last executing test programs: 4m36.084417965s ago: executing program 32 (id=7): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) eventfd2(0xe5c, 0x80000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES8=0x0, @ANYRES16, @ANYRES8], 0x0, 0x0, 0x0, 0x0}) 4m36.068053187s ago: executing program 33 (id=6): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) 4m36.059397048s ago: executing program 34 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m36.03409151s ago: executing program 35 (id=13): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 4m35.992690144s ago: executing program 36 (id=5): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0x5, "e81b9aeb"}, @local=@item_4={0x3, 0x2, 0xa, "02168792"}]}}, 0x0}, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40051}, 0x2) 4m26.922286211s ago: executing program 37 (id=155): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2}) 4m21.780586374s ago: executing program 38 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000001000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000200010000000800010002000000140003007866726d30"], 0x58}}, 0x0) 4m19.454938391s ago: executing program 39 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xdddd0000, 0xffff1000, 0xc, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x4, 0x0, 0x8}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8080000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x1b, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0x4000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xf9, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0xe, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x66, 0x2, 0x8}, {0x4000, 0xdddd1000, 0x10, 0x2, 0xad, 0x5, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x8000000, 0xeeef0000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x6, 0x4, 0x6, 0xff, 0x6}, {0x4000, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x4, 0x7}, {0x100000, 0x5}, {0x1, 0xff81}, 0x80000003, 0x0, 0xdddd1000, 0x20, 0x5, 0x9000, 0xeeee0000, 0x1, [0x3, 0x2, 0x3, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) 3m53.686068213s ago: executing program 40 (id=953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 3m39.895282925s ago: executing program 41 (id=1137): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18) ioctl$TCSBRKP(r0, 0x5425, 0x80000000) 3m37.863227764s ago: executing program 42 (id=1207): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x0, 0x8000c62) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r1, 0x10, 0x3, 0x7ffd) 3m37.315394857s ago: executing program 43 (id=1219): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x4}]}}, 0x0, 0x42}, 0x28) 3m35.053643869s ago: executing program 44 (id=1264): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m6.720809035s ago: executing program 45 (id=1610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 2m49.837287948s ago: executing program 46 (id=2286): r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100000ca38f40d813110062d0010603010902"], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x9bd, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) 1m42.46328694s ago: executing program 47 (id=4272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000094000040"]) 1m39.358228465s ago: executing program 48 (id=4340): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x2, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3d8f0184313b3e4cc4a69e274cfd339a08761b0d738e63a2", "59c2032ca6db8401927339e7fe1164c14fdd706e65bab07235e184aedb6ff2c3"}}}}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) read(r0, &(0x7f0000000140)=""/4, 0x4) 1m36.205708745s ago: executing program 49 (id=4416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000104010100000000000000000100040005000100010000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) 1m34.549251007s ago: executing program 50 (id=4461): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) 1m34.258860765s ago: executing program 51 (id=4470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="f081550100a00000fa0f0108080045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f20c035f70000000f22c067420f01c30f5966baf80cb8c087678eef66bac60ced45c194710a000000058a3bc6827dbcae009008f2", 0x60}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m32.183577359s ago: executing program 52 (id=4505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) 59.981106754s ago: executing program 53 (id=5344): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000180)={0x63}) 46.509595753s ago: executing program 2 (id=5698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r0, 0x3) 46.495456965s ago: executing program 2 (id=5700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 46.427552771s ago: executing program 2 (id=5702): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1018852, &(0x7f0000000300)={[{@nodiscard}, {}, {@acl}, {@fsync_mode_strict}, {@inline_xattr}, {@disable_roll_forward}, {@checkpoint_diasble}, {@discard_unit_section}, {@noinline_xattr}, {@discard_unit_block}, {@fsync_mode_strict}, {@age_extent_cache}, {@extent_cache}, {@fault_injection={'fault_injection', 0x3d, 0xffffffffffffffff}}], [{@subj_type={'subj_type', 0x3d, 'disable_roll_forward'}}, {@flag='posixacl'}]}, 0x1, 0x551c, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 45.909217642s ago: executing program 2 (id=5713): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) 45.541733298s ago: executing program 2 (id=5721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="0f01dbbaa000ed0f380355fff30faeef0f01df660fc772500fc71966b9800000c00f326635000100000f30640f013e7d2765650f01c8", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 45.481080114s ago: executing program 54 (id=5721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="0f01dbbaa000ed0f380355fff30faeef0f01df660fc772500fc71966b9800000c00f326635000100000f30640f013e7d2765650f01c8", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.910508879s ago: executing program 9 (id=5891): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100e8ffffff00000000100000002000018008000100", @ANYRES32=r3, @ANYBLOB="14000200776731"], 0x34}}, 0x0) 39.822612698s ago: executing program 9 (id=5895): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0\x00\b}QmE\xdd\xa69!Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 39.784907822s ago: executing program 9 (id=5898): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1018852, &(0x7f0000000300)={[{@nodiscard}, {}, {@acl}, {@fsync_mode_strict}, {@inline_xattr}, {@disable_roll_forward}, {@checkpoint_diasble}, {@discard_unit_section}, {@noinline_xattr}, {@discard_unit_block}, {@fsync_mode_strict}, {@age_extent_cache}, {@extent_cache}, {@fault_injection={'fault_injection', 0x3d, 0xffffffffffffffff}}], [{@subj_type={'subj_type', 0x3d, 'disable_roll_forward'}}, {@flag='posixacl'}]}, 0x1, 0x551c, &(0x7f00000079c0)="$eJzs3M1rI/UbAPAn7Xbff/sr4sHbDixCC5uw6b6gt1V38QW7lFUPnjRN0pDdJFOaNK296MGjePDsPyEKnjz6N3jw7E08KJ4UVjIz0W1VEJom3e3nA5Nn5pvvPPN8Qyk8MyEBnFiLya8/l+JSnIuI+Yi4GJHtl4otczsPz0XE5YiYe2wrFeN/DpyOiPMRcenRh+PTS8Vbn10dXrn50xu/fPPdmVMXvvj6+5ksGDgWno+I7ma+v9PNY9rK44NivDZsZ7F7Y1jE/I3uw+I4zeNOcz3LsFMbz6tl8Xorn59ubvdHcaNTq49iq72RjW/28gv2h61xnuyEB7Wt7LjRXM9iu59msbWX17W7l/+/3OsP8jyNIt8HWfoYDMYxH2/uNvP1bD7MYr03KMbzvGmjuTuKwyIWl4t62mlkdawf5pM+3t5s97Z3k2Fzq99Oe8nNSvWFSvVWubqVNpqD5o1yrdu4dSNZanVG08qDZq17u5WmrU6zUk+7y8lSq14vV6vJ0p3mervWS6rVyvXKtfLN5WLvavLqvXeSTiNZGsWX273tQbvTTzbSrSQ/YzlZqVx/cTm5Uk3eWl1L1u7fvbu69vZ7d96999Lq668Uk/5WVrK0cm1lpVy9Vl6pLp+g9X9cFD3B9cOhlGZdAMCT5+j6/1HyPKf+Hzjo6Pr/rfsRR9//h/5/Ip6o/vek9/9HsH44FP0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCJ9cPCl69lO4v58YVi/H/F0DPFcSki5iLi0T+Yj9P7cs4XeRb+Zf7CgRq+LUWWYXSNM8V2PiJuF9vv/z/qTwEAAACeXl99dPnTvFvPXxZnXRDTlN+0mbv4/oTylSJiYfHHCWWbG708O6Fk2d/3qdidULbsBtbZCSXLb7mdmlS2/2R+Xzj7WCjlYW6q5QAAAFOxvxOYbhcCAADANH0y6wKYjVKMH2WOnwVn37z/64HguX1HAAAAwLH3+W8HR0qzKQQAAACYoqz/9/t/AAAA8HTLf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiDnfvJVRqI4wD+a6HyR43EuPcq7uAYHsGlS8MBvAQHcIFX8AKcAXcewVBDpyIYFi+v0zbv5fNJyjBN+fZXAouZSQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+vSz2m++f3n/tWvOqe5gEXWepwEAAADuOVb7TfNmlfov2/Ov21Nv234REWVE3Bu+T+LFTeakzan+Xf/t+vrqvxp+RDQJ53vM2mMZER/a4/ebvr8FAAAAeL4O2906jdbTy2rsghhSmrQpX33MlFdERLX6lSmtPOe9yxTW/L6n8TlTWjOBNc8UlqbcprnSHqT5u19m7eZXTZGa8u7HLkVme3YAAGBAk5tm2FEIAAAAQ/o0dgGMo4i/S5mXpcBZatrlvcVNDwAAAHiCirELAAAAAHrXjP8H2v+vtv8fAAAAjCPt/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfjtV+c9ju1l1zTnU3j7vrsmvZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8If9eTmBEAiDMNi7vm8y+QcrDRqDB6tA+PgbDwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKf87i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H2awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNifkxQKgSCIgvkHJ3Ahff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6XC/fO36NI8m/08bU8Ugyd9VYumqsPWhsPRjJ/vSHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA42bmf1ziqOADgb2Z2trYqrlH2EBEFD3qx221t7U08KMGDf4IQ0m2N3fqjzcGWIubiTXLuRfQoIijx1v8h5wRyibcc9hDBszKzM9nJD3D9NbNJPh948747DPO+bxZCvvNeAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORGb0/iJDt0xnFcnNvce7iU9VuH+szjte35rGVxVGfSJ8OL1Q9Rt7lEAAAAODuSsr4PIeyk6wtZH3fy+j8tr8lq/m+fHsdlPX+47i/7svbP2i8/7z6/P1BnPE5205vLw8Glo6m0/r9ZzrZn/vKKVv7k83cvSf6FxO+tPjdK8+cZfb2x8U47D8/VkS0A8E9cLPsiKH8fyvp+k4kBcGa0KoV3Wf8nnWZzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjDaDU8WcZRCGG+NYkzW3sPl47rH69tz5ft2qNHa+HLyT2zW6QhhJvLw8GlWmcz2+7df3B7cTgc3K0/eCmE0NTobxXTv/3BFBeH0MjzEfxHQVx82bOSz8kIGvyhBADAqZQWLavrd9L1hexcNBfCH98drP9frcRhyvp/98Nrm9WxqvV/v7YZzr7eyp1Pe/fuP3h9+c7ircGtwcdvXO6/2b9y/erV6738XUnPGxMAAAD+nXbRqvV/PHd0/f9CJQ5T1v+ffdP/ojpWov4/1mTRr+lMAAAAzrZnX/79t+iY81G7HT5fXFm52x8f9z9fHh8bSPVvO1e0av2fzDWdFQAAAFCH0Wp0YP3/RiUOU67/P/X9Cz9W75mEEM4X6/8Xlz4Z3qhvOjOtjj8nbnqOAAAANOt80arr/2m+/z/e3/IQhxBee2UcF/8GcKr6P3n3qx+qY1X3/1+pb4ozKe6On0fed0NodZvOCAAAgNPsiaJlxf6v6frCRz9deL9t/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4MAAD//xAOP7U=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 39.419528848s ago: executing program 9 (id=5911): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 39.256837553s ago: executing program 7 (id=5918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) unlink(0x0) 39.256541544s ago: executing program 7 (id=5919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000280)="3eddb8fcfd660f38802f66b9800000c00f326635010000000f3066b81f0000000f23c00f21f8663501000c000f23f8bac7a0006c006cee0f20e06635000002000f22e0670f009afbd9f50166b9800000c00f326635008000000f30baa000ed", 0x5f}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.255068724s ago: executing program 9 (id=5920): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r0, r3, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r1, 0x4, r0}, 0x6) 39.210483018s ago: executing program 55 (id=5920): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r0, r3, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r1, 0x4, r0}, 0x6) 39.109592138s ago: executing program 7 (id=5922): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1018852, &(0x7f0000000300)={[{@nodiscard}, {}, {@acl}, {@fsync_mode_strict}, {@inline_xattr}, {@disable_roll_forward}, {@checkpoint_diasble}, {@discard_unit_section}, {@noinline_xattr}, {@discard_unit_block}, {@fsync_mode_strict}, {@age_extent_cache}, {@extent_cache}, {@fault_injection={'fault_injection', 0x3d, 0xffffffffffffffff}}], [{@subj_type={'subj_type', 0x3d, 'disable_roll_forward'}}, {@flag='posixacl'}]}, 0x1, 0x551c, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 38.705839438s ago: executing program 7 (id=5926): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 38.364770511s ago: executing program 7 (id=5933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) 38.343260783s ago: executing program 56 (id=5933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) 20.441981427s ago: executing program 1 (id=6396): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 20.4117144s ago: executing program 1 (id=6398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000000000000200000001000000000041031d2e5c50bac30000ffff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.30610002s ago: executing program 1 (id=6400): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fdatasync(r0) 20.224413828s ago: executing program 1 (id=6402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.160124005s ago: executing program 1 (id=6405): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 20.093345631s ago: executing program 57 (id=6405): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 19.154427793s ago: executing program 4 (id=6428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 19.089278969s ago: executing program 4 (id=6429): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000800)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) shutdown(r0, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 19.088890389s ago: executing program 4 (id=6430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) exit(0xfe) 18.199882977s ago: executing program 4 (id=6451): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.139261892s ago: executing program 4 (id=6452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000001700e2fe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 18.090848597s ago: executing program 58 (id=6452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000001700e2fe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 