: -71 [ 46.483431][ T364] wacom: probe of 0003:056A:0318.0002 failed with error -22 [ 46.492074][ T302] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 46.513900][ T302] usb 4-1: USB disconnect, device number 3 [ 46.521678][ T302] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 46.531549][ T302] ftdi_sio 4-1:0.208: device disconnected [ 46.569830][ T60] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.629820][ T479] usb 2-1: Using ep0 maxpacket: 16 [ 46.645195][ T364] usb 3-1: USB disconnect, device number 4 [ 46.689856][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 46.749895][ T479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.761191][ T479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.772701][ T479] usb 2-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 46.785762][ T479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.795822][ T479] usb 2-1: config 0 descriptor?? [ 46.809847][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 46.920600][ T612] loop3: detected capacity change from 0 to 1024 [ 46.929916][ T60] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 46.938634][ T60] usb 1-1: config 0 has no interface number 0 [ 46.945567][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 46.952172][ T60] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 46.964678][ T60] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 46.976754][ T60] usb 1-1: config 0 interface 41 has no altsetting 0 [ 46.986959][ T612] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.015758][ T612] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.64: inode #393216: comm syz.3.64: iget: illegal inode # [ 47.033011][ T612] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.64: error while reading EA inode 393216 err=-117 [ 47.066006][ T285] EXT4-fs warning (device loop3): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 47.077622][ T6] usb 5-1: config 0 has an invalid interface number: 208 but max is 0 [ 47.078024][ T285] EXT4-fs warning (device loop3): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 47.086535][ T6] usb 5-1: config 0 has no interface number 0 [ 47.097332][ T285] EXT4-fs warning (device loop3): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 47.103856][ T6] usb 5-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.114664][ T285] EXT4-fs warning (device loop3): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 47.126352][ T6] usb 5-1: config 0 interface 208 has no altsetting 0 [ 47.137561][ T285] EXT4-fs warning (device loop3): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 47.144870][ T60] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 47.156567][ T285] EXT4-fs warning (device loop3): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 47.165804][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.184145][ T60] usb 1-1: Product: syz [ 47.188336][ T60] usb 1-1: Manufacturer: syz [ 47.193018][ T60] usb 1-1: SerialNumber: syz [ 47.193606][ T285] EXT4-fs warning (device loop3): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 47.209826][ T285] EXT4-fs warning (device loop3): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 47.220123][ T60] usb 1-1: config 0 descriptor?? [ 47.228608][ T285] EXT4-fs warning (device loop3): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 47.243652][ T285] EXT4-fs warning (device loop3): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 47.250174][ T576] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 47.266069][ T562] loop1: detected capacity change from 0 to 512 [ 47.274735][ T576] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 47.312805][ T562] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 47.323458][ T6] usb 5-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 47.334466][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.342995][ T562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.354852][ T6] usb 5-1: Product: syz [ 47.359572][ T6] usb 5-1: Manufacturer: syz [ 47.365677][ T562] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.400052][ T562] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 47.420942][ T6] usb 5-1: SerialNumber: syz [ 47.434295][ T6] usb 5-1: config 0 descriptor?? [ 47.841300][ T576] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 47.999647][ T576] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 48.479705][ C0] sched: RT throttling activated [ 48.497294][ T6] ftdi_sio 5-1:0.208: FTDI USB Serial Device converter detected [ 48.640999][ T567] device veth1_macvtap left promiscuous mode [ 48.658583][ T567] device veth0_vlan left promiscuous mode [ 48.709359][ T6] usb 5-1: Detected FT-X [ 48.729828][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 48.749855][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 48.779820][ T6] ftdi_sio 5-1:0.208: GPIO initialisation failed: -71 [ 48.788226][ T6] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 48.837312][ T479] wacom 0003:056A:0318.0003: unknown main item tag 0x0 [ 48.858694][ T6] usb 5-1: USB disconnect, device number 5 [ 48.865953][ T479] wacom 0003:056A:0318.0003: unknown main item tag 0x0 [ 48.952427][ T631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 49.156523][ T624] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.290664][ T624] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.400479][ T624] device bridge_slave_0 entered promiscuous mode [ 50.109525][ T631] syz.2.70 (631) used greatest stack depth: 19736 bytes left [ 50.136494][ T624] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.155823][ T624] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.207482][ T624] device bridge_slave_1 entered promiscuous mode [ 50.225150][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 50.235453][ T479] wacom 0003:056A:0318.0003: unknown main item tag 0x0 [ 50.243119][ T479] wacom 0003:056A:0318.0003: unknown main item tag 0x0 [ 50.251263][ T6] ftdi_sio 5-1:0.208: device disconnected [ 50.259395][ T479] wacom 0003:056A:0318.0003: unknown main item tag 0x0 [ 50.267839][ T479] wacom 0003:056A:0318.0003: item fetching failed at offset 10/11 [ 50.276843][ T479] wacom 0003:056A:0318.0003: parse failed [ 50.351326][ T479] wacom: probe of 0003:056A:0318.0003 failed with error -22 [ 50.372367][ T479] usb 2-1: USB disconnect, device number 4 [ 50.919857][ T60] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 51.283712][ T649] loop4: detected capacity change from 0 to 512 [ 51.380573][ T649] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.75: casefold flag without casefold feature [ 51.405925][ T642] loop1: detected capacity change from 0 to 40427 [ 51.409871][ T60] dm9601 1-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 51.423885][ T649] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.75: couldn't read orphan inode 15 (err -117) [ 51.438631][ T649] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 51.457737][ T653] loop0: detected capacity change from 0 to 256 [ 51.464947][ T642] F2FS-fs (loop1): invalid crc value [ 51.482759][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 51.482777][ T30] audit: type=1400 audit(1750379745.693:579): avc: denied { setattr } for pid=648 comm="syz.4.75" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.520021][ T60] sr9700: probe of 1-1:0.41 failed with error -71 [ 51.528315][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.534379][ T657] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 51.540478][ T642] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.558832][ T30] audit: type=1400 audit(1750379745.763:580): avc: denied { create } for pid=648 comm="syz.4.75" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 51.567846][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.608749][ T653] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 51.622820][ T60] usb 1-1: USB disconnect, device number 5 [ 51.647389][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.656664][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.666646][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.675589][ T467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.685992][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.697382][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.715238][ T642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.724840][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.733338][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.770186][ T647] netlink: 'syz.2.72': attribute type 12 has an invalid length. [ 51.801434][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.815118][ T30] audit: type=1400 audit(1750379746.023:581): avc: denied { create } for pid=660 