last executing test programs: 11m0.518664552s ago: executing program 4 (id=2283): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x20000000) socket(0x1f, 0x3, 0x4) ioprio_get$uid(0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) close(0x3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 11m0.378935254s ago: executing program 4 (id=2285): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) 10m59.392078538s ago: executing program 4 (id=2293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x802, 0x1) 10m58.436279361s ago: executing program 4 (id=2302): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x550c, &(0x7f000000ab00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 10m57.098410121s ago: executing program 4 (id=2310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0xe8}}, 0x0) 10m55.376810936s ago: executing program 4 (id=2316): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x3, 0x3}, {0xffffffff, 0xfffffffd, 0x0, 0x0, 0x4}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x2000, 0x0, 0x0, 0x0, 0x0, "23f50000adb4004408020e90d1beaa82dc1ecf", 0x3}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4) 10m55.376191416s ago: executing program 32 (id=2316): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x3, 0x3}, {0xffffffff, 0xfffffffd, 0x0, 0x0, 0x4}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x2000, 0x0, 0x0, 0x0, 0x0, "23f50000adb4004408020e90d1beaa82dc1ecf", 0x3}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4) 10m17.606104056s ago: executing program 2 (id=2614): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x1, 0x100) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 10m17.473097118s ago: executing program 2 (id=2615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 10m16.570503161s ago: executing program 2 (id=2621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) 10m16.069610619s ago: executing program 2 (id=2625): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x3829410, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@quota}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@nogrpid}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIuHMyla+uPCV7MS9HhQG+8miE9K6PpMpp0rHXgduFuvJEheOFAvNd7L4f/gH/FQIdDRvHGm8hJT7quSdasy9rMfD5w2vfNe5L3PDnnefOenIQEMLQmsj+FiJcj4psk4nBEJHnbaOSNE2vrrT68Xs6WJBqNT/5KsvX2R0S59Vit+x3MKy9FxK9fRZwstPdbW16ZL1Uq6WJe3xsLVyZryyunLi2U5tK59PL0zMyZt2am333n7b7E2fhy7f/Hdz848/Xx1e9+vn/kdhJn41DensXVh25ubKxMxET+nIzF2U0rTvWhs0GS7PYGsC0jeZ6PRTYGHI6RPOuB/77sZbEBDKlE/sOQas0DWuf2fToPfmE8eH/tBKg9/tG190ZiX/Pc6MBq8tiZUXa+O96H/rM+fvnjzu1sif69DwGwpRs3I+L06Gj7+Jfk49/2ne5hnc19GP9g59zN5j9vdJr/FNbnP9Fh/nOwQ+5ux9b5X7jfh266yuZ/73Wc/65ftBofyWv/a875xpKLlyppNrb9PyJOxNjerP6k6zlnVu81urVtnP9lS9Z/ay6Yb8f90b2P32e2VC89S8wbPbgZ8UrH+W+yvv+TDvs/ez7O99jHsfTOa93ato7/+Wr8GPF6x/3/6IpWVpqsd70+Odk8HiZbR0W7v28d+61b/7sdf7b/Dzw5/vFk4/Xa2tP38cO+f9K8uG9z22PxR+/H/57k02Z5T37btVK9vjgVsSf5qP326Uf3bdVb62fxnzj+5PGv0/G/PyI+7zH+W0d/erVb2yDs/9mn2v9PX7j34Rffd+u/t/HvzWbpRH5LL+Nfrxv4LM8dAAAAAAAADJpCRByKpFBcLxcKxeLa5zuOxoFCpVqrn7xYXbo8G83vyo7HWKF1pfvwhs9DTOWfh23VpzfVZyLiSER8O7K/WS+Wq5XZ3Q4eAAAAAAAAAAAAAAAAAAAABsTBLt//z/w+0rb6Z3/u/CYCz5Of/IbhtWX+9+OXnoCB5PUfhpf8h+El/2F4yX8YXvIfhpf8h+El/2F4yX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq/PnzmVLY/Xh9XJWn726vDRfvXpqNq3NFxeWysVydfFKca5anaukxXJ1YavHq1SrV6amY+naZD2t1SdryysXFqpLl+sXLi2U5tIL6diORAUAAAAAAAAAAAAAAAAAAAAvltryynypUkkXFRS2VRgdjM1Q6HNht0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjk3wAAAP//cHo1gQ==") mount$tmpfs(0x0, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0) 10m15.856581842s ago: executing program 2 (id=2629): mmap(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 10m15.823261433s ago: executing program 2 (id=2630): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x8, 0x40000000000002, 0x4, 0xf, 0x1, 0x0, [{0x7, 0x5931, 0x9, '\x00', 0x1}]}) 10m15.792424263s ago: executing program 33 (id=2630): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x8, 0x40000000000002, 0x4, 0xf, 0x1, 0x0, [{0x7, 0x5931, 0x9, '\x00', 0x1}]}) 8m3.513605019s ago: executing program 6 (id=3543): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x6) mmap(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x1000002, 0x11012, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) utime(&(0x7f0000000080)='./cgroup\x00', 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4, 0x10d}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 8m2.477221153s ago: executing program 6 (id=3551): syz_emit_ethernet(0x25, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3fffff) 8m0.107082457s ago: executing program 6 (id=3564): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) r3 = dup2(r2, r2) fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, r2) read$FUSE(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0042}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x2c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 7m59.555111535s ago: executing program 6 (id=3565): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$eJzs3E1sFFUcAPD/bL/5kIr4AYJW8YOotLR8yMGLRhMPmpjoAeOplkKQQg2tiZBG0QMeDYl349HEu4knvRj1YEy86t2QENML6GnMzM4s23a3n0sX3N8v2e17M7N97z9vXuf1vd0NoGMNZU9JxLaI+CMidlSzCw8Yqv64OT838c/83EQSafrm30l+3I35uYny0PJ1W6uZNI3oy5J9Dcq98k7E+NTU5IUiPzJ77v2RmYuXDp45N3568vTk+bHjx48c3td7bOxovj9dZ3yV4mcW1409H03v3f3q21dfnzhx9d2fv8nqu63YXx/HuqRLazhUPbuLPZo9Pbmhwu4ov2ZP2+s2JN3NDx7ehAqxel0RkTVXT55LoisGavt2xCuftrFqwG2Wpmna6P4cdfftFPifSvRv6FDlvT77/7d8bM7I485w/cWIOFhk5ucmbtbi767NHfQs+v+2lYYi4sTlf7/MHtGKeQgAgBV8n41/nms0/qvEA3XH3VOsoQxGxL0RsTMi7ouIXRFxf0R+7IMR5x5aY/mLV0iWjn8q19YV2Cpl478XirWtmwvGf+XoLwa7itz2PP6e5NSZqclDxTk5ED19WX50mTJ+ePn3z8t0/6J99eO/7JGVX44Fi3pc6140QXdyfHY8T6Rp+vHGwo/rn0Ts6W4UfxLlMk4SEbsjYs86yzjzzNd7m+1bOf5lLLPOtFrpVxFPV9v/8sLx/62mSurXJwciorY+Ofr8sbGjI/0xNXlopLwqlvrltytvNCt/Q/G3QNb+Wxpe/7VV4MGkP2Lm4qWz+XrtzNrLuPLnZ3V9esHqchZ/5duINV//vclbebq32Pbh+OzshdGI3uS1pdvHbr22zJfHZ/Ef2N+4/++sq/HDEZFdxPsi4pFiETdru8ci4vGI2L9M/D+99MR7zfY1b/9ms/Ktdb04Ucu2f9S3/9oTXWd//K5Z+UPFGmQU56Fx+x/JUweKLbW/f8tYbQXXddIAAADgLlPJ3wOfVIZr6UpleLj6Hv5dsaUyNT0z++yp6Q/On6y+V34weirlTNeOuvnQ0WJuuMyPLcofLuaNv+gayPPDE9NTJ9sdPHS4rU36f+avrnbXDrjtWrCOBtyl9H/oXPo/dC79HzqX/g+dq1H/3+gHC4C7g/s/dK68/z91ud3VANrA/R86l/4PHanpZ+MrG/rIf9NE0upf2DBRfnfCZpS1cqL8LopNL31g3S/vX/nURaW9Z7VjEt1L2iK6W1pEX8NdbfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EL/BQAA///5etKr") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x42842, 0x10e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getdents64(r0, 0x0, 0x0) 7m58.654990988s ago: executing program 6 (id=3572): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) writev(0xffffffffffffffff, &(0x7f0000003700), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x87, @loopback, 0x4e23, 0x4, 'sh\x00', 0x37, 0x1, 0x31}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4e21, 0x0, 0x4, 0x6, 0x3}}, 0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002bbd7000fbdbdf2511000000080013008630818608001400", @ANYRES32=0x0, @ANYBLOB="0600120100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) socket(0x11, 0x800000003, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) 7m58.143119036s ago: executing program 6 (id=3574): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x7071, 0x8000) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000280)=""/219) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x64c002, 0x1d6) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001300)={0x0, 0x0, "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", "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"}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000980)=@deltaction={0xa0, 0x31, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x4, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x4c904) 7m58.138822975s ago: executing program 34 (id=3574): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x7071, 0x8000) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000280)=""/219) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x64c002, 0x1d6) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001300)={0x0, 0x0, "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", "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"}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000980)=@deltaction={0xa0, 0x31, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x4, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x4c904) 7m18.277224977s ago: executing program 3 (id=3890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000000000000000181100", @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb9ff}) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)) syz_open_pts(r6, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x500) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 7m16.413812874s ago: executing program 3 (id=3898): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0xa, "07f2cc3a"}, @local=@item_4={0x3, 0x2, 0xa, "a805a0d5"}, @global=@item_4={0x3, 0x1, 0x3, "4bfca3fb"}]}}, 0x0}, 0x0) 7m13.789505531s ago: executing program 3 (id=3919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8001, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x69}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7m13.747568782s ago: executing program 3 (id=3920): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./bus\x00', 0x52, &(0x7f00000004c0)=ANY=[], 0x4, 0x1b1, &(0x7f0000000280)="$eJzs2zFrE2EYB/DnahrTOiSDkzjc6BSafoIGqSAGBCWDgqDYBqQnBQsBHWw3B7+EH8bBVT+JYwfhpLk0aUKEGpocJL/fkodc/rnnfcMleQJ5ff/90cHxSe9V70fUkiQ29iKN8yQasRGXzgIAWCXneR6/8zzPb5/F1rfI87zsjgCARfP5DwDr5/mLl0/anc7+szStRWRf+t1+t7gtjrd78S6yOIydqMefuPiCMFTUjx539nfSgUZ8zU6H+dN+99ZkvhX1aMzOt4p8OpnfjO2r+d2ox93Z+d2Z+Wo8qI7ymxFRj19v4ziyOIiL7Dj/uZWmD592pvJ3Bo8DAACAVdBMRwbzezUm5/dmc/L4eD4u8u3k2r8PTM3XlbhXKXftALCuTj5+OnqTZYcf5ihqw+eYM3694ud2cZIFnuKGisstHd2zt4z9+d+ierXDqWJrwa1Wlr7kJCLK2vDvEVH6yz3XRT0oSngzApZqfPWX3QkAAAAAAAAAAAAAAPAvy/hfUdlrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD9/A0AAP//W1+CbQ==") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) unlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7m13.534281305s ago: executing program 3 (id=3923): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES8], 0xf, 0x2a4, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000000540)=""/237, 0xed) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xfffffffffffffffb) 7m13.311296678s ago: executing program 3 (id=3926): bpf$ITER_CREATE(0x21, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) 7m13.217062999s ago: executing program 35 (id=3926): bpf$ITER_CREATE(0x21, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) 6m24.170161573s ago: executing program 5 (id=4311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x20) 6m24.075324754s ago: executing program 5 (id=4312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643c4e8d41cdb7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6659f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac1223331f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed80000010000000000e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m23.886483127s ago: executing program 5 (id=4313): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f00000001c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x23, &(0x7f0000000280)=<r6=>0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$BINDER_WRITE_READ(r7, 0x40046208, 0x0) 6m22.765746203s ago: executing program 5 (id=4323): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000480)={0xffffffffffffffff, r0, 0x2, 0xce9, &(0x7f0000001ec0)="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", 0x3, 0x5, 0x6000, 0x100, 0xfffc, 0x2, 0x0, 'syz1\x00'}) symlink(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 6m22.360384719s ago: executing program 5 (id=4332): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000200000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) unlink(0x0) 6m21.55119062s ago: executing program 5 (id=4336): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000300)={'syz0\x00', {0x1ff, 0x6, 0x8, 0x1}, 0x4d, [0x3, 0x2, 0x1ff, 0x0, 0x5, 0xffffffff, 0x100, 0x0, 0x400, 0xf, 0x0, 0x1, 0xd, 0x3, 0x1, 0xe, 0x80000000, 0x2, 0x9, 0x5, 0xf, 0x5, 0x8, 0xd, 0x80000000, 0x100, 0x3, 0x80000001, 0x6, 0x236, 0x5, 0x0, 0x2, 0x7ffffffd, 0x1, 0x4, 0x48, 0x6, 0x3, 0x14e, 0x8, 0x1, 0x9, 0x7a07, 0xe52, 0xa, 0x1, 0x2, 0x40, 0x81, 0x8, 0x5, 0x8, 0x2f3, 0x3, 0x0, 0x1, 0x3, 0x7, 0x8, 0x2d, 0x6, 0x8001, 0x9], [0x2, 0x7, 0x9, 0x4, 0x1, 0x5e, 0xc2, 0x80000000, 0x20000000, 0xa3, 0x7ff, 0x1, 0x1, 0x8, 0x7, 0x9, 0x2, 0x8, 0x1, 0x7, 0xfffffffd, 0x5, 0x2, 0xffff, 0x7fff, 0x9, 0x401, 0x2, 0x0, 0x1, 0x59, 0xffffffff, 0x9, 0x7, 0x2, 0x800, 0x9, 0x1, 0xc1bc, 0x59d, 0xb9a5, 0xf, 0x6, 0x2, 0x4, 0x9, 0x0, 0xd, 0x10001, 0x7, 0x1, 0x1, 0x9, 0x7, 0x7, 0x80000000, 0x1, 0x2, 0x8, 0x4, 0x6, 0x6, 0x800, 0xfff], [0x4b, 0x81, 0x6, 0x7f, 0x80000000, 0x10001, 0xcdb, 0xd88a, 0x2, 0x6, 0x3, 0x8, 0xfff, 0xc8, 0x81, 0x0, 0x1ff, 0x31e, 0x4, 0x6, 0xa, 0x1, 0x7f, 0x800, 0x120, 0xf73b, 0x4, 0x9, 0x7ff, 0x2, 0xffc9, 0x7, 0x8001, 0x1, 0x39, 0x5, 0x1, 0x4, 0x7, 0x1, 0xb, 0x9, 0xf, 0x8, 0xb9, 0x2b, 0x6, 0x0, 0x8, 0x5, 0x7, 0x0, 0x4cc, 0x401, 0x8eef, 0x6, 0x8, 0x7, 0x9, 0x3, 0x8, 0x9, 0x9, 0x80], [0xc, 0x2, 0x1, 0x1ff, 0x6, 0xfffffff8, 0x6, 0x3ff, 0xffff, 0xa, 0x5, 0x6, 0x800, 0xff, 0x2, 0xfffffff7, 0x5, 0x1, 0x0, 0x4, 0x2ec3, 0x5, 0x4, 0x2, 0x20, 0x3, 0x7, 0x3, 0x9, 0x6, 0x2, 0x18000000, 0x6, 0x9, 0x10001, 0x2, 0x0, 0x58c20639, 0xa63, 0x5, 0x7, 0x7fff, 0x7, 0x0, 0x77c, 0x6ed5, 0x9, 0x800, 0xa, 0x9d62, 0x92f, 0xc54e, 0x8, 0x3d9, 0x5, 0xd, 0x0, 0xffff8001, 0x3, 0x1, 0xd14, 0xe000, 0x8, 0xd]}, 0x45c) sched_setaffinity(0x0, 0x8, &(0x7f0000004400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) stat(0x0, 0x0) prctl$PR_SET_SECCOMP(0x59616d61, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14080, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) 6m21.497363701s ago: executing program 36 (id=4336): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000300)={'syz0\x00', {0x1ff, 0x6, 0x8, 0x1}, 0x4d, [0x3, 0x2, 0x1ff, 0x0, 0x5, 0xffffffff, 0x100, 0x0, 0x400, 0xf, 0x0, 0x1, 0xd, 0x3, 0x1, 0xe, 0x80000000, 0x2, 0x9, 0x5, 0xf, 0x5, 0x8, 0xd, 0x80000000, 0x100, 0x3, 0x80000001, 0x6, 0x236, 0x5, 0x0, 0x2, 0x7ffffffd, 0x1, 0x4, 0x48, 0x6, 0x3, 0x14e, 0x8, 0x1, 0x9, 0x7a07, 0xe52, 0xa, 0x1, 0x2, 0x40, 0x81, 0x8, 0x5, 0x8, 0x2f3, 0x3, 0x0, 0x1, 0x3, 0x7, 0x8, 0x2d, 0x6, 0x8001, 0x9], [0x2, 0x7, 0x9, 0x4, 0x1, 0x5e, 0xc2, 0x80000000, 0x20000000, 0xa3, 0x7ff, 0x1, 0x1, 0x8, 0x7, 0x9, 0x2, 0x8, 0x1, 0x7, 0xfffffffd, 0x5, 0x2, 0xffff, 0x7fff, 0x9, 0x401, 0x2, 0x0, 0x1, 0x59, 0xffffffff, 0x9, 0x7, 0x2, 0x800, 0x9, 0x1, 0xc1bc, 0x59d, 0xb9a5, 0xf, 0x6, 0x2, 0x4, 0x9, 0x0, 0xd, 0x10001, 0x7, 0x1, 0x1, 0x9, 0x7, 0x7, 0x80000000, 0x1, 0x2, 0x8, 0x4, 0x6, 0x6, 0x800, 0xfff], [0x4b, 0x81, 0x6, 0x7f, 0x80000000, 0x10001, 0xcdb, 0xd88a, 0x2, 0x6, 0x3, 0x8, 0xfff, 0xc8, 0x81, 0x0, 0x1ff, 0x31e, 0x4, 0x6, 0xa, 0x1, 0x7f, 0x800, 0x120, 0xf73b, 0x4, 0x9, 0x7ff, 0x2, 0xffc9, 0x7, 0x8001, 0x1, 0x39, 0x5, 0x1, 0x4, 0x7, 0x1, 0xb, 0x9, 0xf, 0x8, 0xb9, 0x2b, 0x6, 0x0, 0x8, 0x5, 0x7, 0x0, 0x4cc, 0x401, 0x8eef, 0x6, 0x8, 0x7, 0x9, 0x3, 0x8, 0x9, 0x9, 0x80], [0xc, 0x2, 0x1, 0x1ff, 0x6, 0xfffffff8, 0x6, 0x3ff, 0xffff, 0xa, 0x5, 0x6, 0x800, 0xff, 0x2, 0xfffffff7, 0x5, 0x1, 0x0, 0x4, 0x2ec3, 0x5, 0x4, 0x2, 0x20, 0x3, 0x7, 0x3, 0x9, 0x6, 0x2, 0x18000000, 0x6, 0x9, 0x10001, 0x2, 0x0, 0x58c20639, 0xa63, 0x5, 0x7, 0x7fff, 0x7, 0x0, 0x77c, 0x6ed5, 0x9, 0x800, 0xa, 0x9d62, 0x92f, 0xc54e, 0x8, 0x3d9, 0x5, 0xd, 0x0, 0xffff8001, 0x3, 0x1, 0xd14, 0xe000, 0x8, 0xd]}, 0x45c) sched_setaffinity(0x0, 0x8, &(0x7f0000004400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) stat(0x0, 0x0) prctl$PR_SET_SECCOMP(0x59616d61, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14080, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) 11.283123328s ago: executing program 8 (id=6218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000034ed00000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) 10.830212124s ago: executing program 9 (id=6219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 10.648520527s ago: executing program 9 (id=6222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 9.991301746s ago: executing program 8 (id=6225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 9.990985066s ago: executing program 8 (id=6226): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.579819312s