17.930147843s ago: executing program 59 (id=6453): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty, 0x0, 0x2, 0x1, 0xa, 0x3, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x3, 0x0, 0x3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$eventfd(r1, &(0x7f00000001c0), 0x8) 17.888736187s ago: executing program 60 (id=6455): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 17.765618639s ago: executing program 61 (id=6459): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) wait4(r0, 0x0, 0x2, 0x0) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) 17.75925073s ago: executing program 2 (id=6456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x61000cc4) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181000, 0x4) 17.724532263s ago: executing program 62 (id=6456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x61000cc4) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181000, 0x4) 17.676730818s ago: executing program 9 (id=6457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) 17.676431578s ago: executing program 63 (id=6457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) 17.638360681s ago: executing program 7 (id=6460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000014c0)={0xb, 0x5, 0xf1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800007b01"]) 17.537170392s ago: executing program 64 (id=6460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000014c0)={0xb, 0x5, 0xf1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800007b01"]) 17.534683852s ago: executing program 4 (id=6462): r0 = epoll_create1(0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) ppoll(&(0x7f0000000000)=[{r0, 0x2003}, {r0, 0xf401}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)={0x68000005}) 17.432026652s ago: executing program 65 (id=6462): r0 = epoll_create1(0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) ppoll(&(0x7f0000000000)=[{r0, 0x2003}, {r0, 0xf401}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)={0x68000005}) 17.384655346s ago: executing program 1 (id=6461): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001480)={0x8, {"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", 0x1000}}, 0x1006) fadvise64(r0, 0x2, 0x0, 0x4) 17.34736414s ago: executing program 66 (id=6461): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001480)={0x8, {"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", 0x1000}}, 0x1006) fadvise64(r0, 0x2, 0x0, 0x4) 12.869879489s ago: executing program 5 (id=6545): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x100, 0x80000ffc, 0x5cc}, &(0x7f00000001c0), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000780)=[{&(0x7f0000001a40)=""/4090, 0xa74}], 0x1) 12.838518952s ago: executing program 5 (id=6548): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0xfffffffffffffe6a, {0x0, 0x8080000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000480)={{0x0, 0x0, 0xffffffffffffffca, {0x0, 0x3000}}, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fe00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f56900000000000000000000000000000000000000000000000000000000f3ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a8c285400"}) 12.763941209s ago: executing program 5 (id=6551): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './bus', [], 0xa, "debd50a302a34f49ecd33bab255510f4555ac396f40e8671d896a553a026b3412d4251fb4cc5d656ef763c0c74344ba41b6c38645e608135c3cf0eda3245ebd2c430307c41047cef70f48ce6dd4ae55eacd9fae633a8b98151f5d4451b7d56d903a9dd236a8888285f34da2b495d2a23445cd4a8771070869e"}, 0x82) 12.637600281s ago: executing program 5 (id=6556): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12.392246306s ago: executing program 5 (id=6561): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.391414816s ago: executing program 5 (id=6562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}}, 0x0) 3.144540482s ago: executing program 3 (id=6686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.120071664s ago: executing program 3 (id=6688): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 3.088344957s ago: executing program 3 (id=6689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000040)=""/170, 0xaa) 3.019184684s ago: executing program 8 (id=6697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 3.001000596s ago: executing program 8 (id=6698): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=[@wr_drn={0x6e, 0x20, {0x6, 0x1}}, @wr_crn={0x46, 0x20, {0x8, 0x9cdf}}], 0x40}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x10001, 0x0, {[0x0, 0x0, 0xffffffffffffffff, 0x800, 0x6, 0x8000, 0x0, 0xfffffffffffffffc]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.904704835s ago: executing program 8 (id=6703): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000040)) 2.113407242s ago: executing program 3 (id=6719): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 2.092864534s ago: executing program 3 (id=6721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x20, 0x5, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.062977157s ago: executing program 0 (id=6723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) lstat(0x0, 0x0) 2.031181291s ago: executing program 0 (id=6725): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1.880348915s ago: executing program 3 (id=6726): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000480)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.873573476s ago: executing program 6 (id=6737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000004800)={{0x3, 0x0, 0x80, {0xeeee8000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000002780)={{0x3, 0x0, 0x80, {0x100000, 0xeeef0000, 0x1}}, "ade3b0ae2eb545a10a31e453bb4ac664f9eab0b42929fac785acf94662f4584c0e95d7a3296a94e87a2568abb6b61b2d5d5696f86dc98f48a5ffb17279a17535bf43bb7d8af37ea9fc1e7c4addcb5b86d0304b9ba070a364f945a06a61a9713b9b47dda9dca2b4de722590c336f2d072a7800dd97bf891fd34e987ce8263353d70edc8f957e4aa15ef9e5aa7dc12351480f9c4cfae754fc23a6c1748ec92b4e7d71610fd17cafa28b9a6595cef646fb6210f2cccda0dc9395073268a34346e9dc97e2eaedd2b8e08e8431ec8c808ee350dd24115ed69d7b51f71ca60b1f455e6b3252edb8c877665f9ee972790f704558f08da050cceeef9a2068bafdbc5e3859fe2d438d5095930c77c7c7644becd0e65086b035d6fb92ace2c7c14eccda1f11d3da52addc8fecbd15edd6ae258c4ec470624632f3d906a945ebd519d76e2852f3dcb4cf4d3ce2ce014ecdbe6c031b037f623fbc3720bb952bfd5abfe1094360b5b5fd331db24afbdb84beabf97ba4ffb3e319e5494dca2980b6c990a02b15c577f24cdc3a9be323ffe30fcea8e7e6ff179440740aa40952c328a343048d46f219b54f78f57741cdf8fb81c34cfae6299dcb6e5f40b15e779b5611ad347e671b6e7e4db878c0d80c1dbfbfb463f6782a53379d4bd68af23aaaaa1eb0926913c9e5c39b92507c265d8e92af1f33115f5576fc95e331ec614b4c9995e5e8f3cef3aa10cf1f99071fd38357cb07af6a6305d677568b4114888dcc4fd0f3059cd206c4b493e3a55f113e820448544690339369c2cfdb179a802aa5bf487ee2f78983b53f0f81d853923d5038467c36a917d77370cfffbd2b5a7538596a1ae9d76df94e7a552b1081315eb371291f5c5748d20bb0f88fd2ba2aa5bb6ffaddf17e4c9e5d2e25a09e87c57c700b7224f25300eb2ee78929653f16432f170aa9e5fc33db2acf7cffabf533cb3a97c67008ccea5a06c37f56832bb6d627ffa19c6a60b4aaa76859387a8e9870c0978970ca3b98ef2c4c160d3188a426948aa7d5f7b7dd76f6d2dd1b8677e9fc105517dfd3e3a1235632ce72f74cafcd2ef311684a718ec0b676de1282d4780ba0d2588c3cd455dff676de7ffc2cac1715fbfb1e4e9936fae8b155393421931cbfb8cc5171f8edbf2ae6136a8120b1085b380f57a9a50b65f6477b88428dea1f14182847ff28507a11559fdc70b7fdb2a61b25f2da6f030604b70e10854027d23cffcda5f7cabdce7ffeb03c16a33e242684bff5e97b692cbc6e6ed51fcf774083921e105a3042cd0093612989a5210b68452549831ab5f4b7e3a6c65647fd1791ecc576ad010fa34d6a8ba410578a6fc89547b7795c2d900004068d08ce17826ad6ab9b181f50689db15d928644a819378a28299bdff110d17918509924bc9409a45940bddea6e51b4746e7bf8fdabd14c3a81c5d1ae5bae8a5abb3fa391aa8c8a0c66e5330ab1c9c24c62ec3e15c0351c28f9d0a93ffc45e442f4730d428b9d6c5b05f14c6b38a3285fd2bc4365c4db6ce695eca95b2d372b68863e6b78e3faafa473278f90a72629c3aad64b3d926b8aa0e113bbe1c0a9ad07528d3809b711a7122d55d3d64d98d5b324f251dddf4121de2c342d9c1827303d2658b27e1c0286ed906962d1ec2ef7c39866f9fea1cffcc10f107d3b3f7fc0025397d1be28143aeb15bf29ae2297577d353f1b0bd25710bf7bf4e1afa4e2d92859c3551b64dd0f1a4a40ec22e29510883d9473363d2f255a49d1964adad86c361ec2a4bb12824a9bf2a8caccb2ff86a928d8fbf77dbbb145e4f4cf1b9d1a48846f2ece35b0544eb43a0d94764fc8e580c2edfa11f32a86a4d20df07db4284e56d40bd6c522caaeb4359c893732c10644160dfd4fabd347eaba816e23dba6d1f9183a3be327ca2deae4d426bb9191641397fb09674ad32cc5281b3f7c9c0f930aebd81dccf8a0911363af5919e1271794061457fa7a17d058f716e84385d8ad2947660c83a8dacde7f54cc3098ec68867e63864c303cf837c672bb9183051a6af48c0459befe3528140019685dd54d8bec95f16ade889c79a18bcb05a0f6d0739858a41982fa153ea1ff7a0bd97a4cddceac4f7375dcc290e79e2f67eeea87cfdda398ce83f76510760ecd5c21be40e7eceb914b57196d49f3423532a183039f20e8c58cd719c8708afb404c94f74c303c575a7753139a9c92ccfd06e774f084e514fcf7338a19540555402f707903d287e385657599b6d314df39c9b4449538b4ea958c78f4619dcf5986cdc748f1b3f741137e7b57304aeb0b58282691ceb1f523b8cb3f4d4df93ab5b25f1455f5bf5f729eede0114c98ae30cef555ec5690c081356e297e772d649438221e6ad3880e68bcbd15f15c163d39ea8f141ba2e0fa651b048beb274f6a3f6bb613e5a14508693fdd7077a833495fbe3562f8a5c2a4b0268cebe8f9cf4f0ec93fef2e4202c2cd76720da507f801f4c94b8e5c8e1f3359d42133ae4b9b977dbb3e3ade56c1464d4382db73c386018de281542dbe66215a0773cc9ac82ea5f5ed276c16fad6f322a982a25815b02fd9164a9ac299c1cc71b910b534054f30a19f2b30488d846e3c4860ca35dfbde11eb9fddd073c65cea23f368daa3365fd918bf4f9acaf27b644aa1d682418bfdd0c5b309f7bd138b6e4347e83b04283ebc442cd14a4f9cae0c4d4c80de7b78b2a09cd9da1a94b53000cdef10a8b0c8fe276d43211765098019066302b6dfd12c58b8675dc8b8a751bb216ef39b8cffa537f95a3982a5cec60aafb9fb1bea789d12e3735870d2650029a360f578988de6e4ee14c57d461f623fa3fce3e58fe8930bd82f19d6a00e6892395a0ffba83775cce255237f6d30c82c996145e3bd6020e431f3e4355395b4d4a97028110abd7862ae64056a1b9aafc22c4e5fc691469ba70fb9e1e3c9a933f973c2c7cc786c7afa9d4ffc4d790587e0be52eed77c4fcdd50097e05b8086b2806facc583f5655ccbe7aebac1def19515ffd965ffaf436b832d42d77fd3bd0108bc1712720a493bb2d58f037ebac0d90015b87822e5cd540e8cb3a321529eedfddcc1852173bbce06a394e16a58bc3368572548ab15e116f2c308886b6af0582972cef348d0bbc7c5c494dbece3f71b62f30924669f3bb05bba7bc4556dc421019763add0fb7e24f937d5b8b7ccc85c2a1781620a412271f3d344738ae7522876958694ca576632d68dfa16c70f21f5f35e0ab925bd0b0a1474d397ddad7dd619dce11ff858b40417a092323e4aa41b48d28077a2943e527446049390c645e5b12bfa0cef628536873b0dacc604f5d50a60949c184cf88bc78e5634c42f6c3b2422d28dd39136c7a889e345c6c895ea87b99d6401bb557d3bf4fcf096a84107358d3ba311819aa2ca55a403472d43ef2ba0e73c94cd0d47cc177f3b2d1bd688f492200cb976d9d76d013fb72cf99981b283e865e31d52cdbaa680645431b4a7565bbfffece274bb2eb112a2535ee554a2ca485134d4ce8c8c79ce8c99006e665ea9dc45288fdef7f5878cc513f21cd16f4e18412849ae1ec1d211ef4c6cfcc92919272a12d3404ade37f55bd894676c2fd9983d739b84beea3deac2ce6e60dc176251a645256343046eae563cac748785d2d8fd0a70f5c6e88af80304a34bcdbea8c8f90f307b2241890b82dab0288589ae0ee09cd7f5900fb755e44dd56c880f6570904550c2c56e1db2d5a2f4f799d58568b54a33b11bf89c6d19985b7c6993f7e1ae6fbe34b82b9ffa660b3057033383ec0134581d42b2833787cdf1603c63ee68b3b5004807e51c13ccb432a2b7464781f8890943afd805e19b38b2ab19f05f486b5a487a1eb46860424246c6caa62fc0beaf2f4df7e871899276115fee11baddba5b7e0f81621b7c4c465ad96f7b1722fe2af6e3ec84a82bad18b1df19ad30d339b5e417b5c155b47c47099f64204f62d23ff3ea320ee7c060c5c8ec91defdcde10d2f6249827f19d7a6c689c2d02086b84580d5befe803204c400ce761fe97fa8f88895eefebd43afd0ccff75e4400ad23a32a26ff685fc96692dd99f1b1043d937020acc1e0ace1cf36eca60e6191f964d505ad63942b490831fca1075b7a4600eff38c9bb8bceac633c76c43c146e8442ad11a8ff2f328b2d5115092f2e90dc64b98ea57ebf30fe8bc2c76b9df78b81ffae8c0f963b50d8fb216ec6da18d45489bfd0eb38bc4aa864cd9c33d38dc44927b0c5b513b158f6ea844dfc58e2d2d24049d2174d8c74d1bfb9018b8ff8f7718868c6dc98e156aa671de2ce019b24dc7403ce51edc46057a6b233929c9596b75707b2d25b42b908adfcb1f6c0df4f4fb4b3ae18e4218a14beab1d8f5c274e01b5dcbbefc2500bb3d8142ce86cac65af482378cb468a4546f6e0d23dc5372ba8f2a6a656c110ac8f1bcc96298f0c6a1ca67b7d81a6ebe0d42ad1990879b34db775bcc1f50a09cc9c8a544be1c238c064bbb1945f45e898f03cf7a750e24eb4aed103c62053b48fd34fae0a346d040d7eb5bed052310bb10d3c56d69fb83e0e2cb4594a9e5cd3a47dd4f84ad6d10e88d0d1c173fa2d4811f2cdf3ba434b42ce1f873bdbc988a6d5e303e0372f2ab43b33085b69f0540d1864264288818044e4062a5d8c849b851442c220f6647af7abac72d170abf8acad0bdc09d428158294ade5b7b2a657cf60980a52cb23f1e501f0ffd126663abb85fc4f74c75726819efe7f02ab97896eb300251e992f4939e2aa80c45d1d0a3f9d510db284a7008eaa90a52b10fd7372385ef8d6f97f6e9971e08d0a5b68ac758cf499bb31b678f2dfa91090ad8b68674ca69d1762780546945be6d805437423e1726314161c0249f105e5917092df78ec5cf10a6dc63a62f7ad3666f2c4dd96635fa04f24ef7577d748b1572dc6d82ea11b3a15f5f1affb17462fbe2569a82aef98eb9f5831f0f0a4d6212b98ad3ce1d89412980330faf0a3dc1ec00496555752392079a5734399397ee019036820879945b53c4cb7af102148c0b9020a44cb84a004898c945c0578ab5afee107e74984a92d4bd0ae41ead61d6db6a3eb63a278c466a6869eb1b52f29a1c486391893b16f819d701f3af854de48511af924fe3f73ba27aa282740ab6a1246a1f5fe61e9046eef808643246b1f93737dfec1d4cadf102b6896150450c9e83fdcb6ab657e3af04ab1f295c741945dbea992acf27b0a51bba7be9f54484937a2c7c89480d7b98790fd83c867f839295e5cb61c25bee23dc34732fe650be953ddbdb3d48a267f2c3679b3fbdf947ec32ed8d3b2b802ccecd41e6ea5fcb28c02f0b3307275c77aec37801a6ab0556087b58bdd95d5d2158bb9e8e67fae9f75e0e4e0584ae42aa2e72aae13785118ee3cb16c3573d294d59b8bdb04f5bd3dd5a10b575fdde84858984f5f5da2e5d5496dcef80e4ff83b519ce88e1cf110095e5848802b9138857ba59dd6b053ede837840ab5db4631f7d8b2091ef0641eff7e3bd4d6b57e38410193b18c2420d3ed1d3b83f199a1ac6cc60e43189608d7d250d6461ad4ce226cd432dc4e5a7b17f54f9b0fa616723062ceaeb8a2d87334c6c096095533005ff3a029ebeaf0f881fec80e94c0d10831d1e46b0c38fe1273f79d653a5bcf295584b7b83642b6cb704698f3af466929617ec03a5eecf1a5da89a40e71ba403bfe5fa0e44f4c23b5395899640834285453e72b8f035383635cb53bf1f7476a568132c31ff9802349765bd5dcd2a9bdeeae43cbf10b19238b509ac9456978446314edcfeb", "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"}) 