last executing test programs: 12.399795594s ago: executing program 2 (id=35): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f00000000c0)={0xfffff4f9, 0x6, 0x4, 0xcc}) io_uring_enter(0xffffffffffffffff, 0x15f3, 0xbdde, 0x1, &(0x7f0000000140)={[0x5]}, 0x8) 8.71372178s ago: executing program 2 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="940000002000010c00000000000000000a1400000000000000000000140003006c6f000000000000000000000000000014000200fe8000000000000000000000000000aa1400020020010000000000000000000000000000140001"], 0x94}}, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001080)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@rodir}, {@utf8}, {@fat=@discard}, {@utf8no}, {@rodir}]}, 0x1, 0x28e, &(0x7f0000001500)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@bridge_getneigh={0x20, 0x1e, 0x105, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x3800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x200, @mcast2, 0x7}, 0x1c) (async) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x27e, 0x8, 0x1}) (async) sendto$inet6(r6, 0x0, 0x0, 0x20000045, 0x0, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x9d13, 0x4) ppoll(&(0x7f00000002c0)=[{r6, 0x1487}], 0x1, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) 7.873951008s ago: executing program 2 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100004095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) setsockopt$inet6_tcp_int(r4, 0x6, 0xb, &(0x7f00000109c0)=0x5, 0x4) inotify_init1(0x80800) socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000010640)={r4, 0xe0, &(0x7f0000010540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000010380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000103c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000010400)=[0x0], 0x0, 0xee, &(0x7f0000010440), 0x0, 0x10, &(0x7f0000010480), &(0x7f00000104c0), 0x8, 0x48, 0x8, 0x8, &(0x7f0000010500)}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000106c0)=@o_path={&(0x7f0000010680)='./file0\x00', 0x0, 0x18, r4}, 0x18) 4.117158468s ago: executing program 2 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0xa, @loopback, 0x2}}, 0x0, 0x0, 0xe, 0x0, "db96229ed36fbbeb576df70986ec3fb4cd09926bcb86c2ef0dbad98b3bf35b83c21b520533f7a1cbb706badf1c8ed81ae11407b2c007c92602a4334fa415bf95f0311dbc09c7381aa9c1a32a8c9581a8"}, 0xd8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2141, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x16, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket(0xa, 0x1, 0x0) syz_emit_ethernet(0xba, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000140)='ed:cb2e\x15i\xee\x0ewB;!\x90\x04.\xf6{_\x04\x120\xcb\xec\x92\x00\xd1a\xf6\x85?\x97!\x13\x1eO\x86p\xbb\xe680P\xd3\x9d\xfa\x03\xe9\xb3\x9bG\xe3\xb1n\xe9|\x7f\x1bokR\x96\xdb\v\xf4]\x01D.\x05\xc3\xaf\xf8a QXS\xc2\r') r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = dup3(r3, r4, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write$binfmt_misc(r7, &(0x7f00000001c0)="0c0a1a2c87", 0x5) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r8, 0xc00c4809, &(0x7f0000000000)={0x1, 0x100, 0xfff}) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000180)) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x4000) 3.90385912s ago: executing program 1 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='file1\x00', 0x10842, 0x1b6) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='file1\x00', 0x10842, 0x1b6) ftruncate(r2, 0x5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x0, 0x1800, 0x201}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x0, 0x1800, 0x201}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="c3670400000000009000128009000100766c616e00000000800002800600010003000000640004800c00010008000000060000000c00010007000000050000000c00010003000000070000000c00010000000000040000000c00010070000000940f00000c000100ff010000030000000c0001007ac00000000000000c00010000010000ff000000100003800c004100020000009b04000008000500", @ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="c3670400000000009000128009000100766c616e00000000800002800600010003000000640004800c00010008000000060000000c00010007000000050000000c00010003000000070000000c00010000000000040000000c00010070000000940f00000c000100ff010000030000000c0001007ac00000000000000c00010000010000ff000000100003800c004100020000009b04000008000500", @ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf251b00000008009a"], 0x24}}, 0x400a4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f000001b7c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000001b780)={&(0x7f000001a240)={0x1514, r4, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x14cc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1228, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xdb, 0x8, {0x0, 0x4, "873f63eb141659c0fee9149211075d10ee0f8969fb9d828688a5acc461d178176c64134b0438169224ffd5c2084017a3c7f1aa0bb9557bd268a4722191fb71b86cd37cec4462a78fb930fe7e5d90a8a7b757514d1d98053c2afbd7b7e7fafb2480ea5a39d852e8c33264f80f9a22e6bd5d28abebbb21d68486f49d2effefe9bf9a1010050a6551c3b30ca3c6b4699b0be15fa6b65a77c926822a0fc564cb134882961494927c46416b5654c6e9d7d367cf28a2e50b3083784e44b81d9277e5731d05abd844142ed4b8e552a1938d2d"}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xff}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x5, 0x0, 0x7}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xffff}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x7, 0xa, "d359c8"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x80}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x100c, 0x8, {0x4, 0x3ff, "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"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x5, 0x8, 0x5}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @rand_addr=0x64010100}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xf3, 0x8, {0x5, 0x9, "453584dc071710225321dbab36ba1c88f146089edf713c34524fd2f162da7a3c2112a5bef0fbfeddf047db104846462229ebfe5d894d607739d262aa039050b85ced61adbbc3b3c4aa4f2739d08afa486d0f4948f6ce6030d742be3b1b040cb480ac472ea95a4ce366e395169adeef12345b75d407c2e87b04b5ae98003d976c5926c596cb7d50ee5a31f35716f654245cbf32a3e4a120fcb069f098960c45fbf70c885e0cb986ae3cee27eca2afb794205554c88c7a407da1dbef62fd33ffeb99d9082bc94f24d24548ae35b53293272db0c1742553f99638732b8b571ade5b8d6631bff42a7c"}}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x290, 0x4, 0x0, 0x1, [{0x28c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x15}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_PATTERN={0x83, 0x2, "f6a97b0a7c9bc95097d99d3b04813eba3ba4d2e71e173721796f741dcaa39ef9b242810a45f7b5e43fca76f459325fbca3986fce9b934cdae8141b76483d9088954248dfad5b251cbba69d831c03c86f97855cf008dacd80c19ca784f4e12bbdf066385242fb68ea54c3c56e9bc712195ade6990d5785cccb90d85e888fe3f"}, @NL80211_PKTPAT_MASK={0xf7, 0x1, "3890d7aafa0828e5210a3f3c7824fc32bf90d7a7a0af6c74118b08019a3da56300adff9895d4cd5e27c1dcbbcde4be8c6f8d947667609a3f1a026338a5210fc75331d0f2b608527a571f881b6aa0618177a67795522d3fdbb9b318034a074292c1a753da58201df19cb75a0ec14c5357c820b39e818423f3148583868e31aaee7f1cfc7511a06ec64c262c3f8e18f3cb52eb238e27452d8ccf2028e5c50fbc0121098419a4a9cac1eb5ba63a7a3076ce0685492f2f4108155897fb89839055725b6b701595017d282f1a1b8319298e1531382c34ccc9f0a5f7aefe29b40e4e371079acf1fed0f9d4c7d38d986ba25a64e7ba58"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "d6e6191985bfbaeaa843815a0ff8ca54e64b9b5ebeb3770d5bdaca37c1920c7b0786a607d087ae324da60c0e4ebe51aa2f565ae4793ab1f43d5bbaaadf1819014394575ee3654fedb203a0d0117a358deafc4e43a562836dae357e6f8ffc21b31a8b18b64edda8cb5249244945fe4f1a20b40c60075c0b18885a09c6566ca8ac90ad2edefe25ffe37683b7857aca83f7aae54b9ae3e6b77582db5ed3b645a38dc6107787bd7ea0b75a7843c3219c2332e1feaf969ff0bd26a455f704c3043cec66c8a538d32ca36bd6fb2574cc2d19810b97a4c8"}, @NL80211_PKTPAT_MASK={0x14, 0x1, "c4fe24a629de82cf06d107cd72e3b2ea"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000001}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x14, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x38}}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0x1514}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r7 = syz_open_procfs(0x0, &(0x7f0000000040)) sendfile(r7, r7, &(0x7f0000000280)=0x7ffffffffffffffe, 0x7) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0fb46e090ff7e5f20f2d1c66b90a0b000066b885a4000066ba000000000f302e0f79c20fc49c55df6066b9800000c00f326635002000000f30b800008ec0ff24bad00466ed", 0x45}], 0x1, 0x1, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9ad5}], 0x1) (async) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0fb46e090ff7e5f20f2d1c66b90a0b000066b885a4000066ba000000000f302e0f79c20fc49c55df6066b9800000c00f326635002000000f30b800008ec0ff24bad00466ed", 0x45}], 0x1, 0x1, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9ad5}], 0x1) 3.877799006s ago: executing program 1 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x1, 0xff, 0x7, 0x5, 0x2}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, 0x108) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000004c0)={{r3}, "217f7f5742e887391515ebbc93c498a2aa0fa7fe2f03865575bb2e2ba22b2636714e767457b0315bf558573cae66123f572e67f9755a32c9e87376d7cf42806211b308c74dd3c5641603654574e67feba49ff88ecb53b726183db1e1fc9e5741ad59a90f9b0a83207426686b49126adbdd1e37c75b92bf3f51ba4606fd2b9d9390a2eb1e9a6e55b6e404132471850828b59bce7f4394aa4ad9f7f026aa3513c098f6b221427cfb31b5fd016fda84741f1f66f2bc5abc615e8cfbb2fb8cd98bfde476888936902efc0ed2301dc0d01a7e5c52e7f10b9d1f4f672eda58b657f8829a4f98042c9e20c73e60e005a2345558cb22f5e627f907ed87db5d8368eeb8856b902da904edbc9f56d92ecab24af04eed8eb172f48c68ccac663c5403162a361d4e93a1d1925b4dc6d977568061c4d414d3ce55fd0a0b03a0827cf1f5fd02c3364fcbdbf072536dfec9a3c65f96aab42a6a3ff0337b43291f0d99bc03e8566212943ea55758b887b1e38cbcae61db974a42c34402a57dc23d7c8b33a6b25ad57cfb8d06000f399d441ca81c3efa626c2a0b83ab538c5ae5aab9e706fedc753c901fdc43cf598658b5877b47e6a1d2bec12f8760494694f10cdf6e6d6c39a07eced6fa66511ca09883d860cf943536aed9e16008d322ff79b9496962bbcdbcc3a1fea718d7fce64b9628c8e5f579ae783e641e757884703bac58568c6b73ac45d429eeb07800d37cd033bafab6e03d728ec938ce328aead9002f90fb977fd2532d59dff3846c980cd5963c6f821d7714f204835997d8c8dbf7ddd5fa92e2c0f34906a5936fea7518e69e3b3ea4704d2f1431b6a95b4dd962b7284f04077b82cb33aac182d8bbb4593e0aca2c809c8b0172ba926da9dead2d43e00f2ee7d5984de6c1b71af53400721b95b93a9ab9f1b203e4f4026133d92211baf3785fbf5c741f32d3d07e18f070e90fff5cec7dc81adc88ada79787809e96676977e63ee280186a3f236bcc660918744bb780d6147e9c059e56f8105bf152c9de5efa32c8c651c400fb7628d8e47ecc6ddae7c4f5725e6f7eeaac8147bf43874e731b093a466ef08561f174b62639adc73011df92ccacc6e6496cd95e5f78822f46d341de21e816526f5f6086f8ac314d51cbb1fd2fa6144beb90a4bbff3bafeef3c67ba012648a09b0f8b8a0063bd8e2772ee83b8b153feccc8d76d7fcf44421a32c5df5b8bf42daba9717ed303ce5f2024ef8c96f5ae51cb50e418760bf7a5fce43abd2a850055c6400042c7406bb369090aba9ac21b516b5250038a1f59786af389d7c2801cfc0e474b5a0d7ecb480530e0a7387de5f23074cc242107d83cc024543e0daae1a2d05004f0f3182222317d8c1d62cc3dbaf41c8e98ea386a4a7f269daab9179290c9f6632ae9f0efbe61d585d9ef3d2d4705488d00e839d65d26bb75d0085913ab34d4433dafc46becf3514eec7fb76f651cfa78666c205a71b336ab25d60a3a62d38650c72e238d952c47b0af0b703491e26915fda3f411593091e88759e2d4d2d22e776ef52280495e46c74f3df768300823568f44c5f92654deadb2e0fb503ef64cc60f2a830ae3ed7846acf8382f8100d4581f1ed5fcde08a81214bf6c939d8a021a64d5df7fce9e2ebbbc0c5add35ff43cc8df2451dcb5c973509ff3b2c648859f9a191e3f31d52a1f85cc915ab8791b324e1857003cb888ce91d5a7319fe1fcc2011b801b48b04d9fd04552954188d6e4ad7d521291510bed700fbced7af5a476c95ca9383fde42ab5b8daf756d2c6ed33f55bf5a027345dcb5d2be25a5a5ef6d7840f8929dc2bfe97f77dd0e3fe24bd5c4d27163af36b574f76ee066b51abd9b0d8f7e37515f9b0a7f30fa6542fd2549c1fec5ac16374df744d1427c0344944f6943580baff07acd13fbd40eac37d9a42f3533d97777b0eda6bb62d0fce4f2f6ec8e2df926c3762c7da8dad69c4d5b3e2bc06b2b60f41219628bb89ad5676f6dcc799d1ead1eac3b7f50f10b14246844dda6880ce6efb05d8ccd2450b68457acdccf1bfc3354e4b2aedcb4329f92d6fb77970d6361d40288153e8cd3357310321f7e543df33e07809800308c4d55f03d4a62dbfb7a16f4f872799558f1a588da1022840d4821e2b7961d3071042f1aa5ae6b5141bfef16df27848e7f3552a12373174174db55824f503cb01d49adf1b1af89be7c5fa00702ca5925f73b45e29be4f6549387c70e764a2431bb15f7e3a62ab11523df43c976b511a92472e16358f7610cc0923490ab9537a316ec58cc655eece1bede1ba7d8ce998d0fc2fa7b0c7e2b7bf1a8ac8c9eb5a2315821cb8b785caf94d5145a2d288add4b8103d4b267b10df8447d24701d0a1a8f01b8fbf8ce470cbbb3b1b63c35b11e7e3f38370cde332fcf8ca1ca5c25506b43a85038b9c0a0292ead62813fbfe0be92b821045f36ee20c8bba138596c5798c084e442b891240cde211e7dc029cc8fca6964ed76978ba759d7e55c02afb9372669b8e5e250ba347360c31295335689cff6ba89cfb5bfcdaa8216ea0f9cacb9de47f85084ef3bcb187d2d63231325f76e50ff456ff2cd2fa4062cac3fd8471cef667f122990183708e6e592b47f860712acb1ba6dac02d3ea550121ee250365861650e0b5a3adb7bb0e34d811467d545d49bbdbc545a6567f7e809d05264faca7ccf10dcf40deef8f2b285d21830d9508e673df669907dbe6e534af65ad5884438d7f291d736576b90f7ccb1bb4ee4c9692464d4b6211a0176aa42c845030852c2a7712db3b136708460452b803e0b33b3f8c422fa54ece225570d9aebc67bb952f057c438af7594b28b0b452bcf8103296ec53af840bc22a8c40cbb94079be9ade8ecd31543e14b43fc796ba8e7cde87dded0f91bf1fd531a7b4a7c444100bbb6f899084474dcc300b57197224db388c13ba0883a36e8f090bbc34e3bc145683bba5ef83b954a82b1e1d20a5b151dd75e00c08ed39b29d455108c74a4a9db67916dbcc601c175414aa44180116a992e4bc69f10328bbef2b9664b72861832d72a6f6ad8d74ce64d3de1f88a0cf8074a3e311d4a9b436338316f236d46ca73e501edd5686904b1cfec529fe251bbe02a8b66fe28215d472364c430d76b1eb926382eb12b2a94ef35ef5864b0453eabd94ef24f31f5a678f59b1f390f16da5110c5d0a18ba8b55e2a337b09e01399ab33d9903b8e4f497ef9dc94d20d15dd68711eb92e422f790c675db437c006a5ef8fdd3159bab65840da1560a23bb0bfabf86d716a7cf32e84e839329f467a502a2c4dc73e8c772671688d244b086cabc9cbd7155739aa7b04db128887c5db04bdfbfe8a91c870f61ae80107b1fd05ee878462dc5ee59a76e26fd09639dfba0d46cac339fab821fe9c2d62b9453b4adcf87d9dc0dede13ff4d36c58fa88cb4e58f17d71ec669f5aa4726b008b5f60e8ec6fdb23f63b65c1eb3f1969a9a7b65a73baeb02d94b028964367100e6182328804519f99624862fcc90816b245453f30548dc1f5eb0585800ce71df938b725300928986fdf433fd4af6ba810e1414fe03aef87f3c71b2c2673bc8d8e6154b5abddd40bcc3212c4a6a51ff1a9468d5c0a96c1a5738dd463497a8311a08c8cd30f08b2374e5f1d7bfcd8d54a5a8c2269cbe36ff121a454d1e000aa3f36cd7b0cf6198d1c959b673bfccb33e3886976d7edaef32a9c405f8a56adadaf1f342bcd76ee6bd4eb5db70c52315ed47a636ae4c3c7056333d57ad787d9fcdb2b028e10bac8fdb35c424f2d0ec1ace2e45077790e65c9b94e4919150cefede298dde44dfa4dbad23616f20f303d09188203011b2c56150e72ce474185e31902131f3f25310ecd0c6ce39671add79e0b618e82fcdbb640182eb994d411ff827e5224db5d62078efd3ccec2526bdd3ac9167335bf3c8a4769b5ba6a86a31ce0dadb8e380bc3d54ccd6d5c202fdde6600f2d60c300a5d6693af9f453601bca19d43270a19c1530def056aeb879527f69eb8650c1cb7ed857a4867044c3e4f263e47369a30ccaeca93092bd4d1a201a34153926e104a829f31d5823daa0baf6a7c8b5958f44306ebdbc48ee7fd896cdfb61d6ef4ad1bcf6cb9d3e96141f5d2c46bf86b6241a90cc2476cda0c8a96c60033f6a618cee4ad706c4f1e8c9759e674ec13dfcbd1342ca3cdf1077f39419e802667a5eb8e8fbe63c3563fe87e81a283e00da8f18efa2b0b8e16d5858be23e5c3af4be2c94c6c0bd207071515951ddb4a57509cd95fe5494400f70cdd841148b51216eed9b0ec79eeadb396b46ca9829d338f0c81b4762a3c76cd6c06894a94a37b7556f3ef4762856a621d84b67345066e70afa35b04f76602ad4257503913e0cc2987afd1f0a2f2c4eb6c244876499d53144d8601c4a770b773c9b0296350aa74d5c4a98337aa649d07bdd9638ddc97c2868dec9ce28c35cf5f6ae87155cae8411f42f189eb0214314a2d51c94329dfabee53b259da6f2e09fc5c0200e82266a14bb92ffffdf0bd561b2272b8ba16af4a0ce57e82f7c7f3ac505914b630c25ac73aa4c4aac245e4c92f60024a31c79711aaa62c2fc757cb27832b0aea2968fcb8743573dcb6a813fcc6e83fe09820c0feb1ca03740569cf3e4946321456bace2ea7d815d7b5bf02925a0011ea73ff3b4deffb2cd3fe975c14b4b5a5f4a9a2ab2f468027ae0a9b38bf4504bd8c7c6396c69ab47c24fe147ef25df89f229e014067ecf39c7f01551f84bc3216694fcb9242f0f4e501e97f903f93adbe8025b112b3c659fcb28c0c013661ee505346543b85f30dd06d687477d1e937dda759edebc523599e82635bc73fb3a2daf44b6faf1ab1c0ef06caba026aeff296a448ad1555fcb01f31222203b48a411ff6f34c06ea0aeec5eadca7314003683ca2c2fe3bd860fdfa26bceae54bc03b09cface89b106cb9f905098ff23da7af3899083d296e00f577d92692f509bd973a58166028837ea8400498eb2ee19d9f81ac509b603b603ea84e5b1c2eb12712cbd07b957bfc1b54eb6891f29e130a4d943bd27665a5aca8e428ca3adcb0134cadb01ce7b375ae5f7fca6eb38c96179dc2e1724002e2b95400d830c01b7617638dad0dd858a0f4c65381c85566068199c627b204dda921daa5c18bc81d53c6581a6812b2f491c0580e72ecc882cea27867aae7f9cfa0dce6fd17dfedeed9ef7dee40fc504c5c74d6a49389c95e64721af314182c3bd89261a2dfa9bd8efdd7044b1cfdd5f0399382c1e3d8a2e9877e3a7a7347adc0dcaeb471fd954134390ddcdbca7f6ab0b2665d8aeca2e2aa34b6a8ac5f9a8529aa535e43d4071db13c5b09688bc2e7d917c1b34f5248549ce155cfa8227a8d11643c9e984e0546313a1410483bb2ffd56d20eeb1a0064eb88f1a3bc90c92c66cb6a0dfffadae86cbcd831c97c5f36998105bd8d8ab8095526feb1e36c72919a027ab123c266282a0437e577e5b02333eb4acbcd81632000e64cc5977e467cc0700791a9e1940cae7b016a3744a26ed52cda45eaea458d7ecd2197c5cc40acdd24b11e806090e1577c7d35ff4d40e8eb06a65491beb2c4ee03cd28e908c524cc839501155b5e8995e1aa6888432dfaa6f2cdd77638c5f49ed12ab959470de0099c68390355defd9e94b65de8db0c77323c3ea7f11da721d132d60db8435a85b2fe41bf4effe487a226de791ace7bf39afeb6b42550e9e1988913ee1bdb138d83dd5d7e0f471744c09273265b6ab6e81671c43028974e5369644a240b30b39eec84"}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4000000) 