last executing test programs: 8.885574756s ago: executing program 4 (id=213): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x97}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4b6b8919b64ea790}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000852}, 0x8888b4da2818d893) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r8}, 0x10) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1, 0x1, 0x0, 0xffffffff}) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r5, 0x0, 0x2}, 0x18) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x141, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80900, 0x0) 8.644996128s ago: executing program 4 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) getrusage(0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r8, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x80}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7000}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xffffffff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async, rerun: 64) r9 = dup(r2) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) (async, rerun: 64) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (rerun: 64) 8.477743949s ago: executing program 4 (id=220): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) munlock(&(0x7f00004bb000/0x3000)=nil, 0x3000) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x76, 0x1b, 0xaf, 0x40, 0x17cc, 0x1020, 0xab24, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe3, 0x0, 0x0, 0xbe, 0x4e, 0x80}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000200), &(0x7f0000000200)=""/16, 0x2}, 0x20) (async) syz_usb_connect$cdc_ncm(0x4, 0x6f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x2, 0x30, 0xc0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ae"}, {0x5, 0x24, 0x0, 0x9fc5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x0, 0x11}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x2, 0x8e}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x3, 0x12, 0x5, 0x40, 0x6}, 0x44, &(0x7f00000000c0)={0x5, 0xf, 0x44, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xd, 0x2, 0x9, 0xf0f, 0x7, [0xffc000, 0xc00f]}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x36, 0x0, 0x9, [0xff3f30, 0xf0, 0xffff0f, 0xffc030, 0x0, 0xff3ff7]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x1, 0x3213}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42b}}, {0xc5, &(0x7f00000001c0)=@string={0xc5, 0x3, "348e9d30db67c32ba5bbbb5b7e13fe8c1ae97ee64094f3a6d019f259edf28a5a6514c43757a7e5f335a7ca59f068a877776f7d508fd6082403c650117dcc4225924e07103e7ca50a8e781fae36ce069b24f45b3269616481a3c96b2a2508721c1446f231c38c9cc211c489dd0762b4e9c4aa87c066c58e831259ba77a6f8ddb421a0f02415ecd82767d22c43cd0783a349c981cdde1cfd9c82f0ee22694a02696f5a938d0df9e2ab29eaade31a6b3ba7040e99aa7ede007a15f4a24bc95cbb0a3b5a78"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2812}}, {0x76, &(0x7f0000000300)=@string={0x76, 0x3, "341180efd5eeabff7068daf0abd3b9a48b2052184ba8df18ead8b5558bc5a34c76aacf1e7f944dc499efeb6cae3d49f3f474283508b7fee30897e2d88ad1b31a01c73834892f17ad7373d4d0903c625da110d8a88ef5af813153f39bf86fb72c9757473d79c4373197f52557c44185f697e9736e"}}]}) 7.957050273s ago: executing program 0 (id=223): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2507, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x401, 0x0, 0x0, 0x41000, 0x28, '\x00', r0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000140)=[0x1], &(0x7f0000000180)=[{0x3, 0x2, 0xb, 0x7}, {0x1, 0x2, 0x1, 0x4}, {0x4, 0x3, 0xf, 0x6}, {0x1, 0x4, 0x9, 0x5}, {0x3, 0x2, 0x6, 0x6}, {0x5, 0x1, 0x6, 0x6}], 0x10, 0x7}, 0x94) fstat(r1, &(0x7f00000002c0)) (async) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2710, @local}, 0x10, 0x100000) r3 = accept(r2, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) splice(r4, &(0x7f0000000440)=0x8, r3, &(0x7f0000000480)=0xf, 0x9, 0x3) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x20401, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x7, [@enum64={0x1, 0x9, 0x0, 0x13, 0x1, 0x0, [{0x3, 0x10000, 0x1}, {0x9, 0x33e3, 0x10000}, {0xc, 0x8, 0xbb7}, {0x9, 0x2, 0xe7f6}, {0x4, 0x7}, {0xc, 0x80000000, 0x2}, {0x2, 0x7, 0x9c6}, {0xa, 0x6, 0x4}, {0x8, 0x6, 0x8}]}, @restrict={0x5}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x0, 0x5}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x45, 0x0, 0x2c, 0x6}, @ptr={0xb, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x0, 0x61, 0x3e, 0x0]}}, &(0x7f0000000600)=""/4096, 0xe7, 0x1000, 0x1, 0x5e94, 0x10000, @value=r5}, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001640)={0x1b, 0x0, 0x0, 0x9, 0x0, r2, 0x9, '\x00', 0x0, r6, 0x4, 0x3}, 0x50) (async, rerun: 64) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f00000016c0)=0x7f, 0x4) (async, rerun: 64) sendmsg$nl_route_sched_retired(r5, &(0x7f00000018c0)={&(0x7f0000001700), 0xc, &(0x7f0000001880)={&(0x7f0000001740)=@newtclass={0x13c, 0x28, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xa, 0xc}, {0x1, 0x4}, {0xffe0, 0x10}}, [@c_atm={{0x8}, {0x80, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0x30, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xfff1}}, @TCA_ATM_HDR={0x3b, 0x3, "b99c7ced07ae751400d145a5a915f6f2e71b990c06bb0c3c75a82fcf388e547c7aff0d8f25c4cebc1ba8c2a8923eae98eab366bf97fc5d"}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0x3}}]}}, @c_atm={{0x8}, {0x88, 0x2, [@TCA_ATM_HDR={0x1f, 0x3, "56a4a7c6fa9ab6f3295c6d541ff72a1d092a1119c5982c1788eccd"}, @TCA_ATM_HDR={0x32, 0x3, "a0b41914cd4ce89956a423474412b787953d4a5134e799b8a1affd8b88e71b7898a4f56f5fc72bbf66dca4de2a59"}, @TCA_ATM_HDR={0x27, 0x3, "d3b5f83a0b0f3942a2117dbc4ae24617ea0378edf73304cc1134ef4148ba2695b7eb5b"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xf}}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r8 = syz_clone3(&(0x7f0000001a80)={0x80200000, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)=0x0, {0x18}, &(0x7f00000019c0)=""/10, 0xa, &(0x7f0000001a00)=""/32, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7}, 0x58) sched_setscheduler(r9, 0x6, &(0x7f0000001b00)=0x2) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b40), 0x420c0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000001b80)={'netdevsim0\x00', 0x20}) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r11, 0x89e0, &(0x7f0000001bc0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r3) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001c80)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_START_SCHED_SCAN(r12, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0xa4, r13, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0xf}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xbba4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x23, 0x1, @random="8be4d30daba90d45f5ed37bec93ecbe428c56a130dc21168ef2aae168758b4"}]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0xd}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) (async) prlimit64(r8, 0x4, &(0x7f0000001e00)={0x200, 0x9}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x28, r13, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xe, 0x18}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r15 = fcntl$getown(r6, 0x9) prlimit64(r15, 0x8, 0x0, &(0x7f0000001f40)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002080)={r7, &(0x7f0000001f80)="6648c950cc957287", &(0x7f0000001fc0)=""/160, 0x4}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000020c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', 0x0, r5, 0x3, 0x3, 0x5}, 0x50) 7.954019733s ago: executing program 0 (id=224): setrlimit(0x40000000000008, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="003ae8db889b00000002000000b703000000000066a13e53000095e2ffffff000008"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000140)={0x9, 0x7, 0x81, 0x2, 0x1, 0x6}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) fallocate(r0, 0x0, 0x0, 0x1001f0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 7.656946815s ago: executing program 0 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xc, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0x0, 0x1, 0x6, 0xc, 0x10}, @map_idx={0x18, 0x13, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0xb}, @exit, @call={0x85, 0x0, 0x0, 0xd}], &(0x7f0000000300)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') 6.688975762s ago: executing program 0 (id=227): socket(0x10, 0x80003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4000000, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000"], 0xfe44, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r9 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(r9, 0x1, &(0x7f0000000180)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) 6.629587442s ago: executing program 4 (id=228): unshare(0x60600) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x13b, 0xe, 0x10, 0x4, 0xe80, 0x5, 0xb5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r6, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 5.752814609s ago: executing program 0 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xc, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0x0, 0x1, 0x6, 0xc, 0x10}, @map_idx={0x18, 0x13, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0xb}, @exit, @call={0x85, 0x0, 0x0, 0xd}], &(0x7f0000000300)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') 5.6488631s ago: executing program 4 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRESDEC], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000000015da7b29ae10c0be22c1c24c88320366102c79d91c2b490e66cf346e9a3ed3f7966d6e9493350c3a720b5f94ab18eed9b713b89fca78753df45970395f0b27728b32e47e993512"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="826fcbce", @ANYRES16=r8, @ANYBLOB="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"], 0x1178}, 0x1, 0x0, 0x0, 0x2008040}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x4000, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000440)='./file1\x00', 0x3a30c6d, &(0x7f0000001e80)={[{@noauto_da_alloc}, {@data_err_abort}, {@barrier}, {@nodioread_nolock}, {@data_err_ignore}, {@noquota}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@data_writeback}, {@bh}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_gt={'euid>', r9}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '/proc/sysvipc/shm\x00\xc7\xe15n\x06M0\xe7\xf7\x7f\x03\x00\xbd\x1c\xec&\x02_\x8c\xf1r\x9b-\xc9\xb4\xed\xffSj\xf9\xff\xac\xa5W\x15\xd7\x9fG\xba!e\xfav\x8a\x15\xe7L\xf8'}}, {@pcr={'pcr', 0x3d, 0x15}}]}, 0x1, 0x568, &(0x7f0000002400)="$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") prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r10, &(0x7f0000000ec0)=[{&(0x7f0000000480)="ff07bc32380231187fe562cbbd5d6bad345909d866d2", 0x16}], 0x1, 0x5413, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 4.799620405s ago: executing program 0 (id=241): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000002c0), 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r5, &(0x7f0000000480)='./file0\x00', r5, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) (async) renameat2(r5, &(0x7f0000000480)='./file0\x00', r5, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200a07000000070f00f40000ddef067b545eb2ca58c100"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (async) r6 