1.793734184s ago: executing program 6 (id=6727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:object_r:restorecond_var_run_t:s0 /usr/lib/telepatrol-5 0'], 0x65) 1.780453445s ago: executing program 6 (id=6728): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1.767211237s ago: executing program 6 (id=6729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1.536823009s ago: executing program 6 (id=6730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r1, 0x0, 0x0}, 0x10) 1.52144636s ago: executing program 6 (id=6731): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.010314421s ago: executing program 0 (id=6732): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0x0, 0xffffd000) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r0, 0x0, 0x80000}) 690.974822ms ago: executing program 8 (id=6733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) getrlimit(0x4, &(0x7f0000000480)) 675.343503ms ago: executing program 8 (id=6734): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000980)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001c79df8713d94c8d5660e56de42944af05000600000000000a0000000000000000000000000000000000000000000001090000000000000002000100000000000000070c0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 658.250595ms ago: executing program 8 (id=6736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="66f22666410f22e2440f01d4430f092e26440f01cb66baf80cb85098e485ef66bafc0cedc423115d760959660f3adfb735000000aec4e1f82b068f2920987200f30f1eed", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 144.571655ms ago: executing program 0 (id=6738): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa10100000009b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad7c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af801034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58c, 0xf4b}) r1 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r1, 0x111, 0x32, 0x0, &(0x7f0000000380)) 68.719103ms ago: executing program 0 (id=6739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003980)={0x0, [{0x2, 0x0, 0x7, 0x0}, {0x3, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0x10000, 0x0}, {0x3, 0x0, 0x91, 0x0}, {0x3, 0x0, 0x10, 0x0}, {0x1, 0x0, 0xe7b6, 0x0}, {0x0, 0x0, 0xffff32e3, 0x0}, {0x2, 0x0, 0xfffffff7, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x2, 0x0, 0xfffff03a, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x80, 0x0}, {0x1, 0x0, 0x3, 0x0}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=6740): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000"], 0xd) kernel console output (not intermixed with test programs): end of device [ 267.061406][T10852] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 267.136139][T13627] syz.2.5431[13627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.136224][T13627] syz.2.5431[13627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.340795][T13659] loop7: detected capacity change from 0 to 1024 [ 267.396709][T13659] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 267.443169][T13645] loop2: detected capacity change from 0 to 40427 [ 267.452088][T13645] F2FS-fs (loop2): fault_injection options not supported [ 267.459480][T13645] F2FS-fs (loop2): fault_type options not supported [ 267.475770][T13645] F2FS-fs (loop2): invalid crc value [ 267.476743][T10852] EXT4-fs (loop7): unmounting filesystem. [ 267.497551][T13645] F2FS-fs (loop2): Found nat_bits in checkpoint [ 267.554299][T13645] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 267.602534][T13645] syz.2.5439: attempt to access beyond end of device [ 267.602534][T13645] loop2: rw=2049, sector=45096, nr_sectors = 520 limit=40427 [ 267.636243][ T1084] syz-executor: attempt to access beyond end of device [ 267.636243][ T1084] loop2: rw=2049, sector=45616, nr_sectors = 8 limit=40427 [ 267.853357][T13683] xt_bpf: check failed: parse error [ 267.866471][T13685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.897032][T13685] device veth1_macvtap entered promiscuous mode [ 267.909641][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 267.925225][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.935692][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 267.949655][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.962672][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.971867][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.980630][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.990079][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.013124][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.654892][T13728] syz.6.5472[13728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.654996][T13728] syz.6.5472[13728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.670279][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5473'. [ 269.705849][T13733] binder: 13724:13733 ioctl c0306201 200000000480 returned -14 [ 269.782241][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5478'. [ 269.797153][T13744] loop3: detected capacity change from 0 to 512 [ 269.813558][T13744] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 269.825195][T13744] EXT4-fs (loop3): 1 truncate cleaned up [ 269.830954][T13744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 269.855149][T11254] EXT4-fs (loop3): unmounting filesystem. [ 269.875986][T13750] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 269.885455][T13750] overlayfs: missing 'lowerdir' [ 270.075544][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5488'. [ 270.606166][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 270.606181][ T28] audit: type=1400 audit(2000000012.328:1566): avc: denied { ioctl } for pid=13778 comm="syz.1.5493" path="socket:[72931]" dev="sockfs" ino=72931 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 270.666127][T13791] netlink: 'syz.3.5498': attribute type 4 has an invalid length. [ 270.676046][T13791] netlink: 'syz.3.5498': attribute type 4 has an invalid length. [ 270.712606][T13795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.727612][T13795] device bridge_slave_0 left promiscuous mode [ 270.733894][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.744190][T13795] device bridge_slave_1 left promiscuous mode [ 270.750961][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.827239][T13808] loop1: detected capacity change from 0 to 1024 [ 270.852983][T13808] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 270.877222][T13818] loop7: detected capacity change from 0 to 256 [ 270.886597][T13818] FAT-fs (loop7): bogus number of FAT sectors [ 270.893557][T13414] EXT4-fs (loop1): unmounting filesystem. [ 270.896390][T13818] FAT-fs (loop7): Can't find a valid FAT filesystem [ 271.161930][T13835] loop7: detected capacity change from 0 to 512 [ 271.183090][T13835] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 271.198275][T13835] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 271.217199][T13835] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5517: Corrupt directory, running e2fsck is recommended [ 271.239427][T13835] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 271.255477][T13835] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.5517: corrupted in-inode xattr [ 271.268344][T13835] EXT4-fs (loop7): Remounting filesystem read-only [ 271.275395][T13835] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5517: couldn't read orphan inode 15 (err -117) [ 271.288106][T13835] EXT4-fs (loop7): Remounting filesystem read-only [ 271.295133][T13835] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 271.316633][T13835] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 271.332065][T13835] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 271.342732][T13835] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5517: Corrupt directory, running e2fsck is recommended [ 271.365118][T13835] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 271.377057][T13835] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 271.387666][T13835] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5517: Corrupt directory, running e2fsck is recommended [ 271.403088][T13835] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 271.415754][T13835] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 271.444707][T13835] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5517: Corrupt directory, running e2fsck is recommended [ 271.461171][T13861] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 271.473215][T13861] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.5517: path /214/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 271.496671][T13861] EXT4-fs (loop7): Remounting filesystem read-only [ 271.503645][T13861] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 6: comm syz.7.5517: path /214/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 271.526694][T13861] EXT4-fs (loop7): Remounting filesystem read-only [ 271.533754][T13861] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 8: comm syz.7.5517: path /214/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 271.553638][T13861] EXT4-fs (loop7): Remounting filesystem read-only [ 271.573296][T10852] EXT4-fs (loop7): unmounting filesystem. [ 271.587161][ T28] audit: type=1400 audit(2000000000.823:1567): avc: denied { unmount } for pid=13869 comm="syz.3.5533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 271.785213][T13898] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5544'. [ 271.854570][T13909] loop3: detected capacity change from 0 to 1024 [ 271.861440][T13909] EXT4-fs: Ignoring removed orlov option [ 271.869411][T13909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 271.870933][T13911] netem: incorrect ge model size [ 271.883591][T13911] netem: change failed [ 271.969659][T13923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5554'. [ 271.985197][T13926] loop7: detected capacity change from 0 to 128 [ 272.016599][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5559'. [ 272.130091][T13942] device bridge_slave_0 left promiscuous mode [ 272.136375][T13942] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.145171][T13942] device bridge_slave_1 left promiscuous mode [ 272.151826][T13942] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.164694][T13942] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 272.175765][T13946] netlink: 'syz.7.5566': attribute type 1 has an invalid length. [ 272.183831][T13946] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5566'. [ 272.318382][ T58] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 272.350064][T13956] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 272.505386][ T28] audit: type=1400 audit(2000000001.683:1568): avc: denied { read } for pid=13908 comm="syz.3.5549" path="/206/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.527994][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 272.530606][ T58] usb 2-1: config 0 has an invalid interface number: 254 but max is 0 [ 272.534057][ T28] audit: type=1400 audit(2000000001.702:1569): avc: denied { write } for pid=13908 comm="syz.3.5549" path="/206/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.542674][ T58] usb 2-1: config 0 has no interface number 0 [ 272.597732][ T58] usb 2-1: New USB device found, idVendor=5215, idProduct=1103, bcdDevice=e3.da [ 272.625081][ T28] audit: type=1400 audit(2000000001.702:1570): avc: denied { ioctl } for pid=13933 comm="syz.1.5560" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.634332][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.663913][ T58] usb 2-1: Product: syz [ 272.680486][ T28] audit: type=1400 audit(2000000001.767:1571): avc: denied { bpf } for pid=13964 comm="syz.6.5575" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 272.697501][ T58] usb 2-1: Manufacturer: syz [ 272.707974][T13969] loop7: detected capacity change from 0 to 512 [ 272.716525][ T28] audit: type=1400 audit(2000000001.777:1572): avc: denied { read write } for pid=10852 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.720724][ T58] usb 2-1: SerialNumber: syz [ 272.761517][ T28] audit: type=1400 audit(2000000001.777:1573): avc: denied { open } for pid=10852 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.782125][ T58] usb 2-1: config 0 descriptor?? [ 272.796944][ T58] usb-storage 2-1:0.254: USB Mass Storage device detected [ 272.805247][T13969] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 272.814772][ T28] audit: type=1400 audit(2000000001.777:1574): avc: denied { ioctl } for pid=10852 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=125 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.840858][T13969] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.851884][ T28] audit: type=1400 audit(2000000001.777:1575): avc: denied { prog_load } for pid=13964 comm="syz.6.5575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 272.958637][T10852] EXT4-fs (loop7): unmounting filesystem. [ 272.981543][T11254] EXT4-fs (loop3): unmounting filesystem. [ 273.039327][ T293] usb 