3.822693647s ago: executing program 1 (id=71): r0 = epoll_create1(0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) (async) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000080)={0x10000000}) (async) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) flock(r5, 0x5) (async, rerun: 32) setsockopt(r5, 0x80000000, 0xfffff5cd, &(0x7f0000000040)="9f45e54c7c30bddf40b7570418eca45f67bf3fc61cd64506559fbcaa8632fe1204e9ed06a89dc94747e0ace423286b1c0dfb", 0x32) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 64) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) (async, rerun: 64) preadv2(r7, &(0x7f0000000600)=[{&(0x7f0000000640)=""/81, 0x51}], 0x1, 0x0, 0x0, 0x2) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x24000871) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r9, &(0x7f00000000c0)={0x20000014}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0xffffffff}) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r10 = fcntl$getown(r3, 0x9) setpriority(0x3, r10, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 3.822016447s ago: executing program 3 (id=72): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x28, 0x801, 0x0) chdir(0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) creat(0x0, 0x70) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x20c484, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d66326673002c6d6f64653d61646170746976652c686561702c6e6f7265636f766572792c667379ee635f6d6f64653d706f7369782c757365725f78617474722c64697361626c655f726f6c6c5f666f72776172642c000000"], 0x1, 0x105d8, &(0x7f0000010600)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.749991611s ago: executing program 1 (id=73): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090024206de11bc340000000000109022400010000a000"], 0x0) r1 = socket(0xa, 0x3, 0xff) recvmmsg(r1, 0x0, 0x0, 0x62, 0x0) userfaultfd(0x1) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2501, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0xf0, 0x4, 0x7, 0x0, 0x9, 0x7, 0xa, 0x7, 0x3, 0xc6, 0x5, 0x7b, 0x0, 0x101, 0x4, 0x0, 0x40, 0x2, 0xd, '\x00', 0x6, 0x67a0}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xdddd0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0xd, 0x4, 0x81, 0x0, 0x9, 0x2, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0xe, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x9}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x9, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x23, 0x0, 0x0, 0xfe}, {0x200000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0xfec00000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x280000001, 0x5, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.373963786s ago: executing program 4 (id=78): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x1, &(0x7f0000000100)=ANY=[], 0xdd, 0x1f6, &(0x7f0000000380)="$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") 2.372582506s ago: executing program 0 (id=79): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x8100) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x2, 0x4) setreuid(0x0, 0xee00) fchown(r0, 0x0, 0x0) 2.362919108s ago: executing program 0 (id=80): setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_PROTOINFO={0x14, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x10, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}]}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000800) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000430001000000000000000000020000000e0001006172705f6361636865000000100022800c0013000700000000000000"], 0x34}}, 0x0) 2.35305395s ago: executing program 0 (id=81): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac3(0x6, 0xd8, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x931d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x5e, 0x40, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x62, 0x9}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x403, 0x3, 0x5, 0x4, 0x1, 0x0, 0x0, 0xa}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x101, 0x5, 0x5, 0xd6, 0x6, 0x8, 0x8dc, 0x4}, @mixer_unit={0x7, 0x24, 0x5, 0x3, 0x1, "fbdf"}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x405, 0x4, 0x7, 0x8c53, 0x1, 0x1000, 0x236, 0x7}, @mixer_unit={0xb, 0x24, 0x5, 0x6, 0xf4, "3eafae1beb44"}, @selector_unit={0xc, 0x24, 0xc, 0x7, 0x7, "85698cb0359893"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfb, 0x8, 0x9, {0xa, 0x25, 0x25, 0x3, 0x40, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x0, 0x1, {0xa, 0x25, 0x25, 0xfffffffd, 0x2, 0x8a7}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x14, 0x0, 0x2, 0x0, 0x6}, 0x81, &(0x7f0000000200)={0x5, 0xf, 0x81, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x9, 0xde}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x23, 0xa, 0xfffc}, @generic={0x68, 0x10, 0x4, "4930d53fe5631486978af2fa2f6834cf546de3fefc3b37e69360eba50e42d4dc274f3612126210f538d670316172c10695ecc4e0e3967e49df4251ec106c402d35e96e623a0a03d3362e48d577679f7800c5ba263cfcb2187ac4f86dc658eb42db40e3d534"}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x411}}]}) (async) getsockopt$sock_int(r0, 0x1, 0x1e, 0x0, &(0x7f0000000080)) (async) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f00000002c0)={[{@grpid}, {@jqfmt_vfsv0}, {@abort}, {@resuid}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") 2.270585887s ago: executing program 4 (id=82): socketpair$unix(0x1, 0x4844ffaa2cf3a4cc, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) fchdir(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x12) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000180)='bridge_slave_1\x00', &(0x7f00000001c0), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000240)="a41b23b5b273d95111c81c3ff82f471f10d5dab5570f5126f9e3933e8d64cb5d80a9b1c013e4fa14387021c973a7250d7d1828d99c259a3bc8cbf246601f4854e2e39abeb0fdef962c5f827ad903a988b93c0cd9db6c13eb3faa810304ce2486c8151f64a077a0f4378154c415afc0d88d7f1594e8e1e9f6db8028b3f7f6bf3311056cb3e5aaa0997da54bf6ba6f6cb3eb5d557f35363380940f28ee0565233a3fc536e3d7e8e7c35f6d8a55e809694df6a9047f858bc8b6b25a44fbbd4d2f71640bfc69a062735f740eba36963dbf0b82c3d3", 0xd3) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000740)={0x2, 0x1, 0x13, 0xa, 0x183, &(0x7f0000000340)="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"}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRK(r5, 0x5409, 0x800) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x701240, 0x0) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, 0xfffffffffffffffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x338}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r9 = fsopen(&(0x7f0000000980)='9p\x00', 0x0) r10 = fsmount(r9, 0x0, 0x0) syz_ublk_setup_io_uring(0x39b7, &(0x7f00000009c0)={0x0, 0xdd33, 0x80, 0x0, 0x37a, 0x0, r10}, &(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) syz_io_uring_setup(0x600e, &(0x7f0000000b00)={0x0, 0xc45b, 0x0, 0x0, 0x92, 0x0, r10}, &(0x7f0000000b80), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) syz_ublk_setup_io_uring(0xde9, &(0x7f0000000c40)={0x0, 0x22b5, 0x20, 0x3, 0x279, 0x0, r10}, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000dc0)={0x2e, 0x1, 0x0, r10, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000d80)=@any_dev={0x3, 0xa51, 0x0, 0x0, 0x1000, 0x2, r2, 0x0, 0x100}}}, &(0x7f0000000e40)) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r7) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r14, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd21, 0x1c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4048004) socketpair(0x5, 0x800, 0x7, &(0x7f0000000fc0)) getsockopt$packet_int(r10, 0x107, 0x13, &(0x7f0000001000), &(0x7f0000001040)=0x4) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000001080)=0x800) syz_open_procfs(r2, &(0x7f00000010c0)='net/ip_vs_stats\x00') 2.269327137s ago: executing program 4 (id=83): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) (async) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="a0000000", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRES64=r0], 0xa0}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="a0000000", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRES64=r0], 0xa0}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="040000000000000000bd0000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x214c00, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r6, 0xc008aeba, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, 0x0) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r3], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) (async) write(r7, &(0x7f0000000000)='3', 0x4e) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) 2.261434638s ago: executing program 3 (id=84): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) capget(&(0x7f0000000000)={0x19980330, r0}, 0x0) (async) r1 = dup(0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x24002000) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="00030000", @ANYRES16=r2, @ANYBLOB="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"], 0x300}, 0x1, 0x0, 0x0, 0x4000010}, 0x440d0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000200000000000011d638af4d44cb626f", @ANYRESOCT=r0], 0x0, 0x400005, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @sock_ops}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="862cd387c58b374317cc34538b57eea5", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="c69bc7e12ce2e4b8e7b9d8d779c241c1", 0x10) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x2c, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r10 = request_key(&(0x7f0000000540)='cifs.idmap\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\'+^\x00', 0xffffffffffffffff) add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000400)="e5d8a6ba2afafac40003ff8a9784f54eab72b23f2ab22cf85d570593b50ad83e", 0x20, r10) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r9, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendto$packet(r6, &(0x7f00000001c0)="11eb0300fc0baf745836", 0xa, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @multicast}, 0x14) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6ab, 0x2, 0x5, 0x8100, r5, 0x4, '\x00', r9, r11, 0x2, 0x3, 0x1, 0x6, @value=r12}, 0x50) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r13, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r13, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.084286634s ago: executing program 3 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x40, r2, 0x601, 0x20000000, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x5, 0x8, 0x1, 0x2, 0x17}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 2.075488816s ago: executing program 3 (id=86): syz_extract_tcp_res(&(0x7f0000000000), 0x8, 0xfffffff7) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @remote, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0x2e, 0x75f7a2a5a5a5baae, 0x0, 0x0, "f7b576febae2b7e3ea6a63d2894e9567322be5d6d1706385264b79975afa268326b8eba21bad0712635188a8f68cf0ee5b10d169e28e21d2b7f242a7491c764d"}}}}, &(0x7f00000000c0)={0x1, 0x3, [0xec5, 0x879, 0xd9b, 0xef2]}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_ID={0x8}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x0, 0x1493, 0x200, 0x9235, 0xb85f, 0x10001]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x200) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000002c0)={0x8, 0x2, 0x1, 0x2, 0xe}) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000480)={{0xd200000000000000, 0x4, 0x228, 0x9, 0xfb}, &(0x7f0000000300)=[{}, {}]}) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000500)='net/vlan/config\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r1}, 0x8) ioctl$XFS_IOC_INUMBERS(r4, 0x80405880, &(0x7f0000000580)={{0x1, 0x1, 0x3, 0xe, 0x10000}, [{0x50a, 0x0, 0x0, 0x2}, {0x5, 0x3, 0x10, 0x5}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000a, 0x2010, r3, 0xdfd0000) r5 = signalfd4(r4, &(0x7f0000000780)={[0x2]}, 0x8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xb, [@func={0x7, 0x0, 0x0, 0xc, 0x1}, @volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @enum64={0x1, 0x3, 0x0, 0x13, 0x0, 0x2, [{0xc, 0x9, 0xafe}, {0xa, 0xe6, 0x4}, {0xa, 0x7, 0xfffffffe}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x5f, 0x61, 0x30, 0x5f, 0x0]}}, &(0x7f0000000680)=""/183, 0x77, 0xb7, 0x0, 0x400, 0x10000, @value=r5}, 0x28) r6 = syz_open_procfs(r2, &(0x7f00000007c0)='net\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_extract_tcp_res(&(0x7f0000000980), 0xc, 0x5) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r9, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4c051) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000f40)={0xab, 0x20, &(0x7f0000000b40)}) mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0xa000, &(0x7f0000001000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_any}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, 'mptcp_pm\x00'}}]}}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000001d80)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d40)={&(0x7f00000010c0)={0xc5c, r9, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x28}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x5b, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x48, 0x0, @device_a, 0x9, @value=@device_b, 0x1, 0x2, @broadcast, 0x100}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xc1, 0xb, @broadcast, 0x8, @value, 0x7f, 0x14, @device_b, 0x5}}, @dsss={0x3, 0x1, 0x6}, @chsw_timing={0x68, 0x4, {0xff, 0x2}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x72, 0x80, [@ibss={0x6, 0x2, 0x9}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random_vendor={0xdd, 0x62, "0485320706348a39de5d41c6fe0364286ef3201030fa7fd5e4aa24e7afabc0efdb0225d18e9f0df7194623cfc774665bbe8abce9302ac4f8b0ef1132cb2d689f2f7fd0a645f1459617270128c3331c1bbf44817a450f2093d28bc88de84f197c9d09"}]}, @NL80211_ATTR_FTM_RESPONDER={0x164, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x67, 0x2, "e8169c4a92a7127e139955a1eab05672f1a57f1295b06d77129ae441b44fff5a118345177a7e0acd66b5c1c0b21c2392bdb55fb8188a9cb50df45e7cc18fd6e2ca48c09d30d5330f6c6a4ba25137d67f47ac14662be3988ed66719e372a2d4ff9d7652"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf1, 0x3, "5339873b119e4e7244261192f346a49497015c617600a389981e891589cf6f22ef37cf161c09b9df521597040430c6a32d0f3bfbc2b1b0edb2a2b898156b66576b6dbabfb85ef61730297a892bac159f9fbd80f4ed757df86e41ff76157434af0c8ca1bcecbc10120a2abb7f9a00c0a544c09e6226d1cf153d16fb43a290fb19ab5e9e6bd86e412625c34036a1ce1296e3cc7617cc04150113e15b16676edabcd92bcb93f687ae4dafa7ab8110e73e1c439df4fcf6db91c45344a4b69a514c54d3c1283d2424d7ac44bb9f2376a78cc822c9a5f25d88cc7a4bf849bcb06791fc69c7439f64a614e3fc3ca1e988"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x170, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x2e, 0x2, "890a9775633e2530940d729b6248fc7820d1de43a0b13fa26a61aa27892a7c1e16cd974c694f7e8ad1ef"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa4, 0x3, "340a404c128d52dd01943ef074c762af71a76f524718c61e57d0a3f8b6b0d78e024aa0a63751c05012de781a7c21b36d95ada3952e870edba67c6071fefb3c22be07cf432f5132e26897bd5f7f81ffa71584ec9df49d8c0b100311fac54727c3021fe0e9d84935af0724292768a594ef22c6dd4b4bfb7628fdb0bea14af26994ab4b7839c3ac3daa7d14240d06409aa3274c6e62edade6edc38f81ad44e51a22"}, @NL80211_FTM_RESP_ATTR_LCI={0x58, 0x2, "4b26ff7077d7bbe3ba28070d32e938c5e85159639a12c55ab9766f6ec2a9f18bc88e2a7f46cf49fb07ca4024966ae4649d743abe34ebcf819614c56e4b4cc4639937b4d924ed1a6c16622de2919160c444fd57ca"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x35, 0x2, "48d2918c84c4e2a6170b7fac9284e80d9a8a15fa69d30c5539168a8ae1f51c176495aad0cceef305c5e23cd2dbb8d6a033"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x17d, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x2}}, @supported_rates={0x1, 0x2, [{0x6f, 0x1}, {0x1e}]}, @dsss={0x3, 0x1, 0x1}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x3400}, @supported_rates={0x1, 0x4, [{0xd}, {}, {0x4}, {0x3}]}, @ht={0x2d, 0x1a, {0x20, 0x0, 0x7, 0x0, {0x1, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x2, 0x3}}, @random={0x8, 0xb4, "4dab7108453315ea6c2696c17f738df8780a953f6179358ae1dc159be273548ab9fc86c6b4b40da56e9f685242e973b3160ba5736ea38ac75fb94a4578070026c5a54b61ac7259e7bfb0cace1712f16286532c584a1cd4078250e131757659479c1febf7b0ae30f3e1e41f6f7c1c86586126e772074f26a7af16c4d385df6e16ca8dff3cd4500c7797e353ae3a107915dd9d9675ea19530d791718e91fcf452c66d79a23dd09a3e3c8e0c2c8d3fd02dd24b72a63"}, @tim={0x5, 0x83, {0x1, 0xd9, 0x7, "44bf85ac8d55ddbc0f3ab6f347342b1ee901ebb7e0bf49d73aea22e262d8302d8f264bb583aa7586107f948bde7c711345c99aa2f599205a7bb90af0cb05901fe9fc4d8efac352b951018596f55fa02c4d99082852e037d2f5cfd4af0213a01514f45160f4beb386d38b8e134b7996b4bc791f14e4c7d2804da021a0dd41afe0"}}]}, @NL80211_ATTR_PROBE_RESP={0x50d, 0x91, "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"}], @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0xfffd, 0x0, 0x2, 0x4, 0x1731, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3b, 