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write(r6, &(0x7f0000000140)='$d', 0x2) 4.796737035s ago: executing program 2 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) dup(0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0xa47, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d8", 0x78, 0x840, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) dup3(r1, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4094, 0xffe, 0x0, 0x0}, &(0x7f0000000100)=0x40) 4.08379379s ago: executing program 1 (id=243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) (async) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r2 = getpid() (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000005c0)={[{@debug}, {@nojournal_checksum}, {@jqfmt_vfsold}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4af, &(0x7f0000000e40)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000580)=0x8) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000540)='./bus\x00', 0xa40, 0x16e) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="480000001400050024bd70007bdbdf250a88"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) (async) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000b000018310100060c46d08fb8c04bb28009ec7c0d243e3e38419ed921552aaefd4131627ede37793c2897959baf6d5b4540f812aa85b5cbc9127adba404658a1ee487895251ed5fa58d53d4eca1ed525cf61e111e86093cf0e7e90224528de7192a856443ed2e2cd55558d432b2994a4bd378dc55cf", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) (async) sendto$inet6(r8, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000000300)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.973721282s ago: executing program 1 (id=244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file4\x00', 0x1000840, &(0x7f0000000580)=ANY=[@ANYBLOB="9d711e1a371969643d55ee", @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=iso8859-15,rodir,iocharset=cp1250,shortname=mixed,shortname=lower,shortname=win95,shortname=win95,shortname=winnt,rodir,shortname=lower,nonumtail=0,\x00'], 0xff, 0x356, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000002bbc1b0edc00fe7e9ba25183a55c92992b5000000000950000003d7ffc20d41846afce07540c2d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 3.830437592s ago: executing program 2 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800ffff0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = timerfd_create(0x7, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 2.339283253s ago: executing program 3 (id=247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000049"]) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x81) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000867f3ea29495f714ee598e4a35b6b20d411f297c6788b0465e030000000000000059009f05ca8e83484060738de8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r9}, 0x8) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1c8000000400558faa00004100001d0000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x50) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYRES64, @ANYRESDEC=r10, @ANYBLOB="0300726f75705f69646345f6079f0976becb3d", @ANYRES8=r3]) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2.280655143s ago: executing program 3 (id=248): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000079d2c8590000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='fsi_master_gpio_break\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00005e3000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) getpgid(r2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4000040) setrlimit(0x2, &(0x7f0000000040)={0x0, 0x2400000}) mprotect(&(0x7f000033a000/0x4000)=nil, 0x4000, 0x3) syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$binfmt_register(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r6 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff}, 0xc) 2.242861934s ago: executing program 1 (id=249): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_open_procfs$namespace(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000014000305000080007fdbdf25020751ff", @ANYRES32=r7, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xf11fe50f78bbbba1, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x20000023896) close(r11) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)=0x0) timer_settime(r14, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000b69c00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000060006007cbe0000"], 0x24}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) syz_emit_ethernet(0x76, &(0x7f0000003780)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x40, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @dest_unreach={0x1, 0x2, 0x0, 0x4, '\x00', {0xc, 0x6, "3a8e63", 0x4, 0x33, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, [@dstopts={0x4}], "f54d576bc26a3fbc"}}}}}}}, 0x0) 1.982381376s ago: executing program 4 (id=250): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x8, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) 1.564297308s ago: executing program 2 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xc, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0x0, 0x1, 0x6, 0xc, 0x10}, @map_idx={0x18, 0x13, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0xb}, @exit, @call={0x85, 0x0, 0x0, 0xd}], &(0x7f0000000300)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') 1.563703299s ago: executing program 1 (id=252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00006005bbbbbbbbbbbb007ddd0bbf008100000086dd6a5421bd00042f"], 0x42) syz_usb_disconnect(0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='afs_call\x00', r3, 0x0, 0x4}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="6dfb17cd5eb4742cfe2b92e325db01e5b85d2fc917637acf80ddd79c7ff40e0011d690b67a456bff4ad46a1d5341ae688682f126dba71df2d6d502828624db7df2", @ANYRES32=r0], 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r8}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2000000000000213, &(0x7f00000000c0)=[{0xb, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x60, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1.42611863s ago: executing program 3 (id=253): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) close(r0) 1.38103075s ago: executing program 1 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40854}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000680)=0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfdff) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1830004, &(0x7f00000006c0), 0x4, 0x4f5, &(0x7f00000010c0)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r6, 0x0, 0x2400c000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x1) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) 1.36741243s ago: executing program 3 (id=255): r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x119, 0xca, 0x3, 0x8, 0x8, 0x800}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x559af05a10134899, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x8, 0x5, 0x100, 0x4, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xbff, 0x1}}, {0x0, 0x10}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffffff, 0x0, 0x200, 0xa8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000050000000004", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) 885.284133ms ago: executing program 2 (id=256): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000680)={@link_local, @local, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x1, 0x38, 0x5c, 0x64, 0x21, 0x6, 0x11, 0x0, @remote, @local}, {0x4e24, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x2000000, "cac6e128989a2ee1b858738f24c7c214426a9fcf08e09340", "6a4b9c68130c2dff6c9ea41f17aa20691859ed004870efddb745eebe70934fbf"}}}}}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0xfffffd13) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000002c0)={r2, r3+60000000}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x0) listen(r1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x44f0) 421.811687ms ago: executing program 3 (id=257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socket$inet6(0xa, 0x1, 0x8) 420.796497ms ago: executing program 2 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) (async, rerun: 32) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 32) keyctl$chown(0x4, r6, 0xee00, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000240), 0x8) (async) keyctl$KEYCTL_MOVE(0x1e, r6, 0x0, 0x0, 0x1) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xc0003, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000100)='./bus\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000004000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400e27503006272696467655f736c6176655f310000ef7cfae89582625ff2f042d2c5e22898f65bf905e29b82c83c5dd6492b2c596c87a794df8c4c5e67fc628a50a290d5c7396934e5ad7cc68bd723b6267a8a876772a81d2ecd377be3734067b8c8b0bbcadf970de1f53c9285ac7bc13c476f32432d91b1ecbd2420794d5fac3bc6f18a0b98bebe79e1fc1c14ca354babb05bc20c47c708b0034af09d"], 0x3c}}, 0x40) fallocate(r0, 0x3, 0x0, 0x1000f4) (async) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) (async) symlink(&(0x7f00000003c0)='./file0\x00', 0x0) 419.687027ms ago: executing program 2 (id=259): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000001040)={[{@debug}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x8}}, {@usrjquota}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb8, &(0x7f0000000480)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2I07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSZrMJGmb5KbJ7wcn95x57tzzPLkk9xzIJIBdqy/7kkYciIizSUSh/noaEZ3VXndEpXbe3Oz00B+z00NJzM+//msSSUTcnZ0ealwrqR/31QfdEfHdS0n8792V845PTo0Olsulsfr4yMSFy0fGJ6eeHbkweL50vnTx6PHnB44NHO8/MbBhtf7506kbvz/5ys+Vvz77+9pvH3ySxKnoqceW1lGv+qH1Rd/C92Sp9ogY3IDrbwdt9XqW1pm0r/GmdJOTAgCgpXTJGu6xKERbLC7eCvH197kmBwAAAGyI+baIeQAAAGCHS+z/AQAAYIdr/B3A3dnpoUbL9y8Sttad0xHRW6t/rt5qkfaoVI/d0RERe+8msfRjrUntbQ+tLyJu/3jiy6xFk88hb7bKTEQ83uz+J9X6e+ufhF5efxoR/Rswf9+y8aNU/6kNmD/v+gHYnW6erj3IVj7/0oX1TzR5/rU3eXY9iLyff43139yK9d9i/W0t1n+vrXOOq59+dKVVLKv/hRsvf9Fo2fzZ8aGKug93ZiKeaG9Wf7JQf9Ki/rPrnKPwz5VSq1je9c9/HHEomtffkKz+/4mODI+US/21r03nmPl24PNW8+ddf3b/97aof637f/meK7X+pz5vnjlzvVVs7frTXzqTN6q9zvorbw9OTIwdjehMXl35+rHV622c07hGVv/hp1b/+W9Wf/Y7oVL/PmSVz9SP2fidZXO+eO3qV6vVn+398rz/5x7w/r+3zjme/ub9w61iS/e/Wcvmv53U9sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0JBGRE8kaTEikmo/TYvFiH0R8f/Ym5YvjU88M3zprYvnslhEb3SkwyPlUn9EFGrjJBsfrfYXx8eWjZ+LiP0R8WFhT3VcHLpUPpd38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACzYFxE9kaTFiEgjYq6QpsVi3lkBAAAAG6437wQAAACATWf/DwAAADuf/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbbP/Bm7eSiKic3FNtmc56rCPXzIDNluadAJCbtrwTAHLTnncCQG7uc49vuQA7ULJGvLtlpKtlxNoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYOc5dODmrSQiKif3VFumsx7raPqOg1uYHbCZ0rwTAHLTtlqwfevyALaeH3HYvZrv8YHdJFkj3r14TuXeSNem5QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA9tNTbUlajIi02k/TYjHiPxHRGx3J8Ei51B8R/42IHwodXdm4K++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HDjk1Ojg+VyaUxH54E7bdsjjUe9k2yPNGqdvH8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh/HJqdHBcrk0Np53JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDexienRgfL5dLYOjrX7+fkJZ28awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID//BgAA///bFA2P") r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) rt_sigaction(0x16, &(0x7f0000000180)={&(0x7f00000002c0)="ca00d1c441efc402c8f7df66400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xb03ed29a3069cddb, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000058c0), 