ago: executing program 9 (id=6227): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='.request_key_auth\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e20, @private=0xa010100}}) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) 9.548652013s ago: executing program 0 (id=6228): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/18, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 9.00917596s ago: executing program 0 (id=6230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000400)=[@sack_perm, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.628792066s ago: executing program 8 (id=6231): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2d, 0x2, 0x3, 0x6}, {0x6, 0xe, 0x1, 0xbd}, {0x9, 0xb5, 0xa, 0x4}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.574445831s ago: executing program 0 (id=6235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@jqfmt_vfsv1}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@dioread_nolock}]}, 0x1, 0x55c, &(0x7f0000000600)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 7.466700823s ago: executing program 7 (id=6237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 5.051414227s ago: executing program 1 (id=6238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 5.035184718s ago: executing program 7 (id=6239): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 4.942736219s ago: executing program 0 (id=6240): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d"], 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="24000000010006", 0x7) 4.87125905s ago: executing program 7 (id=6241): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.097935611s ago: executing program 1 (id=6242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 3.956239313s ago: executing program 9 (id=6243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) socket$inet(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r6=>0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32, @ANYRES16=r4, @ANYBLOB="08727b2e8f557768d01837ec81a481191d96ec4499659c8a9dd04d6627402401490c398fd5b74419d176b38b21942bb62ae899f2952a79859c792a8b36daeffebdf01fe77ea679c80fa63100e4121c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000002}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800060c}, 0x1c) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r10, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r10, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r10, &(0x7f0000000200), 0x4) 3.772014186s ago: executing program 8 (id=6244): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x3) 3.716991156s ago: executing program 1 (id=6245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000400)=[@sack_perm, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a400fe00000000b7060000080000002d6400000000000045040300010080041704000001000a00b7040000ff010000720af2fe000000008500000049000000b700000070b2000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d761ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a8321e056acf27c34bed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb93ce1c0983cdcb48477b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e44c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6bc7c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000000000000000000000000007a4604baa70bda5d5f18f54e9638350a6dd81a55ab5528efd1ef5a564908db7cce99e5c569c2947763b90e03b6d1a53b590e4ff4867f0d86b9af58244866b9df33634c8d85ce1b3bfa3e5bec6989c907c2f46b9a837676e07d87bb7dba3f34694ceb5b9faf10eece00bcfd503ed3f3048782665a848d79e443de4ba97db3a9bde69be7612cb1441c61eadd5bb4494ff2eb189c2ab3a241c12f76"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.641990557s ago: executing program 7 (id=6246): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x18, 0x5, 0x86b0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000300)=""/112, 0x103000, 0x6bc22fd484172ea7, 0xc, 0x1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000f8100000877598107e8fb49b9bad6e69a15ddfdb7b4d15c34c086d9a71c6c986ed5ced020387c9a8dd7d65", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r10, 0x800000000000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd600101000010110000000000000000000000000000000000ff0200000000"], 0x0) 2.478619844s ago: executing program 1 (id=6247): timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x200) 2.237955467s ago: executing program 7 (id=6248): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.220403018s ago: executing program 9 (id=6249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 1.027080095s ago: executing program 0 (id=6250): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@grpquota}, {@sb={'sb', 0x3d, 0x3}}, {@lazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x60a03, 0xb0) 998.727656ms ago: executing program 7 (id=6251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@jqfmt_vfsv1}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@dioread_nolock}]}, 0x1, 0x55c, &(0x7f0000000600)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 959.705036ms ago: executing program 1 (id=6252): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 668.00837ms ago: executing program 9 (id=6253): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000940)=@newtaction={0x9c, 0x30, 0x9, 0x0, 0x0, {}, [{0x88, 0x1, [@m_bpf={0x84, 0x1, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x0, 0xfd}, {0x2}, {0x6}, {0x0, 0x0, 0xfe}, {}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "494219eb14090a10"}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 446.898813ms ago: executing program 1 (id=6254): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2d, 0x2, 0x3, 0x6}, {0x6, 0xe, 0x1, 0xbd}, {0x9, 0xb5, 0xa, 0x4}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.12554ms ago: executing program 8 (id=6255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') 0s ago: executing program 0 (id=6256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f05407b1fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) kernel console output (not intermixed with test programs): 950.635207][T10119] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 950.886693][ T671] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 951.306626][ T671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 951.331017][ T671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.350897][T18564] PF_BRIDGE: br_mdb_parse() with invalid entry [ 951.693330][ T671] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 951.703661][ T671] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 951.713424][ T671] usb 2-1: Manufacturer: syz [ 951.723290][ T671] usb 2-1: config 0 descriptor?? [ 952.037612][T18570] F2FS-fs (loop9): invalid crc value [ 952.058205][T18570] F2FS-fs (loop9): Found nat_bits in checkpoint [ 952.170937][T18570] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 952.199563][T18556] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 952.286576][ T671] usbhid 2-1:0.0: can't add hid device: -71 [ 952.297489][T15576] attempt to access beyond end of device [ 952.297489][T15576] loop9: rw=2049, want=45104, limit=40427 [ 952.302719][ T671] usbhid: probe of 2-1:0.0 failed with error -71 [ 952.320108][T18579] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 952.396620][ T671] usb 2-1: USB disconnect, device number 51 [ 954.337702][T18621] PF_BRIDGE: br_mdb_parse() with invalid entry [ 954.986602][ T18] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 955.477176][ T18] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.806745][T10119] print_req_error: 65 callbacks suppressed [ 955.806887][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 955.825749][ T18] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 955.839327][ T382] blk_update_request: I/O error, dev loop7, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 955.865298][ T382] blk_update_request: I/O error, dev loop7, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 955.880462][ T18] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58368, setting to 1024 [ 955.894266][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 955.911476][ T382] buffer_io_error: 55 callbacks suppressed [ 955.911486][ T382] Buffer I/O error on dev loop7p3, logical block 8, async page read [ 955.930941][ T18] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 955.945067][T10119] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 955.954564][ T382] blk_update_request: I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 955.974449][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 955.989801][ T382] Buffer I/O error on dev loop7p3, logical block 9, async page read [ 955.999006][ T18] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 956.015418][T10119] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 956.024645][ T382] blk_update_request: I/O error, dev loop7, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 956.037934][ T18] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.052322][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 956.070798][ T382] Buffer I/O error on dev loop7p3, logical block 10, async page read [ 956.084165][ T18] usb 9-1: config 0 descriptor?? [ 956.089828][T10119] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 956.098704][ T382] blk_update_request: I/O error, dev loop7, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 956.098990][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 956.121162][T10119] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 956.129274][T10119] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 956.133404][ T382] Buffer I/O error on dev loop7p3, logical block 11, async page read [ 956.151478][ T382] Buffer I/O error on dev loop7p3, logical block 12, async page read [ 956.260801][ T23] kauditd_printk_skb: 29 callbacks suppressed [ 956.260813][ T23] audit: type=1400 audit(1747843379.622:1622): avc: denied { read } for pid=18646 comm="syz.1.5250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 956.646807][ T18] usbhid 9-1:0.0: can't add hid device: -71 [ 956.669616][ T18] usbhid: probe of 9-1:0.0 failed with error -71 [ 956.727080][ T18] usb 9-1: USB disconnect, device number 15 [ 956.934059][ T23] audit: type=1400 audit(1747843380.292:1623): avc: denied { write } for pid=18659 comm="syz.9.5254" name="anycast6" dev="proc" ino=4026532439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 957.484850][T18665] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,sb=0x0000000000000003,lazytime,auto_da_alloc=0x0000000000000009,,errors=continue [ 957.537069][T18674] PF_BRIDGE: br_mdb_parse() with invalid entry [ 958.527017][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5263'. [ 960.360679][ T23] audit: type=1400 audit(1747843383.722:1624): avc: denied { name_bind } for pid=18708 comm="syz.8.5271" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 960.362113][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5272'. [ 960.482807][T18718] PF_BRIDGE: br_mdb_parse() with invalid entry [ 961.256728][ T23] audit: type=1400 audit(1747843384.342:1625): avc: denied { name_bind } for pid=18719 comm="syz.8.5275" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 961.594519][T18729] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 961.603677][T18729] EXT4-fs (loop8): orphan cleanup on readonly fs [ 961.610938][T18729] EXT4-fs error (device loop8): ext4_ext_check_inode:543: inode #4: comm syz.8.5277: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 65535, max 32767(4), depth 0(0) [ 961.630369][T18729] EXT4-fs error (device loop8): ext4_quota_enable:6059: comm syz.8.5277: Bad quota inode: 4, type: 1 [ 961.641800][T18729] EXT4-fs warning (device loop8): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 961.656783][T18729] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 961.663661][T18729] EXT4-fs (loop8): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,nolazytime,debug,debug,,errors=continue [ 961.962831][T18731] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 961.970933][T18731] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 961.984544][T18731] F2FS-fs (loop1): invalid crc value [ 961.992349][T18731] F2FS-fs (loop1): Found nat_bits in checkpoint [ 962.046556][T18731] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 962.053726][T18731] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 962.449561][ T23] audit: type=1400 audit(1747843385.812:1626): avc: denied { ioctl } for pid=18730 comm="syz.1.5278" path="socket:[143749]" dev="sockfs" ino=143749 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 962.498569][ T23] audit: type=1400 audit(1747843385.842:1627): avc: denied { append } for pid=18730 comm="syz.1.5278" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 962.523534][ T23] audit: type=1400 audit(1747843385.842:1628): avc: denied { open } for pid=18730 comm="syz.1.5278" path="/505/file0/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 962.554250][ T23] audit: type=1400 audit(1747843385.842:1629): avc: denied { ioctl } for pid=18730 comm="syz.1.5278" path="/505/file0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 962.661355][T11179] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 962.661362][T11179] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 962.870229][T11179] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 962.878136][T11179] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 962.885834][T11179] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 962.893738][T11179] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 962.901645][T11179] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 963.034771][ T23] audit: type=1400 audit(1747843386.392:1630): avc: denied { connect } for pid=18756 comm="syz.8.5285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 963.110824][T18760] PF_BRIDGE: br_mdb_parse() with invalid entry [ 963.424633][ T382] print_req_error: 65 callbacks suppressed [ 963.424650][ T382] blk_update_request: I/O error, dev loop7, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 963.879177][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 963.886000][ T382] blk_update_request: I/O error, dev loop7, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 963.895941][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 963.924075][T10119] buffer_io_error: 55 callbacks suppressed [ 963.924087][T10119] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 964.056415][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.070757][T10119] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 964.080936][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.855646][T10119] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 965.057845][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.200997][ T382] Buffer I/O error on dev loop7p3, logical block 8, async page read [ 965.204709][T10119] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 965.342198][ T382] blk_update_request: I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.458072][T10119] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.480313][ T382] Buffer I/O error on dev loop7p3, logical block 9, async page read [ 965.493940][ T382] blk_update_request: I/O error, dev loop7, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.509074][ T382] Buffer I/O error on dev loop7p3, logical block 10, async page read [ 965.520668][ T382] Buffer I/O error on dev loop7p3, logical block 11, async page read [ 965.542630][ T382] Buffer I/O error on dev loop7p3, logical block 12, async page read [ 965.555084][ T382] Buffer I/O error on dev loop7p3, logical block 13, async page read [ 966.569154][ T23] audit: type=1326 audit(1747843842.926:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18791 comm="syz.7.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 966.766663][ T23] audit: type=1326 audit(1747843842.926:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18791 comm="syz.7.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 966.794194][ T5] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 966.877833][ T23] audit: type=1326 audit(1747843842.926:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18791 comm="syz.7.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 967.374502][ T23] audit: type=1326 audit(1747843842.926:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18791 comm="syz.7.