0x9, 0x60, 0x5, 0x16, 0x18, 0x36, 0x6, 0xb, 0x3, 0x3, 0x24, 0x6, 0x1, 0x9, 0x5, 0x2, 0x24, 0x12, 0x6, 0x0, 0x12, 0x24, 0x9, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x4}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x2, 0x7}, {0x3, 0x11}, {0x3, 0x9}, {0x2, 0x4}, {0x7}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x1f}, {0x3, 0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x2}, {0x7, 0xa}, {0x4, 0x1}, {0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x7, 0x9}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x5, 0xa}, {0x3, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x3, 0x6}, {0x6, 0x3}, {0x4, 0x4}, {0x4, 0x9}, {0x7, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x9}, {0x2, 0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0xa}, {0x7, 0x1}, {0x3, 0x4}, {0x3, 0x3}, {0x2, 0x6}, {0x2}, {0x4, 0x9}, {0x1}, {0x7}, {0x1, 0x3}, {0x2}, {0x7, 0x5}, {0x0, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x2, 0x9, 0x81, 0x7, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x3}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0x4}, {0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x6, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x9}, {0x5, 0x3}, {0x0, 0x1}, {}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x9}, {0x7}, {0x6}, {0x6, 0x2}, {0x5, 0x3}, {0x3, 0x4}, {0x1, 0x1}, {0x2}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x6}, {0x3, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x6, 0x5}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x4}, {0x4, 0x8}, {0x1}, {0x1, 0x9}, {0x7}, {0x3, 0x3}, {0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x7}, {0x3, 0x6}, {0x7, 0x9}, {0x4, 0xa}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x2, 0x7fff, 0xa7, 0x2000, 0x9, 0x6]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x5, 0x6c, 0x60, 0x48, 0x12]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x2, 0x8}, {0x7, 0x7}, {0x0, 0x2}, {0x5}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x5}, {0x2, 0xa}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x3}, {0x2, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0x7}, {0x6}, {0x7, 0x9}, {0x6, 0x5}, {0x5, 0x7}, {0x4, 0x8}, {0x6}, {0x5, 0x3}, {0x2, 0x6}, {0x3, 0x7}, {0x3}, {0x3, 0x8}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x3, 0x7}, {0x3, 0xa}, {0x5, 0x2}, {0x7, 0x1}, {0x7, 0x8}, {0x5, 0x5}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x2}, {0x6, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x4, 0x10, 0xc, 0xacf5, 0x8000, 0x7fff, 0x8001]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x9}, {0x3, 0x6}, {0x1, 0x5}, {0x7, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x3, 0x3}, {0x7, 0x1}, {0x4, 0x5}, {0x2, 0xa}, {0x3, 0x1}]}]}]}]}, 0xc5c}, 0x1, 0x0, 0x0, 0x800}, 0x8085) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000003c00)={&(0x7f0000001dc0), 0xc, &(0x7f0000003bc0)={&(0x7f0000001e00)={0x1d70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x46}}}}, [@NL80211_ATTR_BEACON_HEAD={0x1f8, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x127c}, @broadcast, @device_b, @initial, {0x2, 0xbd0}, @value=@ver_80211n={0x0, 0x524b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x8, @random=0x1000, 0x0, @val={0x0, 0xc, @random="f028883b0e39b8fe1fc59ea4"}, @val={0x1, 0x8, [{0x48, 0x1}, {0xb}, {0x5, 0x1}, {0x24}, {0x1b}, {0x24, 0x1}, {0x36}, {0x12, 0x1}]}, @val={0x3, 0x1, 0x5}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x0, 0x9}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xc, 0x7, 0x20, 0x6}}, [{0xdd, 0x3a, "84ab73ebdd85c7d98fb1e4f66c6c5747339333f4d527a2262f85c3b119757e484f55a55ee8890b67628780bca22ad97e4e4fd55498821b3bd35f"}, {0xdd, 0x75, "81820da6cf53a2a9d101a64e73458c96d11a286be5b03518429504dd015dee181653c496b5d67366d2a45c318884a9d699ef2cbbc3f48c4ef1b8388851bdbdb44ab9c0f15792b88efdaf5787becee806d509d5b006e5ea8f833533321eec7a2d930969875fca07b89ed6b48078016dd83c1e856f6a"}, {0xdd, 0xa2, "0f23322d0ade8462fc6e18345a61574c81b37af18de38a6e4ddfb90f83403a521aeae8474e101052ceb8cd78eb5a522798a0aa572fd1fe50b9e726acf860147ad06497a02b65611e40d0d00aa3c80b808ec9902e747daca4a325e98165f56531710f6b8d18fa9540742caf483ee1c5843f997d583f2b6f122b22f14b9c018a3ca652407c1bd75b44a2e4a140b97b92e2c6efb279f411234f672d227f60da252535b0"}, {0xdd, 0x40, "9ee71655540a4a05260742406692e486349fb454fc50a8f97edefa70414120056f6b35f1d4613d9d2e73488f48aeb9bf7c78420658f02c8960b6c3520e8e0bec"}]}}, @NL80211_ATTR_BEACON_HEAD={0x2cd, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xa}, @device_b, @broadcast, @initial, {0xa, 0x2}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0xe0, @random=0x10, 0x2004, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x0, 0x1}, {0x9, 0x1}, {0x1b}, {0x1c, 0x1}, {0x1b}, {0x30}, {0x5, 0x1}, {0x3, 0x1}]}, @void, @val={0x4, 0x6, {0x10, 0x7, 0x0, 0x7}}, @void, @void, @val={0x25, 0x3, {0x0, 0x80, 0xcb}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x4a, "05d8a4c9a0c112960f6f22b013f1c7f563cb1b0d5a318afac413fec07f2b0a88c4f85d025178b2498af1cf0427867ce56ca44e8ab9a457a765351ae7c837d4d56413ef24d7ceed00a5bc"}, {0xdd, 0xe3, "0cd67e525eb80c1ed15f548b0715ae28888d860a307dce1fc75950c8728eb35a4a82b38c16d5fabb920e079e328b0d77088e36c6dae786e2434c591f2acab222a04f5718f914f71f34d8ea2a561140d3848e59ee2574fc54e77ed0cdc81e0b896216f65cdb0e3f168a172a32aead7e26c3a4c6bc61ba9894b5193e563b1229c8c881fc132ea1d037a155e4a76f93710325f96102bfa810ce91c9da413df916c3597c2aba599c57c1541980801de6c67f437e3bc761bfd542174a793724e8e8a7d8950dba4654c0a1fc06b57ab0afdc2ca5d38de51544101f7e80f127e7935f9aa4513f"}, {0xdd, 0xe9, "3fa1398f089e953bd52a2ec8bc4bfe89d4bf5959aba3b5dd1465a6314417a633f4934203ded406fa21651e5465c601177888971365ad7c339f0fde4bdf95993c6aeb973721b4e7e9de16fc20222315728b394ba37f8ad1244f7b7bc844f3622e0b9d49fadc2292e14a3ab03b7487d25a27a22906200e81ece13f5ce0674ffe76544ecfa61bad7a3c7dfeb9b9f99938a926208a20e12ee05cae54beb3ca2dca41900cb0b6be9a9e173bae10bd48e3006f5146255d94c18de1c0b3da60a4e4712f0520517fd8e8c98621da9ecb6ff1aa5f171d1dcefab413e95743ad5f349e3024759dc8855fe0698c9c"}, {0xdd, 0x5c, "2c0e5e1795f745d2a53d48ebca55ffde020781662935579ad46ad9b487aa53503f4e779f9318ac8dfda52633b9ce265cad23e115310d0d6e8c48ef5b2c6ccc0e361cbc6fd3b6a5d8134df7b70d132c14b730e20f72a91391d879ac3c"}]}}, @NL80211_ATTR_BEACON_HEAD={0x524, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b, @device_b, @from_mac, {0x8, 0xa}}, 0x6, @default, 0x4000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x5}, @void, @void, @val={0x5, 0x83, {0x5, 0x68, 0xbb, "5809d6e964513adcfd68d542f8f88e851f1088ead2cdb54542334ec9596d83ed9f214da007d40f84f195284affea75a1354700a96191101ae7741b9658c8b82bb607db9af292556471d09b5bb02e4e374d2a7a15d1b9eef04e61e1c1b09235baff31db1163f078e1277d0b98ebcf60e7312c0d1b8bedb2fd4d62240fe2b65848"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x0, 0x84, 0x3}}, @val={0x2d, 0x1a, {0x8000, 0x0, 0x0, 0x0, {0x1ff, 0x7, 0x0, 0x40, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x4a, 0x7}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xa3, "c8d455771a4493e8a2905a83fa6cb05cae1c9038096a4f8027e8dcd321ef6dce352c69cbaf8cea1771f0a89d1f9ab88c3f1f09d6b30d1126aa834c3fadbb5293bbcfc8dd84d3c83dea2e61f4260affc21676e1050fe5cecdb2a2e6d7e9d468e275a17ab22e416622bab39cca01747494e1ec07f6926dc950f24552f1b6b3863ad81aa49785ca17ac966eb6f702ec7eb62ce02104e231605c81005433575420ceb7670f"}, {0xdd, 0x87, "d58d2ee82794067456a262989bb0c829e291eac27c339e29868afd6f927494b52ba85ba716893f4ae854704ca68a08283c9cda710ea181536df41584851abf26eba2eeb024425f8ebf20f1b6165da0dd5bc063a7d89f5b617ba1e4e0d84c0e8f585ac4856a1f621a550e16dc5840887ed674756902faaf2afda26563c2492490b99fad7fcb63d9"}, {0xdd, 0x7b, "6eced33258069d19a644308716189c371f674339eb1cdaf410425019d5c9627201490af6744c533582fb9c9459de3891812a30d0d9c7c8c34758b737fbbd2d72b85f06cced0a3fcef7fdab94598794841ccbbed4abd8affd9fbc9ec075a353a888782179a709bcacd5e16ea06da421c5b6d541b215fc18d4781759"}, {0xdd, 0xc1, "0b27aa515aa2933239a528899856e33dc1811c776a559fb8784372ab720e695929b7650fd282ed75dca8b3f493e5e9277c14618bd8943d06759ec1e953c5f9caabf49ac6b65d1dc428c56a6b22a0532f4b1a74b5b4eb4153c415bb301ccbce4b8a805aa4ede42366abb1f9ae319c5b288dfc8e6e2bb156c8ac25a100b9485a35b4393825f67b68b8484e07800ba37d21d8e2d614629d6104b1130f362de8ee262503632ec30779dfd1876c951688d1021d2b4657c1243b0734f6c6dc7e9601093a"}, {0xdd, 0xe1, "623a3a2847f0ab232bd826698c639e222ab558d821b1bea09bcb2f1114d3a325a272e2bdfe5980ecfc4c7bc8370e775156a64d7046a7da36d594aa6c66373b98db5198e3caca765eef42f1546581c9250488e3f954f459c4539aca57d1a26d246efcc268096a89c59d29c2f09401d20aa7584d042273176aec96d167dda8f58390bbc59d63f79f161dab1a1999625baa048325f35156ad92ff2814aad2aeb310657c1424e5aed83764bbf454d688efec19819a4e0e0759103770e6447dfd4935f834d992648697afa23b9cc72acabebe3fb5a1545a37ff2bc36a323d42c999ec72"}, {0xdd, 0xef, "c514bbe7d5894a69c80ae43c7ad196d13a950cd6b479a2271134089f984aa3127caa60c8d72ec1ffaca04a705a86caf4c8f56f778605d3a020fa32725583bbf5f2c7f5ef27b2e4cc49343ae75f8e8fbcb10f9bd105d116de3a39588247cbf3a0a5c8a277cb2e73e3fee7616c68b41960a611222e95ebff1fc71de1cff1f29222c84cf10559ac225edcee6d2cf819d47266a926288512cd15981c7af3844e6109b1f754850a593af32d947e3735a5b8dd71db0ef833082e254143b4b54c97b55f997ae046e8e366d52cef251e6604358c68585a4b46cd151d0c3b97c26e06f676f7c2fbecf621976359df8921c9363a"}]}}, @NL80211_ATTR_IE={0x28, 0x2a, [@ssid={0x0, 0x9, @random="c490741b5d79c919c5"}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x8}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xd5, 0x80, [@fast_bss_trans={0x37, 0x7a, {0x40, 0x1, "26ab83f60f940fb7876c0901fe23d715", "ad62fdeed86d60431da4b259d7d4340a819019a783d327976ca5200ecd38aeca", "a7a2dd615052354e06bc548c8265400b844acab3d387ec8dd189be3632801410", [{0x1, 0x26, "240f6dd09ad1bea8b08c2e291ab4c5a12a692c5989cd8982a8e839fe3b255d93a70a69b83e30"}]}}, @ht={0x2d, 0x1a, {0x8000, 0x0, 0x6, 0x0, {0x7, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x5, 0x1}}, @measure_req={0x26, 0x2f, {0x3e, 0x6, 0x0, "0bc7e4cbecd83bedabb7a993a8f8ab5dd90ec852bbed4649dc447bae59551f2d6cd49b672a8177d6cfcd4d55"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x1009, 0xf, [@measure_req={0x26, 0x1003, {0xf8, 0x0, 0x7, "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"}}]}, @NL80211_ATTR_BEACON_HEAD={0x18b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @from_mac, {0x1, 0x6}}, 0x80000001, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x40, 0x4}}, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x9, 0x80}}, @void, @void, @void, @void, [{0xdd, 0xb4, "c0847f04a92f5969e6a8225516ccf1a924a699d1219ed632f4be67a3b8b58962a976ee20ca4fe032b00b7ca21c033f76ca0ef73fbb54c004bfe4c71d2176eae4bf8245d60693f78780abf63173c2d50b266f800cdb6406ca8ff8ee376c68404214771f5058137cc9e0398ab7e0f71ed35d05e4cfef5a8d48c8450a5f50d2b15efd997d04e2b83584a13c66a8e4a0d278ddf95c2c70187e4f52ccc67730a0f1f0232d6f9a7dba20e4f4ec2dc1ce0562b8c8b63133"}, {0xdd, 0xa0, "d64dc18a5ee0f7d88c8e4ab3fa6ec7f3cec4e6677bb7fa92102f85614f24fc1ec88dbd9274f3b9d7b95add9b2fb2774e7a7af2cc66ad4e704b63ed55b55f484340cfdb8074e51f43f563f08e4340f9e213dd3c2c2cbf8c132f4423819f9032040dcad0a55fa51259e893b6c5c97f0e29a8d79d6a1cd5449e9636fa8f25cf0946f0652452a1d6880623d777b5334b7c87b8f3f939da0095360e1fcb41b366a37a"}]}}, @NL80211_ATTR_BEACON_TAIL={0x2b, 0xf, [@mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x24, 0xca}}, @mesh_chsw={0x76, 0x6, {0x3, 0x27, 0x40}}, @chsw_timing={0x68, 0x4, {0x7, 0xfffd}}, @ibss={0x6, 0x2, 0x1}, @cf={0x4, 0x6, {0x6, 0x1, 0x3, 0x100}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9d, 0x7f, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x6, 0x41}}, @preq={0x82, 0x5c, {{0x0, 0x1}, 0x0, 0x3, 0xf, @broadcast, 0x0, @void, 0xffffffff, 0x6, 0x6, [{{0x1}, @device_b, 0xcd}, {{0x1, 0x0, 0x1}, @device_a, 0x2d43adde}, {{}, @device_a, 0x28d2}, {{}, @device_b, 0x5}, {{0x0, 0x0, 0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_b, 0x8000}]}}, @prep={0x83, 0x1f, {{}, 0x40, 0xf9, @device_b, 0x4, @void, 0x9, 0xf, @device_a, 0x8000}}, @cf={0x4, 0x6, {0x1e, 0x55, 0x3, 0x2}}, @sec_chan_ofs={0x3e, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}]}, 0x1d70}, 0x1, 0x0, 0x0, 0x80}, 0x80000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000003d80)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003c80)={0x88, r9, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb7f1, 0x78}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x88}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 2.00395608s ago: executing program 3 (id=87): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x28, 0x801, 0x0) chdir(0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) creat(0x0, 0x70) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.938939753s ago: executing program 3 (id=88): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) write(0xffffffffffffffff, &(0x7f0000000080)="240000001e005f0214ff", 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff09058202000000010009050302", @ANYRES16=r3], 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x801, 0xe3a) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.661087838s ago: executing program 0 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100004095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) setsockopt$inet6_tcp_int(r4, 0x6, 0xb, &(0x7f00000109c0)=0x5, 0x4) inotify_init1(0x80800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000010640)={r4, 0xe0, &(0x7f0000010540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000010380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000103c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000010400)=[0x0], 0x0, 0xee, &(0x7f0000010440), 0x0, 0x10, &(0x7f0000010480), &(0x7f00000104c0), 0x8, 0x48, 0x8, 0x8, &(0x7f0000010500)}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000106c0)=@o_path={&(0x7f0000010680)='./file0\x00', 0x0, 0x18, r4}, 0x18) 1.181128794s ago: executing program 4 (id=90): bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004006ac38500000010000000850000005000000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000058"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) io_uring_setup(0x1d92, &(0x7f0000000100)={0x0, 0x838d, 0x6772277808ccccf4, 0x1, 0x35a}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="ba2100f00dd9f566b80c10000066ef0fc73d0f01c22e660f38801d67f338b26b171ebf660fd07a03660ff5380f01c266b9800000c00f070f30", 0x39}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 880.372324ms ago: executing program 2 (id=91): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002140)=[{0x0}, {0x0, 0x2c}], 0x2, 0x0, 0x0, 0x4}, 0x4000810) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8}]}, 0x2c}}, 0x20000050) mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x70, r3, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2e}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e9d40a4c6258014c995108e773762e83"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5e76fff5956d9891e4d17217fd915355"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c491596de9ac0617"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4e4b04535b01555f"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000180)='./bus\x00', &(0x7f0000000000), 0x200c002, 0x0) (async) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000180)='./bus\x00', &(0x7f0000000000), 0x200c002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x94}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x94}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x20) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}, {@index_on}]}) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}, {@index_on}]}) 850.69777ms ago: executing program 2 (id=92): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0), 0xfe, 0x59c, &(0x7f0000001840)="$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") r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x10000, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) ftruncate(r1, 0x3) 725.702395ms ago: executing program 1 (id=93): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000480)="$eJzs3TFre1UUAPDzkjSJOqSIi+LwQAen0rq6NEoFsZMSQR002BYkCYUWAlY0duoncPR7+BFcXPwGgqvg1g6VJy/vvSa1SVtqrNL/7zed3nvPfSf3lrRLTj5/dTTYO0zi9PzXaLeTqG3HdlwksR61qHwXjQAAno6LLIvWgzIbtZUXAwA8ivzv/x9Z4a61D/s/AQD4v/nw40/e7+7u7nyQpu14uXM27iURMTob94r57kF8GcPYj83oxGVEdqWI331vdycaaW49Xh9Nxr08c/TZz+X+3d8jpvlb0Yn1xflbaeEq//mqujS6B2vVD514aXH+m3/Pj9Ekes1447W5+jeiE798EYcxjL3Ic2f5326l6TvZ9+dff5o/Js9PatFrTdfNZPVHuhIAAAAAAAAAAAAAAAAAAAAAAJ4BG2maFO17pv178qFp/5xxr345nd9IK/P9fSZVf6Ck2qjoD5RF2aJnksUPVX+dzTRNs3LhLL8RrzR8sQAAAAAAAAAAAAAAAAAAAADkjr86GfSHw/2jlQRVN4DqY/0P3Wd7NrIWEYN+ffmGrYjaPZ81320gr/XWxdFoxIqO5a7gubyele/cml3uR1EE1cXsJyt81otvF5ueDPppOVUd8qCf3HWG7erifpyfasY/LSyb/kpcZuXIN5Ffd7SvSr2e1VzRaTRfWDj1Z5Zl99vnrd+KOypHkmmLjfs9fa0MFr7APGjfvIuflm+49C2jvqr3HgAAAAAAAAAAAAAAAAAA4LrZh34XTJ7emlr714oCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEc2+/7/KmhHxPWRG8GkyE0iYumaMmjG0fF//RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4+v4KAAD//8HoSHM=") (async) r0 = open(&(0x7f0000000080)='./file1\x00', 0x4000, 0x32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r0, &(0x7f0000003200)={0x2020}, 0xfffffe06) (async) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x200400, &(0x7f0000000680)={[{@noinline_xattr}, {@nocheckpoint_merge, 0x0}, {@extent_cache}, {@test_dummy_encryption}, {@grpquota={'grpquota', 0x3d, '\xa8\x02\xe8\x7f\x0e\xc5\xef\xd6\x0e\xe0\xbb\x9aV\xa0\x92=\xdd@\xfd\xd3\xfb;\x8c\x7f\v[l\xbc\x8f\x005@_\x965\xde\'\xe3!MX\x94\xbep\xf9\x1aL!