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc5c0020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000700)={&(0x7f00000004c0)="b5320335e8d1e9642a4aa16beed50a3801f4620fc873f77675b65b1cfb828f027ea09a09af9f6aaafe6a9592ac78dfc2b04dd306fe65ceae77bf6e1197ddd25cd3630558aa9261f701564fb22a9773fff77d53cd5821e1c817dbbadb19876f18d1c2b91ae76bf99acc75514f79259b947f81f1d2126bba8be2c5016d76860e68d75165a1db7d5dd329f4c246f7ec37b85773e04857d2bde1acd1a9ff6053113f3a63af9e9eab1132628e5a261292ca12b97f7cea34979e68736b9d7daf9563cb49", 0x0, 0x0, 0x0, 0x3, r7, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000580), &(0x7f0000000080)=@udp6}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x1, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 370.829357ms ago: executing program 3 (id=260): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r0, &(0x7f0000000140)='./mnt\x00', r0, &(0x7f0000000200)='./mnt\x00', 0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1f, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f000000c0c0)="$eJzs3MtrY1UcB/CTPuflWMSFu7kwCC1MQtPHoLuqM/jADsXHwpWmSRoyk+SWJk1rVy5cigv/E1Fw5dK/wYVrd+JCcSeM5J5TmfpEGifT9vOB2++9Jye/e86ltJx7QwJwYS1kv/xUCtfD5RDCdAjhWgjFfilthY0Yz4UQboQQph7ZSqn994a5EMKVEML1UfFYs5Re+uzW8Ob6j2/8/PW38zNXP//qu8nNGpi050MI3d24f9CNmbdi3k/ttWG7yO7aMGV8ofsgHecxD5rbRYWD2nG/WpGrrdg/393vj3KnU6uPstXeKdp3e/GE/WHruE7xhvu1veK40dwust3Pi2wdxXEdHsW/bUf9QazTSPU+LMqHweA4Y3vzsBnns/ugyHpvkNpj3bzRPBzlMGU6XajnnUYxju3TXOkn25vt3v5hNmzu9dt5L1uvVF+oVG+Xq3t5ozlorpVr3cbttWyx1Rl1Kw+ate5GK89bnWalnneXssVWvV6uVrPFO83tdq2XVauV1cpyeX0p7d3KXr33btZpZIujfLnd2x+0O/1sJ9/L4juWspXK6otL2c1q9vbmVrb11t27m1vvvH/nvXsvbb7+Sur0p2FliyvLKyvl6nJ5pbp0duc/+l//n+b/cRr0GOcPp1Ka9AAAzh7rf2ASzvr6P1j/j4X1/4Wd/8PkdBeQi836HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgwvp+9ovXip2FeHw1tT+Vmp5Jx6UQwlQI4eFfmA5zJ2pOpzqzf9N/9g9j+KYUigqjc8yn7UoIYSNtvz79f18FAAAAOL++/OjGp3G1Hn8sTHpAPE7xps3UtQ/GVK8UQphd+GEMVUK62RSePf2ootHv90w4HFO14gbWpTEVi7fcZsZVLSr988vTJ+LSI1GKMXXcc2684wIAACbo5EpgzKsQAAAAniCfTHoATEbxjDB9Fj895puPkR4IXj5xBAAAAJxB//IZYQAAAOAcKNb/vv8PAAAAzrf4/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBv7NxNTvJAGADgaUu/j+/HSIx7r+IOjuERXLo0XIUj4BW8AGfAnUcwYNoOWvwJSmkbyfMk7XQmzNuX7t6ZpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmh3w+ubu9GDaNs1p/XzGvfg0AAAC0Y5nPJ+XFqOr/i+Mncegs9pMQQlqr1+uy8GsrZhbj5J/8Pn+Tw30IZYTiHr/j8TeEcBmPp9O2nwIAAAAcr8V0Nq6q9eo06jshulQt2qT/rw4ULwkh5KPHfaZm74fS4nT+pdnr3etDxQ0G4WaP1D5SLmA1fmVmo1xyGxwq2m7Zy/OOzbDWJFWTdpcOAADQle1KoMMqBAAAgI5d950A/UjCZitzsxdcvnn/uiH4Z6sHAAAA/EBJ3wkAAAAArSvrf9//AwAAgONWff8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANi3z+WQxnY2bxlmtmznMvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBn9ucdhWEYDMLgJlFendAFfP9bmgW7detmBgQf/1YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIArj+PlecarMZNt9DqTvHteST6dGt9OjV/nxj/JWHf/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHb25yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527t83bioOAPjXvvOVFhAhoAxBiEoMsND0+ouuDKCIgT8BKUqvJXDlR5uBVhVSFjaUuQuCESEkUNj6P3RupS5l65ChSEwMIPvs5PWo1INSO00+H+n5fW3Zft/nq6p87zkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABrb7+yEWbWdm+zk9cFb96+tlv3tqb50Y/POYtl2LybxarqTLXSXCAAAAPtXPrXfq1tEDKLYWq7Omavq/yK95rvnJ3FTz0/X/U3f1P5l+/WXey/vDDQ3Gae86fm18ej4P1Pr/89TfWq88Mgz+tWTrz67XvWB5O9vvLRdVM8z++bmzXcHVXiojWwBgP/iWNPXQfPzUNkPu0wMgAOjnxTed+v6vzfXbU4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbRhsxLNNnEXEYn83Lt2+f2216qf2b2zeWWzamevXN9N7lrcoIuL82nh0vK2JPAUuX7n6ycp4PLrUfvBaRHQ3eh18OMM5EV1mKHjcIK//rc921dGI6D7n7oOO/2MCAGDfKepW1vV3i63l8lg2H/HX9w/W/28kcaT1/1Rf1f6n+lX9f++jM7fSsdL6f9jaDPe+pfWLny9dvnL1rbWLKxdGF0afnjoxfHt48uzp02eXqu9KlnxjAgAAwOMZ1C2t//P5iO2p9f8jSRyPqv/r9sW3w6/SsXrq/4faXfTrOhMAAICD7cWjf/yePeR4NhjElyvr65eGk+3O/onJtoNU/7VDdUvr/95811kBAAAAbdjeyB5Y/z+XxDHj+v9zP7zyU3rPXkQcrtf/j61+Nj7X3nQ68udMZ7Xx68RPfKoAAADsaYfrlq7/F9X7//nOKw95RLz5+iSu/wzgTPV/772vf0zHSt//P9neFPekfGHyPKp+IaK/0HVGAAAA7GfP1K0s9n8rtpY//vnIBwPv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07e8AAAD//x66P3E=") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES8=0x0, @ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100468745bb0226990a29bd7000fddbdf250400000008000a2681291da043c66c8a8ad5d81e01b3cc1f86aa88ef9d36e5865933146952537d026784c2e9bce0464980e950a3839ebdadbedb35d1"], 0x1c}, 0x1, 0x0, 0x0, 0x20044814}, 0x4000000) openat(0xffffffffffffff9c, 0x0, 0x1039c1, 0x128) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028000000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x66d, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5bf1d32ed3b0647d, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 0s ago: executing program 1 (id=261): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x3000802, 0x0, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xfffffffffffffffd}, 0xd) clock_nanosleep(0xfffffff2, 0x1, &(0x7f00000003c0)={0x77359400}, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() getpid() connect$unix(r2, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 20.655405][ T24] audit: type=1400 audit(1761685494.330:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.656811][ T267] cgroup: Unknown subsys name 'net' [ 20.678066][ T24] audit: type=1400 audit(1761685494.330:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.705467][ T24] audit: type=1400 audit(1761685494.360:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.705704][ T267] cgroup: Unknown subsys name 'devices' [ 20.913350][ T267] cgroup: Unknown subsys name 'hugetlb' [ 20.919005][ T267] cgroup: Unknown subsys name 'rlimit' [ 21.089470][ T24] audit: type=1400 audit(1761685494.760:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.113437][ T24] audit: type=1400 audit(1761685494.760:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.120377][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.138227][ T24] audit: type=1400 audit(1761685494.760:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.170021][ T24] audit: type=1400 audit(1761685494.850:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.195698][ T24] audit: type=1400 audit(1761685494.850:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.232675][ T24] audit: type=1400 audit(1761685494.910:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.258602][ T24] audit: type=1400 audit(1761685494.910:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.285045][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.143769][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.151067][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.158639][ T275] device bridge_slave_0 entered promiscuous mode [ 23.166772][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.174022][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.181617][ T275] device bridge_slave_1 entered promiscuous mode [ 23.279747][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.286969][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.294620][ T278] device bridge_slave_0 entered promiscuous mode [ 23.301479][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.308522][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.315951][ T280] device bridge_slave_0 entered promiscuous mode [ 23.328051][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.335262][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.342761][ T278] device bridge_slave_1 entered promiscuous mode [ 23.358110][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.365279][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.372803][ T280] device bridge_slave_1 entered promiscuous mode [ 23.417620][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.424749][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.432296][ T277] device bridge_slave_0 entered promiscuous mode [ 23.440622][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.447871][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.455412][ T277] device bridge_slave_1 entered promiscuous mode [ 23.502615][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.509769][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.517464][ T276] device bridge_slave_0 entered promiscuous mode [ 23.525876][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.532984][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.540324][ T276] device bridge_slave_1 entered promiscuous mode [ 23.596608][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.603825][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.611348][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.618852][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.627071][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.634142][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.641649][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.648699][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.657306][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.664419][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.671824][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.678932][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.737429][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.744681][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.752051][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.759114][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.776664][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.784178][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.791841][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.799550][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.807097][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.814327][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.821839][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.829018][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.836375][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.854670][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.862961][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.870020][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.877819][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.886343][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.893533][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.900893][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.919307][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.927778][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.934854][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.942537][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.951389][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.958505][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.966023][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.973625][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.981101][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.989396][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.996445][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.018698][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.027463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.036092][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.044858][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.053527][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.061695][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.069823][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.076881][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.092056][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.109685][ T278] device veth0_vlan entered promiscuous mode [ 24.117376][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.126074][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.134624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.142112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.154381][ T280] device veth0_vlan entered promiscuous mode [ 24.174927][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.183247][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.191566][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.199557][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.208512][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.217350][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.225667][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.233242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.240830][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.249368][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.257850][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.264929][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.272850][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.281423][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.289547][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.296617][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.304136][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.311856][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.319408][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.327916][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.336263][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.343314][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.350706][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.359190][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.367458][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.374507][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.381861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.390034][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.398295][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.405976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.413616][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.424224][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.432580][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.448851][ T280] device veth1_macvtap entered promiscuous mode [ 24.457637][ T278] device veth1_macvtap entered promiscuous mode [ 24.467390][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.476403][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.485086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.493441][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.501057][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.509223][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.524651][ T275] device veth0_vlan entered promiscuous mode [ 24.533396][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.542303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.550560][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.558790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.567128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.575353][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.582962][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.596910][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.605283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.613756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.622679][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.632100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.640440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.652689][ T275] device veth1_macvtap entered promiscuous mode [ 24.668760][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.676901][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.685164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.694068][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.701962][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.710338][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.732838][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 24.744421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.753362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.761633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.769344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.777175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.785839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.794670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.803404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.812270][ T278] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.812814][ T276] device veth0_vlan entered promiscuous mode [ 24.842291][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.862596][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.877289][ T277] device veth0_vlan entered promiscuous mode [ 24.892624][ T276] device veth1_macvtap entered promiscuous mode [ 24.904584][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.913891][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.922790][ T302] ====================================================== [ 24.922790][ T302] WARNING: the mand mount option is being deprecated and [ 24.922790][ T302] will be removed in v5.15! [ 24.922790][ T302] ====================================================== [ 24.949426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.962393][ T277] device veth1_macvtap entered promiscuous mode [ 24.980470][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.011520][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.029493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.041535][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.060857][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.069694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.088429][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.097692][ T302] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.2: iget: bad extended attribute block 1 [ 25.123159][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.131311][ T302] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 25.131431][ T302] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue [ 25.161589][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.170275][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.178840][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.249871][ T302] EXT4-fs error (device loop1): ext4_lookup:1830: inode #15: comm syz.1.2: iget: bad extended attribute block 1 [ 25.303258][ T303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=303 comm=syz.2.3 [ 25.791627][ T24] kauditd_printk_skb: 132 callbacks suppressed [ 25.791650][ T24] audit: type=1326 audit(1761685499.440:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=318 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998e672fc9 code=0x7ffc0000 [ 25.842566][ T24] audit: type=1326 audit(1761685499.450:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=318 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998e672fc9 code=0x7ffc0000 [ 25.878488][ T330] EXT4-fs (loop4): Ignoring removed orlov option [ 25.911515][ T24] audit: type=1400 audit(1761685499.560:208): avc: denied { mount } for pid=332 comm="syz.2.9" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 25.956281][ T24] audit: type=1400 audit(1761685499.560:209): avc: denied { mounton } for pid=332 comm="syz.2.9" path="/1/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 25.979186][ T330] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 25.980344][ T24] audit: type=1400 audit(1761685499.570:210): avc: denied { create } for pid=334 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.006492][ T343] x_tables: duplicate underflow at hook 1 [ 26.024067][ T24] audit: type=1400 audit(1761685499.570:211): avc: denied { write } for pid=334 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.048758][ T338] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.055860][ T24] audit: type=1400 audit(1761685499.570:212): avc: denied { read } for pid=334 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.077819][ T338] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 26.085589][ T338] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.101666][ T338] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 26.111054][ T338] System zones: 0-5 [ 26.120028][ T338] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000400,journal_ioprio=0x0000000000000004,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,nomblk_io_submit,test_dummy_encryption=v1,,errors=continue [ 26.144351][ T24] audit: type=1400 audit(1761685499.770:213): avc: denied { sys_admin } for pid=341 comm="syz.3.12" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 26.172535][ T338] EXT4-fs (loop0): re-mounted. Opts: (null) [ 26.191075][ T24] audit: type=1400 audit(1761685499.780:214): avc: denied { unmount } for pid=341 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.211097][ T24] audit: type=1400 audit(1761685499.810:215): avc: denied { write } for pid=325 comm="syz.4.8" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.467995][ T353] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 26.571353][ T333] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 26.688147][ T333] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 26.889757][ T333] F2FS-fs (loop2): invalid crc value [ 27.088763][ T333] F2FS-fs (loop2): Found nat_bits in checkpoint [ 27.288220][ T366] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue [ 27.343482][ T366] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.371251][ T333] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 27.398644][ T333] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 27.494207][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.522159][ T373] 9pnet: Insufficient options for proto=fd [ 27.630009][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.637601][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.565688][ T382] device bridge_slave_1 left promiscuous mode [ 28.591557][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 28.844894][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.856146][ T382] device bridge_slave_0 left promiscuous mode [ 28.863292][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.901997][ T389] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 28.901997][ T389] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 28.901997][ T389] [ 28.920450][ T389] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 28.992040][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 28.992052][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 29.032207][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 29.051042][ T25] usb 1-1: unable to read config index 0 descriptor/all [ 29.052120][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 29.066747][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 29.074556][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 29.080981][ T25] usb 1-1: can't read configurations, error -71 [ 29.082393][ T278] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 29.192247][ T397] cgroup: syz.0.25 (397) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 29.291210][ T397] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 29.411510][ T400] fuse: Bad value for 'fd' [ 30.376912][ T393] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:0, segno:3, type:0, next_blkoff:5, blkofs:5 [ 30.425274][ T393] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 30.436837][ T388] F2FS-fs (loop1): fault_injection options not supported [ 30.456678][ T388] F2FS-fs (loop1): fault_type options not supported [ 30.466380][ T388] F2FS-fs (loop1): invalid crc value [ 30.472850][ T388] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.582079][ T388] F2FS-fs (loop1): Start checkpoint disabled! [ 30.618660][ T388] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 30.641041][ T25] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 30.751894][ T9] attempt to access beyond end of device [ 30.751894][ T9] loop1: rw=2049, want=40976, limit=40427 [ 31.081236][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 31.092886][ T25] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 31.103851][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.241212][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.611156][ T311] usb 5-1: device descriptor read/64, error -71 [ 32.010984][ T311] usb 5-1: device descriptor read/64, error -71 [ 32.048826][ T25] usb 1-1: config 0 descriptor?? [ 32.071612][ T405] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 32.102115][ T457] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.152064][ T457] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000 [ 32.281017][ T311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.486805][ T24] kauditd_printk_skb: 106 callbacks suppressed [ 32.486858][ T24] audit: type=1400 audit(1761685506.140:322): avc: denied { read } for pid=456 comm="syz.1.38" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.598196][ T25] belkin 0003:050D:3201.0001: unknown main item tag 0x0 [ 32.633666][ T25] belkin 0003:050D:3201.0001: unknown main item tag 0x0 [ 32.643078][ T24] audit: type=1400 audit(1761685506.140:323): avc: denied { open } for pid=456 comm="syz.1.38" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.676511][ T24] audit: type=1400 audit(1761685506.150:324): avc: denied { ioctl } for pid=456 comm="syz.1.38" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.683467][ T25] belkin 0003:050D:3201.0001: unknown main item tag 0x0 [ 32.710793][ T25] belkin 0003:050D:3201.0001: hiddev96,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.0-1/input0 [ 32.730542][ T24] audit: type=1400 audit(1761685506.160:325): avc: denied { mounton } for pid=456 comm="syz.1.38" path="/4/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.833395][ T25] usb 1-1: USB disconnect, device number 3 [ 32.861022][ T311] usb 5-1: device descriptor read/64, error -71 [ 32.990110][ T24] audit: type=1400 audit(1761685506.660:326): avc: denied { connect } for pid=468 comm="syz.1.41" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.040027][ T24] audit: type=1400 audit(1761685506.690:327): avc: denied { write } for pid=468 comm="syz.1.41" laddr=fe80::13 lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.091186][ T24] audit: type=1400 audit(1761685506.740:328): avc: denied { setopt } for pid=470 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.121172][ T24] audit: type=1400 audit(1761685506.790:329): avc: denied { read } for pid=470 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.198140][ T460] F2FS-fs (loop2): invalid crc value [ 33.232237][ T460] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.277845][ T460] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 33.291050][ T311] usb 5-1: device descriptor read/64, error -71 [ 33.336967][ T460] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 33.422450][ T311] usb usb5-port1: attempt power cycle [ 33.739505][ T24] audit: type=1400 audit(1761685507.400:330): avc: denied { watch } for pid=461 comm="syz.3.39" path="/18/control" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.110924][ C0] sched: RT throttling activated [ 35.173329][ T492] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 35.182861][ T492] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.554845][ T24] audit: type=1400 audit(1761685509.230:331): avc: denied { read } for pid=459 comm="syz.2.40" name="memory.events" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.411571][ T509] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 36.481292][ T508] device syzkaller0 entered promiscuous mode [ 36.723189][ T526] tmpfs: Unknown parameter 'nolazytimeï' [ 36.731432][ T524] FAT-fs (loop1): Unrecognized mount option "doJs" or missing value [ 36.749654][ T520] xt_hashlimit: max too large, truncated to 1048576 [ 36.897456][ T517] F2FS-fs (loop4): fault_injection options not supported [ 36.904692][ T517] F2FS-fs (loop4): Unrecognized mount option "compre" or missing value [ 37.014930][ T529] EXT4-fs (loop0): Test dummy encryption mode enabled [ 37.044082][ T529] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 37.075433][ T529] System zones: 0-5 [ 37.107101][ T529] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 37.887554][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 37.910335][ T24] audit: type=1400 audit(1761685511.080:345): avc: denied { wake_alarm } for pid=528 comm="syz.0.57" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.363157][ T569] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 39.571390][ T24] audit: type=1400 audit(1761685513.240:346): avc: denied { bind } for pid=556 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.597252][ T24] audit: type=1400 audit(1761685513.250:347): avc: denied { read write } for pid=574 comm="syz.2.67" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.625450][ T24] audit: type=1400 audit(1761685513.250:348): avc: denied { open } for pid=574 comm="syz.2.67" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.684637][ T24] audit: type=1400 audit(1761685513.250:349): avc: denied { name_bind } for pid=556 comm="syz.4.64" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 39.705639][ T24] audit: type=1400 audit(1761685513.250:350): avc: denied { node_bind } for pid=556 comm="syz.4.64" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 39.734748][ T24] audit: type=1400 audit(1761685513.270:351): avc: denied { ioctl } for pid=574 comm="syz.2.67" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.794534][ T538] F2FS-fs (loop1): invalid crc value [ 39.821913][ T538] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.961543][ T591] EXT4-fs (loop4): Ignoring removed nobh option [ 39.987058][ T538] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 40.135535][ T591] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue [ 40.154083][ T587] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 40.281133][ T24] audit: type=1400 audit(1761685513.950:352): avc: denied { mount } for pid=586 comm="syz.0.71" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.305147][ T587] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.425033][ T591] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.591822][ T587] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: block 3: comm syz.0.71: lblock 3 mapped to illegal pblock 3 (length 1) [ 40.611935][ T24] audit: type=1400 audit(1761685514.260:353): avc: denied { map } for pid=586 comm="syz.0.71" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.637396][ T591] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 3: comm syz.4.70: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 40.658693][ T587] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 40.675211][ T24] audit: type=1400 audit(1761685514.350:354): avc: denied { create } for pid=589 comm="syz.4.70" dev="anon_inodefs" ino=16591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.700166][ T604] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: block 3: comm syz.0.71: lblock 3 mapped to illegal pblock 3 (length 1) [ 40.705207][ T587] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.705207][ T587] [ 41.447750][ T626] hub 9-0:1.0: USB hub found [ 41.453910][ T626] hub 9-0:1.0: 1 port detected [ 41.772716][ T633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 41.994532][ T639] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 42.513354][ T666] FAT-fs (loop0): Directory bread(block 64) failed [ 42.521064][ T666] FAT-fs (loop0): Directory bread(block 65) failed [ 42.541140][ T666] FAT-fs (loop0): Directory bread(block 66) failed [ 42.556009][ T666] FAT-fs (loop0): Directory bread(block 67) failed [ 42.578248][ T666] FAT-fs (loop0): Directory bread(block 68) failed [ 42.591585][ T666] FAT-fs (loop0): Directory bread(block 69) failed [ 42.598724][ T666] FAT-fs (loop0): Directory bread(block 70) failed [ 42.605412][ T666] FAT-fs (loop0): Directory bread(block 71) failed [ 42.612040][ T666] FAT-fs (loop0): Directory bread(block 72) failed [ 42.618688][ T666] FAT-fs (loop0): Directory bread(block 73) failed [ 42.699678][ T661] F2FS-fs (loop2): fault_injection options not supported [ 42.726835][ T661] F2FS-fs (loop2): fault_type options not supported [ 42.784362][ T674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.91'. [ 42.797493][ T661] F2FS-fs (loop2): invalid crc value [ 42.805250][ T661] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.845046][ T661] F2FS-fs (loop2): Start checkpoint disabled! [ 42.851008][ T671] F2FS-fs (loop1): Unrecognized mount option "0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff1844674407370955161500000000000000000000003ÿ0x0000000000000000宅›­ë(וœŸÓ½°õõúBÜÇêÏà)å¤ãÓ®.UºñÙ0ŠßAÞÓ ™Înn5}™ [ 42.851008][ T671] 8ôÑI¡–`Jø»\.