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 967.456276][ T23] audit: type=1326 audit(1747843842.926:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18791 comm="syz.7.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 967.556591][ T5] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.572722][ T5] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 967.622739][ T5] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58368, setting to 1024 [ 967.634166][ T5] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 967.647608][ T5] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 967.657237][ T5] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.670557][ T5] usb 9-1: config 0 descriptor?? [ 968.166493][T12706] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 968.231833][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 968.241252][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 968.250497][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 968.259900][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 968.270331][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 968.279647][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 968.288848][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 968.298069][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 968.307161][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 968.316427][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 968.476563][T12706] usb 10-1: Using ep0 maxpacket: 32 [ 968.625936][T12706] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 968.638209][T12706] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 968.650201][T12706] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 968.659639][ T5] usbhid 9-1:0.0: can't add hid device: -71 [ 968.665795][ T5] usbhid: probe of 9-1:0.0 failed with error -71 [ 968.672339][T12706] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.682504][ T5] usb 9-1: USB disconnect, device number 16 [ 968.689558][T12706] usb 10-1: config 0 descriptor?? [ 968.706937][T18818] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 968.729536][T12706] hub 10-1:0.0: USB hub found [ 968.946611][T12706] hub 10-1:0.0: 1 port detected [ 969.101063][T10125] print_req_error: 65 callbacks suppressed [ 969.101080][T10125] blk_update_request: I/O error, dev loop7, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 969.118261][ T382] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 969.119495][T10125] blk_update_request: I/O error, dev loop7, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 969.133396][ T382] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 969.150350][T10125] buffer_io_error: 55 callbacks suppressed [ 969.150406][T10125] Buffer I/O error on dev loop7p3, logical block 8, async page read [ 969.159597][ T382] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 969.170774][T10125] blk_update_request: I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 969.185571][T10125] Buffer I/O error on dev loop7p3, logical block 9, async page read [ 969.193899][ T382] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 969.196898][T10125] blk_update_request: I/O error, dev loop7, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 969.216929][ T382] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 969.219232][T10125] Buffer I/O error on dev loop7p3, logical block 10, async page read [ 969.225162][ T382] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 969.235030][T10125] blk_update_request: I/O error, dev loop7, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 969.246795][T18852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18852 comm=syz.7.5315 [ 969.270352][ T382] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 969.284656][T10125] Buffer I/O error on dev loop7p3, logical block 11, async page read [ 969.301394][T10125] blk_update_request: I/O error, dev loop7, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 969.324283][T10125] Buffer I/O error on dev loop7p3, logical block 12, async page read [ 969.331865][T18852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18852 comm=syz.7.5315 [ 969.345654][ T382] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 969.354772][T10125] Buffer I/O error on dev loop7p3, logical block 13, async page read [ 969.389980][T18856] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 969.472489][T18856] EXT4-fs (loop1): orphan cleanup on readonly fs [ 969.479999][T18856] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #4: comm syz.1.5317: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 65535, max 32767(4), depth 0(0) [ 969.508357][T18856] EXT4-fs error (device loop1): ext4_quota_enable:6059: comm syz.1.5317: Bad quota inode: 4, type: 1 [ 969.519541][T18856] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 969.535019][T18856] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 969.542154][T18856] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,nolazytime,debug,debug,,errors=continue [ 970.618919][T18876] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 970.942752][ T18] usb 10-1: USB disconnect, device number 15 [ 971.178706][ T23] audit: type=1400 audit(1747843848.538:1636): avc: denied { setcurrent } for pid=18878 comm="syz.7.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 971.465907][T18879] loop7: p2 < > p3 p4 < > [ 971.475298][T18879] loop7: partition table partially beyond EOD, truncated [ 971.485093][T18879] loop7: p2 start 4294902784 is beyond EOD, truncated [ 971.494556][T18879] loop7: p3 start 3724543488 is beyond EOD, truncated [ 971.637470][ T164] loop7: p2 < > p3 p4 < > [ 971.643785][ T164] loop7: partition table partially beyond EOD, truncated [ 972.583219][ T164] loop7: p2 start 4294902784 is beyond EOD, truncated [ 972.594659][ T164] loop7: p3 start 3724543488 is beyond EOD, truncated [ 972.836616][ T18] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 973.125297][T18905] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 973.126301][T10119] udevd[10119]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 973.134594][T18905] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 973.162248][T18916] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 973.170115][T18916] EXT4-fs (loop7): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 973.182124][T18905] F2FS-fs (loop8): invalid crc value [ 973.191137][T18905] F2FS-fs (loop8): Found nat_bits in checkpoint [ 973.234295][T18905] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 973.241602][T18905] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 973.835777][T18925] xt_CT: No such helper "snmp_trap" [ 974.424616][ T18] usb 10-1: unable to read config index 0 descriptor/all [ 974.431917][ T18] usb 10-1: can't read configurations, error -71 [ 974.439389][T18933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 974.520557][T18933] EXT4-fs (loop1): orphan cleanup on readonly fs [ 974.533003][T18933] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #4: comm syz.1.5339: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 65535, max 32767(4), depth 0(0) [ 974.552028][T18933] EXT4-fs error (device loop1): ext4_quota_enable:6059: comm syz.1.5339: Bad quota inode: 4, type: 1 [ 974.552092][T18936] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 974.563254][T18936] EXT4-fs (loop7): Ignoring removed nobh option [ 974.570989][T18933] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 974.591902][T18936] EXT4-fs (loop7): Ignoring removed bh option [ 974.592445][T18933] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 974.598353][T18936] EXT4-fs (loop7): can't mount with dioread_nolock if block size != PAGE_SIZE [ 974.605176][T18933] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,nolazytime,debug,debug,,errors=continue [ 975.161366][T18953] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 975.207707][T18951] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,sb=0x0000000000000003,lazytime,auto_da_alloc=0x0000000000000009,,errors=continue [ 976.196586][ T420] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 976.502036][T18974] EXT4-fs (loop7): Unsupported blocksize for fs encryption [ 976.520300][T18978] device pim6reg1 entered promiscuous mode [ 976.757042][ T420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.798572][ T420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.868061][ T420] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 977.040536][ T420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.052957][T18986] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 977.069261][ T420] usb 2-1: config 0 descriptor?? [ 977.089909][T18986] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,user_xattr, [ 977.469263][T18986] EXT4-fs error (device loop7): ext4_validate_block_bitmap:418: comm syz.7.5357: bg 0: block 234: padding at end of block bitmap is not set [ 977.500097][T18986] EXT4-fs (loop7): Remounting filesystem read-only [ 977.625037][ T420] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 977.643854][ T420] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 978.036653][ T420] cp2112 0003:10C4:EA90.001D: Part Number: 0x82 Device Version: 0xFE [ 978.196752][ T420] cp2112 0003:10C4:EA90.001D: error requesting SMBus config [ 978.218031][ T420] cp2112: probe of 0003:10C4:EA90.001D failed with error -71 [ 978.513781][ T420] usb 2-1: USB disconnect, device number 52 [ 978.977308][T19016] IPv6: sit1: Disabled Multicast RS [ 979.132552][T19013] device lo entered promiscuous mode [ 979.144421][T19013] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 979.179846][T19013] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 979.191531][T19024] xt_NFQUEUE: number of total queues is 0 [ 979.198962][T19013] device tunl0 entered promiscuous mode [ 979.206243][T19013] device gre0 entered promiscuous mode [ 979.212600][T19013] device gretap0 entered promiscuous mode [ 979.219050][T19013] device erspan0 entered promiscuous mode [ 979.225690][T19013] device ip_vti0 entered promiscuous mode [ 979.232609][T19013] device ip6_vti0 entered promiscuous mode [ 979.241980][T19013] device sit0 entered promiscuous mode [ 979.248802][T19013] device ip6tnl0 entered promiscuous mode [ 979.255199][T19013] device ip6gre0 entered promiscuous mode [ 979.262438][T19013] device syz_tun entered promiscuous mode [ 979.268639][T19013] device ip6gretap0 entered promiscuous mode [ 979.275776][T19013] device bridge0 entered promiscuous mode [ 979.282222][T19013] device dummy0 entered promiscuous mode [ 979.289682][T19013] device veth0 entered promiscuous mode [ 979.299715][T19013] device veth1 entered promiscuous mode [ 979.305738][T19013] device wg0 entered promiscuous mode [ 979.312620][T19013] device wg1 entered promiscuous mode [ 979.319017][T19013] device wg2 entered promiscuous mode [ 979.324884][T19013] device veth0_to_bridge entered promiscuous mode [ 979.334740][T19013] device veth1_to_bridge entered promiscuous mode [ 979.344553][T19013] device veth0_to_bond entered promiscuous mode [ 979.354158][T19013] device bond_slave_0 entered promiscuous mode [ 979.367002][T19013] device veth1_to_bond entered promiscuous mode [ 979.377524][T19030] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 979.377799][T19013] device bond_slave_1 entered promiscuous mode [ 979.395531][T19030] FAT-fs (loop7): Filesystem has been set read-only [ 979.404897][T19030] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 979.416200][T19030] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 979.428350][T19013] device veth0_to_team entered promiscuous mode [ 979.436037][T19013] device team_slave_0 entered promiscuous mode [ 979.502002][T19013] device veth1_to_team entered promiscuous mode [ 979.509458][T19013] device team_slave_1 entered promiscuous mode [ 979.519671][T19013] device veth0_to_batadv entered promiscuous mode [ 979.526939][T19029] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 979.536194][T19013] device batadv_slave_0 entered promiscuous mode [ 979.543417][T19013] device veth1_to_batadv entered promiscuous mode [ 979.552982][T19013] device batadv_slave_1 entered promiscuous mode [ 979.563580][T19013] device xfrm0 entered promiscuous mode [ 979.572316][T19013] device veth0_to_hsr entered promiscuous mode [ 979.585165][T19013] device hsr_slave_0 entered promiscuous mode [ 979.597863][T19013] device veth1_to_hsr entered promiscuous mode [ 979.604559][T19013] device hsr_slave_1 entered promiscuous mode [ 979.611345][T19013] device veth1_virt_wifi entered promiscuous mode [ 979.619055][T19013] device veth0_virt_wifi entered promiscuous mode [ 979.626362][T19013] device veth1_vlan entered promiscuous mode [ 979.633869][T19013] device veth0_vlan entered promiscuous mode [ 979.641184][T19013] device veth1_macvtap entered promiscuous mode [ 979.648580][T19013] device veth0_macvtap entered promiscuous mode [ 979.658561][T19013] device sit1 entered promiscuous mode [ 979.664850][T19013] device bridge1 entered promiscuous mode [ 979.673642][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 979.687145][T15998] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.695097][T15998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.720761][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 979.740691][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 979.761265][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 979.779124][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 979.801926][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 979.810316][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 979.819156][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 979.837523][T15998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 980.224787][ T23] audit: type=1400 audit(1747844310.588:1637): avc: denied { create } for pid=19050 comm="syz.9.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 980.247139][ T23] audit: type=1400 audit(1747844310.588:1638): avc: denied { setattr } for pid=19050 comm="syz.9.5377" path="socket:[145778]" dev="sockfs" ino=145778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 980.809064][T19061] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 981.173207][T19065] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 981.191185][T19065] EXT4-fs (loop7): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 981.641400][T19072] xt_CT: No such helper "snmp_trap" [ 983.598591][T19101] xt_hashlimit: max too large, truncated to 1048576 [ 989.119569][T19127] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 989.886557][ T23] audit: type=1400 audit(1747844320.248:1639): avc: denied { setattr } for pid=19137 comm="syz.9.5402" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 990.151044][T19146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19146 comm=syz.8.5400 [ 991.344290][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.351711][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.582975][T19193] tmpfs: Unknown parameter 'ino`e32' [ 994.767054][T19206] syz.8.5420[19206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 994.767143][T19206] syz.8.5420[19206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 996.171923][T19206] EXT4-fs (loop8): Test dummy encryption mode enabled [ 996.190419][T19206] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 996.202081][T19206] EXT4-fs (loop8): Unsupported blocksize for fs encryption [ 996.487529][ T23] audit: type=1400 audit(1747844326.858:1640): avc: denied { watch } for pid=19208 comm="syz.1.5416" path="/526/file0" dev="tmpfs" ino=146793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 997.201474][T19218] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 997.672305][T19231] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19231 comm=syz.8.5423 [ 998.089254][ T667] Bluetooth: hci0: command 0x1003 tx timeout [ 998.366563][T16208] Bluetooth: hci0: sending frame failed (-49) [ 999.340381][ T23] audit: type=1400 audit(1747844329.708:1641): avc: denied { read write } for pid=19226 comm="syz.9.5425" name="uinput" dev="devtmpfs" ino=9693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 999.378980][ T23] audit: type=1400 audit(1747844329.708:1642): avc: denied { open } for pid=19226 comm="syz.9.5425" path="/dev/uinput" dev="devtmpfs" ino=9693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 999.714465][T19246] SELinux: Context system_u:object_r:netcontrol_device_t:s0 is not valid (left unmapped). [ 