\xb6\xc2\x1c\xf7 \x82\x94\xe2\x131\xe2\xf8\x19\xe0\xf9\x12r\xdf\xde\x04\b\xe3\xa6\xdf\x18\xd2\x025\xf9\xd6\x96_\x7f\x85\x03|\x7f\xafg\x18^s\xc1@\v\xf8\xa2\x19\x06\r\x8c\x065Vm1\xfe\xe8\xc63\xc3[\x8c\xb3gBL'}}, {@nolazytime}, {@heap}, {@disable_roll_forward}, {@nolazytime}, {@discard}, {@alloc_mode_reuse}, {@user_xattr}, {@io_bits={'io_bits', 0x3d, 0xa1}}, {@discard}]}, 0x1, 0x5548, &(0x7f0000005880)="$eJzs3EtvG2UXAODj3Hr9+kWIBbuOVCElUh3V6UWwK9CKi2hVFViwAsd2LLe2J4pdN3TFgiViwT9BILFiyW9gwRpWiAWIHRLI805QExogihsT8jzS+Mwcz5w5Y0WRzvgSwLG1mP3yUyXOxamImI2IsxHFeqVcCtdTeC4isoiYeWyplPk/EgsRcToizo2Lp5qV8qlPL44uXP3xjZ+/+ubE3JnPvvx2elcNTNvzEdHbSOsPeynm7RTvlfn6qFPE3pVRGdMTvfvF9kIvT/mHrbWiwsP69n71mIuIy+20f77xYDCO6916YxzbnfUiv9FPJxyM2tt1igPu1TeL7WZrrYidQV7E9qPU19aj9L/t0WCY6jTXi/NtGw4bZUznaW210vVs3C9ioz8s86lu3mxtjeOojOXpopF3m0Ufawd4of/l3uz0H2xlo9bmoJP3s6srtRdWateqtc282Rq2rlTrvea1K9lSuzverTps1XvX23ne7rZWGnlvOVtqNxrVWi1butFa69T7Wa22cnnlUvXqcrl2MXv19jtZt5ktjePLnf6DYac7yNbzzSwdsZytrlx+cTm7UMveunUnu3P35s1bd95+78a7t1+69for5U5/aitbWr20ulqtXaqu1paP0fV/VDY9weuHA6lMuwGAo2e/8/958z8wAROY/+PJ8//m3Yh6kX+a83/smv+L+MH23L9j/p+LMP/v5UjNv8d9/v/r658/+F8D7JP5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg2Ppu/vPXipXFtH2mzP+vTD1TblciYiYifnuC2VjYUXO2rDO/x/7zu3r4uhJFhfE5TpTL6Yi4Xi6//n/P9iuTeyUAAADgv+mLD89/kqb19LA47YY4TOmmzczZ9ydUrxIR84s/7POok3vkZ8YPzx68q6T5fcRcbE2oWnEDa6/G96245TY3qWr/yOyOcPKxUElhZvcRC4fYHQAA8HTsnAQOdwoBAADgMH087QaYjuKz8+Vn8cu3906kUL4heGrHFgAAAHDUnPLdeQAAADgOivn/iP/+HwAAAPA30u//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv7NzbrdowHAfgfwIp9Kaiqu9dpW8wRkfoCJQBugQj0BW6ADPQt45QkYrYqqCiRxzFhMPR90nBcUh+2Fwe7CADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANf0s9ksvi8/fuubs2/7KdMbAAAA4Jxds1l0O7NUf52Pv82H3ud6FRF1RJwbu4/ixUnmKOc0/zm/+acNPyK6hMNrTPL2KiI+5e33u2u/CwAAAPB8bVfreRqtp4fZrRvEkNKkTf3mc4+Mr0f7VUQ0s1+925XUh7wPhcK67/c4poXSugmsUmFpym1cKu0i3c/976zd9KioUlE/fH2xvgMAAAManRTDjkIAAAAY0pfjSnW7dlBEe/FH2J2Y/4ufbwVOUpFv7708qQEAAAB3yFwPAAAA3Jl28uhLuvH/U13/r1qm56z/BwAAAP2k9f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4pl2zWWxX63nfnH3bT5neAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8If9eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu30WOKg4A+JuZnY2JiuspV5yIgoU25rKJienEQjks/BOE49zEMxt/JFeYEMRr7OTqNKKliKCcXf6H1AmkiV2KKyJYK/Pr9mVz4PojM5vbzwfevO8Ow3vfNwtLvvMmBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI29tydxVhwGVZzW527dv7ZR9Len+sKNnTsrRSvipM2kHw8vxh+S5e4SAQAAYHFkTX0fQrib764VfToo6/+8uaao+b97uoqben667m/6pvYv2q+/3Ht+f6JBNU8x6LnN8ejEw6n0Ht0q59szf3tFr7zz5bOXrPxC0ve2n9vLy/uZfHPz5jv9MjzSRrYAwL9xvOnroPn3UNEPu0wMgIXRiwrvpv7PBt3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCGve3wZBMnIYSV3iQu3L5/beOg/sbOnZWmnbl+fScesxgiDyGc2xyPTrS4lnl3+crVC+vj8ehS+8FLIYSuZn+rXv6FD2a4OIRO7o/gfwrS+suel3zioP5pC/OSzyTo6AcJAIBDK69bUdffzXfXinPJUgh/fv9g/f9qFIeD6v+vqvNx/X/vozO34rni+n/Y0voeB6tbFz9bvXzl6uubF9fPj86PPnnj5PDN4amzp0+fXS2flax6YgIAAMB/069bXP+nSw/v/x+L4jDj/v/n3w6/jOfKpur/QWurnG+TTb+uMwEAAFhsz778x+/JAeeTfj98sb61dWlYHfc/n6yOHaT6jx2pW1z/Z0tdZwUAAAC0YW87eWD//8MoDjPu/z/1wws/xWNmIYSj9f7/8Y1Px9NjLqo2/jtx12sEAACgW0frFu//5+X7/+l+WZ6GEF57pYqbv5U1S/2fvfv1j/Fc8fv/p9pb4lxKl6v7UfbLIfSWu84IAACAw+yJuhXF/m/57trHPx97v+/9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC2/RUAAP//tss7QA==") 680.408484ms ago: executing program 1 (id=94): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x4, 0x9}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000322000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="0f01df2e3e0f18d245f466b8e3008ed0410fc725fcff0000c443fd7cc3f565420f019b7ad463b4b9800000c00f3235000400000f3066ba2000b80d000000eff3440f005bef", 0x45}], 0x1, 0x13, &(0x7f00000001c0), 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000240)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x553e, &(0x7f0000005a80)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r3, 0x26f, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0xa30, 0x0, 0xb, 0x148, 0x8e0, 0x148, 0x998, 0x240, 0x240, 0x998, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x878, 0x8e0, 0x0, {0xff0f000000000000}, [@common=@inet=@dscp={{0x28}, {0x40}}, @common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xefb}]}, {}, {[{0x0, 0x1}]}, {[{}, {}, {}, {0xfffffffe}]}, {}, {[], [{0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xaab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) 379.474144ms ago: executing program 0 (id=95): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000a40)=ANY=[]) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000003c0)="b9ff0b078059268cb89e14f088a82de0ffff206000000002000aac14140ce0320e6a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 69.567176ms ago: executing program 0 (id=96): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0xe, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @none, 0x61, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setpriority(0x2, 0x0, 0x200002a14b59) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0xb20a11c7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000006c0), 0x0, 0xffffffffffffffff) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000340)=""/139, 0x8b}], 0x1) write(0xffffffffffffffff, &(0x7f0000000540)="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", 0xfc) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x80) 52.144209ms ago: executing program 4 (id=97): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='-\'@-\x00', 0x8800, &(0x7f00000000c0)={@_ha_fsid={[0x400, 0x3]}, {0x3, 0x8000, 0x3, 0x9}}, 0x6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x8, 0x200}]}) brk(0x400000ffc000) 0s ago: executing program 4 (id=98): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc0201011124020101020000000000000000020d000924030201010001"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb473, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r3, 0x2f, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='0', 0x1) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) r6 = dup(0xffffffffffffffff) ftruncate(r6, 0x10000) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) kernel console output (not intermixed with test programs): rocess permissive=1 [ 15.263901][ T28] audit: type=1400 audit(1791029845.870:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 315.820172][ T28] audit: type=1400 audit(1791030146.440:64): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 315.822315][ T280] cgroup: Unknown subsys name 'net' [ 315.843350][ T28] audit: type=1400 audit(1791030146.440:65): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 315.870629][ T28] audit: type=1400 audit(1791030146.470:66): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 315.870991][ T280] cgroup: Unknown subsys name 'devices' [ 316.014181][ T280] cgroup: Unknown subsys name 'hugetlb' [ 316.019777][ T280] cgroup: Unknown subsys name 'rlimit' [ 316.122229][ T28] audit: type=1400 audit(1791030146.740:67): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.145389][ T28] audit: type=1400 audit(1791030146.750:68): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 316.160476][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 316.170313][ T28] audit: type=1400 audit(1791030146.750:69): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 316.201786][ T28] audit: type=1400 audit(1791030146.800:70): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 316.227404][ T28] audit: type=1400 audit(1791030146.800:71): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 316.230381][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 316.253092][ T28] audit: type=1400 audit(1791030146.850:72): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 316.287139][ T28] audit: type=1400 audit(1791030146.850:73): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 317.084058][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.091139][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.098902][ T288] device bridge_slave_0 entered promiscuous mode [ 317.108683][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.115766][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.123054][ T288] device bridge_slave_1 entered promiscuous mode [ 317.153013][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.160064][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.167430][ T289] device bridge_slave_0 entered promiscuous mode [ 317.195176][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.202236][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.209798][ T289] device bridge_slave_1 entered promiscuous mode [ 317.263040][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.270089][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.277475][ T290] device bridge_slave_0 entered promiscuous mode [ 317.287207][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.294461][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.301880][ T290] device bridge_slave_1 entered promiscuous mode [ 317.345524][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.352622][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.360046][ T292] device bridge_slave_0 entered promiscuous mode [ 317.370065][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.377138][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.384543][ T292] device bridge_slave_1 entered promiscuous mode [ 317.422039][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.429112][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.436462][ T291] device bridge_slave_0 entered promiscuous mode [ 317.453394][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.460435][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.467794][ T291] device bridge_slave_1 entered promiscuous mode [ 317.555879][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.562952][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.570299][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.577348][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.604389][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.611488][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.618760][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.625789][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.643486][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.650529][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.657817][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.664850][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.682832][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.689884][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.697186][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.704424][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.725076][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.732119][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.739397][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.746423][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.757822][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.765848][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.773110][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.780261][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.787817][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.795134][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.802255][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.809465][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.816742][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.824041][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.831136][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.849668][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.857866][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.864891][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.886607][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.894453][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.901820][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.909382][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.917833][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.924859][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.932138][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.940386][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.947441][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.954748][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.962973][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.969979][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.977305][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.985407][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.992432][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.999724][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.007876][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.014916][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.043316][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.051073][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.059091][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.067850][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.076046][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.083068][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.090371][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.098972][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.106027][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.113423][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.121290][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.146994][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.155247][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.163446][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.171415][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.179527][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.187680][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.195751][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.203834][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.224861][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.233278][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.241482][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.249862][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.258901][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.267558][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.281059][ T288] device veth0_vlan entered promiscuous mode [ 318.287794][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.295273][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.302930][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.310303][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.317878][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.325911][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.334972][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.342515][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.349915][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.358261][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.368152][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.376612][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.384796][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.391798][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.399751][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.408281][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.417172][ T290] device veth0_vlan entered promiscuous mode [ 318.428391][ T292] device veth0_vlan entered promiscuous mode [ 318.435233][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.443597][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.451666][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.458696][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.466544][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.474559][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.482711][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.490125][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.502306][ T289] device veth0_vlan entered promiscuous mode [ 318.515163][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.523084][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.530977][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.539191][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.547300][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.555341][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.563318][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.570727][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.586421][ T289] device veth1_macvtap entered promiscuous mode [ 318.593100][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.601307][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.609809][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.617439][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.625728][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.635753][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.643925][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.657048][ T290] device veth1_macvtap entered promiscuous mode [ 318.667002][ T292] device veth1_macvtap entered promiscuous mode [ 318.674052][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.682296][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.690738][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.698530][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.708962][ T288] device veth1_macvtap entered promiscuous mode [ 318.721456][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.729039][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.737378][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.745846][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.754207][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.762833][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.770966][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.781681][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.789905][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.799621][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.807941][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.819392][ T291] device veth0_vlan entered promiscuous mode [ 318.834836][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.843561][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 318.843801][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.859606][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.867762][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.876249][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.884749][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.893015][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.901250][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.908875][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.941236][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.951398][ T291] device veth1_macvtap entered promiscuous mode [ 318.956386][ T313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 319.021185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.032250][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.040985][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.049741][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.099855][ T322] loop3: detected capacity change from 0 to 512 [ 322.091663][ T331] loop2: detected capacity change from 0 to 512 [ 322.103093][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 322.103162][ T28] audit: type=1400 audit(1791030152.710:115): avc: denied { sqpoll } for pid=323 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 322.130795][ T331] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 322.144709][ T331] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 322.196823][ T322] EXT4-fs: error -4 creating inode table initialization thread [ 322.264571][ T322] EXT4-fs (loop3): mount failed [ 322.282700][ T331] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.3: invalid indirect mapped block 4294967295 (level 0) [ 322.298069][ T331] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.3: invalid indirect mapped block 4294967295 (level 1) [ 322.313832][ T331] EXT4-fs (loop2): 1 orphan inode deleted [ 322.319573][ T331] EXT4-fs (loop2): 1 truncate cleaned up [ 322.325228][ T331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 322.384959][ T28] audit: type=1400 audit(1791030152.710:116): avc: denied { create } for pid=323 comm="syz.2.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 322.419606][ T28] audit: type=1400 audit(1791030152.710:117): avc: denied { map } for pid=323 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 322.491795][ T28] audit: type=1400 audit(1791030152.710:118): avc: denied { read write } for pid=323 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 322.516360][ T28] audit: type=1400 audit(1791030152.960:119): avc: denied { mount } for pid=323 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 322.540190][ T28] audit: type=1400 audit(1791030153.100:120): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 322.569522][ T344] loop0: detected capacity change from 0 to 1024 [ 322.577689][ T344] ======================================================= [ 322.577689][ T344] WARNING: The mand mount option has been deprecated and [ 322.577689][ T344] and is ignored by this kernel. Remove the mand [ 322.577689][ T344] option from the mount to silence this warning. [ 322.577689][ T344] ======================================================= [ 322.618766][ T344] EXT4-fs: Ignoring removed nobh option [ 322.624925][ T344] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 322.646620][ T344] EXT4-fs (loop0): invalid journal inode [ 322.655156][ T344] EXT4-fs (loop0): can't get journal size [ 322.661274][ T344] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 17104912: comm syz.0.6: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 322.676962][ T344] EXT4-fs (loop0): failed to initialize system zone (-117) [ 322.684894][ T333] syz.2.3 (333) used greatest stack depth: 17096 bytes left [ 322.763066][ T291] EXT4-fs (loop2): unmounting filesystem. [ 322.768725][ T344] EXT4-fs (loop0): mount failed [ 322.825160][ T28] audit: type=1400 audit(1791030153.440:121): avc: denied { read write } for pid=354 comm="syz.2.10" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.848791][ T28] audit: type=1400 audit(1791030153.440:122): avc: denied { open } for pid=354 comm="syz.2.10" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.175665][ T28] audit: type=1400 audit(1791030153.440:123): avc: denied { ioctl } for pid=354 comm="syz.2.10" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.273104][ T28] audit: type=1400 audit(1791030153.500:124): avc: denied { create } for pid=342 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.293586][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 323.305138][ T357] loop1: detected capacity change from 0 to 512 [ 323.335127][ T347] loop4: detected capacity change from 0 to 512 [ 323.349030][ T357] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 323.359042][ T347] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 323.380489][ T347] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.7: invalid indirect mapped block 4294967295 (level 0) [ 323.380685][ T357] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.9: invalid indirect mapped block 4294967295 (level 0) [ 323.409046][ T347] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.7: invalid indirect mapped block 4294967295 (level 1) [ 323.426522][ T357] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.9: invalid indirect mapped block 4294967295 (level 1) [ 323.426778][ T347] EXT4-fs (loop4): 1 orphan inode deleted [ 323.442012][ T357] EXT4-fs (loop1): 1 orphan inode deleted [ 323.445998][ T347] EXT4-fs (loop4): 1 truncate cleaned up [ 323.446018][ T347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 323.466042][ T357] EXT4-fs (loop1): 1 truncate cleaned up [ 323.471683][ T357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 323.670269][ T289] EXT4-fs (loop1): unmounting filesystem. [ 323.682886][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 323.689329][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.714836][ T6] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.742544][ T6] usb 3-1: New USB device found, idVendor=e16d, idProduct=c31b, bcdDevice= 0.40 [ 323.763508][ T292] EXT4-fs (loop4): unmounting filesystem. [ 323.771399][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.790317][ T6] usb 3-1: config 0 descriptor?? [ 324.611482][ T376] loop1: detected capacity change from 0 to 512 [ 324.628675][ T376] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 324.763901][ T376] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.12: invalid indirect mapped block 4294967295 (level 0) [ 324.778109][ T376] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.12: invalid indirect mapped block 4294967295 (level 1) [ 324.793755][ T376] EXT4-fs (loop1): 1 orphan inode deleted [ 324.799512][ T376] EXT4-fs (loop1): 1 truncate cleaned up [ 324.805222][ T376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 324.892371][ C0] sched: RT throttling activated [ 325.103386][ T289] EXT4-fs (loop1): unmounting filesystem. [ 325.162250][ T374] loop4: detected capacity change from 0 to 40427 [ 325.211459][ T374] F2FS-fs (loop4): Found nat_bits in checkpoint [ 325.221096][ T388] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 325.262330][ T388] ±ÿ: renamed from team_slave_1 [ 325.283536][ T389] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.299831][ T374] F2FS-fs (loop4): Start checkpoint disabled! [ 325.322765][ T374] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 325.333664][ T374] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 325.500272][ T374] loop4: detected capacity change from 0 to 1024 [ 325.534526][ T374] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.13: lblock 2 mapped to illegal pblock 2 (length 1) [ 325.568193][ T374] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.13: lblock 0 mapped to illegal pblock 48 (length 1) [ 325.597753][ T374] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.13: Failed to acquire dquot type 0 [ 325.620920][ T374] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 325.631787][ T383] loop3: detected capacity change from 0 to 131072 [ 325.647372][ T383] F2FS-fs (loop3): Test dummy encryption mode enabled [ 325.655447][ T374] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.13: mark_inode_dirty error [ 325.669259][ T374] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 325.677125][ T383] F2FS-fs (loop3): invalid crc value [ 325.679614][ T374] EXT4-fs (loop4): 1 orphan inode deleted [ 325.691031][ T383] F2FS-fs (loop3): Found nat_bits in checkpoint [ 325.698074][ T8] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.724429][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0 [ 325.741146][ T374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 325.762667][ T374] EXT4-fs (loop4): unmounting filesystem. [ 325.769580][ T374] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.13: Invalid inode table block 1 in block_group 0 [ 325.774210][ T383] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 325.782738][ T374] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 325.793880][ T383] F2FS-fs (loop3): Start checkpoint disabled! [ 325.801241][ T374] EXT4-fs error (device loop4): ext4_quota_off:7134: inode #3: comm syz.4.13: mark_inode_dirty error [ 325.807411][ T383] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 325.825193][ T383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 325.836689][ T399] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 325.846223][ T400] overlayfs: workdir and upperdir must be separate subtrees [ 326.061089][ T377] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 326.271513][ T407] loop1: detected capacity change from 0 to 1024 [ 326.445612][ T407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 329.146967][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 329.147053][ T28] audit: type=1400 audit(1791030157.790:141): avc: denied { append } for pid=409 comm="syz.4.20" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 329.206352][ T407] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.257226][ T28] audit: type=1400 audit(1791030157.880:142): avc: denied { read } for pid=409 comm="syz.4.20" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 329.304071][ T289] EXT4-fs (loop1): unmounting filesystem. [ 329.314921][ T28] audit: type=1400 audit(1791030157.890:143): avc: denied { open } for pid=409 comm="syz.4.20" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 329.339562][ T28] audit: type=1400 audit(1791030158.150:144): avc: denied { ioctl } for pid=409 comm="syz.4.20" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 329.366114][ T28] audit: type=1400 audit(1791030159.900:145): avc: denied { write } for pid=417 comm="syz.4.21" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 329.388775][ T28] audit: type=1400 audit(1791030159.910:146): avc: denied { open } for pid=417 comm="syz.4.21" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 329.411607][ T28] audit: type=1400 audit(1791030159.910:147): avc: denied { ioctl } for pid=417 comm="syz.4.21" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 329.451717][ T28] audit: type=1400 audit(1791030160.070:148): avc: denied { create } for pid=421 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.482162][ T28] audit: type=1400 audit(1791030160.070:149): avc: denied { bind } for pid=421 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.502066][ T28] audit: type=1400 audit(1791030160.070:150): avc: denied { listen } for pid=421 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.525214][ T6] usb 3-1: USB disconnect, device number 2 [ 329.573779][ T434] tipc: Started in network mode [ 329.578753][ T434] tipc: Node identity ac1414aa, cluster identity 4711 [ 329.594021][ T434] tipc: New replicast peer: 172.20.20.187 [ 329.602678][ T434] tipc: Enabled bearer , priority 10 [ 329.619821][ T432] Zero length message leads to an empty skb [ 329.752424][ T405] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 330.316753][ T449] loop2: detected capacity change from 0 to 512 [ 330.333333][ T449] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 330.392470][ T221] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 330.423724][ T405] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 330.455746][ T449] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.29: invalid indirect mapped block 4294967295 (level 0) [ 330.470028][ T449] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.29: invalid indirect mapped block 4294967295 (level 1) [ 330.485843][ T449] EXT4-fs (loop2): 1 orphan inode deleted [ 330.491614][ T449] EXT4-fs (loop2): 1 truncate cleaned up [ 330.497347][ T449] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 330.619047][ T405] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.643859][ T221] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.745354][ T221] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.754525][ T405] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 330.765701][ T405] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 330.779801][ T405] usb 1-1: config 0 interface 0 has no altsetting 0 [ 330.874522][ T221] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 330.883801][ T309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 330.884520][ T291] EXT4-fs (loop2): unmounting filesystem. [ 330.891324][ T405] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 330.906185][ T221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 330.914333][ T221] usb 5-1: SerialNumber: syz [ 330.919362][ T405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.929979][ T24] tipc: Node number set to 2886997162 [ 330.937629][ T405] usb 1-1: config 0 descriptor?? [ 330.943114][ T420] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 331.131518][ T221] usb 5-1: 0:2 : does not exist [ 331.136777][ T221] usb 5-1: unit 5: unexpected type 0x0a [ 331.151050][ T221] usb 5-1: USB disconnect, device number 2 [ 331.352849][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 331.354112][ T405] logitech 0003:046D:C298.0001: unknown main item tag 0x2 [ 331.375916][ T405] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 331.383274][ T405] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 331.392529][ T405] input: HID 046d:c298 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C298.0001/input/input4 [ 331.478931][ T405] logitech 0003:046D:C298.