{c2áχ’^u/A½Å¡nŒä©è¡V~ì17ǘZ÷di" or missing value [ 42.854429][ T661] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 42.924840][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 42.924853][ T24] audit: type=1326 audit(1761685516.600:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=660 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18d7c7c810 code=0x7ffc0000 [ 43.016515][ T24] audit: type=1326 audit(1761685516.630:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=660 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 43.039974][ T24] audit: type=1326 audit(1761685516.630:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=660 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 43.063068][ T24] audit: type=1326 audit(1761685516.630:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=660 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 43.064727][ T7] attempt to access beyond end of device [ 43.064727][ T7] loop2: rw=2049, want=40976, limit=40427 [ 43.086423][ T24] audit: type=1326 audit(1761685516.630:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=660 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 43.086441][ T24] audit: type=1326 audit(1761685516.630:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=660 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 43.086458][ T24] audit: type=1326 audit(1761685516.630:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=660 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 43.086474][ T24] audit: type=1326 audit(1761685516.630:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=660 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 43.086495][ T24] audit: type=1326 audit(1761685516.630:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=660 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 43.213654][ T24] audit: type=1326 audit(1761685516.630:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=660 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 43.342964][ T687] loop4: p4 < > [ 43.671236][ T721] netlink: 56 bytes leftover after parsing attributes in process `syz.0.97'. [ 44.013578][ T700] F2FS-fs (loop2): invalid crc value [ 44.049356][ T700] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.103813][ T700] F2FS-fs (loop2): Start checkpoint disabled! [ 44.121096][ T700] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 44.210971][ T15] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 44.301025][ T712] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 44.380370][ T749] cgroup: Unknown subsys name 'appraise_type' [ 44.801046][ T712] usb 2-1: Using ep0 maxpacket: 32 [ 44.841097][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 44.857519][ T15] usb 1-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 44.881038][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.901182][ T15] usb 1-1: config 0 descriptor?? [ 44.921078][ T731] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 44.931002][ T712] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 44.939187][ T712] usb 2-1: config 0 has no interface number 0 [ 45.141081][ T712] usb 2-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04 [ 45.340359][ T757] overlayfs: failed to clone upperpath [ 45.561489][ T758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'. [ 45.594643][ T712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.603941][ T712] usb 2-1: Product: syz [ 45.608289][ T712] usb 2-1: Manufacturer: syz [ 45.613135][ T712] usb 2-1: SerialNumber: syz [ 45.622114][ T712] usb 2-1: config 0 descriptor?? [ 45.763946][ T760] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 46.841014][ T15] usbhid 1-1:0.0: can't add hid device: -71 [ 46.847053][ T15] usbhid: probe of 1-1:0.0 failed with error -71 [ 46.854260][ T15] usb 1-1: USB disconnect, device number 4 [ 46.991114][ T712] asix 2-1:0.154 (unnamed net_device) (uninitialized): invalid hw address, using random [ 47.021780][ T712] asix 2-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 47.050130][ T712] asix 2-1:0.154 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 47.101078][ T712] asix 2-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 47.131015][ T712] asix 2-1:0.154 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 47.146901][ T712] asix 2-1:0.154 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 47.191184][ T712] asix: probe of 2-1:0.154 failed with error -71 [ 47.202151][ T712] usb 2-1: USB disconnect, device number 2 [ 47.357935][ T782] F2FS-fs (loop4): invalid crc value [ 47.387094][ T782] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.496831][ T782] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 47.507338][ T782] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 48.594188][ T816] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 48.629797][ T24] kauditd_printk_skb: 59 callbacks suppressed [ 48.629867][ T24] audit: type=1400 audit(1761685522.280:453): avc: denied { relabelto } for pid=781 comm="syz.4.119" name="file1" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 49.107117][ T712] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 49.129554][ T24] audit: type=1400 audit(1761685522.790:454): avc: denied { setopt } for pid=817 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.149026][ T24] audit: type=1400 audit(1761685522.790:455): avc: denied { bind } for pid=817 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.149044][ T24] audit: type=1400 audit(1761685522.790:456): avc: denied { name_bind } for pid=817 comm="syz.3.128" src=20262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 49.149061][ T24] audit: type=1400 audit(1761685522.790:457): avc: denied { node_bind } for pid=817 comm="syz.3.128" saddr=100.1.1.0 src=20262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 49.167585][ T804] F2FS-fs (loop0): invalid crc value [ 49.277257][ T831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.132'. [ 49.286127][ T804] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.357627][ T804] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 49.369738][ T804] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.374324][ T712] usb 2-1: Using ep0 maxpacket: 32 [ 50.471033][ T712] usb 2-1: device descriptor read/all, error -71 [ 50.650005][ T859] overlayfs: failed to clone upperpath [ 50.799001][ T862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 50.889822][ T863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 50.915135][ T862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 52.186128][ T24] audit: type=1400 audit(1761685525.860:458): avc: denied { lock } for pid=881 comm="syz.3.144" path="socket:[16039]" dev="sockfs" ino=16039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 53.646666][ T903] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.897741][ T903] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000 [ 54.108829][ T912] netlink: 79 bytes leftover after parsing attributes in process `syz.1.150'. [ 54.267357][ T910] xt_bpf: check failed: parse error [ 54.630227][ T24] audit: type=1400 audit(1761685528.280:459): avc: denied { watch_reads } for pid=914 comm="syz.1.151" path="/23" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.976729][ T24] audit: type=1400 audit(1761685528.400:460): avc: denied { read write } for pid=917 comm="syz.2.152" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.190359][ T24] audit: type=1400 audit(1761685528.400:461): avc: denied { open } for pid=917 comm="syz.2.152" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.215549][ T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 55.551888][ T928] EXT4-fs (loop0): Test dummy encryption mode enabled [ 55.572482][ T928] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 55.581907][ T928] EXT4-fs (loop0): Test dummy encryption mode enabled [ 55.589865][ T928] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 55.598771][ T928] System zones: 0-5 [ 55.603668][ T928] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000400,journal_ioprio=0x0000000000000004,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,nomblk_io_submit,test_dummy_encryption=v1,,errors=continue [ 55.655096][ T24] audit: type=1400 audit(1761685529.330:462): avc: denied { remount } for pid=927 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.676451][ T926] device wireguard0 entered promiscuous mode [ 55.691594][ T928] EXT4-fs (loop0): re-mounted. Opts: (null) [ 55.712666][ T24] audit: type=1400 audit(1761685529.390:463): avc: denied { ioctl } for pid=933 comm="syz.1.156" path="socket:[16075]" dev="sockfs" ino=16075 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.751214][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.768419][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 55.786280][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 55.796826][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.819986][ T25] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 55.829522][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.841778][ T25] usb 3-1: config 0 descriptor?? [ 56.415792][ T25] usb 3-1: MIDIStreaming interface descriptor not found [ 56.573825][ T284] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 56.758815][ T24] audit: type=1400 audit(1761685530.430:464): avc: denied { mounton } for pid=945 comm="syz.3.159" path="/58/file1" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 56.981061][ T284] usb 1-1: Using ep0 maxpacket: 16 [ 57.105917][ T24] audit: type=1326 audit(1761685530.780:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=951 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff457189fc9 code=0x7ffc0000 [ 57.137493][ T956] overlayfs: missing 'lowerdir' [ 57.191033][ T284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 57.202899][ T284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 57.214174][ T284] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 57.227442][ T284] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 57.236686][ T284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.245672][ T284] usb 1-1: config 0 descriptor?? [ 57.253841][ T24] audit: type=1326 audit(1761685530.780:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=951 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff457189fc9 code=0x7ffc0000 [ 57.277336][ T24] audit: type=1326 audit(1761685530.780:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=951 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff457189fc9 code=0x7ffc0000 [ 57.300933][ T928] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 57.312192][ T24] audit: type=1326 audit(1761685530.780:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=951 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff457189fc9 code=0x7ffc0000 [ 57.339697][ T953] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 57.348521][ T953] FAT-fs (loop4): Filesystem has been set read-only [ 57.581108][ T573] usb 3-1: USB disconnect, device number 2 [ 57.723535][ T940] F2FS-fs (loop1): invalid crc value [ 57.754373][ T964] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 57.774768][ T940] F2FS-fs (loop1): Found nat_bits in checkpoint [ 57.826690][ T940] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 57.851129][ T940] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 57.861860][ T284] microsoft 0003:045E:07DA.0002: unknown main item tag 0xd [ 57.882486][ T284] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 57.903456][ T284] microsoft 0003:045E:07DA.0002: unknown main item tag 0x7 [ 57.920456][ T284] microsoft 0003:045E:07DA.0002: item fetching failed at offset 33/34 [ 57.989350][ T284] microsoft 0003:045E:07DA.0002: parse failed [ 57.995739][ T284] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 58.923427][ T311] usb 1-1: USB disconnect, device number 5 [ 60.342607][ T24] kauditd_printk_skb: 150 callbacks suppressed [ 60.342698][ T24] audit: type=1400 audit(1761685534.010:619): avc: denied { unlink } for pid=997 comm="syz.2.173" name="#3" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.666440][ T1011] overlayfs: missing 'lowerdir' [ 61.216127][ T24] audit: type=1400 audit(1761685534.890:620): avc: denied { name_bind } for pid=1018 comm="syz.2.177" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.513718][ T1026] Zero length message leads to an empty skb [ 61.534619][ T1019] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.551320][ T1019] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 61.571503][ T1019] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 61.589826][ T1020] EXT4-fs (loop2): Test dummy encryption mode enabled [ 61.614924][ T1020] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 61.691148][ T24] audit: type=1400 audit(1761685535.370:621): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.762420][ T1030] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=1030 comm=syz.1.180 [ 61.778489][ T24] audit: type=1400 audit(1761685535.440:622): avc: denied { bind } for pid=1029 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.825885][ T1030] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=1030 comm=syz.1.180 [ 61.838648][ T24] audit: type=1400 audit(1761685535.500:623): avc: denied { setopt } for pid=1029 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.865382][ T24] audit: type=1400 audit(1761685535.540:624): avc: denied { relabelfrom } for pid=1029 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.889061][ T24] audit: type=1400 audit(1761685535.540:625): avc: denied { relabelto } for pid=1029 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.960183][ T24] audit: type=1400 audit(1761685535.630:626): avc: denied { mount } for pid=1018 comm="syz.2.177" name="/" dev="pstore" ino=13381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 61.983575][ T1037] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.213594][ T24] audit: type=1400 audit(1761685535.890:627): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 62.379616][ T24] audit: type=1400 audit(1761685536.050:628): avc: denied { ioctl } for pid=1047 comm="syz.3.186" path="socket:[16219]" dev="sockfs" ino=16219 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.406929][ T490] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 62.408395][ T1048] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 62.434604][ T1048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.186'. [ 62.522502][ T1048] raw_sendmsg: syz.3.186 forgot to set AF_INET. Fix it! [ 62.943716][ T1056] overlayfs: failed to clone upperpath [ 63.375141][ T490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.386357][ T490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.397685][ T490] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 63.406833][ T490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.421238][ T490] usb 1-1: config 0 descriptor?? [ 63.525378][ T1066] overlayfs: missing 'lowerdir' [ 64.565585][ T1070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.190'. [ 64.575307][ T1070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.190'. [ 64.581060][ T490] usb 1-1: string descriptor 0 read error: -22 [ 64.590597][ T1070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.190'. [ 64.688065][ T1079] syz.3.194[1079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.688126][ T1079] syz.3.194[1079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.854544][ T490] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input6 [ 65.069115][ T490] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 65.216430][ T1090] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.225856][ T1090] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.193: Failed to acquire dquot type 1 [ 65.240650][ T1090] EXT4-fs (loop4): 1 truncate cleaned up [ 65.385938][ T1090] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue [ 65.423609][ T25] usb 1-1: USB disconnect, device number 6 [ 65.844421][ T1101] fido_id[1101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 65.846692][ T1060] F2FS-fs (loop2): invalid crc value [ 65.899738][ T1060] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.055749][ T1060] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 66.107606][ T1060] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 66.311844][ T1110] F2FS-fs (loop4): fault_injection options not supported [ 66.320484][ T1110] F2FS-fs (loop4): invalid crc value [ 66.327744][ T1110] F2FS-fs (loop4): Found nat_bits in checkpoint [ 67.303289][ T1110] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 67.416039][ T1132] x_tables: duplicate underflow at hook 1 [ 67.921016][ T24] kauditd_printk_skb: 64 callbacks suppressed [ 67.921029][ T24] audit: type=1400 audit(1761685541.170:691): avc: denied { map } for pid=1133 comm="syz.3.205" path="socket:[16369]" dev="sockfs" ino=16369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.061001][ T24] audit: type=1400 audit(1761685541.170:692): avc: denied { read } for pid=1133 comm="syz.3.205" path="socket:[16369]" dev="sockfs" ino=16369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.616141][ T277] attempt to access beyond end of device [ 68.616141][ T277] loop4: rw=2049, want=45104, limit=40427 [ 68.842517][ T1157] 9pnet: Insufficient options for proto=fd [ 68.928649][ T1166] device syzkaller0 entered promiscuous mode [ 69.135177][ T1173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.214'. [ 69.171504][ T1179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.216'. [ 69.233603][ T1178] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 69.242721][ T1178] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.396350][ T24] audit: type=1400 audit(1761685543.070:693): avc: denied { read write } for pid=1195 comm="syz.1.219" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.422999][ T24] audit: type=1400 audit(1761685543.070:694): avc: denied { open } for pid=1195 comm="syz.1.219" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.449908][ T24] audit: type=1400 audit(1761685543.100:695): avc: denied { ioctl } for pid=1195 comm="syz.1.219" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.481019][ T24] audit: type=1400 audit(1761685543.150:696): avc: denied { connect } for pid=1195 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.570977][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.611011][ T15] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.767112][ T1201] 9pnet: Insufficient options for proto=fd [ 69.802252][ T24] audit: type=1400 audit(1761685543.480:697): avc: denied { ioctl } for pid=1202 comm="syz.0.222" path="socket:[17492]" dev="sockfs" ino=17492 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.827310][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 69.923877][ T24] audit: type=1400 audit(1761685543.600:698): avc: denied { mounton } for pid=1209 comm="syz.0.224" path="/39/file1/file0" dev="loop0" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 69.950699][ T24] audit: type=1400 audit(1761685543.620:699): avc: denied { setattr } for pid=1209 comm="syz.0.224" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.972641][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.983626][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024 [ 69.995002][ T20] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.001288][ T15] usb 5-1: config 0 has an invalid interface number: 227 but max is 0 [ 70.013432][ T15] usb 5-1: config 0 has no interface number 0 [ 70.015913][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.020459][ T15] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=ab.24 [ 70.037581][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.048062][ T15] usb 5-1: config 0 descriptor?? [ 70.048725][ T20] usb 3-1: config 0 descriptor?? [ 70.071025][ T1192] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 70.091570][ T20] hub 3-1:0.0: USB hub found [ 70.311013][ T20] hub 3-1:0.0: 1 port detected [ 70.321219][ T15] snd-usb-audio: probe of 5-1:0.227 failed with error -71 [ 70.329549][ T15] usb 5-1: USB disconnect, device number 5 [ 70.666060][ T1220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.226'. [ 70.675067][ T1220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.226'. [ 70.684408][ T1220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.226'. [ 71.717476][ T1192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 71.738248][ T5] usb 3-1: USB disconnect, device number 3 [ 71.751268][ T20] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 71.795039][ T1241] input: syz1 as /devices/virtual/input/input7 [ 71.952365][ T1249] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nombcache,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,user_xattr,delalloc,,errors=continue [ 72.063024][ T24] audit: type=1400 audit(1761685545.730:700): avc: denied { connect } for pid=1258 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.019874][ T24] audit: type=1400 audit(1761685546.690:701): avc: denied { create } for pid=1274 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.273735][ T1282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.239'. [ 73.282739][ T1282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.239'. [ 73.291970][ T1282] netlink: 36 bytes leftover after parsing attributes in process `syz.4.239'. [ 73.372184][ T1283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 73.741438][ T24] audit: type=1400 audit(1761685547.110:702): avc: denied { map } for pid=1278 comm="syz.2.242" path="socket:[18514]" dev="sockfs" ino=18514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 73.891125][ T15] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 74.044370][ T1296] overlayfs: failed to clone upperpath [ 75.110839][ T1292] FAT-fs (loop1): Unrecognized mount option "q7id=Uî0x000000000000ee01" or missing value [ 75.531061][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 75.542602][ T15] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 75.551777][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.566101][ T15] usb 1-1: config 0 descriptor?? [ 75.591054][ T1277] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.315947][ T1277] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 76.406525][ T712] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 76.422306][ T1277] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 76.437190][ T24] audit: type=1400 audit(1761685550.100:703): avc: denied { rename } for pid=1276 comm="syz.0.241" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.493436][ T15] hid-generic 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 77.148024][ T1343] syz.2.256[1343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.148431][ T1343] syz.2.256[1343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.176852][ T712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 77.201124][ T712] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 77.203201][ T1344] SELinux: policydb magic number 0x204e0002 does not match expected magic number 0xf97cff8c [ 77.222254][ T1344] SELinux: failed to load policy [ 77.230974][ T24] audit: type=1400 audit(1761685550.933:704): avc: denied { load_policy } for pid=1342 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 77.359297][ T712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.368132][ T712] usb 5-1: config 0 descriptor?? [ 77.391362][ T1315] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 