1000.004368][ T23] audit: type=1400 audit(1747844330.098:1643): avc: denied { relabelto } for pid=19243 comm="syz.0.5429" name="file0" dev="tmpfs" ino=147485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0" [ 1000.046243][ T23] audit: type=1400 audit(1747844330.098:1644): avc: denied { associate } for pid=19243 comm="syz.0.5429" name="file0" dev="tmpfs" ino=147485 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netcontrol_device_t:s0" [ 1000.311773][ T3809] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1000.361385][ T23] audit: type=1400 audit(1747844330.728:1645): avc: denied { rmdir } for pid=11064 comm="syz-executor" name="file0" dev="tmpfs" ino=147485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0" [ 1000.653187][ T667] Bluetooth: hci0: command 0x1001 tx timeout [ 1000.659993][T16208] Bluetooth: hci0: sending frame failed (-49) [ 1000.726590][ T3809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1000.739564][ T3809] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1000.753140][ T3809] usb 9-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1000.762638][ T3809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.787108][ T3809] usb 9-1: config 0 descriptor?? [ 1000.806573][T19249] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1001.506777][ T3809] smartjoyplus 0003:0925:8866.001E: hidraw0: USB HID vff.fa Device [HID 0925:8866] on usb-dummy_hcd.8-1/input0 [ 1001.518644][ T3809] smartjoyplus 0003:0925:8866.001E: Force feedback for SmartJoy PLUS PS2/USB adapter [ 1001.530442][ T3809] usb 9-1: USB disconnect, device number 17 [ 1001.883985][T19287] kernel profiling enabled (shift: 0) [ 1002.100478][ T23] audit: type=1400 audit(1747844332.468:1646): avc: denied { append } for pid=19283 comm="syz.0.5440" name="001" dev="devtmpfs" ino=9613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1002.389318][ T23] audit: type=1400 audit(1747844332.748:1647): avc: denied { create } for pid=19288 comm="syz.9.5441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1002.736515][ T420] Bluetooth: hci0: command 0x1009 tx timeout [ 1003.526281][T19293] EXT4-fs error (device loop9) in ext4_do_update_inode:5534: error 27 [ 1003.537163][T19293] EXT4-fs error (device loop9) in ext4_do_update_inode:5534: error 27 [ 1003.548043][T19293] Quota error (device loop9): write_blk: dquota write failed [ 1003.555873][T19293] Quota error (device loop9): qtree_write_dquot: Error -27 occurred while creating quota [ 1003.572406][T19293] EXT4-fs (loop9): 1 orphan inode deleted [ 1003.578288][T19293] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 1003.587674][T19293] ext4 filesystem being mounted at /186/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1004.910457][ T23] audit: type=1400 audit(1747844335.278:1648): avc: denied { create } for pid=19316 comm="syz.8.5449" dev="anon_inodefs" ino=147759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1004.967045][ T23] audit: type=1400 audit(1747844335.298:1649): avc: denied { ioctl } for pid=19316 comm="syz.8.5449" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=147759 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1006.363476][ T23] audit: type=1326 audit(1747844336.728:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1006.500268][ T23] audit: type=1326 audit(1747844336.758:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1006.523870][ T23] audit: type=1326 audit(1747844336.758:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1006.619355][ T23] audit: type=1326 audit(1747844336.758:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1007.159831][ T23] audit: type=1326 audit(1747844336.758:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1008.154479][ T23] audit: type=1326 audit(1747844336.758:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1008.211616][ T23] audit: type=1326 audit(1747844336.758:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1008.235608][ T23] audit: type=1326 audit(1747844336.758:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1008.299701][ T23] audit: type=1326 audit(1747844336.758:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1008.400988][ T23] audit: type=1326 audit(1747844336.758:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1008.428991][ T23] audit: type=1326 audit(1747844336.758:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1008.458066][ T23] audit: type=1326 audit(1747844336.758:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1008.487257][ T23] audit: type=1326 audit(1747844336.758:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1008.549576][ T23] audit: type=1326 audit(1747844336.758:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1012.324129][ T23] kauditd_printk_skb: 34 callbacks suppressed [ 1012.324138][ T23] audit: type=1400 audit(1747844342.688:1698): avc: denied { read } for pid=19397 comm="syz.9.5473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1013.433225][ T23] audit: type=1400 audit(1747844343.698:1699): avc: denied { write } for pid=19404 comm="syz.1.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1013.825516][T19416] syz.7.5477[19416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1013.825567][T19416] syz.7.5477[19416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1014.008610][ T23] audit: type=1326 audit(1747844344.368:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19415 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1014.146862][ T23] audit: type=1326 audit(1747844344.368:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19415 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1014.226736][ T23] audit: type=1326 audit(1747844344.368:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19415 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1014.434312][ T23] audit: type=1326 audit(1747844344.368:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19415 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1014.464888][ T23] audit: type=1326 audit(1747844344.368:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19415 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1014.597605][ T23] audit: type=1326 audit(1747844344.368:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19415 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1014.740893][ T23] audit: type=1326 audit(1747844344.368:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19415 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1014.764408][ T23] audit: type=1326 audit(1747844344.368:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19415 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1014.819156][T19423] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,sb=0x0000000000000003,lazytime,auto_da_alloc=0x0000000000000009,,errors=continue [ 1015.584875][T19448] __nla_validate_parse: 95 callbacks suppressed [ 1015.591239][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5484'. [ 1015.940892][T19453] syz.0.5486[19453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1015.941179][T19453] syz.0.5486[19453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1017.215040][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5487'. [ 1017.242115][T19463] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1017.254113][T19463] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1018.565019][ T23] kauditd_printk_skb: 15 callbacks suppressed [ 1018.565032][ T23] audit: type=1400 audit(1747844348.928:1723): avc: denied { mounton } for pid=19465 comm="syz.0.5491" path="/505/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1018.684538][T19472] incfs: Can't find or create .incomplete dir in ./file0 [ 1018.695123][T19472] incfs: mount failed -103 [ 1018.784455][ T23] audit: type=1400 audit(1747844349.148:1724): avc: denied { setattr } for pid=19487 comm="syz.9.5498" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1019.394200][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5500'. [ 1020.494875][ T23] audit: type=1326 audit(1747844350.858:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.1.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1020.520943][ T23] audit: type=1326 audit(1747844350.888:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.1.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1020.568709][ T23] audit: type=1326 audit(1747844350.888:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.1.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1020.592799][ T23] audit: type=1326 audit(1747844350.888:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.1.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1020.677341][ T23] audit: type=1326 audit(1747844350.888:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.1.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1021.435488][ T23] audit: type=1326 audit(1747844350.888:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.1.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1021.472069][ T23] audit: type=1326 audit(1747844350.888:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.1.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1021.502294][ T23] audit: type=1326 audit(1747844350.888:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.1.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1021.805242][T19541] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5513'. [ 1024.157056][T19577] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19577 comm=syz.1.5525 [ 1025.316699][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5531'. [ 1025.777929][T19601] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,sb=0x0000000000000003,lazytime,auto_da_alloc=0x0000000000000009,,errors=continue [ 1027.212133][T19621] netlink: 'syz.7.5539': attribute type 16 has an invalid length. [ 1027.223965][T19621] netlink: 'syz.7.5539': attribute type 17 has an invalid length. [ 1027.330232][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1027.338418][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1027.373150][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1027.411062][T19629] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19629 comm=syz.0.5541 [ 1027.492587][T14296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.499658][T14296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.597668][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1027.622398][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1027.654370][T14296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.661469][T14296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.683269][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1027.706903][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1027.726681][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1027.741491][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1027.761059][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1027.776939][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1027.787490][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1027.795870][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.804544][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.813341][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1027.822826][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1027.832415][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1027.841710][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1027.851745][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1027.904578][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1027.946492][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1027.956076][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1027.964632][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.972749][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.980982][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.989661][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1028.490869][T19639] netlink: 'syz.9.5545': attribute type 13 has an invalid length. [ 1028.498740][T19639] device lo left promiscuous mode [ 1028.504023][T19639] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1028.513712][T19639] device tunl0 left promiscuous mode [ 1028.521412][T19639] device gre0 left promiscuous mode [ 1028.527112][T19639] device gretap0 left promiscuous mode [ 1028.532811][T19639] gretap0: refused to change device tx_queue_len [ 1028.539537][T19639] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1028.555752][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1029.109870][ T23] kauditd_printk_skb: 27 callbacks suppressed [ 1029.109884][ T23] audit: type=1400 audit(1747844359.478:1760): avc: denied { mount } for pid=19662 comm="syz.8.5553" name="/" dev="ramfs" ino=149877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1029.214078][ T23] audit: type=1400 audit(1747844359.518:1761): avc: denied { execute } for pid=19662 comm="syz.8.5553" path="/bus" dev="ramfs" ino=149067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1030.461512][T19678] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1030.475579][T19678] EXT4-fs (loop7): Unsupported blocksize for fs encryption [ 1030.828854][T19688] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19688 comm=syz.1.5558 [ 1031.732426][T19699] syz.8.5560[19699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1031.732478][T19699] syz.8.5560[19699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1032.134057][T19699] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 1032.152192][T19699] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1032.261897][T19699] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1032.374929][T19699] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1032.382083][T19699] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1034.765536][T19739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19739 comm=syz.8.5573 [ 1034.956053][ T23] audit: type=1400 audit(1747844365.318:1762): avc: denied { relabelfrom } for pid=19740 comm="syz.9.5574" name="TCPv6" dev="sockfs" ino=150131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1035.561925][T19743] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1035.572291][T19743] ext4 filesystem being mounted at /389/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 1037.827720][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5586'. [ 1037.889091][ T23] audit: type=1400 audit(1747844368.258:1763): avc: denied { load_policy } for pid=19794 comm="syz.9.5591" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1037.897077][T19795] SELinux: policydb version 0 does not match my version range 15-31 [ 1037.918654][T19795] SELinux: failed to load policy [ 1039.276497][ T23] audit: type=1400 audit(1747844368.828:1764): avc: denied { mount } for pid=19799 comm="syz.0.5592" name="/" dev="pstore" ino=9813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1039.999868][ T23] audit: type=1400 audit(1747844368.988:1765): avc: denied { mounton } for pid=19801 comm="syz.7.5594" path="/393/file1/file0" dev="loop7" ino=1048702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 1040.253802][ T23] audit: type=1326 audit(1747844370.608:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19819 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1040.327751][ T23] audit: type=1326 audit(1747844370.608:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19819 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1040.352880][ T23] audit: type=1326 audit(1747844370.608:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19819 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1040.377615][ T23] audit: type=1326 audit(1747844370.608:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19819 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1040.403218][ T23] audit: type=1326 audit(1747844370.608:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19819 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2243f83969 code=0x7ffc0000 [ 1040.514870][ T23] audit: type=1400 audit(1747844370.828:1771): avc: denied { mount } for pid=19826 comm="syz.7.5597" name="/" dev="tmpfs" ino=150498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1040.562828][ T23] audit: type=1400 audit(1747844370.928:1772): avc: denied { unmount } for pid=13216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1041.058907][ T23] audit: type=1326 audit(1747844371.408:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19832 comm="syz.7.