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.0-1/input0 [ 331.492370][ T405] logitech 0003:046D:C298.0001: implement() called with too large value 245 (n: 0)! (kworker/1:5) [ 331.503338][ T405] logitech 0003:046D:C298.0001: implement() called with too large value 248 (n: 0)! (kworker/1:5) [ 331.513941][ T405] logitech 0003:046D:C298.0001: implement() called with too large value 3 (n: 0)! (kworker/1:5) [ 331.524382][ T405] logitech 0003:046D:C298.0001: implement() called with too large value 129 (n: 0)! (kworker/1:5) [ 331.534977][ T405] logitech 0003:046D:C298.0001: implement() called with too large value 11 (n: 0)! (kworker/1:5) [ 331.545610][ T405] logitech 0003:046D:C298.0001: Force feedback support for Logitech Gaming Wheels [ 331.557846][ T420] loop0: detected capacity change from 0 to 16 [ 331.565226][ T420] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 800, please upgrade kernel version [ 331.582582][ T405] usb 1-1: USB disconnect, device number 2 [ 331.653468][ T464] fido_id[464]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 331.932414][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 331.968626][ T477] Illegal XDP return value 4294967262 on prog (id 7) dev syz_tun, expect packet loss! [ 332.113448][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.124564][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.142414][ T455] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 332.159049][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 332.180354][ T481] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 332.212431][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.231287][ T6] usb 5-1: config 0 descriptor?? [ 332.372592][ T455] usb 3-1: Using ep0 maxpacket: 16 [ 332.408586][ T485] loop0: detected capacity change from 0 to 1024 [ 332.455093][ T455] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.586897][ T466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.605446][ T455] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.635920][ T485] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 332.644800][ T485] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.705703][ T489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33'. [ 332.754050][ T455] usb 3-1: config 0 interface 0 has no altsetting 0 [ 332.829088][ T466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.876362][ T455] usb 3-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 332.908834][ T489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33'. [ 332.959484][ T455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.103431][ T455] usb 3-1: config 0 descriptor?? [ 333.135042][ T497] loop1: detected capacity change from 0 to 256 [ 333.173028][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 333.179035][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 333.186171][ T6] usb 5-1: USB disconnect, device number 3 [ 333.302463][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 333.366972][ T505] loop3: detected capacity change from 0 to 16 [ 333.373952][ T505] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 800, please upgrade kernel version [ 333.401041][ T507] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 333.483663][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.492033][ T310] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 333.500214][ T310] usb 1-1: config 63 has an invalid descriptor of length 101, skipping remainder of the config [ 333.510566][ T310] usb 1-1: config 63 has no interface number 0 [ 333.516871][ T310] usb 1-1: config 63 interface 66 has no altsetting 0 [ 333.531721][ T310] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 333.541005][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.550795][ T455] input: HID 046d:c215 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C215.0002/input/input5 [ 333.562855][ T310] usb 1-1: Product: syz [ 333.567091][ T310] usb 1-1: Manufacturer: syz [ 333.571765][ T310] usb 1-1: SerialNumber: syz [ 333.644723][ T455] logitech 0003:046D:C215.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.2-1/input0 [ 333.702258][ T519] FAULT_INJECTION: forcing a failure. [ 333.702258][ T519] name failslab, interval 1, probability 0, space 0, times 1 [ 333.715094][ T519] CPU: 0 PID: 519 Comm: syz.4.48 Not tainted syzkaller #0 [ 333.722231][ T519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 333.722467][ T498] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 333.732383][ T519] Call Trace: [ 333.742994][ T519] [ 333.745917][ T519] __dump_stack+0x21/0x24 [ 333.750370][ T519] dump_stack_lvl+0x110/0x170 [ 333.755030][ T519] ? __cfi_dump_stack_lvl+0x8/0x8 [ 333.760052][ T519] dump_stack+0x15/0x24 [ 333.764199][ T519] should_fail_ex+0x3bf/0x510 [ 333.765821][ T455] usb 3-1: USB disconnect, device number 3 [ 333.768927][ T519] __should_failslab+0xac/0xf0 [ 333.779472][ T519] should_failslab+0x9/0x20 [ 333.783978][ T519] kmem_cache_alloc_bulk+0x2d/0x3c0 [ 333.789183][ T519] ? kmem_cache_alloc+0x166/0x320 [ 333.794211][ T519] ? mas_alloc_nodes+0x2d8/0x850 [ 333.799136][ T519] mas_alloc_nodes+0x423/0x850 [ 333.803896][ T519] mas_preallocate+0xe3d/0x1430 [ 333.808811][ T519] ? kasan_save_alloc_info+0x1f/0x30 [ 333.814089][ T519] ? __cfi_mas_preallocate+0x10/0x10 [ 333.819364][ T519] ? vm_area_alloc+0xe9/0x1a0 [ 333.824029][ T519] ? memset+0x35/0x40 [ 333.827994][ T519] mmap_region+0x109b/0x2130 [ 333.832580][ T519] ? __cfi_mmap_region+0x10/0x10 [ 333.837516][ T519] ? cap_mmap_addr+0x165/0x2e0 [ 333.842283][ T519] ? __kasan_slab_free+0x11/0x20 [ 333.847208][ T519] ? slab_free_freelist_hook+0xc2/0x190 [ 333.852742][ T519] ? __kmem_cache_free+0xb7/0x1b0 [ 333.857760][ T519] ? get_unmapped_area+0x30c/0x370 [ 333.862878][ T519] do_mmap+0x858/0xdd0 [ 333.866944][ T519] ? __cfi_do_mmap+0x10/0x10 [ 333.871531][ T519] vm_mmap_pgoff+0x206/0x3f0 [ 333.876170][ T519] ? ____kasan_slab_free+0x13d/0x180 [ 333.881440][ T519] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 333.886541][ T519] ? __se_sys_memfd_create+0x33d/0x3c0 [ 333.891989][ T519] ? __kmem_cache_free+0xb7/0x1b0 [ 333.897027][ T519] ksys_mmap_pgoff+0xf6/0x1d0 [ 333.901703][ T519] __x64_sys_mmap+0xfa/0x110 [ 333.906294][ T519] x64_sys_call+0x8fd/0x9a0 [ 333.910795][ T519] do_syscall_64+0x4c/0xa0 [ 333.912399][ T498] usb 4-1: Using ep0 maxpacket: 32 [ 333.915200][ T519] ? clear_bhb_loop+0x30/0x80 [ 333.915222][ T519] ? clear_bhb_loop+0x30/0x80 [ 333.921410][ T498] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.924977][ T519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.925024][ T519] RIP: 0033:0x7f3136f9dec2 [ 333.931027][ T498] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.939714][ T519] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 333.939731][ T519] RSP: 002b:00007f3137f05df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 333.939748][ T519] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3136f9dec2 [ 333.939759][ T519] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 333.939769][ T519] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 333.939780][ T519] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 333.946079][ T498] usb 4-1: New USB device found, idVendor=e16d, idProduct=c31b, bcdDevice= 0.40 [ 333.950050][ T519] R13: 00007f3137f05ee0 R14: 00007f3137f05ea0 R15: 0000200000000100 [ 333.950071][ T519] [ 334.054034][ T498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.484867][ T498] usb 4-1: config 0 descriptor?? [ 335.530988][ T28] kauditd_printk_skb: 197 callbacks suppressed [ 335.531002][ T28] audit: type=1400 audit(1791030166.150:348): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 335.533184][ T288] EXT4-fs (loop0): unmounting filesystem. [ 335.545577][ T310] usb 1-1: Found UVC 0.07 device syz (174f:8acf) [ 335.564041][ T524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.49'. [ 335.570804][ T520] loop1: detected capacity change from 0 to 512 [ 335.579745][ T524] loop2: detected capacity change from 0 to 256 [ 335.584882][ T310] usb 1-1: No valid video chain found. [ 335.596010][ T520] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 335.613833][ T310] usb 1-1: USB disconnect, device number 3 [ 335.616334][ T28] audit: type=1400 audit(1791030166.240:349): avc: denied { getopt } for pid=526 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 335.643030][ T520] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.46: invalid indirect mapped block 4294967295 (level 0) [ 335.657621][ T520] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.46: invalid indirect mapped block 4294967295 (level 1) [ 335.672019][ T520] EXT4-fs (loop1): 1 orphan inode deleted [ 335.677865][ T520] EXT4-fs (loop1): 1 truncate cleaned up [ 335.683536][ T520] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 335.726457][ T535] loop0: detected capacity change from 0 to 2048 [ 335.740525][ T28] audit: type=1400 audit(1791030166.310:350): avc: denied { mount } for pid=512 comm="syz.1.46" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 335.763386][ T535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 335.770336][ T28] audit: type=1400 audit(1791030166.320:351): avc: denied { node_bind } for pid=522 comm="syz.2.49" saddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 335.772145][ T535] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.816167][ T28] audit: type=1400 audit(1791030166.430:352): avc: denied { create } for pid=526 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 335.853765][ T28] audit: type=1400 audit(1791030166.470:353): avc: denied { read } for pid=529 comm="syz.0.50" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 335.875588][ T28] audit: type=1400 audit(1791030166.470:354): avc: denied { open } for pid=529 comm="syz.0.50" path="/6/file0/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 335.883652][ T288] EXT4-fs (loop0): unmounting filesystem. [ 335.899260][ T28] audit: type=1400 audit(1791030166.470:355): avc: denied { ioctl } for pid=529 comm="syz.0.50" path="/6/file0/file0/file0" dev="loop0" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 335.929051][ T28] audit: type=1400 audit(1791030166.470:356): avc: denied { write } for pid=529 comm="syz.0.50" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 335.995454][ T289] EXT4-fs (loop1): unmounting filesystem. [ 336.001435][ T28] audit: type=1400 audit(1791030166.620:357): avc: denied { setopt } for pid=526 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 336.132756][ T544] netlink: 60 bytes leftover after parsing attributes in process `syz.1.53'. [ 336.195815][ T548] loop4: detected capacity change from 0 to 512 [ 336.225538][ T550] xt_hashlimit: size too large, truncated to 1048576 [ 336.252433][ T341] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 336.288504][ T554] loop4: detected capacity change from 0 to 16 [ 336.295225][ T554] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 800, please upgrade kernel version [ 336.459256][ T341] usb 1-1: unable to get BOS descriptor or descriptor too short [ 336.471305][ T341] usb 1-1: not running at top speed; connect to a high speed hub [ 339.440439][ T309] usb 4-1: USB disconnect, device number 2 [ 339.594698][ T576] loop3: detected capacity change from 0 to 128 [ 339.670568][ T577] loop0: detected capacity change from 0 to 4096 [ 339.679159][ T576] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 339.837930][ T577] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 340.019871][ T288] EXT4-fs (loop0): unmounting filesystem. [ 340.136235][ T341] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 340.143843][ T341] usb 1-1: can't read configurations, error -71 [ 340.189307][ T591] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 340.202993][ T595] capability: warning: `syz.0.64' uses deprecated v2 capabilities in a way that may be insecure [ 340.217723][ T596] loop0: detected capacity change from 0 to 512 [ 340.226931][ T596] EXT4-fs: Ignoring removed nobh option [ 340.248149][ T601] loop1: detected capacity change from 0 to 16 [ 340.258196][ T596] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #3: comm syz.0.64: corrupted inode contents [ 340.288032][ T601] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature 800, please upgrade kernel version [ 340.300947][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.307685][ T596] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #3: comm syz.0.64: mark_inode_dirty error [ 340.323998][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.330927][ T596] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #3: comm syz.0.64: corrupted inode contents [ 340.353901][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.360426][ T596] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.64: mark_inode_dirty error [ 340.382456][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.387413][ T603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 340.408155][ T593] loop4: detected capacity change from 0 to 40427 [ 340.412782][ T596] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.64: Failed to acquire dquot type 0 [ 340.426029][ T337] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 340.426287][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.438956][ T593] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 340.459908][ T596] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #16: comm syz.0.64: corrupted inode contents [ 340.472582][ T593] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 340.477815][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.490565][ T596] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #16: comm syz.0.64: mark_inode_dirty error [ 340.502139][ T593] F2FS-fs (loop4): invalid crc value [ 340.503076][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.522510][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 340.530837][ T593] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 340.540875][ T596] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #16: comm syz.0.64: corrupted inode contents [ 340.554462][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.571822][ T596] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.64: mark_inode_dirty error [ 340.590547][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.597504][ T596] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #16: comm syz.0.64: corrupted inode contents [ 340.609582][ T593] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 340.616724][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.623411][ T593] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 340.630948][ T596] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 340.645380][ T28] kauditd_printk_skb: 300 callbacks suppressed [ 340.645390][ T28] audit: type=1400 audit(1791030171.270:656): avc: denied { write } for pid=592 comm="syz.4.66" path="/15/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 340.645510][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.680596][ T28] audit: type=1400 audit(1791030171.300:657): avc: denied { ioctl } for pid=592 comm="syz.4.66" path="/15/file1/file1" dev="loop4" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 340.681233][ T596] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #16: comm syz.0.64: corrupted inode contents [ 340.717034][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.722403][ T6] usb 3-1: device descriptor read/64, error -71 [ 340.723754][ T596] EXT4-fs error (device loop0): ext4_truncate:4327: inode #16: comm syz.0.64: mark_inode_dirty error [ 340.742435][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.749785][ T596] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 340.764831][ T596] EXT4-fs (loop0): Remounting filesystem read-only [ 340.771772][ T292] syz-executor: attempt to access beyond end of device [ 340.771772][ T292] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 340.772150][ T596] EXT4-fs (loop0): 1 truncate cleaned up [ 340.792077][ T596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 340.801240][ T596] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.832181][ T288] EXT4-fs (loop0): unmounting filesystem. [ 340.852476][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 340.954952][ T637] loop4: detected capacity change from 0 to 1024 [ 341.231053][ T640] FAULT_INJECTION: forcing a failure. [ 341.231053][ T640] name failslab, interval 1, probability 0, space 0, times 0 [ 341.290626][ T640] CPU: 1 PID: 640 Comm: syz.4.76 Not tainted syzkaller #0 [ 341.297771][ T640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 341.307825][ T640] Call Trace: [ 341.311097][ T640] [ 341.314022][ T640] __dump_stack+0x21/0x24 [ 341.318364][ T640] dump_stack_lvl+0x110/0x170 [ 341.323051][ T640] ? __cfi_dump_stack_lvl+0x8/0x8 [ 341.328074][ T640] ? __switch_to+0x56f/0x1070 [ 341.332747][ T640] ? plist_check_list+0x255/0x270 [ 341.337772][ T640] dump_stack+0x15/0x24 [ 341.341933][ T640] should_fail_ex+0x3bf/0x510 [ 341.346606][ T640] ? __anon_vma_prepare+0x51/0x410 [ 341.351842][ T640] __should_failslab+0xac/0xf0 [ 341.356604][ T640] should_failslab+0x9/0x20 [ 341.361100][ T640] kmem_cache_alloc+0x3b/0x320 [ 341.365863][ T640] __anon_vma_prepare+0x51/0x410 [ 341.370801][ T640] wp_page_copy+0xfa2/0x1490 [ 341.375390][ T640] ? preempt_schedule_irq+0xca/0x120 [ 341.380675][ T640] ? fault_dirty_shared_page+0x310/0x310 [ 341.386308][ T640] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 341.392369][ T640] ? vm_normal_page+0x1eb/0x200 [ 341.397219][ T640] do_wp_page+0x9b5/0xf70 [ 341.401542][ T640] handle_mm_fault+0x114f/0x26b0 [ 341.406475][ T640] ? __cfi_handle_mm_fault+0x10/0x10 [ 341.411761][ T640] ? down_read_trylock+0x27f/0x660 [ 341.416876][ T640] ? lock_mm_and_find_vma+0x9e/0x320 [ 341.422150][ T640] ? do_user_addr_fault+0x338/0x1030 [ 341.427430][ T640] do_user_addr_fault+0x61e/0x1030 [ 341.432540][ T640] exc_page_fault+0x51/0xb0 [ 341.437039][ T640] asm_exc_page_fault+0x27/0x30 [ 341.441887][ T640] RIP: 0033:0x7f3136e551a3 [ 341.446308][ T640] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 341.465914][ T640] RSP: 002b:00007f3137f05470 