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.842712][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.852989][ T30] audit: type=1400 audit(1750379746.053:582): avc: denied { bind } for pid=660 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.886675][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.911781][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.921420][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.000451][ T30] audit: type=1400 audit(1750379746.053:583): avc: denied { write } for pid=660 comm="syz.4.77" path="socket:[16280]" dev="sockfs" ino=16280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.051788][ T30] audit: type=1326 audit(1750379746.263:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=665 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 52.055839][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.375526][ T30] audit: type=1326 audit(1750379746.263:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=665 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 52.614865][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.145985][ T624] device veth0_vlan entered promiscuous mode [ 53.152708][ T30] audit: type=1326 audit(1750379746.263:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=665 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 53.230918][ T624] device veth1_macvtap entered promiscuous mode [ 53.274850][ T30] audit: type=1326 audit(1750379746.263:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=665 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 53.415098][ T671] loop5: detected capacity change from 0 to 256 [ 53.429471][ T30] audit: type=1326 audit(1750379746.263:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=665 comm="syz.2.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 53.454232][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.470667][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.497246][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.530785][ T671] FAT-fs (loop5): bogus number of FAT sectors [ 53.536998][ T671] FAT-fs (loop5): Can't find a valid FAT filesystem [ 53.545131][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.656218][ T677] loop4: detected capacity change from 0 to 1024 [ 53.720794][ T677] EXT4-fs (loop4): Ignoring removed nobh option [ 53.727612][ T677] EXT4-fs (loop4): Ignoring removed bh option [ 53.734718][ T677] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.856870][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.958246][ T677] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 54.173225][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.345952][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.772138][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.802708][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.848970][ T667] loop2: detected capacity change from 0 to 40427 [ 54.897259][ T667] F2FS-fs (loop2): invalid crc value [ 54.910370][ T682] syz.0.83 uses obsolete (PF_INET,SOCK_PACKET) [ 54.948278][ T667] F2FS-fs (loop2): Found nat_bits in checkpoint [ 55.120658][ T667] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 57.659916][ T287] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 57.834719][ T712] loop0: detected capacity change from 0 to 512 [ 57.931052][ T712] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.955214][ T712] EXT4-fs (loop0): 1 truncate cleaned up [ 57.961919][ T712] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 57.985640][ T287] usb 3-1: Using ep0 maxpacket: 16 [ 58.014200][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 58.014216][ T30] audit: type=1400 audit(1750379752.223:623): avc: denied { create } for pid=690 comm="syz.0.85" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 58.071255][ T30] audit: type=1400 audit(1750379752.223:624): avc: denied { read } for pid=690 comm="syz.0.85" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 58.219785][ T287] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 58.229994][ T287] usb 3-1: config 0 has no interface number 0 [ 58.243165][ T287] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 58.257369][ T30] audit: type=1400 audit(1750379752.463:625): avc: denied { relabelfrom } for pid=721 comm="syz.1.92" name="NETLINK" dev="sockfs" ino=17460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.266979][ T287] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 58.306611][ T30] audit: type=1400 audit(1750379752.463:626): avc: denied { relabelto } for pid=721 comm="syz.1.92" name="NETLINK" dev="sockfs" ino=17460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 58.329801][ T287] usb 3-1: config 0 interface 41 has no altsetting 0 [ 58.509856][ T287] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 58.529528][ T287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.539625][ T287] usb 3-1: Product: syz [ 58.549958][ T287] usb 3-1: Manufacturer: syz [ 58.554775][ T287] usb 3-1: SerialNumber: syz [ 58.570628][ T287] usb 3-1: config 0 descriptor?? [ 58.589826][ T710] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 58.599892][ T710] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 58.619764][ T364] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 58.666509][ T726] loop4: detected capacity change from 0 to 40427 [ 58.682537][ T726] F2FS-fs (loop4): fault_injection options not supported [ 58.698076][ T726] F2FS-fs (loop4): invalid crc value [ 58.704970][ T726] F2FS-fs (loop4): Found nat_bits in checkpoint [ 58.747478][ T726] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 58.795559][ T30] audit: type=1400 audit(1750379753.003:627): avc: denied { write } for pid=725 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.818906][ T710] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 58.826409][ T284] attempt to access beyond end of device [ 58.826409][ T284] loop4: rw=2049, want=45104, limit=40427 [ 58.826944][ T710] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 58.899784][ T364] usb 2-1: Using ep0 maxpacket: 8 [ 59.019813][ T364] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.039845][ T364] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.175485][ T364] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.184684][ T364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 59.193271][ T364] usb 2-1: SerialNumber: syz [ 59.240602][ T364] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 59.248664][ T364] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 59.255663][ T364] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 60.380682][ T364] usb 2-1: USB disconnect, device number 5 [ 60.429830][ T287] Error reading MAC address [ 60.449895][ T287] sr9700: probe of 3-1:0.41 failed with error -71 [ 60.476074][ T287] usb 3-1: USB disconnect, device number 5 [ 60.604417][ T30] audit: type=1400 audit(1750379754.805:628): avc: denied { write } for pid=748 comm="syz.5.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.666872][ T30] audit: type=1400 audit(1750379754.825:629): avc: denied { read } for pid=748 comm="syz.5.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.723744][ T30] audit: type=1400 audit(1750379754.925:630): avc: denied { load_policy } for pid=748 comm="syz.5.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 60.734225][ T749] SELinux: ebitmap: truncated map [ 60.749518][ T749] SELinux: failed to load policy [ 61.995122][ T756] loop1: detected capacity change from 0 to 40427 [ 62.106392][ T756] F2FS-fs (loop1): invalid crc value [ 62.159854][ T30] audit: type=1326 audit(1750379756.334:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 62.185281][ T30] audit: type=1326 audit(1750379756.334:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 62.237454][ T756] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.296961][ T756] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 62.671566][ T282] attempt to access beyond end of device [ 62.671566][ T282] loop1: rw=2049, want=45104, limit=40427 [ 62.757049][ T766] loop2: detected capacity change from 0 to 40427 [ 62.807902][ T766] F2FS-fs (loop2): invalid crc value [ 62.890357][ T766] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.020448][ T766] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 63.062963][ T766] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 63.070795][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 63.070809][ T30] audit: type=1326 audit(1750379757.343:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe463de290 code=0x7ffc0000 [ 63.123184][ T30] audit: type=1326 audit(1750379757.343:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbe463de677 code=0x7ffc0000 [ 63.146905][ T30] audit: type=1326 audit(1750379757.343:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe463de290 code=0x7ffc0000 [ 63.200605][ T30] audit: type=1326 audit(1750379757.343:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe463df52b code=0x7ffc0000 [ 63.274327][ T766] attempt to access beyond end of device [ 63.274327][ T766] loop2: rw=2049, want=53256, limit=40427 [ 63.286306][ T30] audit: type=1326 audit(1750379757.343:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbe463de58a code=0x7ffc0000 [ 63.619815][ T30] audit: type=1326 audit(1750379757.343:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 63.671889][ T30] audit: type=1326 audit(1750379757.343:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 63.709366][ T789] attempt to access beyond end of device [ 63.709366][ T789] loop2: rw=0, want=53256, limit=40427 [ 63.715563][ T30] audit: type=1326 audit(1750379757.507:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 63.783786][ T30] audit: type=1326 audit(1750379757.507:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 63.840837][ T283] attempt to access beyond end of device [ 63.840837][ T283] loop2: rw=2049, want=45104, limit=40427 [ 63.870631][ T30] audit: type=1326 audit(1750379757.507:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe463df929 code=0x7ffc0000 [ 64.267852][ T794] loop1: detected capacity change from 0 to 512 [ 64.362183][ T794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.110: inode #1: comm syz.1.110: iget: illegal inode # [ 64.446017][ T794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.110: error while reading EA inode 1 err=-117 [ 64.553431][ T794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.110: inode #1: comm syz.1.110: iget: illegal inode # [ 64.606187][ T794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.110: error while reading EA inode 1 err=-117 [ 64.619323][ T794] EXT4-fs (loop1): 1 orphan inode deleted [ 64.625648][ T794] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 65.964056][ T479] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 67.634512][ T850] x_tables: duplicate underflow at hook 1 [ 67.869526][ T860] loop5: detected capacity change from 0 to 1024 [ 67.926753][ T479] usb 1-1: Using ep0 maxpacket: 32 [ 67.957651][ T860] EXT4-fs (loop5): Ignoring removed nobh option [ 67.965729][ T860] EXT4-fs (loop5): Ignoring removed bh option [ 67.973002][ T860] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.991243][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 67.991268][ T30] audit: type=1326 audit(1750379762.379:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f518714a52b code=0x7ffc0000 [ 68.103498][ T479] usb 1-1: config 0 has an invalid interface number: 208 but max is 0 [ 68.138851][ T479] usb 1-1: config 0 has no interface number 0 [ 68.152322][ T860] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 68.346110][ T479] usb 1-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.420064][ T30] audit: type=1326 audit(1750379762.440:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f518714a52b code=0x7ffc0000 [ 68.594497][ T479] usb 1-1: config 0 interface 208 has no altsetting 0 [ 68.692073][ T479] usb 1-1: string descriptor 0 read error: -71 [ 68.709270][ T479] usb 1-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 68.762466][ T479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.783737][ T30] audit: type=1326 audit(1750379762.461:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f518714a52b code=0x7ffc0000 [ 68.839692][ T479] usb 1-1: config 0 descriptor?? [ 68.921546][ T30] audit: type=1326 audit(1750379762.481:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f518714a52b code=0x7ffc0000 [ 68.966509][ T479] usb 1-1: can't set config #0, error -71 [ 68.980775][ T479] usb 1-1: USB disconnect, device number 6 [ 69.005893][ T327] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 69.034372][ T30] audit: type=1326 audit(1750379762.502:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f518714a52b code=0x7ffc0000 [ 69.084413][ T30] audit: type=1326 audit(1750379763.154:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=866 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518714a929 code=0x7ffc0000 [ 69.158295][ T30] audit: type=1326 audit(1750379763.154:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=866 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518714a929 code=0x7ffc0000 [ 69.214364][ T869] loop0: detected capacity change from 0 to 40427 [ 69.227713][ T30] audit: type=1326 audit(1750379763.154:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=866 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f518714a929 code=0x7ffc0000 [ 69.280594][ T327] usb 3-1: Using ep0 maxpacket: 32 [ 69.286233][ T869] F2FS-fs (loop0): invalid crc value [ 69.302650][ T30] audit: type=1326 audit(1750379763.154:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=866 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518714a929 code=0x7ffc0000 [ 69.337811][ T869] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.356771][ T30] audit: type=1326 audit(1750379763.154:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=866 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518714a929 code=0x7ffc0000 [ 69.418251][ T327] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 69.432182][ T327] usb 3-1: config 0 has no interface number 0 [ 69.463039][ T327] usb 3-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.487967][ T869] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 69.501496][ T327] usb 3-1: config 0 interface 208 has no altsetting 0 [ 69.524460][ T869] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 69.675149][ T869] attempt to access beyond end of device [ 69.675149][ T869] loop0: rw=2049, want=53256, limit=40427 [ 69.689049][ T327] usb 3-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 69.705939][ T327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.722003][ T327] usb 3-1: Product: syz [ 69.730843][ T327] usb 3-1: Manufacturer: syz [ 69.738827][ T327] usb 3-1: SerialNumber: syz [ 69.740986][ T869] attempt to access beyond end of device [ 69.740986][ T869] loop0: rw=0, want=53256, limit=40427 [ 69.753058][ T327] usb 3-1: config 0 descriptor?? [ 69.811810][ T327] ftdi_sio 3-1:0.208: FTDI USB Serial Device converter detected [ 69.835069][ T327] usb 3-1: Detected FT-X [ 69.841970][ T281] attempt to access beyond end of device [ 69.841970][ T281] loop0: rw=2049, want=45104, limit=40427 [ 69.907587][ T889] FAULT_INJECTION: forcing a failure. [ 69.907587][ T889] name failslab, interval 1, probability 0, space 0, times 1 [ 69.949022][ T889] CPU: 0 PID: 889 Comm: syz.1.134 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 69.959975][ T889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.970580][ T889] Call Trace: [ 69.974064][ T889] [ 69.977601][ T889] __dump_stack+0x21/0x30 [ 69.982948][ T889] dump_stack_lvl+0xee/0x150 [ 69.987788][ T889] ? show_regs_print_info+0x20/0x20 [ 69.993457][ T889] ? security_file_permission+0x79/0xa0 [ 69.999319][ T889] dump_stack+0x15/0x20 [ 70.006180][ T889] should_fail+0x3c1/0x510 [ 70.011022][ T889] __should_failslab+0xa4/0xe0 [ 70.017943][ T889] should_failslab+0x9/0x20 [ 70.023745][ T889] slab_pre_alloc_hook+0x3b/0xe0 [ 70.028826][ T889] ? __se_sys_mount+0x9c/0x380 [ 70.034764][ T889] __kmalloc_track_caller+0x6c/0x2c0 [ 70.041382][ T889] ? mutex_unlock+0x89/0x220 [ 70.046852][ T889] ? __se_sys_mount+0x9c/0x380 [ 70.052271][ T889] ? strnlen_user+0xe8/0x1c0 [ 70.057669][ T327] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 70.060282][ T889] strndup_user+0x74/0x150 [ 70.060328][ T889] __se_sys_mount+0x9c/0x380 [ 70.060351][ T889] ? fput+0x1a/0x20 [ 70.060369][ T889] ? __x64_sys_mount+0xd0/0xd0 [ 70.060388][ T889] ? __ia32_sys_read+0x90/0x90 [ 70.060406][ T889] __x64_sys_mount+0xbf/0xd0 [ 70.060425][ T889] x64_sys_call+0x6bf/0x9a0 [ 70.060445][ T889] do_syscall_64+0x4c/0xa0 [ 70.060463][ T889] ? clear_bhb_loop+0x50/0xa0 [ 70.060482][ T889] ? clear_bhb_loop+0x50/0xa0 [ 70.060499][ T889] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.060537][ T889] RIP: 0033:0x7fc58c66c929 [ 70.060590][ T889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.115915][ T327] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 70.119515][ T889] RSP: 002b:00007fc58acd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.119564][ T889] RAX: ffffffffffffffda RBX: 00007fc58c893fa0 RCX: 00007fc58c66c929 [ 70.176901][ T889] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 70.185467][ T889] RBP: 00007fc58acd5090 R08: 0000200000000580 R09: 0000000000000000 [ 70.193723][ T889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.202511][ T889] R13: 0000000000000000 R14: 00007fc58c893fa0 R15: 00007ffd5bd471f8 [ 70.211216][ T889] [ 70.214817][ T327] ftdi_sio 3-1:0.208: GPIO initialisation failed: -71 [ 70.221061][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 70.223175][ T327] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 70.280044][ T327] usb 3-1: USB disconnect, device number 6 [ 70.294130][ T327] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 70.312051][ T327] ftdi_sio 3-1:0.208: device disconnected [ 70.455121][ T891] loop5: detected capacity change from 0 to 40427 [ 70.462902][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 70.483175][ T891] F2FS-fs (loop5): invalid crc value [ 70.493236][ T891] F2FS-fs (loop5): Found nat_bits in checkpoint [ 70.524783][ T891] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 70.587751][ T6] usb 5-1: config 0 has an invalid interface number: 208 but max is 0 [ 70.609507][ T6] usb 5-1: config 0 has no interface number 0 [ 70.622017][ T6] usb 5-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.648313][ T6] usb 5-1: config 0 interface 208 has no altsetting 0 [ 70.665108][ T908] tmpfs: Unknown parameter '‰n' [ 70.675542][ T624] attempt to access beyond end of device [ 70.675542][ T624] loop5: rw=2049, want=45104, limit=40427 [ 70.688154][ T479] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 70.833604][ T6] usb 5-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 70.845115][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.856899][ T6] usb 5-1: Product: syz [ 70.861363][ T6] usb 5-1: Manufacturer: syz [ 70.868159][ T6] usb 5-1: SerialNumber: syz [ 70.883318][ T6] usb 5-1: config 0 descriptor?? [ 70.932766][ T6] ftdi_sio 5-1:0.208: FTDI USB Serial Device converter detected [ 70.948277][ T6] usb 5-1: Detected FT-X [ 70.961329][ T479] usb 2-1: Using ep0 maxpacket: 8 [ 71.108960][ T479] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.124559][ T479] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.168002][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 71.187818][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 71.207383][ T6] ftdi_sio 5-1:0.208: GPIO initialisation failed: -71 [ 71.218801][ T6] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 71.246831][ T479] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.263753][ T6] usb 5-1: USB disconnect, device number 6 [ 71.270889][ T479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 71.285865][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 71.306001][ T479] usb 2-1: SerialNumber: syz [ 71.317647][ T6] ftdi_sio 5-1:0.208: device disconnected [ 71.372277][ T479] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 71.401768][ T479] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 71.408602][ T479] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 71.556829][ T327] usb 2-1: USB disconnect, device number 6 [ 71.711242][ T924] loop0: detected capacity change from 0 to 256 [ 71.745224][ T924] FAT-fs (loop0): bogus number of FAT sectors [ 71.764870][ T924] FAT-fs (loop0): Can't find a valid FAT filesystem [ 73.031528][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 73.031546][ T30] audit: type=1326 audit(1750379767.505:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbe463df9b7 code=0x7ffc0000 [ 73.087163][ T922] loop2: detected capacity change from 0 to 40427 [ 73.125676][ T922] F2FS-fs (loop2): invalid crc value [ 73.146615][ T922] F2FS-fs (loop2): Found nat_bits in checkpoint [ 73.212688][ T30] audit: type=1326 audit(1750379767.556:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe463de290 code=0x7ffc0000 [ 73.256391][ T922] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 73.627883][ T30] audit: type=1326 audit(1750379767.556:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe463df52b code=0x7ffc0000 [ 73.778611][ T922] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 73.848697][ T955] tmpfs: Unknown parameter '‰n' [ 73.961307][ T30] audit: type=1326 audit(1750379767.586:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbe463de58a code=0x7ffc0000 [ 73.988795][ T30] audit: type=1326 audit(1750379767.586:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbe463de58a code=0x7ffc0000 [ 74.017635][ T30] audit: type=1326 audit(1750379767.586:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbe463de197 code=0x7ffc0000 [ 74.043818][ T30] audit: type=1326 audit(1750379767.586:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbe463e10ca code=0x7ffc0000 [ 74.072056][ T30] audit: type=1326 audit(1750379768.306:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe463d68e7 code=0x7ffc0000 [ 74.099814][ T30] audit: type=1326 audit(1750379768.306:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbe4637bb19 code=0x7ffc0000 [ 74.144063][ T30] audit: type=1326 audit(1750379768.306:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe463de290 code=0x7ffc0000 [ 74.264378][ T922] attempt to access beyond end of device [ 74.264378][ T922] loop2: rw=2049, want=53256, limit=40427 [ 74.315546][ T940] loop1: detected capacity change from 0 to 40427 [ 74.370169][ T922] attempt to access beyond end of device [ 74.370169][ T922] loop2: rw=0, want=53256, limit=40427 [ 74.493559][ T283] attempt to access beyond end of device [ 74.493559][ T283] loop2: rw=2049, want=45104, limit=40427 [ 74.514484][ T940] F2FS-fs (loop1): invalid crc value [ 74.560142][ T940] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.627809][ T940] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.925319][ T282] attempt to access beyond end of device [ 74.925319][ T282] loop1: rw=2049, want=45104, limit=40427 [ 76.265897][ T982] loop1: detected capacity change from 0 to 512 [ 76.453201][ T982] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.158: casefold flag without casefold feature [ 76.496708][ T982] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.158: couldn't read orphan inode 15 (err -117) [ 77.335407][ T982] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 77.352419][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.473405][ T995] loop0: detected capacity change from 0 to 256 [ 77.537615][ T995] FAT-fs (loop0): bogus number of FAT sectors [ 77.572867][ T995] FAT-fs (loop0): Can't find a valid FAT filesystem [ 77.635360][ T999] loop1: detected capacity change from 0 to 256 [ 77.681882][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 77.688954][ T999] FAT-fs (loop1): bogus number of FAT sectors [ 77.711439][ T999] FAT-fs (loop1): Can't find a valid FAT filesystem [ 77.800516][ T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.823738][ T993] loop4: detected capacity change from 0 to 40427 [ 77.849926][ T6] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.900246][ T993] F2FS-fs (loop4): invalid crc value [ 77.933053][ T993] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.948926][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.963828][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.981200][ T6] usb 6-1: SerialNumber: syz [ 78.014448][ T993] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 78.028427][ T6] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 78.039966][ T6] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 78.052089][ T993] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 78.060807][ T6] cdc_acm: probe of 6-1:1.0 failed with error -22 [ 78.146878][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 78.146896][ T30] audit: type=1326 audit(1750379772.678:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbe463de3df code=0x7ffc0000 [ 78.188593][ T993] attempt to access beyond end of device [ 78.188593][ T993] loop4: rw=2049, want=53256, limit=40427 [ 78.229550][ T6] usb 6-1: USB disconnect, device number 2 [ 78.256612][ T993] attempt to access beyond end of device [ 78.256612][ T993] loop4: rw=0, want=53256, limit=40427 [ 78.330974][ T30] audit: type=1326 audit(1750379772.870:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbe463df9b7 code=0x7ffc0000 [ 78.333248][ T1001] loop2: detected capacity change from 0 to 40427 [ 78.375173][ T30] audit: type=1326 audit(1750379772.870:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe463de290 code=0x7ffc0000 [ 78.399329][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 78.409829][ T1001] F2FS-fs (loop2): invalid crc value [ 78.433860][ T30] audit: type=1326 audit(1750379772.870:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe463df52b code=0x7ffc0000 [ 78.465477][ T284] attempt to access beyond end of device [ 78.465477][ T284] loop4: rw=2049, want=45104, limit=40427 [ 78.491927][ T1001] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.498532][ T30] audit: type=1326 