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1041.131404][ T23] audit: type=1326 audit(1747844371.408:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19832 comm="syz.7.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1042.169190][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5604'. [ 1042.601167][T19857] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1042.977925][T19861] F2FS-fs (loop7): invalid crc value [ 1043.054650][T19861] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1043.104269][T19861] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1043.807590][T19886] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1045.496849][ T23] kauditd_printk_skb: 104 callbacks suppressed [ 1045.496863][ T23] audit: type=1400 audit(1747844375.868:1879): avc: denied { read } for pid=19908 comm="syz.8.5624" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1045.609710][T19914] syz.8.5627[19914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1045.609760][T19914] syz.8.5627[19914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1045.965326][ T23] audit: type=1400 audit(1747844376.328:1880): avc: denied { call } for pid=19940 comm="syz.1.5637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1046.192433][T19947] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1046.423919][T19922] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1046.432405][T19922] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1046.442581][T19922] F2FS-fs (loop9): invalid crc value [ 1046.449366][T19922] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1046.482554][T19922] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1046.490722][T19922] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1046.629721][ T23] audit: type=1400 audit(1747844376.998:1881): avc: denied { mount } for pid=19953 comm="syz.7.5640" name="/" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1046.654237][ T23] audit: type=1400 audit(1747844376.998:1882): avc: denied { mounton } for pid=19953 comm="syz.7.5640" path="/402/file0" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1046.904606][T19955] xt_CT: No such helper "snmp_trap" [ 1047.947132][ T23] audit: type=1400 audit(1747844378.318:1883): avc: denied { unmount } for pid=13216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1048.006462][ T420] Bluetooth: hci0: command 0x1003 tx timeout [ 1048.013747][T16208] Bluetooth: hci0: sending frame failed (-49) [ 1049.514019][T20004] netlink: 'syz.7.5656': attribute type 3 has an invalid length. [ 1049.542600][T20006] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1050.086464][ T361] Bluetooth: hci0: command 0x1001 tx timeout [ 1050.092593][T16208] Bluetooth: hci0: sending frame failed (-49) [ 1050.377299][T20031] usb usb8: usbfs: process 20031 (syz.0.5667) did not claim interface 0 before use [ 1050.397395][T20031] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1050.753073][ T23] audit: type=1326 audit(1747844381.118:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20042 comm="syz.0.5672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1050.792749][ T23] audit: type=1326 audit(1747844381.148:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20042 comm="syz.0.5672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1050.819054][ T23] audit: type=1326 audit(1747844381.148:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20042 comm="syz.0.5672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063075969 code=0x7ffc0000 [ 1051.644451][T20055] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 1051.653265][T20055] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 1051.661998][T20055] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 1051.671474][T20055] EXT4-fs error (device loop7) in ext4_orphan_del:3257: error 27 [ 1051.684360][T20055] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 1051.693436][T20055] EXT4-fs error (device loop7) in ext4_orphan_cleanup:2816: error 27 [ 1051.702349][T20055] EXT4-fs (loop7): 1 truncate cleaned up [ 1051.708290][T20055] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1051.717535][T20055] ext4 filesystem being mounted at /413/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1052.110632][ T23] audit: type=1400 audit(1747844382.478:1887): avc: denied { read write } for pid=20073 comm="syz.1.5681" name="uhid" dev="devtmpfs" ino=9697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1052.138493][ T2452] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1052.146070][ T23] audit: type=1400 audit(1747844382.498:1888): avc: denied { open } for pid=20073 comm="syz.1.5681" path="/dev/uhid" dev="devtmpfs" ino=9697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1052.173365][ T2452] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0 [ 1052.213508][ T2452] Bluetooth: hci0: command 0x1009 tx timeout [ 1052.682889][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'. [ 1054.965871][ T23] audit: type=1400 audit(1747844385.328:1889): avc: denied { create } for pid=20115 comm="syz.7.5692" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1055.236148][T20125] syz.9.5696[20125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1055.236547][T20125] syz.9.5696[20125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1056.117994][T20130] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1056.146833][T20130] EXT4-fs (loop7): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 1056.236452][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5698'. [ 1056.249070][T20132] IPv6: sit2: Disabled Multicast RS [ 1057.420736][T20146] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1057.439297][T20146] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1057.448438][ T23] audit: type=1326 audit(1747844387.818:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20152 comm="syz.9.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1057.450973][T20146] F2FS-fs (loop8): invalid crc value [ 1057.506983][T20146] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1057.512500][ T23] audit: type=1326 audit(1747844387.818:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20152 comm="syz.9.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1057.607691][T20146] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1057.611830][ T23] audit: type=1326 audit(1747844387.848:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20152 comm="syz.9.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1057.615150][T20146] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1057.638632][ T23] audit: type=1326 audit(1747844387.848:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20152 comm="syz.9.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1057.703824][ T23] audit: type=1326 audit(1747844387.848:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20152 comm="syz.9.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1057.728034][ T23] audit: type=1326 audit(1747844387.848:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20152 comm="syz.9.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1057.752373][ T23] audit: type=1326 audit(1747844387.848:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20152 comm="syz.9.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1057.776867][ T23] audit: type=1326 audit(1747844387.848:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20152 comm="syz.9.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1057.800914][ T23] audit: type=1326 audit(1747844387.848:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20152 comm="syz.9.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1057.825217][ T23] audit: type=1326 audit(1747844387.848:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20152 comm="syz.9.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1058.565153][T20163] xt_CT: No such helper "snmp_trap" [ 1059.734897][T20187] EXT4-fs (loop8): Ignoring removed nobh option [ 1059.741563][T20187] EXT4-fs (loop8): can't mount with dioread_nolock if block size != PAGE_SIZE [ 1062.182628][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5723'. [ 1062.867542][T20242] EXT4-fs (loop8): Unsupported blocksize for fs encryption [ 1062.963205][ T23] kauditd_printk_skb: 48 callbacks suppressed [ 1062.963218][ T23] audit: type=1400 audit(1747844393.328:1948): avc: denied { connect } for pid=20251 comm="syz.9.5733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1063.022315][T20255] syz.9.5737[20255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1063.022374][T20255] syz.9.5737[20255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1066.146654][ T23] audit: type=1326 audit(1747844396.488:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20307 comm="syz.9.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1066.188948][T20315] 9pnet: Insufficient options for proto=fd [ 1066.210374][ T23] audit: type=1326 audit(1747844396.488:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20307 comm="syz.9.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1066.234625][ T23] audit: type=1326 audit(1747844396.488:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20307 comm="syz.9.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1066.258820][ T23] audit: type=1326 audit(1747844396.488:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20307 comm="syz.9.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1066.285331][ T23] audit: type=1326 audit(1747844396.488:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20307 comm="syz.9.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1066.308912][ T23] audit: type=1326 audit(1747844396.488:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20307 comm="syz.9.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1066.333715][ T23] audit: type=1326 audit(1747844396.488:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20307 comm="syz.9.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1066.340728][T20311] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1066.364848][T20311] EXT4-fs (loop9): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 1066.374389][ T23] audit: type=1326 audit(1747844396.488:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20307 comm="syz.9.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1066.423028][ T23] audit: type=1326 audit(1747844396.488:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20307 comm="syz.9.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1067.507193][T20337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.514358][T20337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.543419][T20337] device bridge_slave_0 entered promiscuous mode [ 1068.958663][T20337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.968030][T20337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.976250][T20337] device bridge_slave_1 entered promiscuous mode [ 1069.087294][T20360] 9pnet: Insufficient options for proto=fd [ 1069.545376][T20350] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1069.684716][T20350] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1070.063279][T20350] F2FS-fs (loop7): invalid crc value [ 1070.266838][ T23] kauditd_printk_skb: 12 callbacks suppressed [ 1070.267941][ T23] audit: type=1400 audit(1747844400.628:1970): avc: denied { write } for pid=20373 comm="syz.9.5768" name="file0" dev="tmpfs" ino=154417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1070.301726][T20350] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1070.366204][T20350] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1070.374583][T20350] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1070.470184][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1070.479439][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1070.489818][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1070.492557][ T23] audit: type=1400 audit(1747844400.818:1971): avc: denied { mounton } for pid=20337 comm="syz-executor" path="/root/syzkaller.RShkqV/syz-tmp" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1070.501599][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1070.529675][ T23] audit: type=1400 audit(1747844400.818:1972): avc: denied { mount } for pid=20337 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1070.544457][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.572698][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.585881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1070.594775][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1070.603928][ T23] audit: type=1400 audit(1747844400.818:1973): avc: denied { mounton } for pid=20337 comm="syz-executor" path="/root/syzkaller.RShkqV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1070.633216][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.642640][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.652637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1070.671199][ T23] audit: type=1400 audit(1747844400.818:1974): avc: denied { mounton } for pid=20337 comm="syz-executor" path="/root/syzkaller.RShkqV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=153555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1070.704849][T20384] xt_CT: No such helper "snmp_trap" [ 1070.712153][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1070.719277][ T23] audit: type=1400 audit(1747844400.818:1975): avc: denied { mounton } for pid=20337 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=12004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1070.751935][ T23] audit: type=1400 audit(1747844400.828:1976): avc: denied { write } for pid=20337 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 1070.758085][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1070.792972][ T23] audit: type=1400 audit(1747844400.828:1977): avc: denied { open } for pid=20337 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 1071.049401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1071.060981][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1071.073063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1071.083043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1071.091677][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1071.101288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1071.110437][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1071.120067][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1071.132281][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1071.141762][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1071.152195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1071.182858][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1071.360195][T20398] 9pnet: Insufficient options for proto=fd [ 1072.084794][T20411] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5777'. [ 1072.896441][T20420] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1074.692405][T20465] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1074.772521][ T23] audit: type=1326 audit(1747844405.138:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.9.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1074.797925][ T23] audit: type=1326 audit(1747844405.138:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.9.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1074.862589][T20473] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5796'. [ 1074.960814][T20473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20473 comm=syz.8.5796 [ 1075.164569][T20477] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1075.184413][T20477] EXT4-fs (loop7): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 1075.253804][T20486] syz.9.5800[20486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1075.254161][T20486] syz.9.5800[20486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1076.647180][ T23] kauditd_printk_skb: 10 callbacks suppressed [ 1076.647193][ T23] audit: type=1326 audit(1747844407.018:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.9.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1076.696484][T20508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20508 comm=syz.8.5809 [ 1076.716163][ T23] audit: type=1326 audit(1747844407.058:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.9.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1076.743623][ T23] audit: type=1326 audit(1747844407.058:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.9.