77.442950][ T1353] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 77.515542][ T1352] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.540639][ T1352] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 77.562366][ T1352] System zones: 0-5 [ 77.572836][ T1352] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000004,test_dummy_encryption,stripe=0x0000000000000008,usrjquota=,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 77.641189][ T1352] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 77.665708][ T24] audit: type=1326 audit(1761685551.393:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1351 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 77.710980][ T24] audit: type=1326 audit(1761685551.393:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1351 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 77.759314][ T24] audit: type=1326 audit(1761685551.423:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1351 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 77.806129][ T24] audit: type=1326 audit(1761685551.423:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1351 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 77.860691][ T24] audit: type=1326 audit(1761685551.423:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1351 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 77.885073][ T24] audit: type=1326 audit(1761685551.423:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1351 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f18d7c7dfc9 code=0x7ffc0000 [ 77.915286][ T1360] EXT4-fs (loop1): Test dummy encryption mode enabled [ 77.942952][ T1360] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 77.951351][ T1360] System zones: 0-5 [ 77.955773][ T1360] ================================================================== [ 77.963880][ T1360] BUG: KASAN: use-after-free in __ext4_iget+0x36d/0x40e0 [ 77.970908][ T1360] Read of size 8 at addr ffff88811bff8b98 by task syz.1.261/1360 [ 77.978628][ T1360] [ 77.981010][ T1360] CPU: 0 PID: 1360 Comm: syz.1.261 Not tainted syzkaller #0 [ 77.988299][ T1360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.998385][ T1360] Call Trace: [ 78.001694][ T1360] __dump_stack+0x21/0x24 [ 78.006022][ T1360] dump_stack_lvl+0x169/0x1d8 [ 78.010692][ T1360] ? show_regs_print_info+0x18/0x18 [ 78.015905][ T1360] ? thaw_kernel_threads+0x220/0x220 [ 78.021191][ T1360] ? _raw_spin_lock+0x8e/0xe0 [ 78.025866][ T1360] print_address_description+0x7f/0x2c0 [ 78.031416][ T1360] ? __ext4_iget+0x36d/0x40e0 [ 78.036134][ T1360] kasan_report+0xe2/0x130 [ 78.040553][ T1360] ? __ext4_iget+0x36d/0x40e0 [ 78.045257][ T1360] __asan_report_load8_noabort+0x14/0x20 [ 78.050884][ T1360] __ext4_iget+0x36d/0x40e0 [ 78.055388][ T1360] ? idr_replace+0x190/0x190 [ 78.059972][ T1360] ? __kasan_check_write+0x14/0x20 [ 78.065175][ T1360] ? _raw_write_lock+0x8e/0xe0 [ 78.069934][ T1360] ? _raw_write_trylock+0x140/0x140 [ 78.075125][ T1360] ? __proc_create+0x564/0x8d0 [ 78.079882][ T1360] ? __kasan_check_write+0x14/0x20 [ 78.085081][ T1360] ? ext4_get_projid+0x140/0x140 [ 78.090279][ T1360] ? _raw_write_unlock+0x2b/0x60 [ 78.095238][ T1360] ? proc_register+0x34d/0x4e0 [ 78.100015][ T1360] ext4_enable_quotas+0x33b/0x6d0 [ 78.105054][ T1360] ext4_fill_super+0x82a9/0x8b60 [ 78.109997][ T1360] ? ext4_mount+0x40/0x40 [ 78.114327][ T1360] ? set_blocksize+0x1fe/0x3c0 [ 78.119090][ T1360] ? sb_set_blocksize+0xaa/0xf0 [ 78.123941][ T1360] mount_bdev+0x28b/0x3a0 [ 78.128265][ T1360] ? ext4_mount+0x40/0x40 [ 78.132594][ T1360] ext4_mount+0x34/0x40 [ 78.136745][ T1360] legacy_get_tree+0xed/0x190 [ 78.141438][ T1360] ? ext4_chksum+0x160/0x160 [ 78.146044][ T1360] vfs_get_tree+0x89/0x260 [ 78.150459][ T1360] do_new_mount+0x25a/0xa20 [ 78.154962][ T1360] path_mount+0x572/0xc80 [ 78.159295][ T1360] __se_sys_mount+0x318/0x380 [ 78.164207][ T1360] ? __x64_sys_mount+0xd0/0xd0 [ 78.168968][ T1360] ? debug_smp_processor_id+0x17/0x20 [ 78.174341][ T1360] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 78.180407][ T1360] __x64_sys_mount+0xbf/0xd0 [ 78.184996][ T1360] do_syscall_64+0x31/0x40 [ 78.189409][ T1360] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 78.195299][ T1360] RIP: 0033:0x7f58ed50476a [ 78.199724][ T1360] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.219436][ T1360] RSP: 002b:00007f58ebf6ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.227872][ T1360] RAX: ffffffffffffffda RBX: 00007f58ebf6aef0 RCX: 00007f58ed50476a [ 78.235854][ T1360] RDX: 0000200000000100 RSI: 0000200000000280 RDI: 00007f58ebf6aeb0 [ 78.243826][ T1360] RBP: 0000200000000100 R08: 00007f58ebf6aef0 R09: 0000000002800000 [ 78.252501][ T1360] R10: 0000000002800000 R11: 0000000000000246 R12: 0000200000000280 [ 78.260477][ T1360] R13: 00007f58ebf6aeb0 R14: 0000000000000bb4 R15: 0000200000000380 [ 78.268447][ T1360] [ 78.270770][ T1360] Allocated by task 782: [ 78.275019][ T1360] __kasan_slab_alloc+0xbd/0xf0 [ 78.279872][ T1360] slab_post_alloc_hook+0x5d/0x2f0 [ 78.285109][ T1360] kmem_cache_alloc+0x165/0x2e0 [ 78.290004][ T1360] f2fs_alloc_inode+0x26/0x410 [ 78.294772][ T1360] iget_locked+0x146/0x7d0 [ 78.299191][ T1360] f2fs_iget+0x55/0x4ed0 [ 78.303433][ T1360] f2fs_fill_super+0x45ba/0x6c70 [ 78.308375][ T1360] mount_bdev+0x28b/0x3a0 [ 78.312706][ T1360] f2fs_mount+0x34/0x40 [ 78.316858][ T1360] legacy_get_tree+0xed/0x190 [ 78.321530][ T1360] vfs_get_tree+0x89/0x260 [ 78.325950][ T1360] do_new_mount+0x25a/0xa20 [ 78.330447][ T1360] path_mount+0x572/0xc80 [ 78.334780][ T1360] __se_sys_mount+0x318/0x380 [ 78.339453][ T1360] __x64_sys_mount+0xbf/0xd0 [ 78.344040][ T1360] do_syscall_64+0x31/0x40 [ 78.348463][ T1360] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 78.354346][ T1360] [ 78.356679][ T1360] Freed by task 19: [ 78.360485][ T1360] kasan_set_track+0x4a/0x70 [ 78.365071][ T1360] kasan_set_free_info+0x23/0x40 [ 78.370007][ T1360] ____kasan_slab_free+0x125/0x160 [ 78.375120][ T1360] __kasan_slab_free+0x11/0x20 [ 78.379880][ T1360] slab_free_freelist_hook+0xc5/0x190 [ 78.385250][ T1360] kmem_cache_free+0x100/0x2d0 [ 78.390012][ T1360] f2fs_free_inode+0x24/0x30 [ 78.394598][ T1360] i_callback+0x4c/0x70 [ 78.398753][ T1360] rcu_do_batch+0x4df/0xa80 [ 78.403456][ T1360] rcu_core+0x55f/0xd60 [ 78.407609][ T1360] rcu_core_si+0x9/0x10 [ 78.411763][ T1360] __do_softirq+0x255/0x563 [ 78.416256][ T1360] [ 78.418578][ T1360] Last potentially related work creation: [ 78.424297][ T1360] kasan_save_stack+0x3a/0x60 [ 78.428973][ T1360] __kasan_record_aux_stack+0xd2/0x100 [ 78.434512][ T1360] kasan_record_aux_stack_noalloc+0xb/0x10 [ 78.440335][ T1360] call_rcu+0x10e/0x1050 [ 78.444590][ T1360] evict+0x857/0x910 [ 78.448481][ T1360] iput+0x638/0x7c0 [ 78.452284][ T1360] f2fs_put_super+0x649/0xc00 [ 78.456957][ T1360] generic_shutdown_super+0x149/0x320 [ 78.462322][ T1360] kill_block_super+0x7f/0xf0 [ 78.466992][ T1360] kill_f2fs_super+0x2e7/0x390 [ 78.471751][ T1360] deactivate_locked_super+0xa0/0x100 [ 78.477117][ T1360] deactivate_super+0xaf/0xe0 [ 78.481794][ T1360] cleanup_mnt+0x446/0x500 [ 78.486225][ T1360] __cleanup_mnt+0x19/0x20 [ 78.490638][ T1360] task_work_run+0x127/0x190 [ 78.495220][ T1360] exit_to_user_mode_loop+0xcb/0xe0 [ 78.500516][ T1360] exit_to_user_mode_prepare+0x76/0xa0 [ 78.506056][ T1360] syscall_exit_to_user_mode+0x1d/0x40 [ 78.511509][ T1360] do_syscall_64+0x3d/0x40 [ 78.515917][ T1360] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 78.521791][ T1360] [ 78.524205][ T1360] The buggy address belongs to the object at ffff88811bff8670 [ 78.524205][ T1360] which belongs to the cache f2fs_inode_cache of size 1520 [ 78.538774][ T1360] The buggy address is located 1320 bytes inside of [ 78.538774][ T1360] 1520-byte region [ffff88811bff8670, ffff88811bff8c60) [ 78.552206][ T1360] The buggy address belongs to the page: [ 78.557842][ T1360] page:ffffea00046ffe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811bff9350 pfn:0x11bff8 [ 78.569367][ T1360] head:ffffea00046ffe00 order:3 compound_mapcount:0 compound_pincount:0 [ 78.577689][ T1360] flags: 0x4000000000010200(slab|head) [ 78.583146][ T1360] raw: 4000000000010200 ffffea00046fe800 0000000200000002 ffff8881029be000 [ 78.591731][ T1360] raw: ffff88811bff9350 000000008013000a 00000001ffffffff 0000000000000000 [ 78.600299][ T1360] page dumped because: kasan: bad access detected [ 78.606700][ T1360] page_owner tracks the page as allocated [ 78.612418][ T1360] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 393, ts 29854094524, free_ts 0 [ 78.632935][ T1360] prep_new_page+0x179/0x180 [ 78.637524][ T1360] get_page_from_freelist+0x2235/0x23d0 [ 78.643231][ T1360] __alloc_pages_nodemask+0x268/0x5f0 [ 78.648594][ T1360] new_slab+0x84/0x3f0 [ 78.652657][ T1360] ___slab_alloc+0x2a6/0x450 [ 78.657239][ T1360] __slab_alloc+0x63/0xa0 [ 78.661565][ T1360] kmem_cache_alloc+0x1af/0x2e0 [ 78.666406][ T1360] f2fs_alloc_inode+0x26/0x410 [ 78.671184][ T1360] iget_locked+0x146/0x7d0 [ 78.675595][ T1360] f2fs_iget+0x55/0x4ed0 [ 78.679832][ T1360] f2fs_fill_super+0x39f0/0x6c70 [ 78.684789][ T1360] mount_bdev+0x28b/0x3a0 [ 78.689113][ T1360] f2fs_mount+0x34/0x40 [ 78.693265][ T1360] legacy_get_tree+0xed/0x190 [ 78.698128][ T1360] vfs_get_tree+0x89/0x260 [ 78.702561][ T1360] do_new_mount+0x25a/0xa20 [ 78.707062][ T1360] page_owner free stack trace missing [ 78.712430][ T1360] [ 78.714874][ T1360] Memory state around the buggy address: [ 78.720509][ T1360] ffff88811bff8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.728575][ T1360] ffff88811bff8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.736718][ T1360] >ffff88811bff8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.744769][ T1360] ^ [ 78.749612][ T1360] ffff88811bff8c00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 78.757666][ T1360] ffff88811bff8c80: fc fc fc fc fc fc fc fc fc fc fc fc 00 00 00 00 [ 78.765717][ T1360] ================================================================== [ 78.773767][ T1360] Disabling lock debugging due to kernel taint [ 78.781488][ T1360] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 78.797914][ T1360] EXT4-fs (loop1): mount failed [ 78.804365][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 78.804378][ T24] audit: type=1400 audit(1761685552.533:721): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 78.832414][ T24] audit: type=1400 audit(1761685552.533:722): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.851053][ T712] usbhid 5-1:0.0: can't add hid device: -71 [ 78.854602][ T24] audit: type=1400 audit(1761685552.533:723): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.971287][ T24] audit: type=1400 audit(1761685552.533:724): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.995115][ T24] audit: type=1400 audit(1761685552.533:725): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.120786][ T24] audit: type=1400 audit(1761685552.533:726): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.144294][ T24] audit: type=1400 audit(1761685552.533:727): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.362397][ T712] usbhid: probe of 5-1:0.0 failed with error -71 [ 79.707538][ T712] usb 5-1: USB disconnect, device number 6 [ 79.767868][ T384] usb 1-1: USB disconnect, device number 7