audit(1750379772.941:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbe463de58a code=0x7ffc0000 [ 78.552662][ T30] audit: type=1326 audit(1750379772.941:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbe463de58a code=0x7ffc0000 [ 78.597187][ T1001] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 78.612227][ T30] audit: type=1326 audit(1750379772.941:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbe463de197 code=0x7ffc0000 [ 78.646884][ T1010] loop1: detected capacity change from 0 to 40427 [ 78.654484][ T30] audit: type=1326 audit(1750379772.941:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbe463e10ca code=0x7ffc0000 [ 78.682090][ T1001] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 78.691404][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 78.706071][ T1001] attempt to access beyond end of device [ 78.706071][ T1001] loop2: rw=2049, want=53256, limit=40427 [ 78.717905][ T30] audit: type=1326 audit(1750379773.233:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe463de290 code=0x7ffc0000 [ 78.743689][ T30] audit: type=1326 audit(1750379773.233:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbe463de677 code=0x7ffc0000 [ 78.770098][ T1010] F2FS-fs (loop1): invalid crc value [ 78.813187][ T1010] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.832980][ T1001] attempt to access beyond end of device [ 78.832980][ T1001] loop2: rw=0, want=53256, limit=40427 [ 78.839901][ T26] usb 1-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.885841][ T26] usb 1-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.922225][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.936126][ T1010] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.944333][ T283] attempt to access beyond end of device [ 78.944333][ T283] loop2: rw=2049, want=45104, limit=40427 [ 78.958872][ T26] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 78.989080][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.071400][ T26] usb 1-1: config 0 descriptor?? [ 79.267303][ T282] attempt to access beyond end of device [ 79.267303][ T282] loop1: rw=2049, want=45104, limit=40427 [ 79.728281][ T1041] loop2: detected capacity change from 0 to 40427 [ 79.761588][ T1041] F2FS-fs (loop2): invalid crc value [ 79.837517][ T1041] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.955818][ T1041] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 79.988047][ T1041] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 80.038583][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 80.045951][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 80.077876][ T26] usb 1-1: USB disconnect, device number 7 [ 80.094733][ T1041] attempt to access beyond end of device [ 80.094733][ T1041] loop2: rw=2049, want=53256, limit=40427 [ 80.122552][ T1041] attempt to access beyond end of device [ 80.122552][ T1041] loop2: rw=0, want=53256, limit=40427 [ 80.207358][ T283] attempt to access beyond end of device [ 80.207358][ T283] loop2: rw=2049, want=45104, limit=40427 [ 80.444787][ T287] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.543578][ T1053] loop1: detected capacity change from 0 to 40427 [ 80.585138][ T1063] tmpfs: Unknown parameter '‰n' [ 80.590225][ T1053] F2FS-fs (loop1): invalid crc value [ 80.654496][ T1053] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.702527][ T287] usb 5-1: Using ep0 maxpacket: 32 [ 80.752958][ T1053] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 80.779472][ T1053] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 80.849143][ T1053] attempt to access beyond end of device [ 80.849143][ T1053] loop1: rw=2049, want=53256, limit=40427 [ 80.851315][ T287] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.879188][ T1053] attempt to access beyond end of device [ 80.879188][ T1053] loop1: rw=0, want=53256, limit=40427 [ 80.910674][ T287] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.940425][ T287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.977814][ T287] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 81.009892][ T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.028193][ T1061] loop0: detected capacity change from 0 to 40427 [ 81.036951][ T287] usb 5-1: config 0 descriptor?? [ 81.058811][ T282] attempt to access beyond end of device [ 81.058811][ T282] loop1: rw=2049, want=45104, limit=40427 [ 81.153181][ T1061] F2FS-fs (loop0): invalid crc value [ 81.216336][ T1061] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.329462][ T1061] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 81.390391][ T1061] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 81.481433][ T1061] attempt to access beyond end of device [ 81.481433][ T1061] loop0: rw=2049, want=53256, limit=40427 [ 81.617036][ T1074] attempt to access beyond end of device [ 81.617036][ T1074] loop0: rw=0, want=53256, limit=40427 [ 81.661593][ T281] attempt to access beyond end of device [ 81.661593][ T281] loop0: rw=2049, want=45104, limit=40427 [ 82.399667][ T1085] loop1: detected capacity change from 0 to 512 [ 82.428225][ T287] usbhid 5-1:0.0: can't add hid device: -71 [ 82.434239][ T287] usbhid: probe of 5-1:0.0 failed with error -71 [ 82.449176][ T287] usb 5-1: USB disconnect, device number 7 [ 82.875685][ T1085] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.187: casefold flag without casefold feature [ 82.954410][ T1085] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.187: couldn't read orphan inode 15 (err -117) [ 83.044100][ T1085] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 83.235317][ T1083] loop2: detected capacity change from 0 to 40427 [ 83.280426][ T1083] F2FS-fs (loop2): invalid crc value [ 83.326780][ T1083] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.456103][ T1083] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.464466][ T287] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 83.658808][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 83.658827][ T30] audit: type=1326 audit(1750379778.236:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1103 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 83.701223][ T1104] overlayfs: missing 'lowerdir' [ 83.738457][ T287] usb 1-1: Using ep0 maxpacket: 16 [ 83.787017][ T30] audit: type=1326 audit(1750379778.276:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1103 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 83.811658][ T30] audit: type=1326 audit(1750379778.276:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1103 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 83.835787][ T30] audit: type=1326 audit(1750379778.276:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1103 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 83.860011][ T30] audit: type=1326 audit(1750379778.276:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1103 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 83.884761][ T287] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 83.893625][ T287] usb 1-1: config 0 has no interface number 0 [ 83.899983][ T287] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 83.910697][ T287] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 83.920993][ T30] audit: type=1326 audit(1750379778.286:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1103 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 83.946957][ T287] usb 1-1: config 0 interface 41 has no altsetting 0 [ 83.954763][ T30] audit: type=1326 audit(1750379778.286:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1103 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 84.026486][ T30] audit: type=1326 audit(1750379778.286:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1103 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 84.091117][ T30] audit: type=1326 audit(1750379778.286:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1103 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 84.145665][ T287] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 84.167404][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.192901][ T287] usb 1-1: Product: syz [ 84.205231][ T30] audit: type=1326 audit(1750379778.286:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1103 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 84.230434][ T287] usb 1-1: Manufacturer: syz [ 84.255911][ T287] usb 1-1: SerialNumber: syz [ 84.280413][ T287] usb 1-1: config 0 descriptor?? [ 84.324400][ T1098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.345001][ T1098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.393489][ T1116] tmpfs: Unknown parameter '‰n' [ 84.534809][ T1117] netlink: 'syz.4.194': attribute type 12 has an invalid length. [ 84.555548][ T1098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.571270][ T283] attempt to access beyond end of device [ 84.571270][ T283] loop2: rw=2049, want=45104, limit=40427 [ 84.583095][ T1098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.039535][ T848] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 85.288281][ T848] usb 3-1: Using ep0 maxpacket: 32 [ 85.347610][ T287] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 85.392492][ T1133] overlayfs: missing 'lowerdir' [ 85.437063][ T848] usb 3-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.465222][ T848] usb 3-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.489193][ T848] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.504432][ T848] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 85.553585][ T848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.609877][ T848] usb 3-1: config 0 descriptor?? [ 85.824494][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 85.888146][ T1141] loop5: detected capacity change from 0 to 512 [ 85.924173][ T287] dm9601 1-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 85.973666][ T287] sr9700: probe of 1-1:0.41 failed with error -71 [ 85.974154][ T1141] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 85.990369][ T1141] EXT4-fs (loop5): 1 truncate cleaned up [ 85.995453][ T287] usb 1-1: USB disconnect, device number 8 [ 86.003354][ T1141] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 86.030212][ T1141] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.203: Logical block already allocated [ 86.043818][ T1141] EXT4-fs (loop5): Remounting filesystem read-only [ 86.073001][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 86.149234][ T1141] syz.5.203 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 86.192245][ T848] usbhid 3-1:0.0: can't add hid device: -71 [ 86.199127][ T848] usbhid: probe of 3-1:0.0 failed with error -71 [ 86.212170][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.235246][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.236880][ T848] usb 3-1: USB disconnect, device number 7 [ 86.261730][ T6] usb 2-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 86.271951][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.295760][ T6] usb 2-1: config 0 descriptor?? [ 86.566688][ T1156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.206'. [ 86.793299][ T1157] loop0: detected capacity change from 0 to 512 [ 86.844216][ T1157] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.207: casefold flag without casefold feature [ 86.859185][ T1157] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.207: couldn't read orphan inode 15 (err -117) [ 86.875608][ T1157] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 87.003383][ T1162] overlayfs: missing 'lowerdir' [ 87.020908][ T1163] loop1: detected capacity change from 0 to 512 [ 87.072973][ T1168] tmpfs: Unknown parameter '‰n' [ 87.094230][ T1163] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 87.112552][ T1163] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.113200][ T1164] netlink: 'syz.2.208': attribute type 12 has an invalid length. [ 87.136206][ T1163] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.150693][ T1163] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 87.327261][ T6] wacom 0003:056A:0318.0004: unknown main item tag 0x0 [ 87.335119][ T6] wacom 0003:056A:0318.0004: unknown main item tag 0x0 [ 87.352675][ T6] wacom 0003:056A:0318.0004: unknown main item tag 0x0 [ 87.368907][ T6] wacom 0003:056A:0318.0004: unknown main item tag 0x0 [ 87.385171][ T6] wacom 0003:056A:0318.0004: unknown main item tag 0x0 [ 87.393030][ T6] wacom 0003:056A:0318.0004: item fetching failed at offset 10/11 [ 87.402341][ T6] wacom 0003:056A:0318.0004: parse failed [ 87.408787][ T6] wacom: probe of 0003:056A:0318.0004 failed with error -22 [ 87.535793][ T848] usb 2-1: USB disconnect, device number 7 [ 87.971662][ T1180] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 88.158599][ C0] hrtimer: interrupt took 33800 ns [ 88.549570][ T479] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 88.844530][ T1616] loop4: detected capacity change from 0 to 512 [ 88.996227][ T30] kauditd_printk_skb: 266 callbacks suppressed [ 88.996259][ T30] audit: type=1400 audit(1750379783.608:1491): avc: denied { getopt } for pid=1617 comm="syz.2.218" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.083785][ T1616] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.219: casefold flag without casefold feature [ 89.175477][ T1616] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.219: couldn't read orphan inode 15 (err -117) [ 89.190618][ T1616] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 89.386667][ T1627] overlayfs: missing 'lowerdir' [ 89.402298][ T30] audit: type=1326 audit(1750379784.000:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.5.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced8c9929 code=0x7ffc0000 [ 89.633486][ T30] audit: type=1326 audit(1750379784.000:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.5.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced8c9929 code=0x7ffc0000 [ 89.938298][ T30] audit: type=1326 audit(1750379784.010:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.5.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdced8c9929 code=0x7ffc0000 [ 90.181150][ T30] audit: type=1326 audit(1750379784.010:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.5.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced8c9929 code=0x7ffc0000 [ 90.476578][ T30] audit: type=1326 audit(1750379784.010:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.5.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced8c9929 code=0x7ffc0000 [ 90.549050][ T30] audit: type=1326 audit(1750379784.010:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.5.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fdced8c9929 code=0x7ffc0000 [ 90.575788][ T1635] netlink: 'syz.2.223': attribute type 12 has an invalid length. [ 90.616085][ T30] audit: type=1326 audit(1750379784.010:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.5.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced8c9929 code=0x7ffc0000 [ 90.729142][ T30] audit: type=1326 audit(1750379784.010:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.5.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced8c9929 code=0x7ffc0000 [ 90.753925][ T479] usb 2-1: Using ep0 maxpacket: 16 [ 90.767326][ T30] audit: type=1326 audit(1750379784.010:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.5.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdced8c9929 code=0x7ffc0000 [ 90.869175][ T1642] overlayfs: missing 'lowerdir' [ 91.173899][ T1646] loop5: detected capacity change from 0 to 256 [ 91.187326][ T1646] FAT-fs (loop5): bogus number of FAT sectors [ 91.196923][ T1646] FAT-fs (loop5): Can't find a valid FAT filesystem [ 91.206859][ T479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.357648][ T479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.369970][ T479] usb 2-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 91.381365][ T479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.712245][ T479] usb 2-1: config 0 descriptor?? [ 91.722995][ T1659] loop0: detected capacity change from 0 to 512 [ 91.733788][ T479] usb 2-1: can't set config #0, error -71 [ 91.751285][ T1659] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.231: casefold flag without casefold feature [ 91.786360][ T479] usb 2-1: USB disconnect, device number 8 [ 91.833383][ T1659] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.231: couldn't read orphan inode 15 (err -117) [ 91.846135][ T1659] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 91.893309][ T1668] overlayfs: missing 'lowerdir' [ 92.027842][ T327] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.321348][ T327] usb 5-1: Using ep0 maxpacket: 32 [ 93.190142][ T327] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.339298][ T327] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.436907][ T327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.443601][ T327] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 93.456344][ T327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.488973][ T327] usb 5-1: config 0 descriptor?? [ 94.167451][ T1687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 94.178020][ T1692] overlayfs: missing 'lowerdir' [ 95.203230][ T327] usb 5-1: can't set config #0, error -71 [ 95.238069][ T327] usb 5-1: USB disconnect, device number 8 [ 95.260722][ T1700] loop5: detected capacity change from 0 to 256 [ 95.489494][ T302] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 95.963353][ T1705] xt_hashlimit: max too large, truncated to 1048576 [ 96.107824][ T302] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 96.122684][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.134659][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.145290][ T302] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 96.167753][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 96.167773][ T30] audit: type=1400 audit(1750379790.817:1577): avc: denied { wake_alarm } for pid=1713 comm="syz.2.249" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.290558][ T302] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 96.301610][ T302] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 96.310757][ T302] usb 1-1: Manufacturer: syz [ 96.322353][ T302] usb 1-1: config 0 descriptor?? [ 96.465291][ T1714] overlayfs: overlapping lowerdir path [ 96.496731][ T30] audit: type=1400 audit(1750379791.128:1578): avc: denied { create } for pid=1713 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.587115][ T30] audit: type=1326 audit(1750379792.242:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 97.613617][ T1729] loop5: detected capacity change from 0 to 512 [ 97.615574][ T302] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 97.642443][ T30] audit: type=1326 audit(1750379792.272:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 97.646576][ T302] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 97.687142][ T1729] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.253: casefold flag without casefold feature [ 97.701928][ T1729] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.253: couldn't read orphan inode 15 (err -117) [ 97.717944][ T1729] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.731643][ T302] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 97.754856][ T30] audit: type=1326 audit(1750379792.272:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 97.806646][ T30] audit: type=1326 audit(1750379792.272:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 97.915605][ T30] audit: type=1326 audit(1750379792.272:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 97.966176][ T30] audit: type=1326 audit(1750379792.272:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15e0454290 code=0x7ffc0000 [ 97.996206][ T30] audit: type=1400 audit(1750379792.272:1585): avc: denied { read append } for pid=1731 comm="syz.4.254" name="usbmon1" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.039425][ T30] audit: type=1400 audit(1750379792.282:1586): avc: denied { ioctl open } for pid=1731 comm="syz.4.254" path="/dev/usbmon1" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.068597][ T1732] loop4: detected capacity change from 0 to 40427 [ 98.162736][ T1732] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 98.614012][ T1757] netlink: 'syz.2.259': attribute type 12 has an invalid length. [ 99.208822][ T302] usb 1-1: USB disconnect, device number 9 [ 99.438738][ T848] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 99.737121][ T848] usb 6-1: Using ep0 maxpacket: 32 [ 99.857157][ T848] usb 6-1: config 0 has an invalid interface number: 208 but max is 0 [ 99.872288][ T848] usb 6-1: config 0 has no interface number 0 [ 99.893284][ T848] usb 6-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.930837][ T848] usb 6-1: config 0 interface 208 has no altsetting 0 [ 100.146400][ T848] usb 6-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 100.165638][ T848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.185048][ T848] usb 6-1: Product: syz [ 100.195198][ T848] usb 6-1: Manufacturer: syz [ 100.205339][ T848] usb 6-1: SerialNumber: syz [ 100.213502][ T1778] loop0: detected capacity change from 0 to 1024 [ 100.227003][ T848] usb 6-1: config 0 descriptor?? [ 100.283378][ T1776] capability: warning: `syz.2.266' uses deprecated v2 capabilities in a way that may be insecure [ 100.284191][ T1778] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.316522][ T848] ftdi_sio 6-1:0.208: FTDI USB Serial Device converter detected [ 100.336541][ T848] usb 6-1: Detected FT-X [ 100.345359][ T1778] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.394720][ T1778] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 100.419089][ T1778] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 100.432065][ T1778] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.432065][ T1778] [ 100.443072][ T1778] EXT4-fs (loop0): Total free blocks count 0 [ 100.449744][ T1778] EXT4-fs (loop0): Free/Dirty block details [ 100.456361][ T1778] EXT4-fs (loop0): free_blocks=4293918720 [ 100.462407][ T1778] EXT4-fs (loop0): dirty_blocks=16 [ 100.468618][ T1778] EXT4-fs (loop0): Block reservation details [ 100.475853][ T1778] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 100.595051][ T848] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 100.625111][ T848] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 100.644908][ T848] ftdi_sio 6-1:0.208: GPIO initialisation failed: -71 [ 100.685184][ T848] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.706479][ T848] usb 6-1: USB disconnect, device number 3 [ 101.316284][ T1791] overlayfs: failed to resolve './file2': -2 [ 101.615474][ T848] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 101.630973][ T848] ftdi_sio 6-1:0.208: device disconnected [ 101.638587][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 101.638603][ T30] audit: type=1326 audit(1750379796.302:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 101.822564][ T30] audit: type=1326 audit(1750379796.302:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 101.847056][ T30] audit: type=1326 audit(1750379796.302:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 107.891047][ T1803] ================================================================== [ 107.899983][ T1803] BUG: KASAN: slab-out-of-bounds in unaccount_page_cache_page+0x6f2/0x760 [ 107.908902][ T1803] Read of size 4 at addr ffff88812c0f1470 by task syz.1.273/1803 [ 107.917179][ T1803] [ 107.920145][ T1803] CPU: 1 PID: 1803 Comm: syz.1.273 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 107.932837][ T1803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.943770][ T1803] Call Trace: [ 107.947097][ T1803] [ 107.950070][ T1803] __dump_stack+0x21/0x30 [ 107.954446][ T1803] dump_stack_lvl+0xee/0x150 [ 107.959171][ T1803] ? show_regs_print_info+0x20/0x20 [ 107.964641][ T1803] ? load_image+0x3a0/0x3a0 [ 107.969368][ T1803] ? check_preemption_disabled+0x70/0x120 [ 107.975509][ T1803] print_address_description+0x7f/0x2c0 [ 107.981457][ T1803] ? unaccount_page_cache_page+0x6f2/0x760 [ 107.987602][ T1803] kasan_report+0xf1/0x140 [ 107.992695][ T1803] ? xas_store+0xb7b/0x17b0 [ 107.997640][ T1803] ? unaccount_page_cache_page+0x6f2/0x760 [ 108.003493][ T1803] __asan_report_load4_noabort+0x14/0x20 [ 108.009170][ T1803] unaccount_page_cache_page+0x6f2/0x760 [ 108.014853][ T1803] __delete_from_page_cache+0xbe/0x420 [ 108.020587][ T1803] ? memset+0x35/0x40 [ 108.024609][ T1803] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 108.031707][ T1803] ? __kasan_check_write+0x14/0x20 [ 108.036988][ T1803] ? _raw_spin_lock_irq+0x8f/0xe0 [ 108.042231][ T1803] ? __kasan_check_read+0x11/0x20 [ 108.047482][ T1803] ? workingset_eviction+0x402/0x9e0 [ 108.052889][ T1803] ? page_mapping+0x210/0x2d0 [ 108.057853][ T1803] __remove_mapping+0x55d/0x680 [ 108.062734][ T1803] shrink_page_list+0x25c8/0x4cc0 [ 108.067888][ T1803] ? reclaim_clean_pages_from_list+0x790/0x790 [ 108.074187][ T1803] ? isolate_lru_pages+0x1009/0x11e0 [ 108.079500][ T1803] ? blk_mq_insert_requests+0x340/0x340 [ 108.085252][ T1803] ? lru_add_drain_cpu+0x3b4/0x590 [ 108.090787][ T1803] ? cgroup_rstat_updated+0xf5/0x370 [ 108.096108][ T1803] ? _raw_spin_lock_irq+0x8f/0xe0 [ 108.101163][ T1803] ? _raw_spin_lock_irqsave+0x30/0x110 [ 108.106871][ T1803] ? __this_cpu_preempt_check+0x13/0x20 [ 108.112532][ T1803] ? __count_memcg_events+0xad/0x120 [ 108.117842][ T1803] shrink_lruvec+0x10e4/0x3760 [ 108.122833][ T1803] ? mem_cgroup_shrink_node+0x4a0/0x4a0 [ 108.128640][ T1803] ? up_read+0x56/0x1d0 [ 108.133051][ T1803] ? unregister_shrinker+0x290/0x290 [ 108.138895][ T1803] ? cgroup_rstat_flush_locked+0xa53/0xb60 [ 108.145035][ T1803] ? irqentry_exit+0x37/0x40 [ 108.149845][ T1803] shrink_node+0x11e9/0x2a70 [ 108.154471][ T1803] ? allow_direct_reclaim+0x380/0x380 [ 108.159900][ T1803] ? __cpuset_node_allowed+0xa0/0x330 [ 108.165372][ T1803] do_try_to_free_pages+0x57e/0x1550 [ 108.170876][ T1803] ? try_to_free_pages+0xba0/0xba0 [ 108.176471][ T1803] ? __kasan_check_read+0x11/0x20 [ 108.181534][ T1803] ? allow_direct_reclaim+0x2e2/0x380 [ 108.187180][ T1803] try_to_free_pages+0x4b3/0xba0 [ 108.193333][ T1803] ? lru_gen_exit_memcg+0x120/0x120 [ 108.199045][ T1803] ? __kasan_check_read+0x11/0x20 [ 108.204866][ T1803] ? psi_group_change+0xa6c/0x10e0 [ 108.210508][ T1803] ? __kasan_check_write+0x14/0x20 [ 108.215820][ T1803] ? _raw_spin_lock+0x8e/0xe0 [ 108.226210][ T1803] ? __cpuset_memory_pressure_bump+0x2d3/0x380 [ 108.232799][ T1803] __alloc_pages_slowpath+0x1221/0x2cc0 [ 108.238549][ T1803] ? zone_watermark_fast+0x16c/0x230 [ 108.244242][ T1803] ? get_page_from_freelist+0x2d50/0x2d50 [ 108.250281][ T1803] ? __alloc_pages+0x440/0x440 [ 108.256325][ T1803] ? selinux_capable+0x23f/0x380 [ 108.261567][ T1803] __alloc_pages+0x31c/0x440 [ 108.266476][ T1803] ? prep_new_page+0x110/0x110 [ 108.271998][ T1803] __get_free_pages+0x10/0x30 [ 108.277625][ T1803] __se_sys_io_uring_setup+0xfa7/0x29a0 [ 108.283851][ T1803] ? load_gs_index+0xb0/0xb0 [ 108.288865][ T1803] ? __x64_sys_io_uring_setup+0x70/0x70 [ 108.294620][ T1803] ? sched_clock_cpu+0x18/0x3c0 [ 108.300695][ T1803] ? debug_smp_processor_id+0x17/0x20 [ 108.306274][ T1803] __x64_sys_io_uring_setup+0x5b/0x70 [ 108.312192][ T1803] x64_sys_call+0x5f4/0x9a0 [ 108.317435][ T1803] do_syscall_64+0x4c/0xa0 [ 108.321915][ T1803] ? clear_bhb_loop+0x50/0xa0 [ 108.326702][ T1803] ? clear_bhb_loop+0x50/0xa0 [ 108.331489][ T1803] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.337496][ T1803] RIP: 0033:0x7fc58c66c929 [ 108.342244][ T1803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.362910][ T1803] RSP: 002b:00007fc58acb3fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 108.371440][ T1803] RAX: ffffffffffffffda RBX: 00007fc58c894080 RCX: 00007fc58c66c929 [ 108.379820][ T1803] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 108.388178][ T1803] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 108.396430][ T1803] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 108.404560][ T1803] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 108.412678][ T1803] [ 108.415993][ T1803] [ 108.418754][ T1803] Allocated by task 1657: [ 108.423636][ T1803] __kasan_kmalloc+0xda/0x110 [ 108.428606][ T1803] kmem_cache_alloc_trace+0x119/0x270 [ 108.434338][ T1803] vhost_vsock_handle_tx_kick+0x3a6/0xb90 [ 108.440402][ T1803] vhost_worker+0x1a9/0x2d0 [ 108.444959][ T1803] kthread+0x411/0x500 [ 108.450065][ T1803] ret_from_fork+0x1f/0x30 [ 108.454859][ T1803] [ 108.457325][ T1803] Freed by task 1657: [ 108.461395][ T1803] kasan_set_track+0x4a/0x70 [ 108.465992][ T1803] kasan_set_free_info+0x23/0x40 [ 108.471058][ T1803] ____kasan_slab_free+0x125/0x160 [ 108.476291][ T1803] __kasan_slab_free+0x11/0x20 [ 108.481279][ T1803] slab_free_freelist_hook+0xc2/0x190 [ 108.486955][ T1803] kfree+0xc4/0x270 [ 108.490892][ T1803] vhost_vsock_handle_tx_kick+0x67f/0xb90 [ 108.496811][ T1803] vhost_worker+0x1a9/0x2d0 [ 108.501549][ T1803] kthread+0x411/0x500 [ 108.505677][ T1803] ret_from_fork+0x1f/0x30 [ 108.510308][ T1803] [ 108.512641][ T1803] The buggy address belongs to the object at ffff88812c0f1400 [ 108.512641][ T1803] which belongs to the cache kmalloc-96 of size 96 [ 108.526902][ T1803] The buggy address is located 16 bytes to the right of [ 108.526902][ T1803] 96-byte region [ffff88812c0f1400, ffff88812c0f1460) [ 108.541154][ T1803] The buggy address belongs to the page: [ 108.546794][ T1803] page:ffffea0004b03c40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c0f1 [ 108.557414][ T1803] flags: 0x4000000000000200(slab|zone=1) [ 108.563176][ T1803] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100042900 [ 108.572039][ T1803] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 108.581083][ T1803] page dumped because: kasan: bad access detected [ 108.587521][ T1803] page_owner tracks the page as allocated [ 108.593248][ T1803] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1657, ts 93369743573, free_ts 93315252353 [ 108.609540][ T1803] post_alloc_hook+0x192/0x1b0 [ 108.614357][ T1803] prep_new_page+0x1c/0x110 [ 108.618878][ T1803] get_page_from_freelist+0x2cc5/0x2d50 [ 108.624446][ T1803] __alloc_pages+0x18f/0x440 [ 108.629259][ T1803] new_slab+0xa1/0x4d0 [ 108.633616][ T1803] ___slab_alloc+0x381/0x810 [ 108.638794][ T1803] __slab_alloc+0x49/0x90 [ 108.643277][ T1803] kmem_cache_alloc_trace+0x146/0x270 [ 108.648681][ T1803] vhost_vsock_handle_tx_kick+0x3a6/0xb90 [ 108.654567][ T1803] vhost_worker+0x1a9/0x2d0 [ 108.659102][ T1803] kthread+0x411/0x500 [ 108.663231][ T1803] ret_from_fork+0x1f/0x30 [ 108.668187][ T1803] page last free stack trace: [ 108.672877][ T1803] free_unref_page_prepare+0x542/0x550 [ 108.678484][ T1803] free_unref_page+0xa2/0x550 [ 108.683432][ T1803] __free_pages+0x6c/0x100 [ 108.687860][ T1803] __vunmap+0x84d/0x9e0 [ 108.692107][ T1803] vfree+0x8b/0xc0 [ 108.695965][ T1803] __do_replace+0x934/0xac0 [ 108.700756][ T1803] do_arpt_set_ctl+0xa20/0xee0 [ 108.706317][ T1803] nf_setsockopt+0x272/0x2a0 [ 108.711294][ T1803] ip_setsockopt+0x25e6/0x3520 [ 108.716425][ T1803] udp_setsockopt+0x8a/0xa0 [ 108.721152][ T1803] sock_common_setsockopt+0xa0/0xb0 [ 108.727007][ T1803] __sys_setsockopt+0x2f0/0x460 [ 108.732159][ T1803] __x64_sys_setsockopt+0xbf/0xd0 [ 108.737499][ T1803] x64_sys_call+0x982/0x9a0 [ 108.742139][ T1803] do_syscall_64+0x4c/0xa0 [ 108.746563][ T1803] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.752934][ T1803] [ 108.755270][ T1803] Memory state around the buggy address: [ 108.761078][ T1803] ffff88812c0f1300: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 108.769608][ T1803] ffff88812c0f1380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 108.778376][ T1803] >ffff88812c0f1400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 108.786783][ T1803] ^ [ 108.794881][ T1803] ffff88812c0f1480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 108.803404][ T1803] ffff88812c0f1500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 108.811736][ T1803] ================================================================== [ 108.819847][ T1803] Disabling lock debugging due to kernel taint SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 110.106906][ T30] audit: type=1326 audit(1750379796.302:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 110.299134][ T30] audit: type=1326 audit(1750379796.302:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 110.348974][ T30] audit: type=1326 audit(1750379796.302:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 110.382775][ T30] audit: type=1326 audit(1750379796.302:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 110.407387][ T30] audit: type=1326 audit(1750379796.302:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 110.432510][ T30] audit: type=1326 audit(1750379796.302:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 110.458011][ T30] audit: type=1326 audit(1750379796.302:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 110.482509][ T30] audit: type=1326 audit(1750379796.302:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 110.509228][ T30] audit: type=1326 audit(1750379796.302:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 110.539403][ T30] audit: type=1326 audit(1750379796.302:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0455929 code=0x7ffc0000 [ 111.437248][ T1480] device bridge_slave_1 left promiscuous mode [ 111.445837][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.454679][ T1480] device bridge_slave_0 left promiscuous mode [ 111.463195][ T1480] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.473320][ T1480] device veth1_macvtap left promiscuous mode [ 111.484527][ T1480] device veth0_vlan left promiscuous mode [ 112.995926][ T1480] device bridge_slave_1 left promiscuous mode [ 113.002421][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.012145][ T1480] device bridge_slave_0 left promiscuous mode [ 113.018472][ T1480] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.026726][ T1480] device bridge_slave_1 left promiscuous mode [ 113.033273][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.040900][ T1480] device bridge_slave_0 left promiscuous mode [ 113.047340][ T1480] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.055436][ T1480] device bridge_slave_1 left promiscuous mode [ 113.061579][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.069722][ T1480] device bridge_slave_0 left promiscuous mode [ 113.076078][ T1480] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.085147][ T1480] device veth1_macvtap left promiscuous mode [ 113.091713][ T1480] device veth1_macvtap left promiscuous mode [ 113.098336][ T1480] device veth1_macvtap left promiscuous mode [ 113.104868][ T1480] device veth0_vlan left promiscuous mode [ 113.111090][ T1480] device veth1_macvtap left promiscuous mode [ 113.117368][ T1480] device veth0_vlan left promiscuous mode