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1076.769231][ T23] audit: type=1326 audit(1747844407.058:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.9.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1076.819968][ T23] audit: type=1326 audit(1747844407.058:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.9.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1076.844432][ T23] audit: type=1326 audit(1747844407.058:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.9.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0155a969 code=0x7ffc0000 [ 1077.368553][T20521] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1077.819820][ T23] audit: type=1400 audit(1747844408.188:1996): avc: denied { ioctl } for pid=20533 comm="syz.9.5819" path="/dev/uinput" dev="devtmpfs" ino=9693 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1078.126638][ T539] Bluetooth: hci0: Frame reassembly failed (-90) [ 1078.416232][ T539] Bluetooth: hci0: Frame reassembly failed (-84) [ 1079.361777][T20544] SELinux: failed to load policy [ 1080.166593][ T3809] Bluetooth: hci0: command 0x1003 tx timeout [ 1080.185990][T16208] Bluetooth: hci0: sending frame failed (-49) [ 1081.116042][T20570] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1082.530145][ T3809] Bluetooth: hci0: command 0x1001 tx timeout [ 1082.536887][T16208] Bluetooth: hci0: sending frame failed (-49) [ 1082.890232][T20592] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1082.895043][T20598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1082.898427][T20592] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1082.916125][T20592] F2FS-fs (loop8): invalid crc value [ 1082.925242][T20592] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1082.960970][T20592] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1082.968940][T20592] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1083.120056][T20604] xt_CT: No such helper "snmp_trap" [ 1084.106698][ T23] audit: type=1400 audit(1747844414.428:1997): avc: denied { append } for pid=20614 comm="syz.1.5845" name="ppp" dev="devtmpfs" ino=10575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1084.339895][T20619] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,nogrpid,nodelalloc,acl,noinit_itable,,errors=continue [ 1084.483520][T20627] 9pnet: Insufficient options for proto=fd [ 1084.491381][T20625] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1084.499344][T20627] 9pnet: Insufficient options for proto=fd [ 1084.566502][T12706] Bluetooth: hci0: command 0x1009 tx timeout [ 1086.655839][T20666] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5859'. [ 1086.865305][ T23] audit: type=1326 audit(1747844417.228:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20681 comm="syz.7.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1086.893402][ T23] audit: type=1326 audit(1747844417.228:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20681 comm="syz.7.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1086.918214][ T23] audit: type=1326 audit(1747844417.228:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20681 comm="syz.7.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1086.942060][ T23] audit: type=1326 audit(1747844417.228:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20681 comm="syz.7.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1086.968075][ T23] audit: type=1326 audit(1747844417.228:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20681 comm="syz.7.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1086.993303][ T23] audit: type=1326 audit(1747844417.228:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20681 comm="syz.7.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1087.017447][ T23] audit: type=1326 audit(1747844417.228:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20681 comm="syz.7.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1087.041937][ T23] audit: type=1326 audit(1747844417.228:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20681 comm="syz.7.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1087.076556][ T23] audit: type=1326 audit(1747844417.228:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20681 comm="syz.7.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1087.210174][T20683] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1087.218077][T20683] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1087.227698][T20683] F2FS-fs (loop8): invalid crc value [ 1087.469530][T20683] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1087.514340][T20683] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1087.521516][T20683] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1087.820047][T20704] xt_CT: No such helper "snmp_trap" [ 1088.003086][T20710] IPv6: sit1: Disabled Multicast RS [ 1089.858089][T20759] syz.9.5886[20759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1089.858143][T20759] syz.9.5886[20759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1091.069202][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5890'. [ 1091.996451][ T4361] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1092.198334][T20789] xt_CT: No such helper "snmp_trap" [ 1092.386919][ T4361] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1092.583662][ T4361] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.706646][ T4361] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1092.720069][ T4361] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1092.739485][ T4361] usb 9-1: Manufacturer: syz [ 1092.756167][ T4361] usb 9-1: config 0 descriptor?? [ 1092.911948][T20820] syz.9.5901[20820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.912312][T20820] syz.9.5901[20820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1093.154898][T20817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5902'. [ 1093.630713][T20825] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1093.889226][ T4361] hid-generic 0003:060B:700A.0020: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1094.091721][ T18] usb 9-1: USB disconnect, device number 18 [ 1094.381509][T20842] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1094.411493][T20842] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1094.424866][T20842] F2FS-fs (loop7): invalid crc value [ 1094.432371][T20842] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1094.482630][T20842] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1094.490223][T20842] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1094.679770][T20842] xt_CT: No such helper "snmp_trap" [ 1095.612345][T20888] syz.1.5922[20888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1095.612692][T20888] syz.1.5922[20888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1096.517346][T20878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.536277][T20878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.543899][T20878] device bridge_slave_0 entered promiscuous mode [ 1096.551541][T20878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.558756][T20878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.566394][T20878] device bridge_slave_1 entered promiscuous mode [ 1096.683154][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1096.691394][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1096.784266][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1096.805678][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1096.812918][ T23] kauditd_printk_skb: 16 callbacks suppressed [ 1096.812933][ T23] audit: type=1400 audit(1747844427.178:2023): avc: denied { write } for pid=20903 comm="syz.7.5930" path="socket:[158774]" dev="sockfs" ino=158774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1096.814658][T19242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.851811][T19242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.860483][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1096.870532][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1096.879790][T19242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.886893][T19242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.937133][ T671] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1096.947370][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1096.955197][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1096.963857][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1096.972211][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1096.981398][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1096.989787][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1096.998529][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1097.007261][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1097.015954][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1097.024254][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1097.032697][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1097.041167][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1097.050073][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1097.059082][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1097.067622][T19242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1097.218844][ T7] tipc: Disabling bearer <udp:syz2> [ 1097.224942][ T7] tipc: Left network mode [ 1097.296522][ T671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1097.303411][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5920'. [ 1097.319212][ T671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.446711][ T671] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1097.466449][ T671] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1097.474742][ T671] usb 9-1: Manufacturer: syz [ 1097.501040][ T671] usb 9-1: config 0 descriptor?? [ 1098.079279][ T671] hid-generic 0003:060B:700A.0021: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1098.085425][T20923] EXT4-fs (loop9): Ignoring removed bh option [ 1098.102976][T20923] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1098.132951][T20923] EXT4-fs (loop9): failed to open journal device unknown-block(0,0): -6 [ 1098.266784][ T7] device bridge_slave_1 left promiscuous mode [ 1098.273344][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.281460][ T7] device bridge_slave_0 left promiscuous mode [ 1098.344143][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.352413][T20901] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1098.387638][ T671] usb 9-1: USB disconnect, device number 19 [ 1098.542613][T20935] syz.1.5936[20935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1098.542921][T20935] syz.1.5936[20935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1098.756461][T20803] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1099.096553][T20803] usb 10-1: Using ep0 maxpacket: 8 [ 1099.137227][T20803] usb 10-1: too many configurations: 117, using maximum allowed: 8 [ 1099.616495][T20803] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1099.624255][T20803] usb 10-1: can't read configurations, error -61 [ 1099.773763][T20947] device syzkaller0 entered promiscuous mode [ 1099.786449][T20803] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1099.990430][T20952] tipc: Started in network mode [ 1099.995438][T20952] tipc: Own node identity e0000002, cluster identity 4711 [ 1100.046437][T20803] usb 10-1: Using ep0 maxpacket: 8 [ 1100.071436][T20952] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media [ 1100.086811][T20803] usb 10-1: too many configurations: 117, using maximum allowed: 8 [ 1100.336689][T20803] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1100.345687][T20803] usb 10-1: can't read configurations, error -61 [ 1100.370110][T20803] usb usb10-port1: attempt power cycle [ 1100.636453][T19858] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1100.796435][T20803] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1100.912956][T20803] usb 10-1: Using ep0 maxpacket: 8 [ 1101.276783][T19858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1101.378503][T19858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.630567][T19858] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1101.856473][T20803] usb 10-1: device descriptor read/all, error -71 [ 1102.019129][T19858] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1102.027257][T19858] usb 2-1: Manufacturer: syz [ 1102.041786][T19858] usb 2-1: config 0 descriptor?? [ 1102.099143][T20979] EXT4-fs (loop9): Unsupported blocksize for fs encryption [ 1102.117647][T20983] 9pnet: Insufficient options for proto=fd [ 1102.131043][T20983] 9pnet: Insufficient options for proto=fd [ 1102.387640][T20995] syz.8.5957[20995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1102.387698][T20995] syz.8.5957[20995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1102.412135][ T23] audit: type=1326 audit(1747844432.778:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20994 comm="syz.8.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87d7e5969 code=0x7ffc0000 [ 1102.452309][ T23] audit: type=1326 audit(1747844432.788:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20994 comm="syz.8.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87d7e5969 code=0x7ffc0000 [ 1102.481219][ T23] audit: type=1326 audit(1747844432.798:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20994 comm="syz.8.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fe87d7e5969 code=0x7ffc0000 [ 1102.507032][ T23] audit: type=1326 audit(1747844432.798:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20994 comm="syz.8.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87d7e5969 code=0x7ffc0000 [ 1102.558557][ T23] audit: type=1326 audit(1747844432.818:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20994 comm="syz.8.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87d7e5969 code=0x7ffc0000 [ 1102.686929][T20999] syz.9.5955[20999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1102.686984][T20999] syz.9.5955[20999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1102.843700][T20967] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1103.043798][T19858] usbhid 2-1:0.0: can't add hid device: -71 [ 1103.217220][T19858] usbhid: probe of 2-1:0.0 failed with error -71 [ 1103.244270][T19858] usb 2-1: USB disconnect, device number 53 [ 1103.293449][T21005] device wg2 entered promiscuous mode [ 1103.606359][ T23] audit: type=1400 audit(1747844433.918:2029): avc: denied { setopt } for pid=21000 comm="syz.8.5958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1103.660615][T21008] EXT4-fs (loop7): Ignoring removed bh option [ 1103.685564][T21008] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1103.694782][T21008] EXT4-fs (loop7): failed to open journal device unknown-block(0,0): -6 [ 1103.740996][T21018] 9pnet: Insufficient options for proto=fd [ 1103.755421][T21018] 9pnet: Insufficient options for proto=fd [ 1105.266522][T19858] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1105.676473][T20803] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1105.696444][T19858] usb 10-1: Using ep0 maxpacket: 8 [ 1105.856507][T19858] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1105.936540][T19858] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 1105.944779][T19858] usb 10-1: config 0 has no interface number 0 [ 1105.951046][T19858] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1105.962252][T19858] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1105.972210][T19858] usb 10-1: config 0 interface 88 has no altsetting 0 [ 1106.039253][T21050] 9pnet: Insufficient options for proto=fd [ 1106.045802][T21050] 9pnet: Insufficient options for proto=fd [ 1106.056565][T20803] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.067909][T20803] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.146556][T19858] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1106.155884][T19858] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1106.164213][T19858] usb 10-1: Product: syz [ 1106.168651][T19858] usb 10-1: Manufacturer: syz [ 1106.173429][T19858] usb 10-1: SerialNumber: syz [ 1106.182777][T19858] usb 10-1: config 0 descriptor?? [ 1106.192011][T20803] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1106.201229][T20803] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1106.210051][T20803] usb 9-1: Manufacturer: syz [ 1106.259484][T20803] usb 9-1: config 0 descriptor?? [ 