EFLAGS: 00010206 [ 341.471987][ T640] RAX: 0000000000000400 RBX: 00007f3137f05530 RCX: 00007f312d5f8000 [ 341.480059][ T640] RDX: 00007f3137f056d0 RSI: 0000000000000007 RDI: 00007f3137f055d0 [ 341.488031][ T640] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001be [ 341.496002][ T640] R10: 00000000000001ca R11: 00007f3137f05530 R12: 0000000000000001 [ 341.503966][ T640] R13: 00007f3137055100 R14: 00000000000000e2 R15: 00007f3137f055d0 [ 341.511950][ T640] [ 341.739553][ T6] usb 3-1: device descriptor read/64, error -71 [ 341.746987][ T640] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 341.762785][ T640] loop4: detected capacity change from 0 to 16 [ 341.772501][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 341.780914][ T640] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 800, please upgrade kernel version [ 341.798929][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.809122][ T19] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.813127][ T629] loop3: detected capacity change from 0 to 131072 [ 341.829036][ T19] usb 2-1: New USB device found, idVendor=e16d, idProduct=c31b, bcdDevice= 0.40 [ 341.835316][ T629] F2FS-fs (loop3): invalid crc value [ 341.838313][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.852093][ T19] usb 2-1: config 0 descriptor?? [ 341.859373][ T629] F2FS-fs (loop3): Found nat_bits in checkpoint [ 341.888433][ T649] loop4: detected capacity change from 0 to 16 [ 341.895829][ T629] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 341.898192][ T649] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 800, please upgrade kernel version [ 341.916565][ T629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 341.958487][ T659] loop0: detected capacity change from 0 to 512 [ 341.987892][ T659] EXT4-fs (loop0): orphan cleanup on readonly fs [ 341.997455][ T28] audit: type=1400 audit(1791030172.620:658): avc: denied { create } for pid=660 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 341.998973][ T659] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 342.025244][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 342.033349][ T659] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 342.047799][ T659] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.81: attempt to clear invalid blocks 2 len 1 [ 342.071617][ T659] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.81: invalid indirect mapped block 1819239214 (level 0) [ 342.086251][ T659] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.81: invalid indirect mapped block 1819239214 (level 1) [ 342.100423][ T659] EXT4-fs (loop0): 1 truncate cleaned up [ 342.106500][ T28] audit: type=1400 audit(1791030172.730:659): avc: denied { mounton } for pid=663 comm="syz.4.83" path="/20/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 342.128495][ T659] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 342.173911][ T672] capability: warning: `syz.3.84' uses 32-bit capabilities (legacy support in use) [ 342.176401][ T673] loop4: detected capacity change from 0 to 7 [ 342.183308][ T28] audit: type=1400 audit(1791030172.800:660): avc: denied { write } for pid=670 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 342.212540][ T6] usb 3-1: device descriptor read/64, error -71 [ 342.231712][ T28] audit: type=1400 audit(1791030172.850:661): avc: denied { setattr } for pid=679 comm="syz.3.86" path="/dev/vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 342.254886][ T28] audit: type=1400 audit(1791030172.850:662): avc: denied { map } for pid=679 comm="syz.3.86" path="/proc/74/net/vlan/config" dev="proc" ino=4026532514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 342.482438][ T6] usb 3-1: device descriptor read/64, error -71 [ 342.602516][ T6] usb usb3-port1: attempt power cycle [ 342.632440][ T455] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 342.642740][ T288] EXT4-fs (loop0): unmounting filesystem. [ 342.799528][ T455] usb 4-1: device descriptor read/64, error -71 [ 342.910274][ T28] audit: type=1400 audit(1791030173.530:663): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 343.092498][ T455] usb 4-1: device descriptor read/64, error -71 [ 343.339022][ T28] audit: type=1400 audit(1791030173.960:664): avc: denied { mounton } for pid=704 comm="syz.2.91" path="/11/bus" dev="incremental-fs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.371237][ T706] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 343.380902][ T455] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 343.389514][ T705] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 343.404295][ T28] audit: type=1400 audit(1791030173.990:665): avc: denied { write } for pid=704 comm="syz.2.91" name="/" dev="incremental-fs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.423496][ T706] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 343.437420][ T706] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 343.456599][ T291] ------------[ cut here ]------------ [ 343.462073][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 343.470006][ T291] Modules linked in: [ 343.473909][ T291] CPU: 1 PID: 291 Comm: syz-executor Not tainted syzkaller #0 [ 343.481353][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 343.491438][ T291] RIP: 0010:drop_nlink+0xc5/0x110 [ 343.496499][ T291] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2b 1c ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 343.516169][ T291] RSP: 0018:ffffc9000daafae0 EFLAGS: 00010293 [ 343.522224][ T291] RAX: ffffffff81c65215 RBX: ffff88811d65ea18 RCX: ffff88811efaa880 [ 343.530198][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.538171][ T291] RBP: ffffc9000daafb08 R08: 0000000000000003 R09: 0000000000000004 [ 343.546141][ T291] R10: dffffc0000000000 R11: fffff52001b55f4c R12: dffffc0000000000 [ 343.554138][ T291] R13: 1ffff11023acbd4c R14: ffff88811d65ea60 R15: 0000000000000000 [ 343.562097][ T291] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 343.563185][ T19] usb 2-1: USB disconnect, device number 3 [ 343.571117][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.583461][ T291] CR2: 000055556c977948 CR3: 000000000700f000 CR4: 00000000003526a0 [ 343.591501][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.599501][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.607497][ T291] Call Trace: [ 343.610771][ T291] [ 343.613716][ T291] shmem_rmdir+0x5b/0x90 [ 343.617959][ T291] vfs_rmdir+0x381/0x4f0 [ 343.622203][ T291] incfs_kill_sb+0xfe/0x210 [ 343.626741][ T291] deactivate_locked_super+0xb5/0x120 [ 343.632113][ T291] deactivate_super+0xaf/0xe0 [ 343.636828][ T291] cleanup_mnt+0x45e/0x4e0 [ 343.641253][ T291] __cleanup_mnt+0x19/0x20 [ 343.645983][ T291] task_work_run+0x1e1/0x250 [ 343.650592][ T291] ? __cfi_task_work_run+0x10/0x10 [ 343.655729][ T291] ? free_nsproxy+0x21f/0x270 [ 343.660410][ T291] do_exit+0xb0d/0x29f0 [ 343.664598][ T291] ? __cfi_do_exit+0x10/0x10 [ 343.669192][ T291] ? __kasan_check_write+0x14/0x20 [ 343.674332][ T291] ? _raw_spin_lock_irq+0x95/0xf0 [ 343.679361][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 343.684933][ T291] ? xfd_validate_state+0x70/0x150 [ 343.690052][ T291] ? zap_other_threads+0x321/0x3a0 [ 343.695220][ T291] do_group_exit+0x21b/0x2e0 [ 343.699819][ T291] __x64_sys_exit_group+0x3f/0x40 [ 343.704881][ T291] x64_sys_call+0x7b4/0x9a0 [ 343.709381][ T291] do_syscall_64+0x4c/0xa0 [ 343.713830][ T291] ? clear_bhb_loop+0x30/0x80 [ 343.718500][ T291] ? clear_bhb_loop+0x30/0x80 [ 343.719541][ T713] loop1: detected capacity change from 0 to 40427 [ 343.723199][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.735479][ T291] RIP: 0033:0x7f8388d9e159 [ 343.739897][ T291] Code: Unable to access opcode bytes at 0x7f8388d9e12f. [ 343.740244][ T713] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 343.746942][ T291] RSP: 002b:00007ffc1e8ea808 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 343.758370][ T713] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 343.762560][ T291] RAX: ffffffffffffffda RBX: 00007f8388e3451b RCX: 00007f8388d9e159 [ 343.771028][ T713] F2FS-fs (loop1): Image doesn't support compression [ 343.778691][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 343.786293][ T713] F2FS-fs (loop1): Image doesn't support compression [ 343.793329][ T291] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f8388e344bb [ 343.793342][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1e8ebac0 [ 343.800594][ T713] F2FS-fs (loop1): invalid crc value [ 343.808066][ T291] R13: 00007f8388e344bb R14: 000055556c9544e8 R15: 00007ffc1e8ecb90 [ 343.816333][ T713] F2FS-fs (loop1): invalid crc value [ 343.821235][ T291] [ 343.829476][ T713] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 343.834505][ T291] ---[ end trace 0000000000000000 ]--- [ 343.836257][ T291] ------------[ cut here ]------------ [ 343.855353][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 343.863279][ T291] Modules linked in: [ 343.867170][ T291] CPU: 1 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 [ 343.876118][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 343.885569][ T715] loop0: detected capacity change from 0 to 512 [ 343.886203][ T291] RIP: 0010:drop_nlink+0xc5/0x110 [ 343.897434][ T291] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2b 1c ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 343.913688][ T715] EXT4-fs (loop0): Test dummy encryption mode enabled [ 343.917085][ T291] RSP: 0018:ffffc9000daafae0 EFLAGS: 00010293 [ 343.925848][ T715] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.95: inode has both inline data and extents flags [ 343.929838][ T291] RAX: ffffffff81c65215 RBX: ffff88811d65f570 RCX: ffff88811efaa880 [ 343.943087][ T715] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.95: couldn't read orphan inode 15 (err -117) [ 343.950743][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.962638][ T715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 343.970332][ T291] RBP: ffffc9000daafb08 R08: 0000000000000003 R09: 0000000000000004 [ 343.987242][ T291] R10: dffffc0000000000 R11: fffff52001b55f4c R12: dffffc0000000000 [ 343.995216][ T291] R13: 1ffff11023acbeb7 R14: ffff88811d65f5b8 R15: 0000000000000000 [ 344.003195][ T291] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 344.012104][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.018776][ T291] CR2: 000055556c977948 CR3: 000000011003a000 CR4: 00000000003526a0 [ 344.026772][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.034751][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.042749][ T291] Call Trace: [ 344.046006][ T291] [ 344.048914][ T291] shmem_rmdir+0x5b/0x90 [ 344.053162][ T291] vfs_rmdir+0x381/0x4f0 [ 344.057402][ T291] incfs_kill_sb+0x18f/0x210 [ 344.061972][ T291] deactivate_locked_super+0xb5/0x120 [ 344.067352][ T291] deactivate_super+0xaf/0xe0 [ 344.072023][ T291] cleanup_mnt+0x45e/0x4e0 [ 344.076470][ T291] __cleanup_mnt+0x19/0x20 [ 344.080894][ T291] task_work_run+0x1e1/0x250 [ 344.085493][ T291] ? __cfi_task_work_run+0x10/0x10 [ 344.090601][ T291] ? free_nsproxy+0x21f/0x270 [ 344.095287][ T291] do_exit+0xb0d/0x29f0 [ 344.099449][ T291] ? __cfi_do_exit+0x10/0x10 [ 344.104038][ T291] ? __kasan_check_write+0x14/0x20 [ 344.109140][ T291] ? _raw_spin_lock_irq+0x95/0xf0 [ 344.114162][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 344.119703][ T291] ? xfd_validate_state+0x70/0x150 [ 344.124817][ T291] ? zap_other_threads+0x321/0x3a0 [ 344.129927][ T291] do_group_exit+0x21b/0x2e0 [ 344.134525][ T291] __x64_sys_exit_group+0x3f/0x40 [ 344.139545][ T291] x64_sys_call+0x7b4/0x9a0 [ 344.144045][ T291] do_syscall_64+0x4c/0xa0 [ 344.148459][ T291] ? clear_bhb_loop+0x30/0x80 [ 344.153195][ T291] ? clear_bhb_loop+0x30/0x80 [ 344.157867][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.163773][ T291] RIP: 0033:0x7f8388d9e159 [ 344.168175][ T291] Code: Unable to access opcode bytes at 0x7f8388d9e12f. [ 344.175186][ T291] RSP: 002b:00007ffc1e8ea808 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 344.183611][ T291] RAX: ffffffffffffffda RBX: 00007f8388e3451b RCX: 00007f8388d9e159 [ 344.191576][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 344.199658][ T291] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f8388e344bb [ 344.207641][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1e8ebac0 [ 344.215639][ T291] R13: 00007f8388e344bb R14: 000055556c9544e8 R15: 00007ffc1e8ecb90 [ 344.223636][ T291] [ 344.226639][ T291] ---[ end trace 0000000000000000 ]--- [ 344.232181][ T455] usb 4-1: device descriptor read/64, error -71 [ 344.239587][ T288] EXT4-fs (loop0): unmounting filesystem. [ 344.304481][ T291] ================================================================== [ 344.312577][ T291] BUG: KASAN: use-after-free in fast_dput+0x1e0/0x290 [ 344.319352][ T291] Read of size 4 at addr ffff88813a0ca770 by task syz-executor/291 [ 344.327249][ T291] [ 344.329570][ T291] CPU: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 [ 344.338502][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 344.348558][ T291] Call Trace: [ 344.351881][ T291] [ 344.354812][ T291] __dump_stack+0x21/0x24 [ 344.359129][ T291] dump_stack_lvl+0x110/0x170 [ 344.363789][ T291] ? __cfi_dump_stack_lvl+0x8/0x8 [ 344.368805][ T291] ? fast_dput+0x1e0/0x290 [ 344.373202][ T291] print_address_description+0x71/0x200 [ 344.378730][ T291] print_report+0x4a/0x60 [ 344.383059][ T291] kasan_report+0x122/0x150 [ 344.387543][ T291] ? fast_dput+0x1e0/0x290 [ 344.391944][ T291] __asan_report_load4_noabort+0x14/0x20 [ 344.397554][ T291] fast_dput+0x1e0/0x290 [ 344.401789][ T291] dput+0x21/0x80 [ 344.405433][ T291] incfs_free_mount_info+0x60/0x200 [ 344.410614][ T291] incfs_kill_sb+0x1af/0x210 [ 344.415190][ T291] deactivate_locked_super+0xb5/0x120 [ 344.420548][ T291] deactivate_super+0xaf/0xe0 [ 344.425214][ T291] cleanup_mnt+0x45e/0x4e0 [ 344.429609][ T291] __cleanup_mnt+0x19/0x20 [ 344.434059][ T291] task_work_run+0x1e1/0x250 [ 344.438632][ T291] ? __cfi_task_work_run+0x10/0x10 [ 344.443724][ T291] ? free_nsproxy+0x21f/0x270 [ 344.448405][ T291] do_exit+0xb0d/0x29f0 [ 344.452548][ T291] ? __cfi_do_exit+0x10/0x10 [ 344.457142][ T291] ? __kasan_check_write+0x14/0x20 [ 344.462230][ T291] ? _raw_spin_lock_irq+0x95/0xf0 [ 344.467240][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 344.472822][ T291] ? xfd_validate_state+0x70/0x150 [ 344.477914][ T291] ? zap_other_threads+0x321/0x3a0 [ 344.483006][ T291] do_group_exit+0x21b/0x2e0 [ 344.487597][ T291] __x64_sys_exit_group+0x3f/0x40 [ 344.492603][ T291] x64_sys_call+0x7b4/0x9a0 [ 344.497087][ T291] do_syscall_64+0x4c/0xa0 [ 344.501485][ T291] ? clear_bhb_loop+0x30/0x80 [ 344.506141][ T291] ? clear_bhb_loop+0x30/0x80 [ 344.510797][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.516667][ T291] RIP: 0033:0x7f8388d9e159 [ 344.521066][ T291] Code: Unable to access opcode bytes at 0x7f8388d9e12f. [ 344.528062][ T291] RSP: 002b:00007ffc1e8ea808 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 344.536451][ T291] RAX: ffffffffffffffda RBX: 00007f8388e3451b RCX: 00007f8388d9e159 [ 344.544412][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 344.552366][ T291] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f8388e344bb [ 344.560330][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1e8ebac0 [ 344.562447][ T455] usb 4-1: device descriptor read/64, error -71 [ 344.568282][ T291] R13: 00007f8388e344bb R14: 000055556c9544e8 R15: 00007ffc1e8ecb90 [ 344.568302][ T291] [ 344.568309][ T291] [ 344.568312][ T291] Allocated by task 706: [ 344.592015][ T291] kasan_set_track+0x4b/0x70 [ 344.596607][ T291] kasan_save_alloc_info+0x1f/0x30 [ 344.601697][ T291] __kasan_slab_alloc+0x72/0x80 [ 344.606533][ T291] slab_post_alloc_hook+0x4f/0x2d0 [ 344.611633][ T291] kmem_cache_alloc_lru+0x104/0x280 [ 344.616816][ T291] __d_alloc+0x34/0x6d0 [ 344.620954][ T291] d_alloc_parallel+0xe2/0x1280 [ 344.625783][ T291] __lookup_slow+0x14f/0x410 [ 344.630364][ T291] lookup_one_len+0x19d/0x2e0 [ 344.635024][ T291] incfs_lookup_dentry+0x60/0xb0 [ 344.639958][ T291] open_or_create_special_dir+0x4c/0x1f0 [ 344.645570][ T291] incfs_mount_fs+0x42f/0x890 [ 344.650227][ T291] legacy_get_tree+0xfe/0x1a0 [ 344.654884][ T291] vfs_get_tree+0x9a/0x270 [ 344.659275][ T291] do_new_mount+0x251/0xb40 [ 344.663790][ T291] path_mount+0x640/0xfd0 [ 344.668099][ T291] __se_sys_mount+0x320/0x390 [ 344.672754][ T291] __x64_sys_mount+0xbf/0xd0 [ 344.677321][ T291] x64_sys_call+0x65d/0x9a0 [ 344.681813][ T291] do_syscall_64+0x4c/0xa0 [ 344.686220][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.692089][ T291] [ 344.694389][ T291] Freed by task 341: [ 344.698253][ T291] kasan_set_track+0x4b/0x70 [ 344.703093][ T291] kasan_save_free_info+0x2b/0x40 [ 344.708144][ T291] ____kasan_slab_free+0x132/0x180 [ 344.712453][ T309] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 344.713238][ T291] __kasan_slab_free+0x11/0x20 [ 344.713262][ T291] slab_free_freelist_hook+0xc2/0x190 [ 344.720740][ T455] usb usb4-port1: attempt power cycle [ 344.725344][ T291] kmem_cache_free+0x12d/0x300 [ 344.725367][ T291] __d_free+0x23/0x30 [ 344.725381][ T291] rcu_do_batch+0x52b/0xc30 [ 344.749214][ T291] rcu_core+0x486/0xf00 [ 344.753347][ T291] rcu_core_si+0x9/0x10 [ 344.757483][ T291] handle_softirqs+0x1d7/0x600 [ 344.762224][ T291] __do_softirq+0xb/0xd [ 344.766358][ T291] [ 344.768659][ T291] Last potentially related work creation: [ 344.774345][ T291] kasan_save_stack+0x3a/0x60 [ 344.778999][ T291] __kasan_record_aux_stack+0xb6/0xc0 [ 344.784348][ T291] kasan_record_aux_stack_noalloc+0xb/0x10 [ 344.790133][ T291] call_rcu+0xcf/0xf50 [ 344.794187][ T291] dentry_free+0xbd/0x150 [ 344.798493][ T291] __dentry_kill+0x535/0x680 [ 344.803061][ T291] dentry_kill+0xc0/0x2a0 [ 344.807367][ T291] dput+0x42/0x80 [ 344.810983][ T291] incfs_free_mount_info+0x60/0x200 [ 344.816159][ T291] incfs_kill_sb+0x1af/0x210 [ 344.820795][ T291] deactivate_locked_super+0xb5/0x120 [ 344.826147][ T291] deactivate_super+0xaf/0xe0 [ 344.830801][ T291] cleanup_mnt+0x45e/0x4e0 [ 344.835193][ T291] __cleanup_mnt+0x19/0x20 [ 344.839583][ T291] task_work_run+0x1e1/0x250 [ 344.844151][ T291] do_exit+0xb0d/0x29f0 [ 344.848297][ T291] do_group_exit+0x21b/0x2e0 [ 344.852867][ T291] __x64_sys_exit_group+0x3f/0x40 [ 344.857867][ T291] x64_sys_call+0x7b4/0x9a0 [ 344.862349][ T291] do_syscall_64+0x4c/0xa0 [ 344.866757][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.872636][ T291] [ 344.874938][ T291] The buggy address belongs to the object at ffff88813a0ca770 [ 344.874938][ T291] which belongs to the cache dentry of size 208 [ 344.888545][ T291] The buggy address is located 0 bytes inside of [ 344.888545][ T291] 208-byte region [ffff88813a0ca770, ffff88813a0ca840) [ 344.901623][ T291] [ 344.903928][ T291] The buggy address belongs to the physical page: [ 344.910311][ T291] page:ffffea0004e83280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13a0ca [ 344.920591][ T291] flags: 0x4000000000000200(slab|zone=1) [ 344.926265][ T291] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001ed500 [ 344.934830][ T291] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 344.943398][ T291] page dumped because: kasan: bad access detected [ 344.949844][ T291] page_owner tracks the page as allocated [ 344.955538][ T291] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 704, tgid 704 (syz-executor), ts 343322255642, free_ts 0 [ 344.964413][ T309] usb 2-1: config 1 interface 0 altsetting 18 endpoint 0x82 is Bulk; changing to Interrupt [ 344.974563][ T291] post_alloc_hook+0x1f5/0x210 [ 344.974590][ T291] prep_new_page+0x1c/0x110 [ 344.974609][ T291] get_page_from_freelist+0x2ca9/0x2d20 [ 344.984648][ T309] usb 2-1: config 1 interface 0 altsetting 18 endpoint 0x3 is Bulk; changing to Interrupt [ 344.989304][ T291] __alloc_pages+0x1fa/0x610 [ 344.989331][ T291] alloc_slab_page+0x6e/0xf0 [ 344.997000][ T309] usb 2-1: config 1 interface 0 has no altsetting 0 [ 344.999444][ T291] new_slab+0x98/0x3e0 [ 344.999465][ T291] ___slab_alloc+0x70f/0xb70 [ 345.012304][ T309] usb 2-1: string descriptor 0 read error: -22 [ 345.013900][ T291] __slab_alloc+0x5e/0xa0 [ 345.013923][ T291] kmem_cache_alloc_lru+0x144/0x280 [ 345.013942][ T291] __d_alloc+0x34/0x6d0 [ 345.013960][ T291] d_alloc_parallel+0xe2/0x1280 [ 345.018866][ T309] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.025099][ T291] __lookup_slow+0x14f/0x410 [ 345.025121][ T291] lookup_slow+0x57/0x70 [ 345.025135][ T291] walk_component+0x2f5/0x430 [ 345.025150][ T291] link_path_walk+0x6b1/0xeb0 [ 345.029475][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.033753][ T291] path_openat+0x27f/0x2f30 [ 345.033775][ T291] page_owner free stack trace missing [ 345.033781][ T291] [ 345.033784][ T291] Memory state around the buggy address: [ 345.033794][ T291] ffff88813a0ca600: 00 00 00 00 fc fc fc fc fc fc fc fc fa fb fb fb [ 345.043079][ T730] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 345.044221][ T291] ffff88813a0ca680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 345.049473][ T730] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 345.053528][ T291] >ffff88813a0ca700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 345.059666][ T309] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 345.067367][ T291] ^ [ 345.067379][ T291] ffff88813a0ca780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 345.067389][ T291] ffff88813a0ca800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 345.067396][ T291] ================================================================== [ 345.076285][ T291] Disabling lock debugging due to kernel taint [ 345.076359][ T291] ------------[ cut here ]------------ [ 345.199651][ T291] WARNING: CPU: 0 PID: 291 at fs/dcache.c:794 fast_dput+0x207/0x290 [ 345.207665][ T291] Modules linked in: [ 345.211547][ T291] CPU: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 [ 345.212412][ T455] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 345.220486][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 345.220499][ T291] RIP: 0010:fast_dput+0x207/0x290 [ 345.242998][ T291] Code: 99 f1 ff e9 4e fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fe ff ff 48 89 df e8 93 99 f1 ff e9 94 fe ff ff e8 99 0e ac ff <0f> 0b e9 13 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ec fe ff [ 345.262616][ T291] RSP: 0018:ffffc9000daafaf0 EFLAGS: 00010293 [ 345.268674][ T291] RAX: ffffffff81c55fa7 RBX: ffff88813a0ca770 RCX: ffff88811efaa880 [ 345.273465][ T455] usb 4-1: device descriptor read/8, error -71 [ 345.276658][ T291] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001 [ 345.290753][ T291] RBP: ffffc9000daafb18 R08: 0000000000000003 R09: 0000000000000004 [ 345.298834][ T291] R10: dffffc0000000000 R11: fffff52001b55f50 R12: 00000000ffffff80 [ 345.306909][ T291] R13: dffffc0000000000 R14: ffff88813a0ca7c8 R15: 1ffff110274194f9 [ 345.314885][ T291] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 345.323827][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.330397][ T291] CR2: 00007f95107556c8 CR3: 000000000700f000 CR4: 00000000003506b0 [ 345.338500][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 345.346505][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 345.354497][ T291] Call Trace: [ 345.357773][ T291] [ 345.360686][ T291] dput+0x21/0x80 [ 345.364340][ T291] incfs_free_mount_info+0x60/0x200 [ 345.369535][ T291] incfs_kill_sb+0x1af/0x210 [ 345.374149][ T291] deactivate_locked_super+0xb5/0x120 [ 345.379530][ T291] deactivate_super+0xaf/0xe0 [ 345.384239][ T291] cleanup_mnt+0x45e/0x4e0 [ 345.388651][ T291] __cleanup_mnt+0x19/0x20 [ 345.393160][ T291] task_work_run+0x1e1/0x250 [ 345.397746][ T291] ? __cfi_task_work_run+0x10/0x10 [ 345.402863][ T291] ? free_nsproxy+0x21f/0x270 [ 345.407540][ T291] do_exit+0xb0d/0x29f0 [ 345.411678][ T291] ? __cfi_do_exit+0x10/0x10 [ 345.416279][ T291] ? __kasan_check_write+0x14/0x20 [ 345.421481][ T291] ? _raw_spin_lock_irq+0x95/0xf0 [ 345.426519][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 345.432080][ T291] ? xfd_validate_state+0x70/0x150 [ 345.437299][ T291] ? zap_other_threads+0x321/0x3a0 [ 345.442474][ T291] do_group_exit+0x21b/0x2e0 [ 345.442991][ T455] usb 4-1: device descriptor read/8, error -71 [ 345.447054][ T291] __x64_sys_exit_group+0x3f/0x40 [ 345.447081][ T291] x64_sys_call+0x7b4/0x9a0 [ 345.462738][ T291] do_syscall_64+0x4c/0xa0 [ 345.467151][ T291] ? clear_bhb_loop+0x30/0x80 [ 345.471809][ T291] ? clear_bhb_loop+0x30/0x80 [ 345.476517][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.482440][ T291] RIP: 0033:0x7f8388d9e159 [ 345.486840][ T291] Code: Unable to access opcode bytes at 0x7f8388d9e12f. [ 345.493862][ T291] RSP: 002b:00007ffc1e8ea808 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 345.502401][ T291] RAX: ffffffffffffffda RBX: 00007f8388e3451b RCX: 00007f8388d9e159 [ 345.510375][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 345.518367][ T291] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f8388e344bb [ 345.526349][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1e8ebac0 [ 345.534421][ T291] R13: 00007f8388e344bb R14: 000055556c9544e8 R15: 00007ffc1e8ecb90 [ 345.542422][ T291] [ 345.545431][ T291] ---[ end trace 0000000000000000 ]--- [ 345.551081][ T291] ------------[ cut here ]------------ [ 345.556647][ T291] WARNING: CPU: 1 PID: 291 at fs/dcache.c:669 retain_dentry+0x158/0x2c0 [ 345.565469][ T291] Modules linked in: [ 345.569526][ T291] CPU: 1 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 [ 345.578583][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 345.588802][ T291] RIP: 0010:retain_dentry+0x158/0x2c0 [ 345.594245][ T291] Code: 31 ff e8 fb 10 ac ff 44 89 e8 83 e0 40 0f 84 b9 00 00 00 e8 ca 0c ac ff b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b8 0c ac ff <0f> 0b e9 f9 fe ff ff e8 ac 0c ac ff 31 c0 eb e0 e8 a3 0c ac ff 31 [ 345.613924][ T341] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 345.621621][ T291] RSP: 0018:ffffc9000daafaf0 EFLAGS: 00010293 [ 345.627756][ T291] RAX: ffffffff81c56188 RBX: ffff88813a0ca660 RCX: ffff88811efaa880 [ 345.635861][ T291] RDX: 0000000000000000 RSI: 0000000010000000 RDI: 0000000000000000 [ 345.643859][ T291] RBP: ffffc9000daafb18 R08: 0000000000000003 R09: 0000000000000004 [ 345.651819][ T291] R10: dffffc0000000000 R11: fffff52001b55f34 R12: 1ffff110274194cc [ 345.659792][ T291] R13: ffff88811e5b23c8 R14: 0000000010000000 R15: dffffc0000000000 [ 345.667772][ T291] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 345.676714][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.683312][ T291] CR2: 00007f90867ef2f8 CR3: 0000000121275000 CR4: 00000000003506a0 [ 345.691271][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 345.699270][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 345.707249][ T291] Call Trace: [ 345.710510][ T291] [ 345.713449][ T291] dput+0x36/0x80 [ 345.717085][ T291] incfs_free_mount_info+0x80/0x200 [ 345.722268][ T291] incfs_kill_sb+0x1af/0x210 [ 345.726869][ T291] deactivate_locked_super+0xb5/0x120 [ 345.732252][ T291] deactivate_super+0xaf/0xe0 [ 345.737010][ T291] cleanup_mnt+0x45e/0x4e0 [ 345.741418][ T291] __cleanup_mnt+0x19/0x20 [ 345.745839][ T291] task_work_run+0x1e1/0x250 [ 345.750425][ T291] ? __cfi_task_work_run+0x10/0x10 [ 345.755553][ T291] ? free_nsproxy+0x21f/0x270 [ 345.760233][ T291] do_exit+0xb0d/0x29f0 [ 345.764421][ T291] ? __cfi_do_exit+0x10/0x10 [ 345.769010][ T291] ? __kasan_check_write+0x14/0x20 [ 345.774126][ T291] ? _raw_spin_lock_irq+0x95/0xf0 [ 345.779150][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 345.784721][ T291] ? xfd_validate_state+0x70/0x150 [ 345.789834][ T291] ? zap_other_threads+0x321/0x3a0 [ 345.793143][ T341] usb 5-1: not running at top speed; connect to a high speed hub [ 345.794951][ T291] do_group_exit+0x21b/0x2e0 [ 345.803663][ T341] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.807228][ T291] __x64_sys_exit_group+0x3f/0x40 [ 345.817546][ T341] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 345.822332][ T291] x64_sys_call+0x7b4/0x9a0 [ 345.822355][ T291] do_syscall_64+0x4c/0xa0 [ 345.831485][ T341] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 345.835734][ T291] ? clear_bhb_loop+0x30/0x80 [ 345.840333][ T341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.849159][ T291] ? clear_bhb_loop+0x30/0x80 [ 345.849184][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.860049][ T341] usb 5-1: Found UVC 1.00 device (046d:0825) [ 345.861824][ T291] RIP: 0033:0x7f8388d9e159 [ 345.861842][ T291] Code: Unable to access opcode bytes at 0x7f8388d9e12f. [ 345.890740][ T291] RSP: 002b:00007ffc1e8ea808 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 345.899175][ T291] RAX: ffffffffffffffda RBX: 00007f8388e3451b RCX: 00007f8388d9e159 [ 345.907243][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 345.915228][ T291] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f8388e344bb [ 345.923475][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1e8ebac0 [ 345.931432][ T291] R13: 00007f8388e344bb R14: 000055556c9544e8 R15: 00007ffc1e8ecb90 [ 345.939433][ T291] [ 345.942458][ T291] ---[ end trace 0000000000000000 ]--- [ 345.948045][ T291] BUG: unable to handle page fault for address: fffffffffffffffc [ 345.955752][ T291] #PF: supervisor read access in kernel mode [ 345.961720][ T291] #PF: error_code(0x0000) - not-present page [ 345.967697][ T291] PGD 7012067 P4D 7012067 PUD 7014067 PMD 0 [ 345.973687][ T291] Oops: 0000 [#1] PREEMPT SMP KASAN [ 345.978883][ T291] CPU: 1 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 [ 345.987818][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 345.997890][ T291] RIP: 0010:__dentry_kill+0xd0/0x680 [ 346.003206][ T291] Code: ff 4d 8b 36 49 83 c6 38 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fc 83 f1 ff 48 89 df 4d 8b 1e 41 ba ee 71 7a d4 <45> 03 53 fc 74 02 0f 0b 41 ff d3 43 0f b6 04 2c 84 c0 0f 85 bf 04 [ 346.022808][ T291] RSP: 0018:ffffc9000daafa98 EFLAGS: 00010246 [ 346.028875][ T291] RAX: 1ffffffff0b63167 RBX: ffff88813a0ca660 RCX: ffffffff81c57547 [ 346.036836][ T291] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88813a0ca660 [ 346.044801][ T291] RBP: ffffc9000daafad8 R08: 0000000000000003 R09: 00000000fffffffb [ 346.052767][ T291] R10: 00000000d47a71ee R11: 0000000000000000 R12: 1ffff110274194cc [ 346.060738][ T291] R13: dffffc0000000000 R14: ffffffff85b18b38 R15: ffff88813a0ca6b8 [ 346.068712][ T291] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 346.077644][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.084234][ T291] CR2: fffffffffffffffc CR3: 0000000121275000 CR4: 00000000003506a0 [ 346.092203][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.100166][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.108138][ T291] Call Trace: [ 346.111401][ T291] [ 346.113164][ T341] usb 5-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -32 (exp. 1). [ 346.114321][ T291] dentry_kill+0xc0/0x2a0 [ 346.114350][ T291] dput+0x42/0x80 [ 346.130994][ T291] incfs_free_mount_info+0x80/0x200 [ 346.136189][ T291] incfs_kill_sb+0x1af/0x210 [ 346.141111][ T291] deactivate_locked_super+0xb5/0x120 [ 346.146471][ T291] deactivate_super+0xaf/0xe0 [ 346.151135][ T291] cleanup_mnt+0x45e/0x4e0 [ 346.155532][ T291] __cleanup_mnt+0x19/0x20 [ 346.159930][ T291] task_work_run+0x1e1/0x250 [ 346.164605][ T291] ? __cfi_task_work_run+0x10/0x10 [ 346.169700][ T291] ? free_nsproxy+0x21f/0x270 [ 346.174366][ T291] do_exit+0xb0d/0x29f0 [ 346.178509][ T291] ? __cfi_do_exit+0x10/0x10 [ 346.183089][ T291] ? __kasan_check_write+0x14/0x20 [ 346.188205][ T291] ? _raw_spin_lock_irq+0x95/0xf0 [ 346.193234][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 346.198779][ T291] ? xfd_validate_state+0x70/0x150 [ 346.203884][ T291] ? zap_other_threads+0x321/0x3a0 [ 346.208987][ T291] do_group_exit+0x21b/0x2e0 [ 346.213567][ T291] __x64_sys_exit_group+0x3f/0x40 [ 346.218579][ T291] x64_sys_call+0x7b4/0x9a0 [ 346.223067][ T291] do_syscall_64+0x4c/0xa0 [ 346.227470][ T291] ? clear_bhb_loop+0x30/0x80 [ 346.232135][ T291] ? clear_bhb_loop+0x30/0x80 [ 346.236794][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.242678][ T291] RIP: 0033:0x7f8388d9e159 [ 346.247081][ T291] Code: Unable to access opcode bytes at 0x7f8388d9e12f. [ 346.254088][ T291] RSP: 002b:00007ffc1e8ea808 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 346.262490][ T291] RAX: ffffffffffffffda RBX: 00007f8388e3451b RCX: 00007f8388d9e159 [ 346.270448][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 346.278408][ T291] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f8388e344bb [ 346.286362][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1e8ebac0 [ 346.294313][ T291] R13: 00007f8388e344bb R14: 000055556c9544e8 R15: 00007ffc1e8ecb90 [ 346.302278][ T291] [ 346.305278][ T291] Modules linked in: [ 346.309274][ T291] CR2: fffffffffffffffc [ 346.313419][ T291] ---[ end trace 0000000000000000 ]--- [ 346.318859][ T291] RIP: 0010:__dentry_kill+0xd0/0x680 [ 346.324135][ T291] Code: ff 4d 8b 36 49 83 c6 38 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fc 83 f1 ff 48 89 df 4d 8b 1e 41 ba ee 71 7a d4 <45> 03 53 fc 74 02 0f 0b 41 ff d3 43 0f b6 04 2c 84 c0 0f 85 bf 04 [ 346.343726][ T291] RSP: 0018:ffffc9000daafa98 EFLAGS: 00010246 [ 346.349773][ T291] RAX: 1ffffffff0b63167 RBX: ffff88813a0ca660 RCX: ffffffff81c57547 [ 346.357725][ T291] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88813a0ca660 [ 346.365677][ T291] RBP: ffffc9000daafad8 R08: 0000000000000003 R09: 00000000fffffffb [ 346.373628][ T291] R10: 00000000d47a71ee R11: 0000000000000000 R12: 1ffff110274194cc [ 346.381586][ T291] R13: dffffc0000000000 R14: ffffffff85b18b38 R15: ffff88813a0ca6b8 [ 346.389547][ T291] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 346.398458][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.405024][ T291] CR2: fffffffffffffffc CR3: 0000000121275000 CR4: 00000000003506a0 [ 346.412979][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.420929][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.428881][ T291] Kernel panic - not syncing: Fatal exception [ 346.435339][ T291] Kernel Offset: disabled [ 346.439654][ T291] Rebooting in 86400 seconds..