1106.737800][T19858] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input23 [ 1106.748127][T21047] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1106.748465][ T23] audit: type=1400 audit(1747844437.118:2030): avc: denied { read } for pid=149 comm="acpid" name="event3" dev="devtmpfs" ino=159811 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1106.780895][T19858] usb 10-1: USB disconnect, device number 22 [ 1106.787230][ T23] audit: type=1400 audit(1747844437.118:2031): avc: denied { open } for pid=149 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=159811 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1106.836534][T20803] usbhid 9-1:0.0: can't add hid device: -71 [ 1106.842558][T20803] usbhid: probe of 9-1:0.0 failed with error -71 [ 1106.850532][T20803] usb 9-1: USB disconnect, device number 20 [ 1106.987447][T21062] EXT4-fs (loop7): Ignoring removed bh option [ 1106.995105][T21062] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1107.003442][T21062] EXT4-fs (loop7): failed to open journal device unknown-block(0,0): -6 [ 1107.017903][ T382] udevd[382]: Error opening device "/dev/input/event3": No such file or directory [ 1107.027454][ T382] udevd[382]: Unable to EVIOCGABS device "/dev/input/event3" [ 1107.034913][ T382] udevd[382]: Unable to EVIOCGABS device "/dev/input/event3" [ 1107.988107][T21091] bridge0: port 2(gretap0) entered blocking state [ 1107.994701][T21091] bridge0: port 2(gretap0) entered disabled state [ 1108.005426][T21091] device gretap0 entered promiscuous mode [ 1108.012147][T21091] bridge0: port 2(gretap0) entered blocking state [ 1108.018594][T21091] bridge0: port 2(gretap0) entered forwarding state [ 1108.503273][ T23] audit: type=1326 audit(1747844438.868:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.1.5996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a18b8969 code=0x7ffc0000 [ 1108.528037][ T23] audit: type=1326 audit(1747844438.868:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.1.5996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a18b8969 code=0x7ffc0000 [ 1108.552168][ T23] audit: type=1326 audit(1747844438.878:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.1.5996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9a18b8969 code=0x7ffc0000 [ 1108.576374][ T23] audit: type=1326 audit(1747844438.878:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.1.5996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a18b8969 code=0x7ffc0000 [ 1108.600661][ T23] audit: type=1326 audit(1747844438.878:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.1.5996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a18b8969 code=0x7ffc0000 [ 1108.646882][ T23] audit: type=1326 audit(1747844438.878:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.1.5996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9a18b8969 code=0x7ffc0000 [ 1108.676827][T19858] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1108.690983][ T23] audit: type=1326 audit(1747844438.878:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.1.5996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a18b8969 code=0x7ffc0000 [ 1108.721445][ T23] audit: type=1326 audit(1747844438.878:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.1.5996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a18b8969 code=0x7ffc0000 [ 1108.749290][ T23] audit: type=1326 audit(1747844438.878:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.1.5996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9a18b8969 code=0x7ffc0000 [ 1108.827801][ T23] audit: type=1326 audit(1747844438.898:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21106 comm="syz.1.5996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a18b8969 code=0x7ffc0000 [ 1109.132386][T21116] EXT4-fs (loop8): Unsupported blocksize for fs encryption [ 1109.187950][T21114] xt_bpf: check failed: parse error [ 1109.306548][T19858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1109.317767][T19858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.406507][T19858] usb 10-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1109.416642][T19858] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1109.424746][T19858] usb 10-1: Manufacturer: syz [ 1109.430785][T19858] usb 10-1: config 0 descriptor?? [ 1110.083744][T21128] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1110.093566][T21128] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1110.206128][T21100] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1110.326743][T19858] usbhid 10-1:0.0: can't add hid device: -71 [ 1110.332953][T19858] usbhid: probe of 10-1:0.0 failed with error -71 [ 1110.341106][T19858] usb 10-1: USB disconnect, device number 23 [ 1110.410115][T21130] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1110.419290][T21130] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1110.429112][T21130] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 1110.438542][T21130] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 1110.446815][T21130] System zones: 0-2, 18-18, 34-34 [ 1110.452636][T21130] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1110.493564][T21130] EXT4-fs (loop7): 1 truncate cleaned up [ 1110.499479][T21130] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1110.522123][T21130] EXT4-fs error (device loop7): ext4_find_dest_de:2066: inode #2: block 3: comm syz.7.6003: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1110.889558][T21146] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 1110.897640][T21146] FAT-fs (loop9): Filesystem has been set read-only [ 1114.456676][T20803] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1114.646425][ T18] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1114.700276][T20803] usb 9-1: Using ep0 maxpacket: 16 [ 1114.806621][T20803] usb 9-1: device descriptor read/all, error -71 [ 1115.087181][ T18] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1115.108657][ T18] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.216919][ T18] usb 10-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1115.226171][ T18] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1115.268982][ T18] usb 10-1: Manufacturer: syz [ 1115.278743][ T18] usb 10-1: config 0 descriptor?? [ 1117.064307][T21181] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1117.276536][ T18] usbhid 10-1:0.0: can't add hid device: -71 [ 1117.283804][ T18] usbhid: probe of 10-1:0.0 failed with error -71 [ 1117.301543][ T23] kauditd_printk_skb: 16 callbacks suppressed [ 1117.301557][ T23] audit: type=1326 audit(1747844447.668:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.7.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1117.380094][ T18] usb 10-1: USB disconnect, device number 24 [ 1117.389424][T21219] syz.8.6032[21219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1117.389723][T21219] syz.8.6032[21219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1117.714493][ T23] audit: type=1326 audit(1747844447.668:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.7.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1118.334651][ T23] audit: type=1326 audit(1747844447.668:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.7.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1118.358078][ T23] audit: type=1326 audit(1747844447.668:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.7.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1118.381781][ T23] audit: type=1326 audit(1747844447.668:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.7.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1118.405600][ T23] audit: type=1326 audit(1747844447.668:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.7.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1118.446451][ T23] audit: type=1326 audit(1747844447.668:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.7.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1118.500179][ T23] audit: type=1326 audit(1747844447.668:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.7.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d4c45969 code=0x7ffc0000 [ 1118.588554][T21232] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 1118.599860][T21232] EXT4-fs (loop8): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 1118.715449][T21238] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1119.737335][T21259] EXT4-fs (loop8): Unsupported blocksize for fs encryption [ 1119.842413][T21256] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1119.861681][T21256] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1119.873623][T21256] F2FS-fs (loop9): invalid crc value [ 1119.883731][T21256] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1119.947934][T21256] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1119.955141][T21256] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1121.279875][T21274] xt_CT: No such helper "snmp_trap" [ 1121.630908][T21282] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1122.168045][T21286] erofs: (device loop9): mounted with opts: , root inode @ nid 36. [ 1122.179540][T21286] erofs: (device loop9): vle_extent_lookback: bogus lookback distance @ nid 36 [ 1122.191401][T21286] erofs: (device loop9): z_erofs_lz4_decompress: failed to decompress, in[49, 4047] out[1851] [ 1122.201906][T21286] ------------[ cut here ]------------ [ 1122.207380][T21286] WARNING: CPU: 0 PID: 21286 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x954/0xd40 [ 1122.217686][T21286] Modules linked in: [ 1122.221663][T21286] CPU: 0 PID: 21286 Comm: syz.9.6052 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 1122.232916][T21286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1122.242970][T21286] RIP: 0010:z_erofs_lz4_decompress+0x954/0xd40 [ 1122.249108][T21286] Code: 48 8b 5d b8 0f 85 67 03 00 00 44 8b 0b 48 c7 c6 11 89 3c 85 48 c7 c2 c0 af d7 84 44 8b 6d a4 44 89 e9 45 89 f0 e8 bc 6f 30 02 <0f> 0b 44 89 e8 48 c7 c7 20 b0 d7 84 48 c7 c6 40 b0 d7 84 ba 02 00 [ 1122.268873][T21286] RSP: 0018:ffff8881dc247078 EFLAGS: 00010246 [ 1122.274928][T21286] RAX: 96e8d1a1b78f4800 RBX: ffff8881dc247680 RCX: 96e8d1a1b78f4800 [ 1122.282884][T21286] RDX: ffffc90001546000 RSI: 000000000001194e RDI: 000000000001194f [ 1122.290842][T21286] RBP: ffff8881dc247130 R08: 0000000000000004 R09: 0000000000000003 [ 1122.298798][T21286] R10: ffffed103b848d58 R11: 1ffff1103b848d58 R12: 1ffff1103b848ed0 [ 1122.306754][T21286] R13: 0000000000000031 R14: 0000000000000fcf R15: ffff8881e2a77fcf [ 1122.314714][T21286] FS: 00007fd9ffbc36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1122.323712][T21286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.330277][T21286] CR2: 0000001b30d20218 CR3: 00000001e9a42000 CR4: 00000000003406b0 [ 1122.338234][T21286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1122.346186][T21286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1122.354142][T21286] Call Trace: [ 1122.357430][T21286] ? z_erofs_lz4_prepare_destpages+0x650/0x650 [ 1122.363568][T21286] z_erofs_decompress+0x592/0xf80 [ 1122.368690][T21286] z_erofs_vle_unzip_all+0x137a/0x1980 [ 1122.374245][T21286] ? z_erofs_onlinepage_endio+0x140/0x140 [ 1122.380007][T21286] ? __kasan_check_write+0x14/0x20 [ 1122.385103][T21286] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1122.390543][T21286] ? _raw_spin_lock+0xe0/0xe0 [ 1122.395207][T21286] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1122.400995][T21286] ? finish_wait+0x17f/0x190 [ 1122.405576][T21286] z_erofs_submit_and_unzip+0x1254/0x12c0 [ 1122.411287][T21286] ? z_erofs_do_read_page+0x2430/0x2430 [ 1122.416824][T21286] ? init_wait_entry+0xe0/0xe0 [ 1122.421573][T21286] ? z_erofs_vle_normalaccess_readpages+0xa60/0xa60 [ 1122.428165][T21286] ? mem_cgroup_commit_charge+0x70/0x1b0 [ 1122.433785][T21286] z_erofs_vle_normalaccess_readpage+0x24e/0x540 [ 1122.440100][T21286] ? z_erofs_rcu_callback+0x30/0x30 [ 1122.445285][T21286] ? __lru_cache_add+0x1f4/0x250 [ 1122.450208][T21286] ? lru_cache_add+0x15/0x20 [ 1122.454796][T21286] ? add_to_page_cache_lru+0x18e/0x210 [ 1122.460239][T21286] ? z_erofs_rcu_callback+0x30/0x30 [ 1122.465420][T21286] do_read_cache_page+0x65d/0xa20 [ 1122.470428][T21286] read_cache_page+0x50/0x70 [ 1122.474999][T21286] erofs_namei+0x152/0xfa0 [ 1122.479406][T21286] ? __kasan_check_write+0x14/0x20 [ 1122.484496][T21286] ? _raw_spin_lock+0x8e/0xe0 [ 1122.489166][T21286] ? _raw_spin_trylock_bh+0x130/0x130 [ 1122.494524][T21286] erofs_lookup+0xa5/0x2c0 [ 1122.498932][T21286] __lookup_hash+0x114/0x250 [ 1122.503505][T21286] filename_create+0x1d4/0x680 [ 1122.508254][T21286] ? kern_path_create+0x40/0x40 [ 1122.513088][T21286] ? getname_flags+0x206/0x500 [ 1122.517834][T21286] do_mknodat+0xcf/0x5a0 [ 1122.522067][T21286] __x64_sys_mknod+0x80/0x90 [ 1122.526641][T21286] do_syscall_64+0xcf/0x170 [ 1122.531231][T21286] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 1122.537104][T21286] RIP: 0033:0x7fda0155a969 [ 1122.541503][T21286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.561089][T21286] RSP: 002b:00007fd9ffbc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1122.569483][T21286] RAX: ffffffffffffffda RBX: 00007fda01781fa0 RCX: 00007fda0155a969 [ 1122.577434][T21286] RDX: 0000000000000712 RSI: 0000000000000fff RDI: 0000200000000140 [ 1122.585385][T21286] RBP: 00007fda015dcab1 R08: 0000000000000000 R09: 0000000000000000 [ 1122.593337][T21286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1122.601292][T21286] R13: 0000000000000000 R14: 00007fda01781fa0 R15: 00007ffc010f3148 [ 1122.609255][T21286] ---[ end trace 592de84a11527ec2 ]--- [ 1122.620860][T21286] erofs: (device loop9): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 1122.739533][T21286] erofs: (device loop9): vle_extent_lookback: bogus lookback distance @ nid 36 [ 1122.748943][T21286] erofs: (device loop9): z_erofs_lz4_decompress: failed to decompress, in[49, 4047] out[1851] [ 1122.759465][T21286] ------------[ cut here ]------------ [ 1122.764951][T21286] WARNING: CPU: 0 PID: 21286 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x954/0xd40 [ 1122.775251][T21286] Modules linked in: [ 1122.779133][T21286] CPU: 0 PID: 21286 Comm: syz.9.6052 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 1122.790402][T21286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1122.800466][T21286] RIP: 0010:z_erofs_lz4_decompress+0x954/0xd40 [ 1122.806606][T21286] Code: 48 8b 5d b8 0f 85 67 03 00 00 44 8b 0b 48 c7 c6 11 89 3c 85 48 c7 c2 c0 af d7 84 44 8b 6d a4 44 89 e9 45 89 f0 e8 bc 6f 30 02 <0f> 0b 44 89 e8 48 c7 c7 20 b0 d7 84 48 c7 c6 40 b0 d7 84 ba 02 00 [ 1122.826365][T21286] RSP: 0018:ffff8881dc246cd8 EFLAGS: 00010246 [ 1122.832424][T21286] RAX: 96e8d1a1b78f4800 RBX: ffff8881dc2472e0 RCX: 96e8d1a1b78f4800 [ 1122.840386][T21286] RDX: ffffc90001546000 RSI: 0000000000010c47 RDI: 0000000000010c48 [ 1122.848361][T21286] RBP: ffff8881dc246d90 R08: 0000000000000004 R09: 0000000000000003 [ 1122.856318][T21286] R10: ffffed103b848ce4 R11: 1ffff1103b848ce4 R12: 1ffff1103b848e5c [ 1122.864270][T21286] R13: 0000000000000031 R14: 0000000000000fcf R15: ffff8881e2a77fcf [ 1122.872222][T21286] FS: 00007fd9ffbc36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1122.881261][T21286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.887837][T21286] CR2: 00007fe87be2dd58 CR3: 00000001e9a42000 CR4: 00000000003406b0 [ 1122.895802][T21286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1122.903781][T21286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1122.911754][T21286] Call Trace: [ 1122.915073][T21286] ? z_erofs_lz4_prepare_destpages+0x650/0x650 [ 1122.921239][T21286] z_erofs_decompress+0x592/0xf80 [ 1122.926283][T21286] z_erofs_vle_unzip_all+0x137a/0x1980 [ 1122.931905][T21286] ? z_erofs_onlinepage_endio+0x140/0x140 [ 1122.937616][T21286] ? check_preemption_disabled+0x9b/0x300 [ 1122.943335][T21286] ? __kasan_check_write+0x14/0x20 [ 1122.948431][T21286] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1122.953867][T21286] ? _raw_spin_lock+0xe0/0xe0 [ 1122.958522][T21286] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1122.964309][T21286] ? z_erofs_vle_unzip_kickoff+0xd9/0xf0 [ 1122.969934][T21286] z_erofs_submit_and_unzip+0x113d/0x12c0 [ 1122.975656][T21286] ? z_erofs_do_read_page+0x2430/0x2430 [ 1122.981190][T21286] ? z_erofs_vle_normalaccess_readpages+0xa60/0xa60 [ 1122.987785][T21286] z_erofs_vle_normalaccess_readpage+0x24e/0x540 [ 1122.994097][T21286] ? z_erofs_rcu_callback+0x30/0x30 [ 1122.999278][T21286] ? __kasan_check_write+0x14/0x20 [ 1123.004371][T21286] ? z_erofs_rcu_callback+0x30/0x30 [ 1123.009547][T21286] do_read_cache_page+0x65d/0xa20 [ 1123.014552][T21286] read_cache_page+0x50/0x70 [ 1123.019729][T21286] erofs_namei+0x152/0xfa0 [ 1123.024128][T21286] ? d_hash_and_lookup+0x1e0/0x1e0 [ 1123.029249][T21286] ? apic_timer_interrupt+0xa/0x20 [ 1123.034355][T21286] ? erofs_namei+0xfa0/0xfa0 [ 1123.038921][T21286] erofs_lookup+0xa5/0x2c0 [ 1123.043409][T21286] ? erofs_namei+0xfa0/0xfa0 [ 1123.047996][T21286] path_openat+0x133f/0x35c0 [ 1123.052575][T21286] ? kmem_cache_alloc+0xe2/0x270 [ 1123.057503][T21286] ? getname_flags+0xb9/0x500 [ 1123.062173][T21286] ? do_filp_open+0x3f0/0x3f0 [ 1123.066834][T21286] do_filp_open+0x1ae/0x3f0 [ 1123.071315][T21286] ? vfs_tmpfile+0x2c0/0x2c0 [ 1123.075933][T21286] ? get_unused_fd_flags+0x93/0xa0 [ 1123.081032][T21286] do_sys_open+0x2bb/0x5d0 [ 1123.085443][T21286] ? file_open_root+0x2b0/0x2b0 [ 1123.090277][T21286] ? switch_fpu_return+0x197/0x3b0 [ 1123.095374][T21286] ? __kasan_check_read+0x11/0x20 [ 1123.100380][T21286] __x64_sys_openat+0xa2/0xb0 [ 1123.105037][T21286] do_syscall_64+0xcf/0x170 [ 1123.109519][T21286] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 1123.115397][T21286] RIP: 0033:0x7fda0155a969 [ 1123.119789][T21286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.139375][T21286] RSP: 002b:00007fd9ffbc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1123.147773][T21286] RAX: ffffffffffffffda RBX: 00007fda01781fa0 RCX: 00007fda0155a969 [ 1123.155726][T21286] RDX: 0000000000008541 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 1123.163678][T21286] RBP: 00007fda015dcab1 R08: 0000000000000000 R09: 0000000000000000 [ 1123.171629][T21286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.179582][T21286] R13: 0000000000000000 R14: 00007fda01781fa0 R15: 00007ffc010f3148 [ 1123.187543][T21286] ---[ end trace 592de84a11527ec3 ]--- [ 1123.203926][T21286] erofs: (device loop9): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 1123.377514][T21299] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1123.882479][ T23] audit: type=1400 audit(1747844454.248:2066): avc: denied { write } for pid=21315 comm="syz.8.6064" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1125.386630][T21345] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1126.535622][T21354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21354 comm=syz.0.6075 [ 1126.719217][T21347] EXT4-fs (loop8): Ignoring removed nobh option [ 1126.726348][T21347] EXT4-fs (loop8): can't mount with dioread_nolock if block size != PAGE_SIZE [ 1128.021421][T21372] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1128.041527][T21372] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1128.063550][T21372] F2FS-fs (loop8): invalid crc value [ 1128.087424][T21372] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1128.289379][T21372] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1128.306445][T21372] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1128.927435][T21388] xt_CT: No such helper "snmp_trap" [ 1129.819101][T21396] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21396 comm=syz.0.6087 [ 1130.306197][T21398] EXT4-fs (loop7): Unsupported blocksize for fs encryption [ 1133.957847][T21460] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 1134.274654][T21471] erofs: (device loop9): mounted with opts: , root inode @ nid 36. [ 1134.397878][T21476] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1137.310663][ T671] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1137.616427][ T671] usb 10-1: Using ep0 maxpacket: 32 [ 1137.736497][ T671] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.747710][ T671] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.876572][ T671] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1137.886013][ T671] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1137.898731][ T671] usb 10-1: Product: syz [ 1137.902983][ T671] usb 10-1: Manufacturer: syz [ 1137.946969][ T671] hub 10-1:4.0: USB hub found [ 1138.228954][T21544] SELinux: failed to load policy [ 1138.246527][ T671] hub 10-1:4.0: 2 ports detected [ 1138.631181][T21551] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1138.735841][T21551] kvm: pic: non byte read [ 1138.740700][T21551] kvm: pic: level sensitive irq not supported [ 1138.740748][T21551] kvm: pic: non byte read [ 1138.752113][T21551] kvm: pic: level sensitive irq not supported [ 1138.752161][T21551] kvm: pic: non byte read [ 1138.763319][T21551] kvm: pic: level sensitive irq not supported [ 1138.763374][T21551] kvm: pic: non byte read [ 1138.774727][T21551] kvm: pic: level sensitive irq not supported [ 1138.774777][T21551] kvm: pic: non byte read [ 1138.786055][T21551] kvm: pic: level sensitive irq not supported [ 1138.786133][T21551] kvm: pic: non byte read [ 1139.457944][ T23] audit: type=1400 audit(1747844469.828:2067): avc: denied { mounton } for pid=21493 comm="syz.9.6121" path="/321/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1139.475758][T19858] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1139.481605][T21494] incfs_lookup_dentry err:-14 [ 1139.496676][T21494] incfs: Can't find or create .incomplete dir in ./file0 [ 1139.503916][T19858] hid-generic 0000:0000:0000.0022: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0 [ 1139.514388][T21494] incfs: mount failed -14 [ 1139.533390][ T23] audit: type=1400 audit(1747844469.878:2068): avc: denied { remove_name } for pid=21493 comm="syz.9.6121" name=".index" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1139.577166][ T671] hub 10-1:4.0: set hub depth failed [ 1139.590929][ T23] audit: type=1400 audit(1747844469.878:2069): avc: denied { rmdir } for pid=21493 comm="syz.9.6121" name=".index" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1139.692097][ T671] usb 10-1: USB disconnect, device number 25 [ 1139.951559][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6144'. [ 1141.641086][T21620] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1141.654428][T21620] EXT4-fs (loop8): Unsupported blocksize for fs encryption [ 1141.859118][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6161'. [ 1142.859849][T21640] EXT4-fs (loop7): Ignoring removed bh option [ 1142.871155][T21640] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1142.888756][T21640] EXT4-fs (loop7): failed to open journal device unknown-block(0,0): -6 [ 1143.130667][T21648] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21648 comm=syz.1.6167 [ 1144.682622][T21687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6176'. [ 1145.419512][T21699] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1145.944010][T21708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21708 comm=syz.0.6186 [ 1146.628394][ T23] audit: type=1400 audit(1747844476.998:2070): avc: denied { ioctl } for pid=21719 comm="syz.7.6191" path="/520/file0" dev="tmpfs" ino=163801 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1147.551459][T21736] EXT4-fs (loop9): Ignoring removed nobh option [ 1147.558068][T21736] EXT4-fs (loop9): can't mount with dioread_nolock if block size != PAGE_SIZE [ 1148.467298][T21742] EXT4-fs (loop8): Ignoring removed bh option [ 1148.477081][T21742] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1148.676291][T21742] EXT4-fs (loop8): failed to open journal device unknown-block(0,0): -6 [ 1149.276424][ T4361] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1149.526453][ T4361] usb 9-1: Using ep0 maxpacket: 8 [ 1149.566531][ T4361] usb 9-1: too many configurations: 81, using maximum allowed: 8 [ 1149.726458][ T4361] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1149.734149][ T4361] usb 9-1: can't read configurations, error -61 [ 1149.886438][ T4361] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1149.914762][T21779] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21779 comm=syz.9.6209 [ 1150.166437][ T4361] usb 9-1: Using ep0 maxpacket: 8 [ 1150.440416][ T4361] usb 9-1: too many configurations: 81, using maximum allowed: 8 [ 1150.576523][ T4361] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1150.584258][ T4361] usb 9-1: can't read configurations, error -61 [ 1150.591103][ T4361] usb usb9-port1: attempt power cycle [ 1152.381647][T21824] bridge0: port 3(gretap0) entered blocking state [ 1152.388460][T21824] bridge0: port 3(gretap0) entered disabled state [ 1152.395258][T21824] device gretap0 entered promiscuous mode [ 1152.401113][T21824] bridge0: port 3(gretap0) entered blocking state [ 1152.407573][T21824] bridge0: port 3(gretap0) entered forwarding state [ 1152.591872][T21833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21833 comm=syz.1.6224 [ 1152.714306][T21835] syz.8.6226[21835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.714631][T21835] syz.8.6226[21835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1153.604588][ T361] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1153.962301][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6232'. [ 1154.710549][ T361] usb 10-1: Using ep0 maxpacket: 32 [ 1154.995785][ T361] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.021364][ T361] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.887880][T21882] bridge0: port 3(gretap0) entered blocking state [ 1157.894472][T21882] bridge0: port 3(gretap0) entered disabled state [ 1157.907592][T21882] device gretap0 entered promiscuous mode [ 1157.914407][T21882] bridge0: port 3(gretap0) entered blocking state [ 1157.920901][T21882] bridge0: port 3(gretap0) entered forwarding state [ 1158.003372][ T361] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1158.012710][ T361] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1158.021741][ T361] usb 10-1: Product: syz [ 1158.026041][ T361] usb 10-1: Manufacturer: syz [ 1158.121881][T21886] syz.7.6241[21886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1158.122183][T21886] syz.7.6241[21886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1158.296686][ T361] hub 10-1:4.0: USB hub found [ 1158.796480][ T361] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 1158.847365][ T361] usb 10-1: USB disconnect, device number 26 [ 1160.436434][T21894] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1160.449693][T21894] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1160.698609][T21894] F2FS-fs (loop8): invalid crc value [ 1160.811507][T21894] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1161.416863][T21894] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1161.426408][T21894] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1161.735815][ T23] audit: type=1400 audit(1747844492.151:2071): avc: denied { mounton } for pid=21929 comm="syz.1.6252" path="/" dev="configfs" ino=10577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1161.869918][T21933] EXT4-fs (loop7): Ignoring removed nobh option [ 1161.876531][T21933] EXT4-fs (loop7): can't mount with dioread_nolock if block size != PAGE_SIZE [ 1162.035087][ T23] audit: type=1400 audit(1747844492.451:2072): avc: denied { unmount } for pid=20337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1162.345911][T21894] attempt to access beyond end of device [ 1162.345911][T21894] loop8: rw=2049, want=81920, limit=40427 [ 1162.492882][T21894] attempt to access beyond end of device [ 1162.492882][T21894] loop8: rw=2049, want=52528, limit=40427 [ 1162.527726][T21946] kasan: CONFIG_KASAN_INLINE enabled [ 1162.533137][T21946] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1162.541285][T21946] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1162.548218][T21946] CPU: 1 PID: 21946 Comm: syz.0.6256 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 1162.559480][T21946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1162.569546][T21946] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x11d/0x280 [ 1162.576040][T21946] Code: 02 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 94 42 26 fe 4d 8b 36 49 8d be 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 3b 01 00 00 45 8b be 1c 01 00 00 44 89 [ 1162.595639][T21946] RSP: 0018:ffff8881e73df978 EFLAGS: 00010203 [ 1162.601703][T21946] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 1162.609681][T21946] RDX: ffff8881e7198fc0 RSI: 0000000000000080 RDI: 000000000000011c [ 1162.617646][T21946] RBP: ffff8881e73df998 R08: 0000000000000040 R09: ffffed1038a2f8f9 [ 1162.625615][T21946] R10: ffffed1038a2f8f9 R11: 1ffff11038a2f8f6 R12: dffffc0000000000 [ 1162.633670][T21946] R13: ffffc900001a8020 R14: 0000000000000000 R15: 0000000000000080 [ 1162.641641][T21946] FS: 00007f7971e066c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1162.650564][T21946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1162.657147][T21946] CR2: 0000001b2c61fffc CR3: 00000001e2103000 CR4: 00000000003406a0 [ 1162.665116][T21946] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1162.673087][T21946] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1162.681052][T21946] Call Trace: [ 1162.684343][T21946] bpf_prog_3845441c11a73078+0x76d/0x1000 [ 1162.690073][T21946] ? trace_event_raw_event_xdp_bulk_tx+0x1f0/0x350 [ 1162.696579][T21946] ? __x64_sys_bpf+0x7b/0x90 [ 1162.701174][T21946] ? do_syscall_64+0xcf/0x170 [ 1162.705859][T21946] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 1162.708109][ T371] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1162.711941][T21946] ? ktime_get+0x10d/0x140 [ 1162.711955][T21946] bpf_test_run+0x1ea/0x5d0 [ 1162.711978][T21946] ? eth_type_trans+0x2c2/0x5e0 [ 1162.720988][ T371] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1162.725217][T21946] ? bpf_ctx_init+0x1b0/0x1b0 [ 1162.748018][T21946] ? eth_get_headlen+0x1f0/0x1f0 [ 1162.752962][T21946] ? __kasan_check_write+0x14/0x20 [ 1162.758076][T21946] bpf_prog_test_run_skb+0x721/0xdc0 [ 1162.763381][T21946] ? __bpf_trace_bpf_test_finish+0x30/0x30 [ 1162.769191][T21946] bpf_prog_test_run+0x21a/0x2a0 [ 1162.774126][T21946] __se_sys_bpf+0x49a/0x570 [ 1162.778744][T21946] ? __x64_sys_bpf+0x90/0x90 [ 1162.783341][T21946] ? fpu__clear+0x3b0/0x3b0 [ 1162.787843][T21946] ? __kasan_check_read+0x11/0x20 [ 1162.792879][T21946] __x64_sys_bpf+0x7b/0x90 [ 1162.797284][T21946] do_syscall_64+0xcf/0x170 [ 1162.801771][T21946] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 1162.807643][T21946] RIP: 0033:0x7f797379d969 [ 1162.812041][T21946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.831837][T21946] RSP: 002b:00007f7971e06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1162.840234][T21946] RAX: ffffffffffffffda RBX: 00007f79739c4fa0 RCX: 00007f797379d969 [ 1162.848188][T21946] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a [ 1162.856141][T21946] RBP: 00007f797381fab1 R08: 0000000000000000 R09: 0000000000000000 [ 1162.864188][T21946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.872142][T21946] R13: 0000000000000000 R14: 00007f79739c4fa0 R15: 00007fff44d576e8 [ 1162.880103][T21946] Modules linked in: [ 1162.884367][T21946] ---[ end trace 592de84a11527ec4 ]--- [ 1162.889908][T21946] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x11d/0x280 [ 1162.896430][T21946] Code: 02 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 94 42 26 fe 4d 8b 36 49 8d be 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 3b 01 00 00 45 8b be 1c 01 00 00 44 89 [ 1162.916107][T21946] RSP: 0018:ffff8881e73df978 EFLAGS: 00010203 [ 1162.922204][T21946] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 1162.930239][T21946] RDX: ffff8881e7198fc0 RSI: 0000000000000080 RDI: 000000000000011c [ 1162.938240][T21946] RBP: ffff8881e73df998 R08: 0000000000000040 R09: ffffed1038a2f8f9 [ 1162.946237][T21946] R10: ffffed1038a2f8f9 R11: 1ffff11038a2f8f6 R12: dffffc0000000000 [ 1162.954265][T21946] R13: ffffc900001a8020 R14: 0000000000000000 R15: 0000000000000080 [ 1162.962282][T21946] FS: 00007f7971e066c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1162.971241][T21946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1162.977871][T21946] CR2: 0000001b2c61fffc CR3: 00000001e2103000 CR4: 00000000003406a0 [ 1162.985859][T21946] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1162.993957][T21946] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1163.001973][T21946] Kernel panic - not syncing: Fatal exception [ 1163.008277][T21946] Kernel Offset: disabled [ 1163.012750][T21946] Rebooting in 86400 seconds..