2-1: USB disconnect, device number 18 [ 273.243821][T13994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.271275][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 273.287685][T14000] /dev/loop0: Can't open blockdev [ 273.290644][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.316431][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 273.325547][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.335271][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.350780][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.370376][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.385882][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.422783][T14007] device wireguard0 entered promiscuous mode [ 274.040406][T14046] loop2: detected capacity change from 0 to 256 [ 274.052364][T14046] exfat: Deprecated parameter 'namecase' [ 274.060815][T14046] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 274.179023][T14071] loop3: detected capacity change from 0 to 512 [ 274.186741][T14071] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 274.196938][T14071] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 274.207014][T14071] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 274.209545][T14069] netlink: 'syz.6.5621': attribute type 12 has an invalid length. [ 274.226832][T14071] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 274.236259][T14071] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 274.245211][T14071] EXT4-fs (loop3): orphan cleanup on readonly fs [ 274.252366][T14071] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5619: bg 0: block 34: padding at end of block bitmap is not set [ 274.267068][T14071] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.5619: Failed to acquire dquot type 1 [ 274.279115][T14071] EXT4-fs (loop3): 1 truncate cleaned up [ 274.285075][T14071] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 274.303253][T11254] EXT4-fs (loop3): unmounting filesystem. [ 274.343820][T14085] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 274.647291][T14092] netlink: 'syz.7.5640': attribute type 12 has an invalid length. [ 274.655247][T14092] netlink: 'syz.7.5640': attribute type 29 has an invalid length. [ 274.665231][ T293] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 274.673384][T14092] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5640'. [ 274.749379][T14103] kvm [14102]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 274.813498][T14112] syz.7.5638[14112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.813594][T14112] syz.7.5638[14112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.876475][ T293] usb 4-1: Using ep0 maxpacket: 32 [ 274.898833][ T293] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 274.907540][ T293] usb 4-1: config 0 has no interface number 0 [ 274.913791][ T293] usb 4-1: config 0 interface 184 has no altsetting 0 [ 274.922844][ T293] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 274.935561][ T293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.943911][ T293] usb 4-1: Product: syz [ 274.948675][ T293] usb 4-1: Manufacturer: syz [ 274.953567][ T293] usb 4-1: SerialNumber: syz [ 274.969971][ T293] usb 4-1: config 0 descriptor?? [ 274.977636][ T293] smsc75xx v1.0.0 [ 275.043757][T14135] loop2: detected capacity change from 0 to 1024 [ 275.053849][T14135] EXT4-fs: Ignoring removed nobh option [ 275.062103][T14135] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 275.100154][T14135] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 275.125937][T14135] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.5650: Allocating blocks 497-513 which overlap fs metadata [ 275.141003][T14135] EXT4-fs (loop2): pa ffff8881331832a0: logic 256, phys. 385, len 8 [ 275.149118][T14135] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 275.221481][ T1084] EXT4-fs (loop2): unmounting filesystem. [ 275.313082][T14166] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5663'. [ 275.359287][T14168] loop2: detected capacity change from 0 to 512 [ 275.366461][T14168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 275.378439][T14168] EXT4-fs (loop2): 1 truncate cleaned up [ 275.384125][T14168] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 275.411526][T14168] Invalid ELF header magic: != ELF [ 275.439138][ T1084] EXT4-fs (loop2): unmounting filesystem. [ 275.514830][ T39] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 275.719033][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.730119][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.739946][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.753097][ T39] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.762238][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.771025][ T39] usb 2-1: config 0 descriptor?? [ 276.121962][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 276.121987][ T28] audit: type=1400 audit(2000000005.060:1664): avc: denied { create } for pid=14197 comm="syz.2.5676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 276.205329][ T28] audit: type=1400 audit(2000000005.144:1665): avc: denied { setopt } for pid=14201 comm="syz.2.5678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 276.207426][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.233828][T14202] af_packet: tpacket_rcv: packet too big, clamped from 2906 to 4294967272. macoff=96 [ 276.244470][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.251954][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.265284][ T293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 276.273887][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.276762][ T293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 276.287557][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.304044][ T293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 276.314287][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.315351][ T293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 276.332796][ T293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 276.334095][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.343711][ T293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 276.362168][ T28] audit: type=1400 audit(2000000005.294:1666): avc: denied { execmem } for pid=14203 comm="syz.7.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 276.374759][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.391501][ T293] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 276.397782][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.402554][ T293] usb 4-1: USB disconnect, device number 17 [ 276.415762][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.423965][T14158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.436423][T14158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.449466][ T39] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 276.466423][ T39] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 276.485587][ T39] plantronics 0003:047F:FFFF.0054: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 276.519874][ T39] usb 2-1: USB disconnect, device number 19 [ 276.782980][T14227] loop2: detected capacity change from 0 to 512 [ 276.789977][T14227] EXT4-fs: Ignoring removed oldalloc option [ 276.812822][T14227] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 276.821908][T14227] ext4 filesystem being mounted at /1106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.876879][ T1084] EXT4-fs (loop2): unmounting filesystem. [ 276.995181][ T28] audit: type=1400 audit(2000000005.883:1667): avc: denied { create } for pid=14236 comm="syz.2.5692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.017470][ T28] audit: type=1400 audit(2000000005.883:1668): avc: denied { setopt } for pid=14236 comm="syz.2.5692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.043060][ T28] audit: type=1400 audit(2000000005.883:1669): avc: denied { write } for pid=14236 comm="syz.2.5692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.065177][ T28] audit: type=1400 audit(2000000005.921:1670): avc: denied { map } for pid=14242 comm="syz.2.5695" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.071579][T14246] netlink: 'syz.1.5696': attribute type 1 has an invalid length. [ 277.096622][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5696'. [ 277.140839][ T28] audit: type=1400 audit(2000000006.023:1671): avc: denied { mount } for pid=14250 comm="syz.1.5699" name="/" dev="configfs" ino=14237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 277.200696][ T28] audit: type=1400 audit(2000000006.052:1672): avc: denied { search } for pid=14250 comm="syz.1.5699" name="/" dev="configfs" ino=14237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.229536][ T28] audit: type=1400 audit(2000000006.052:1673): avc: denied { setattr } for pid=14250 comm="syz.1.5699" name="/" dev="configfs" ino=14237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.271796][T14262] loop7: detected capacity change from 0 to 1024 [ 277.281014][T14262] EXT4-fs error (device loop7): ext4_acquire_dquot:6803: comm syz.7.5704: Failed to acquire dquot type 0 [ 277.293059][T14262] EXT4-fs error (device loop7): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 277.307995][T14262] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #13: comm syz.7.5704: corrupted inode contents [ 277.322007][T14262] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #13: comm syz.7.5704: mark_inode_dirty error [ 277.333425][ T293] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 277.341566][T14262] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #13: comm syz.7.5704: corrupted inode contents [ 277.354002][T14262] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #13: comm syz.7.5704: mark_inode_dirty error [ 277.377720][T14262] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #13: comm syz.7.5704: corrupted inode contents [ 277.390752][T14262] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 277.414446][T14262] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #13: comm syz.7.5704: corrupted inode contents [ 277.428790][T14262] EXT4-fs error (device loop7): ext4_truncate:4314: inode #13: comm syz.7.5704: mark_inode_dirty error [ 277.442593][T14258] loop2: detected capacity change from 0 to 40427 [ 277.446188][T14262] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 277.450293][T14258] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 277.458901][T14262] EXT4-fs (loop7): 1 truncate cleaned up [ 277.465914][T14258] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 277.479588][T14262] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 277.489237][T14258] F2FS-fs (loop2): fault_injection options not supported [ 277.507535][T14258] F2FS-fs (loop2): invalid crc value [ 277.516980][T14258] F2FS-fs (loop2): Found nat_bits in checkpoint [ 277.531745][T10852] EXT4-fs (loop7): unmounting filesystem. [ 277.547656][ T293] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.562553][ T293] usb 4-1: config 0 has no interfaces? [ 277.578671][ T293] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.589018][T14258] F2FS-fs (loop2): Start checkpoint disabled! [ 277.595435][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.603607][T14276] loop7: detected capacity change from 0 to 4096 [ 277.613384][ T293] usb 4-1: config 0 descriptor?? [ 277.618629][T14258] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 277.625957][T14258] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 277.643536][T14276] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 277.668758][T14276] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #15: comm syz.7.5709: corrupted inode contents [ 277.686757][T14276] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #15: comm syz.7.5709: mark_inode_dirty error [ 277.699310][ T1084] syz-executor: attempt to access beyond end of device [ 277.699310][ T1084] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 277.716145][ T1084] syz-executor: attempt to access beyond end of device [ 277.716145][ T1084] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 277.730783][T14276] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #15: comm syz.7.5709: corrupted inode contents [ 277.765536][T14276] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #15: comm syz.7.5709: mark_inode_dirty error [ 277.793526][T14276] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #15: comm syz.7.5709: corrupted inode contents [ 277.806955][T11919] kworker/u4:337: attempt to access beyond end of device [ 277.806955][T11919] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 277.822836][T14276] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #15: comm syz.7.5709: mark_inode_dirty error [ 277.835637][T14276] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #15: comm syz.7.5709: corrupted inode contents [ 277.847892][T14276] EXT4-fs error (device loop7): ext4_truncate:4314: inode #15: comm syz.7.5709: mark_inode_dirty error [ 277.867049][T14276] EXT4-fs error (device loop7) in ext4_setattr:5660: Corrupt filesystem [ 277.884310][T14286] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #15: comm syz.7.5709: corrupted inode contents [ 277.938903][T10852] EXT4-fs (loop7): unmounting filesystem. [ 278.201516][T14309] loop1: detected capacity change from 0 to 512 [ 278.224628][T14309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 278.245120][T14312] loop7: detected capacity change from 0 to 1024 [ 278.259976][T13414] EXT4-fs (loop1): unmounting filesystem. [ 278.270896][T14312] EXT4-fs: Ignoring removed nobh option [ 278.277062][T14312] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.312505][T14312] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 278.349924][T14312] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3836: comm syz.7.5725: Allocating blocks 497-513 which overlap fs metadata [ 278.365636][T14312] EXT4-fs (loop7): pa ffff88813de36348: logic 256, phys. 385, len 8 [ 278.373751][T14312] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 278.421512][T14314] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.430197][T14314] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.432485][ T346] usb 4-1: USB disconnect, device number 18 [ 278.437905][T14314] device bridge_slave_0 entered promiscuous mode [ 278.452638][T14314] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.460062][T14314] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.467869][T14314] device bridge_slave_1 entered promiscuous mode [ 278.501391][T10852] EXT4-fs (loop7): unmounting filesystem. [ 278.545355][T14339] loop7: detected capacity change from 0 to 512 [ 278.555882][T14339] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.5734: inode #1: comm syz.7.5734: iget: illegal inode # [ 278.569152][T14339] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.5734: error while reading EA inode 1 err=-117 [ 278.581838][T14339] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.5734: inode #1: comm syz.7.5734: iget: illegal inode # [ 278.595557][T14339] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.5734: error while reading EA inode 1 err=-117 [ 278.608221][T14339] EXT4-fs (loop7): 1 orphan inode deleted [ 278.614020][T14339] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 278.614125][T11919] device dummy0 left promiscuous mode [ 278.628828][T11919] device veth1_macvtap left promiscuous mode [ 278.634911][T11919] device veth0_vlan left promiscuous mode [ 278.648431][T10852] EXT4-fs (loop7): unmounting filesystem. [ 278.795349][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.810071][T14346] loop7: detected capacity change from 0 to 40427 [ 278.814398][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.824154][T14346] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 278.832334][T14346] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 278.832366][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.841360][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.851347][T14346] F2FS-fs (loop7): invalid crc value [ 278.857685][T11483] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.869620][T11483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.879004][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.888203][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.891509][T14346] F2FS-fs (loop7): Found nat_bits in checkpoint [ 278.898830][T11483] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.909701][T11483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.934121][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.942543][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.950756][T14346] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 278.951181][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.965747][T14346] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 278.966983][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.973589][ T293] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 278.982856][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.008140][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.018253][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.035177][T14314] device veth0_vlan entered promiscuous mode [ 279.043184][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.052233][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.071311][T14314] device veth1_macvtap entered promiscuous mode [ 279.078273][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.086097][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.093735][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.102968][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.123211][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.145215][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.154538][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.163533][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.172772][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.183002][ T293] usb 4-1: Using ep0 maxpacket: 16 [ 279.196287][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.217957][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.232267][ T293] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.246832][ T293] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 279.259540][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.288377][ T293] usb 4-1: config 0 descriptor?? [ 279.435511][T14390] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5751'. [ 279.455012][T14391] loop9: detected capacity change from 0 to 1024 [ 279.474020][T14391] EXT4-fs: Ignoring removed nobh option [ 279.485513][T14391] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.548591][T14391] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 279.580573][T14391] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3836: comm syz.9.5752: Allocating blocks 497-513 which overlap fs metadata [ 279.595157][T14391] EXT4-fs (loop9): pa ffff88813de36b28: logic 256, phys. 385, len 8 [ 279.603257][T14391] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 279.685315][T14314] EXT4-fs (loop9): unmounting filesystem. [ 279.729257][ T293] microsoft 0003:045E:07DA.0055: unbalanced collection at end of report description [ 279.739516][ T293] microsoft 0003:045E:07DA.0055: parse failed [ 279.745772][ T293] microsoft: probe of 0003:045E:07DA.0055 failed with error -22 [ 279.973565][ T293] usb 4-1: USB disconnect, device number 19 [ 280.036284][T14410] loop9: detected capacity change from 0 to 40427 [ 280.044639][T14410] F2FS-fs (loop9): invalid crc value [ 280.060217][T14410] F2FS-fs (loop9): Found nat_bits in checkpoint [ 280.104817][T14410] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 280.128891][T14314] syz-executor: attempt to access beyond end of device [ 280.128891][T14314] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 280.187454][T14421] loop1: detected capacity change from 0 to 40427 [ 280.195375][T14421] F2FS-fs (loop1): invalid crc value [ 280.212264][T14421] F2FS-fs (loop1): Found nat_bits in checkpoint [ 280.262726][T14421] F2FS-fs (loop1): Start checkpoint disabled! [ 280.271165][T14434] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 280.278753][T14421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 280.280642][T14434] SELinux: failed to load policy [ 280.314956][ T39] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 280.362265][T14421] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 280.429214][T11483] kworker/u4:215: attempt to access beyond end of device [ 280.429214][T11483] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 280.521815][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.539391][ T39] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.559202][ T39] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 280.580726][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 280.589084][ T39] usb 8-1: SerialNumber: syz [ 280.635447][T14449] loop1: detected capacity change from 0 to 16 [ 280.642419][T14449] erofs: (device loop1): mounted with root inode @ nid 36. [ 280.792633][T14461] loop1: detected capacity change from 0 to 128 [ 280.800247][T14461] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.820791][ T39] usb 8-1: 0:2 : does not exist [ 280.827248][ T39] usb 8-1: USB disconnect, device number 22 [ 280.838793][ T346] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 280.846786][T11483] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.865349][T14465] IPv6: sit1: Disabled Multicast RS [ 281.041893][ T346] usb 4-1: Using ep0 maxpacket: 16 [ 281.048297][ T346] usb 4-1: config 0 interface 0 has no altsetting 0 [ 281.055151][ T346] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 281.064280][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.072924][ T346] usb 4-1: config 0 descriptor?? [ 281.228947][T14481] kvm [14480]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 281.237700][T14481] kvm [14480]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 281.509181][ T346] hid (null): report_id 54409 is invalid [ 281.515837][ T346] hid (null): report_id 1880715515 is invalid [ 281.522114][ T346] hid (null): unknown global tag 0xd [ 281.525437][T14505] loop7: detected capacity change from 0 to 40427 [ 281.527890][ T346] hid (null): global environment stack overflow [ 281.535676][T14505] F2FS-fs (loop7): invalid crc value [ 281.540519][ T346] hid (null): unknown global tag 0x7f [ 281.546627][T14505] F2FS-fs (loop7): Found nat_bits in checkpoint [ 281.580892][T14505] F2FS-fs (loop7): Start checkpoint disabled! [ 281.587816][T14505] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 281.617688][T14505] F2FS-fs (loop7): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 281.650670][T11483] kworker/u4:215: attempt to access beyond end of device [ 281.650670][T11483] loop7: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 281.737634][ T293] usb 4-1: USB disconnect, device number 20 [ 281.803766][T14515] loop7: detected capacity change from 0 to 256 [ 281.813239][T14515] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 281.826875][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 281.826891][ T28] audit: type=1400 audit(2000000018.405:1775): avc: denied { mount } for pid=14514 comm="syz.7.5801" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 281.869550][ T28] audit: type=1400 audit(2000000018.405:1776): avc: denied { write } for pid=14514 comm="syz.7.5801" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.891613][ T28] audit: type=1400 audit(2000000018.405:1777): avc: denied { remove_name } for pid=14514 comm="syz.7.5801" name="file0" dev="loop7" ino=1048876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.915730][ T28] audit: type=1400 audit(2000000018.405:1778): avc: denied { rmdir } for pid=14514 comm="syz.7.5801" name="file0" dev="loop7" ino=1048876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.939420][ T28] audit: type=1400 audit(2000000018.405:1779): avc: denied { add_name } for pid=14514 comm="syz.7.5801" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.960390][ T28] audit: type=1400 audit(2000000018.405:1780): avc: denied { associate } for pid=14514 comm="syz.7.5801" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 281.982560][ T28] audit: type=1400 audit(2000000018.405:1781): avc: denied { read write } for pid=14514 comm="syz.7.5801" name="file1" dev="loop7" ino=1048877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 282.006130][ T28] audit: type=1400 audit(2000000018.405:1782): avc: denied { open } for pid=14514 comm="syz.7.5801" path="/289/file2/file1" dev="loop7" ino=1048877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 282.036404][ T28] audit: type=1400 audit(2000000018.415:1783): avc: denied { append } for pid=14514 comm="syz.7.5801" path="/289/file2/cpuacct.usage_user" dev="loop7" ino=1048878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 282.063686][ T28] audit: type=1400 audit(2000000018.433:1784): avc: denied { unmount } for pid=10852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 282.084563][T14525] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5806'. [ 282.144847][T14534] loop1: detected capacity change from 0 to 2048 [ 282.175841][T14534] loop1: p3 p4 < > [ 282.179792][T14534] loop1: p3 start 11362048 is beyond EOD, truncated [ 282.412173][T14547] SELinux: failed to load policy [ 282.623279][T14590] kvm [14588]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 282.634998][T14590] kvm [14588]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 282.639897][T14595] SELinux: unknown common ÿpc [ 282.661017][T14595] SELinux: failed to load policy [ 282.904158][T14622] input: syz1 as /devices/virtual/input/input61 [ 283.024813][T14645] kvm [14642]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 283.033994][T14648] netlink: 'syz.9.5858': attribute type 13 has an invalid length. [ 283.034410][T14645] kvm [14642]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 283.060873][T14644] overlayfs: missing 'lowerdir' [ 283.130126][T14648] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.137419][T14648] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.210905][T14654] device veth0 entered promiscuous mode [ 283.218371][T14652] device veth0 left promiscuous mode [ 283.277778][T14666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14666 comm=syz.1.5867 [ 283.326295][T14673] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 283.418625][T14685] loop3: detected capacity change from 0 to 1024 [ 283.445182][T14690] loop9: detected capacity change from 0 to 128 [ 283.451989][T14685] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 283.463413][T14691] kvm [14689]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 283.464385][T14685] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.3.5876: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 283.472642][T14691] kvm [14689]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 283.492084][T14690] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 283.510612][T14685] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 283.521868][T14685] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.5876: Deleting old file: nlink 4, error=-117 [ 283.550610][T11254] EXT4-fs (loop3): unmounting filesystem. [ 283.571214][T11933] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 283.642364][T14710] loop9: detected capacity change from 0 to 2048 [ 283.662665][T14710] loop9: p3 p4 < > [ 283.666623][T14710] loop9: p3 start 11362048 is beyond EOD, truncated [ 284.006069][T14736] loop9: detected capacity change from 0 to 40427 [ 284.021675][T14736] F2FS-fs (loop9): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 284.033111][T14736] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 284.041961][T14736] F2FS-fs (loop9): fault_injection options not supported [ 284.051781][T14736] F2FS-fs (loop9): invalid crc value [ 284.051837][T14756] binder: 14755:14756 ioctl c0306201 2000000001c0 returned -14 [ 284.071874][T14736] F2FS-fs (loop9): Found nat_bits in checkpoint [ 284.103609][T14761] loop7: detected capacity change from 0 to 512 [ 284.105775][T14736] F2FS-fs (loop9): Start checkpoint disabled! [ 284.111512][T14761] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.117574][T14736] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 284.127871][T14761] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 284.134979][T14736] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 284.147800][T14761] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.5909: corrupted in-inode xattr [ 284.172762][T14761] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5909: couldn't read orphan inode 15 (err -117) [ 284.185100][T14761] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 284.202805][T14314] syz-executor: attempt to access beyond end of device [ 284.202805][T14314] loop9: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 284.217556][T14314] syz-executor: attempt to access beyond end of device [ 284.217556][T14314] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 284.243403][T10852] EXT4-fs (loop7): unmounting filesystem. [ 284.265101][T11483] kworker/u4:215: attempt to access beyond end of device [ 284.265101][T11483] loop9: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 284.539109][T14784] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.546196][T14784] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.553750][T14784] device bridge_slave_0 entered promiscuous mode [ 284.560900][T14784] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.568112][T14784] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.575678][T14784] device bridge_slave_1 entered promiscuous mode [ 284.602043][T14792] netlink: 'syz.3.5923': attribute type 13 has an invalid length. [ 284.609901][T14792] netlink: 'syz.3.5923': attribute type 17 has an invalid length. [ 284.623233][ T342] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 284.650685][T14792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 284.685310][T14792] device xfrm1 left promiscuous mode [ 284.695556][T14788] loop7: detected capacity change from 0 to 40427 [ 284.708032][T14788] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 284.716804][T14788] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 284.726672][T14788] F2FS-fs (loop7): fault_injection options not supported [ 284.735647][T14788] F2FS-fs (loop7): invalid crc value [ 284.745733][T14788] F2FS-fs (loop7): Found nat_bits in checkpoint [ 284.791356][T14788] F2FS-fs (loop7): Start checkpoint disabled! [ 284.802624][T14784] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.809752][T14784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.817084][T14784] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.824132][T14784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.827190][T14788] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 284.831731][ T342] usb 2-1: Using ep0 maxpacket: 16 [ 284.839112][T14788] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 284.845396][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.877432][ T342] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 284.891496][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.892315][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.905504][T10852] syz-executor: attempt to access beyond end of device [ 284.905504][T10852] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 284.917217][ T342] usb 2-1: config 0 descriptor?? [ 284.924458][T10852] syz-executor: attempt to access beyond end of device [ 284.924458][T10852] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 284.927772][T11933] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.949666][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.971885][T14806] incfs: Options parsing error. -22 [ 284.980159][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.983268][ T6738] kworker/u4:75: attempt to access beyond end of device [ 284.983268][ T6738] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 285.002657][T14806] incfs: mount failed -22 [ 285.005592][T11933] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.014121][T11933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.023317][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.043586][T11933] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.050697][T11933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.073390][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.082533][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.097473][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.110910][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.120576][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.128562][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.138363][T14784] device veth0_vlan entered promiscuous mode [ 285.147958][T11483] device bridge_slave_1 left promiscuous mode [ 285.154147][T11483] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.163211][T11483] device bridge_slave_0 left promiscuous mode [ 285.169733][T11483] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.250280][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.262090][T14784] device veth1_macvtap entered promiscuous mode [ 285.275513][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.293030][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.377004][ T342] hid (null): invalid report_size 5632 [ 285.382750][ T342] hid (null): unknown global tag 0xc [ 285.394784][ T342] hid-generic 0003:04D8:00DD.0057: invalid report_size 5632 [ 285.409872][ T342] hid-generic 0003:04D8:00DD.0057: item 0 2 1 7 parsing failed [ 285.418074][ T342] hid-generic: probe of 0003:04D8:00DD.0057 failed with error -22 [ 285.488289][T14828] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.495433][T14828] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.503646][T14828] device bridge_slave_0 entered promiscuous mode [ 285.511585][T14828] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.519213][T14828] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.527445][T14828] device bridge_slave_1 entered promiscuous mode [ 285.613683][T11796] usb 2-1: USB disconnect, device number 20 [ 285.634339][T14828] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.641460][T14828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.648816][T14828] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.655918][T14828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.683745][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.691895][T11919] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.701305][T11919] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.715266][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.723668][T11933] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.730806][T11933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.739927][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.748551][T11933] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.755629][T11933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.779385][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.787673][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.806539][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.822417][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.837617][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.853849][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.862521][T14828] device veth0_vlan entered promiscuous mode [ 285.882018][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.891447][T14828] device veth1_macvtap entered promiscuous mode [ 285.907618][T14880] binder: binder_mmap: 14879 200000000000-200000b36000 bad vm_flags failed -1 [ 285.919169][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.927961][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.999139][T14896] loop8: detected capacity change from 0 to 512 [ 286.007510][T14896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.014323][T14896] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.023332][T14896] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 286.035132][T14896] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.5964: bad orphan inode 131083 [ 286.046274][T14896] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 286.069832][T14784] EXT4-fs (loop8): unmounting filesystem. [ 286.088741][T11483] device bridge_slave_1 left promiscuous mode [ 286.103491][T11483] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.111709][T11483] device bridge_slave_0 left promiscuous mode [ 286.118122][T11483] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.127785][T11483] device veth1_macvtap left promiscuous mode [ 286.135158][T11483] device veth0_vlan left promiscuous mode [ 286.292905][T14929] loop8: detected capacity change from 0 to 128 [ 286.307687][T14916] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5972'. [ 286.317068][T14918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5974'. [ 286.418638][T14945] loop0: detected capacity change from 0 to 256 [ 286.589735][T14971] loop0: detected capacity change from 0 to 256 [ 286.590893][T14971] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.607526][T14971] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 286.618324][T14971] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 286.836252][ T39] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 287.029794][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.042558][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.060662][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.060690][ T39] usb 4-1: Product: syz [ 287.060706][ T39] usb 4-1: Manufacturer: syz [ 287.060720][ T39] usb 4-1: SerialNumber: syz [ 287.208771][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 287.208787][ T28] audit: type=1400 audit(2000000023.428:1887): avc: denied { block_suspend } for pid=15023 comm="syz.6.6023" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 287.467045][ T342] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 287.660678][ T342] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 287.668990][ T342] usb 2-1: config 1 has no interface number 0 [ 287.675292][ T342] usb 2-1: config 1 interface 105 has no altsetting 0 [ 287.684175][ T342] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 287.693661][ T342] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 287.702815][ T342] usb 2-1: Product: syz [ 287.707111][ T342] usb 2-1: Manufacturer: syz [ 287.711732][ T342] usb 2-1: SerialNumber: syz [ 287.883893][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 288.077436][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.088781][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.098632][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.111792][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.120990][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.130277][ T24] usb 9-1: config 0 descriptor?? [ 288.147710][ T39] cdc_ncm 4-1:1.0: failed to get mac address [ 288.362019][ T39] cdc_ncm 4-1:1.0: bind() failure [ 288.368401][ T39] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 288.375301][ T39] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 288.383176][ T39] usb 4-1: USB disconnect, device number 21 [ 288.566455][ T24] plantronics 0003:047F:FFFF.0058: No inputs registered, leaving [ 288.575640][ T342] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 288.575941][ T24] plantronics 0003:047F:FFFF.0058: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 288.611116][T15059] syz.6.6038[15059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.611196][T15059] syz.6.6038[15059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.635697][ T28] audit: type=1400 audit(2000000024.775:1888): avc: denied { watch watch_reads } for pid=15060 comm="syz.6.6039" path="/1117/file1" dev="tmpfs" ino=5846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 288.801746][ T342] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 288.815690][ T342] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2a:97:cd:ee:25:84 [ 288.829616][ T342] usb 2-1: USB disconnect, device number 21 [ 288.836200][ T342] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 288.899613][ T342] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 288.918494][ T342] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 288.930330][ T342] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 289.139196][ T28] audit: type=1400 audit(2000000025.243:1889): avc: denied { name_bind } for pid=15095 comm="syz.6.6054" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 289.143081][ T24] usb 9-1: USB disconnect, device number 2 [ 289.178157][ T28] audit: type=1400 audit(2000000025.280:1890): avc: denied { create } for pid=15099 comm="syz.6.6056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.565044][ T39] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 289.729785][T15139] netlink: 'syz.1.6072': attribute type 13 has an invalid length. [ 289.738813][T15139] netlink: 'syz.1.6072': attribute type 17 has an invalid length. [ 289.765382][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 289.772131][ T39] usb 4-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.796417][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 289.804959][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.812695][ T39] usb 4-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 289.829846][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.849073][ T39] usb 4-1: config 0 descriptor?? [ 290.156056][T15168] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6087'. [ 290.165429][T15168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6087'. [ 290.174870][T15168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6087'. [ 290.184647][T15168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6087'. [ 290.193926][T15168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6087'. [ 290.244316][T15170] device syzkaller0 entered promiscuous mode [ 290.299683][ T39] wacom 0003:056A:00D6.0059: Unknown device_type for 'HID 056a:00d6'. Assuming pen. [ 290.311305][ T39] wacom 0003:056A:00D6.0059: hidraw0: USB HID v0.07 Device [HID 056a:00d6] on usb-dummy_hcd.3-1/input0 [ 290.323781][ T39] input: Wacom BambooPT 2FG 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D6.0059/input/input63 [ 290.388177][ T28] audit: type=1400 audit(2000000026.412:1891): avc: denied { setopt } for pid=15177 comm="syz.0.6092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.410439][T15176] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 290.417780][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 290.501688][T15185] netlink: 'syz.0.6093': attribute type 13 has an invalid length. [ 290.510150][T15185] netlink: 'syz.0.6093': attribute type 17 has an invalid length. [ 290.530286][ T342] usb 4-1: USB disconnect, device number 22 [ 290.554025][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 290.578660][T15189] netlink: 'syz.1.6097': attribute type 12 has an invalid length. [ 290.586775][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 290.596166][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.617674][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 290.625986][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.633954][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 290.634477][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.647909][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.647994][ T24] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 290.656528][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.668535][ T24] usb 9-1: config 0 has no interface number 0 [ 290.678945][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.686285][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 290.718408][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.732352][ T24] usb 9-1: Product: syz [ 290.736653][ T24] usb 9-1: Manufacturer: syz [ 290.741323][ T24] usb 9-1: SerialNumber: syz [ 290.744668][ T28] audit: type=1400 audit(2000000026.740:1892): avc: denied { getopt } for pid=15200 comm="syz.0.6102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.746817][ T24] usb 9-1: config 0 descriptor?? [ 290.799260][ T28] audit: type=1400 audit(2000000026.786:1893): avc: denied { read write } for pid=15203 comm="syz.1.6103" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 290.822937][ T28] audit: type=1400 audit(2000000026.786:1894): avc: denied { open } for pid=15203 comm="syz.1.6103" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 290.863027][ T28] audit: type=1400 audit(2000000026.852:1895): avc: denied { unmount } for pid=13414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 290.987011][ T24] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 290.993454][ T24] usb 9-1: No valid video chain found. [ 291.007026][ T24] usb 9-1: USB disconnect, device number 3 [ 291.023880][T15209] loop1: detected capacity change from 0 to 40427 [ 291.030912][T15209] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 291.038976][T15209] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 291.048126][T15209] F2FS-fs (loop1): invalid crc value [ 291.054913][T15209] F2FS-fs (loop1): Found nat_bits in checkpoint [ 291.084932][T15209] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 291.092446][T15209] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 291.475238][T15209] syz.1.6105: attempt to access beyond end of device [ 291.475238][T15209] loop1: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 291.490348][T15234] netlink: 'syz.6.6111': attribute type 13 has an invalid length. [ 291.498248][T15234] netlink: 'syz.6.6111': attribute type 17 has an invalid length. [ 291.533914][T15234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.541917][T15234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.606442][T15234] device veth0_vlan left promiscuous mode [ 291.613001][T15234] device veth0_vlan entered promiscuous mode [ 291.621694][T15234] device veth1_macvtap left promiscuous mode [ 291.628975][T15234] device veth1_macvtap entered promiscuous mode [ 291.641584][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.651686][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.660132][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.669382][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.677858][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.686543][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.696329][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 291.704858][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.713394][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 291.721964][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.730425][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.739125][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.747495][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.755845][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.764282][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.773837][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.793480][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.801703][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.810880][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.819092][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.827214][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.835736][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.844156][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.852389][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 291.860362][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.868012][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.875605][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.883992][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.892243][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 292.010533][T15256] xt_bpf: check failed: parse error [ 292.312364][T15265] loop8: detected capacity change from 0 to 40427 [ 292.319372][T15265] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 292.327398][T15265] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 292.339007][T15265] F2FS-fs (loop8): invalid crc value [ 292.367769][T15265] F2FS-fs (loop8): Found nat_bits in checkpoint [ 292.422401][T15265] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 292.430468][T15265] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 292.442842][ T28] audit: type=1400 audit(2000000028.330:1896): avc: denied { mount } for pid=15278 comm="syz.6.6129" name="/" dev="configfs" ino=14237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 292.602665][T15269] loop1: detected capacity change from 0 to 40427 [ 292.618482][T15269] F2FS-fs (loop1): heap/no_heap options were deprecated [ 292.632391][T15269] F2FS-fs (loop1): fault_injection options not supported [ 292.646330][T15269] F2FS-fs (loop1): fault_type options not supported [ 292.662570][T15269] F2FS-fs (loop1): invalid crc value [ 292.687044][T15269] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.747549][T15269] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.782736][T15269] syz.1.6127: attempt to access beyond end of device [ 292.782736][T15269] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 292.798028][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 292.798044][ T28] audit: type=1400 audit(2000000028.657:1903): avc: denied { create } for pid=15268 comm="syz.1.6127" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 292.833806][ T28] audit: type=1400 audit(2000000028.695:1904): avc: denied { read } for pid=15268 comm="syz.1.6127" name="file0" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 292.857178][T13414] syz-executor: attempt to access beyond end of device [ 292.857178][T13414] loop1: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 292.865703][ T347] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 292.916596][T15265] syz.8.6125: attempt to access beyond end of device [ 292.916596][T15265] loop8: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 293.026333][T15296] loop0: detected capacity change from 0 to 1024 [ 293.047479][T15296] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 293.090724][ T347] usb 4-1: Using ep0 maxpacket: 16 [ 293.098459][ T347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.115748][ T347] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.126187][ T347] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.142506][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.146176][T15301] loop0: detected capacity change from 0 to 512 [ 293.151308][ T347] usb 4-1: Product: syz [ 293.161202][ T347] usb 4-1: Manufacturer: syz [ 293.166276][ T347] usb 4-1: SerialNumber: syz [ 293.217241][ T293] kernel read not supported for file /input/event0 (pid: 293 comm: kworker/0:2) [ 293.393524][ T347] usb 4-1: 0:2 : does not exist [ 293.401367][ T347] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 293.413272][ T347] usb 4-1: USB disconnect, device number 23 [ 293.481209][ T28] audit: type=1400 audit(2000000029.303:1905): avc: denied { mounton } for pid=15336 comm="syz.1.6153" path="/181/file1" dev="tmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 293.558934][T15349] loop8: detected capacity change from 0 to 16 [ 293.566146][T15349] erofs: (device loop8): mounted with root inode @ nid 36. [ 293.574796][T15349] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 293.584832][T15349] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -21 in[56, 4040] out[1851] [ 293.595870][T15349] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 294.066836][T15386] syz.8.6168[15386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.066937][T15386] syz.8.6168[15386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.222407][T15399] loop8: detected capacity change from 0 to 4096 [ 294.243416][T15399] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 294.251180][T15390] loop3: detected capacity change from 0 to 40427 [ 294.259831][T15390] F2FS-fs (loop3): heap/no_heap options were deprecated [ 294.267723][T15390] F2FS-fs (loop3): invalid crc value [ 294.273842][T15390] F2FS-fs (loop3): Found nat_bits in checkpoint [ 294.288851][ T28] audit: type=1400 audit(2000000030.051:1906): avc: denied { map } for pid=15398 comm="syz.8.6183" path="/63/file0/cgroup.controllers" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 294.340614][T14784] EXT4-fs (loop8): unmounting filesystem. [ 294.354525][T15390] F2FS-fs (loop3): Start checkpoint disabled! [ 294.370330][T15390] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 294.462791][T15411] loop1: detected capacity change from 0 to 8192 [ 294.476674][T15411] FAT-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 294.616363][T15420] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6190'. [ 294.670921][ T6738] kworker/u4:75: attempt to access beyond end of device [ 294.670921][ T6738] loop3: rw=1, sector=77824, nr_sectors = 2072 limit=40427 [ 294.702767][ T6738] kworker/u4:75: attempt to access beyond end of device [ 294.702767][ T6738] loop3: rw=1, sector=79896, nr_sectors = 2024 limit=40427 [ 294.738554][ T6738] kworker/u4:75: attempt to access beyond end of device [ 294.738554][ T6738] loop3: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 294.793557][T15430] netlink: 92 bytes leftover after parsing attributes in process `syz.8.6195'. [ 294.804543][ T6738] kworker/u4:75: attempt to access beyond end of device [ 294.804543][ T6738] loop3: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 294.832035][ T6738] kworker/u4:75: attempt to access beyond end of device [ 294.832035][ T6738] loop3: rw=1, sector=57344, nr_sectors = 520 limit=40427 [ 294.846209][T15432] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6196'. [ 294.855465][T15432] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6196'. [ 294.865376][T15432] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6196'. [ 294.876744][ T6738] kworker/u4:75: attempt to access beyond end of device [ 294.876744][ T6738] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 295.292572][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 295.347120][T15454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.495367][T15457] loop3: detected capacity change from 0 to 40427 [ 295.495564][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 295.507307][T15457] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 295.515201][T15457] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 295.524337][ T24] usb 9-1: config 0 has an invalid interface number: 230 but max is 0 [ 295.524833][T15457] F2FS-fs (loop3): invalid crc value [ 295.532806][ T24] usb 9-1: config 0 has no interface number 0 [ 295.539818][T15457] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.544207][ T24] usb 9-1: config 0 interface 230 has no altsetting 0 [ 295.559725][ T24] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 295.568883][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.577245][ T24] usb 9-1: Product: syz [ 295.581535][ T24] usb 9-1: Manufacturer: syz [ 295.586145][ T24] usb 9-1: SerialNumber: syz [ 295.588442][T15457] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 295.591550][ T24] usb 9-1: config 0 descriptor?? [ 295.597961][T15457] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 295.604096][ T24] ums-usbat 9-1:0.230: USB Mass Storage device detected [ 295.623983][ T24] ums-usbat 9-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 296.009115][T15467] kvm [15466]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 296.026802][T15467] kvm [15466]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 296.049186][T15467] kvm [15466]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 296.060124][T15467] kvm [15466]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 296.074300][T15467] kvm [15466]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 296.103341][T15480] syz.6.6212[15480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.103415][T15480] syz.6.6212[15480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.163238][T15484] loop0: detected capacity change from 0 to 512 [ 296.210378][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6216'. [ 296.223136][T15488] device vlan2 entered promiscuous mode [ 296.228718][T15488] device gretap0 entered promiscuous mode [ 296.279117][T15496] _swap_info_get: Bad swap file entry 7800000000000001 [ 296.286040][T15496] _swap_info_get: Bad swap file entry 7800000000000001 [ 296.293027][T15496] _swap_info_get: Bad swap file entry 7800000000000001 [ 296.300061][T15496] _swap_info_get: Bad swap file entry 7800000000000001 [ 296.365068][ T28] audit: type=1400 audit(2000000031.997:1907): avc: denied { bind } for pid=15504 comm="syz.6.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.404274][ T293] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 296.461649][T15500] loop0: detected capacity change from 0 to 40427 [ 296.468747][T15500] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 296.476510][T15500] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 296.485837][T15500] F2FS-fs (loop0): invalid crc value [ 296.492660][T15500] F2FS-fs (loop0): Found nat_bits in checkpoint [ 296.522611][T15500] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 296.529912][T15500] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 296.596678][ T293] usb 2-1: Using ep0 maxpacket: 16 [ 296.604674][ T293] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 296.616277][ T293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.645840][ T293] usb 2-1: Product: syz [ 296.650744][ T293] usb 2-1: Manufacturer: syz [ 296.655479][ T293] usb 2-1: SerialNumber: syz [ 296.661916][ T293] r8152-cfgselector 2-1: config 0 descriptor?? [ 296.690018][ T28] audit: type=1400 audit(2000000032.305:1908): avc: denied { write } for pid=15521 comm="syz.6.6230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 296.711230][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6230'. [ 296.798855][T15529] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 296.883371][ T293] r8152-cfgselector 2-1: Unknown version 0x0000 [ 296.931790][T15500] bio_check_eod: 1 callbacks suppressed [ 296.931834][T15500] syz.0.6222: attempt to access beyond end of device [ 296.931834][T15500] loop0: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 296.951809][ T342] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 297.051149][ T28] audit: type=1400 audit(2000000032.642:1909): avc: denied { create } for pid=15548 comm="syz.6.6244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.088950][ T28] audit: type=1400 audit(2000000032.642:1910): avc: denied { setopt } for pid=15548 comm="syz.6.6244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.108654][ T293] r8152-cfgselector 2-1: Unknown version 0x0000 [ 297.120617][ T293] r8152-cfgselector 2-1: bad CDC descriptors [ 297.127240][ T293] r8152-cfgselector 2-1: Unknown version 0x0000 [ 297.134470][ T293] r8152-cfgselector 2-1: USB disconnect, device number 22 [ 297.164479][ T342] usb 4-1: config index 0 descriptor too short (expected 65274, got 45) [ 297.185832][ T342] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 297.194949][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.216754][ T342] usb 4-1: Product: syz [ 297.220968][ T342] usb 4-1: Manufacturer: syz [ 297.230860][ T342] usb 4-1: SerialNumber: syz [ 297.297167][T15566] loop0: detected capacity change from 0 to 256 [ 297.306389][T15566] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 297.461108][ T293] usb 4-1: USB disconnect, device number 24 [ 298.018470][ T28] audit: type=1400 audit(2000000033.540:1911): avc: denied { read } for pid=15580 comm="syz.3.6255" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 298.051150][ T28] audit: type=1400 audit(2000000033.549:1912): avc: denied { open } for pid=15580 comm="syz.3.6255" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 298.078358][ T24] ums-usbat: probe of 9-1:0.230 failed with error -5 [ 298.280214][ T293] usb 9-1: USB disconnect, device number 4 [ 298.528983][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 298.529001][ T28] audit: type=1400 audit(2000000034.017:1914): avc: denied { map } for pid=15619 comm="syz.6.6274" path="socket:[82251]" dev="sockfs" ino=82251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.563870][T11618] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 298.766974][T11618] usb 4-1: Using ep0 maxpacket: 16 [ 298.775064][T11618] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 298.784207][T11618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.792256][T11618] usb 4-1: Product: syz [ 298.796541][T11618] usb 4-1: Manufacturer: syz [ 298.801206][T11618] usb 4-1: SerialNumber: syz [ 298.806715][T11618] r8152-cfgselector 4-1: config 0 descriptor?? [ 299.243339][T11618] r8152-cfgselector 4-1: Unknown version 0x0000 [ 299.249742][T11618] r8152-cfgselector 4-1: bad CDC descriptors [ 299.256243][T11618] r8152-cfgselector 4-1: Unknown version 0x0000 [ 299.263261][T11618] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 299.799634][T15646] loop8: detected capacity change from 0 to 256 [ 299.806440][T15646] exfat: Unknown parameter '' [ 299.830225][T15653] netlink: 'syz.1.6289': attribute type 12 has an invalid length. [ 299.906760][T15655] overlayfs: failed to clone upperpath [ 299.955179][ T28] audit: type=1400 audit(2000000035.364:1915): avc: denied { create } for pid=15670 comm="syz.1.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 300.022154][T15659] loop8: detected capacity change from 0 to 40427 [ 300.022513][T15673] loop1: detected capacity change from 0 to 8192 [ 300.041364][T15659] F2FS-fs (loop8): Found nat_bits in checkpoint [ 300.080534][T15659] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 300.088582][T15683] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6301'. [ 300.109105][T14784] syz-executor: attempt to access beyond end of device [ 300.109105][T14784] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 300.199470][T11618] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 300.210643][ T28] audit: type=1400 audit(2000000035.598:1916): avc: denied { create } for pid=15692 comm="syz.8.6303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.391866][T11618] usb 4-1: Using ep0 maxpacket: 32 [ 300.398161][T11618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.409158][T11618] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 300.418371][T11618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.427115][T11618] usb 4-1: config 0 descriptor?? [ 300.434641][ T347] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 300.530842][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 300.628306][ T347] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 300.637512][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.646575][ T347] usb 2-1: config 0 descriptor?? [ 300.735567][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.748100][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.757278][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.765326][ T24] usb 9-1: Product: syz [ 300.776080][ T24] usb 9-1: Manufacturer: syz [ 300.780784][ T24] usb 9-1: SerialNumber: syz [ 300.874421][T11618] elo 0003:04E7:0009.005A: unbalanced delimiter at end of report description [ 300.883429][T11618] elo 0003:04E7:0009.005A: parse failed [ 300.889577][T11618] elo: probe of 0003:04E7:0009.005A failed with error -22 [ 301.119647][ T39] usb 4-1: USB disconnect, device number 26 [ 301.675400][ T28] audit: type=1400 audit(2000000036.973:1917): avc: denied { compute_member } for pid=15735 comm="syz.3.6324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 301.762867][T15744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15744 comm=syz.3.6328 [ 301.797703][ T28] audit: type=1400 audit(2000000037.085:1918): avc: denied { execute_no_trans } for pid=15749 comm="syz.0.6331" path="/58/file1" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 301.841200][ T28] audit: type=1326 audit(2000000037.123:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15739 comm="syz.6.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08178eec9 code=0x7fc00000 [ 301.865912][ T24] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 301.872766][ T24] cdc_ncm 9-1:1.0: setting rx_max = 16384 [ 301.942680][ T347] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 301.952817][ T347] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 301.963166][ T347] asix: probe of 2-1:0.0 failed with error -71 [ 301.970560][ T347] usb 2-1: USB disconnect, device number 23 [ 301.978751][T15770] loop3: detected capacity change from 0 to 256 [ 301.986439][T15770] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.021396][ T28] audit: type=1400 audit(2000000037.291:1920): avc: denied { mounton } for pid=15773 comm="syz.0.6342" path=2F36372FE91F7189591E9233614B dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 302.080237][ T24] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 302.087910][ T24] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 302.100646][ T24] usb 9-1: USB disconnect, device number 5 [ 302.106915][ T24] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 302.141673][ T28] audit: type=1400 audit(2000000037.403:1921): avc: denied { create } for pid=15780 comm="syz.3.6345" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 302.162640][ T28] audit: type=1400 audit(2000000037.403:1922): avc: denied { write } for pid=15780 comm="syz.3.6345" name="file0" dev="tmpfs" ino=1584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 302.172729][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6346'. [ 302.185749][ T28] audit: type=1400 audit(2000000037.403:1923): avc: denied { open } for pid=15780 comm="syz.3.6345" path="/300/file0" dev="tmpfs" ino=1584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 302.248997][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6349'. [ 302.321966][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6355'. [ 302.348642][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6355'. [ 302.357803][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6355'. [ 302.367074][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6355'. [ 302.669011][ T293] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 302.744868][T15851] netem: change failed [ 302.861390][ T293] usb 4-1: Using ep0 maxpacket: 8 [ 302.869528][ T293] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 302.879188][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.900113][ T293] usb 4-1: config 0 descriptor?? [ 303.015245][T15876] device bridge0 entered promiscuous mode [ 303.022211][T15876] bridge0: port 3(macsec1) entered blocking state [ 303.028714][T15876] bridge0: port 3(macsec1) entered disabled state [ 303.038434][T15876] device bridge0 left promiscuous mode [ 303.121142][ T293] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 303.241708][T15896] loop8: detected capacity change from 0 to 512 [ 303.259355][T15896] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2195: inode #12: comm syz.8.6399: corrupted in-inode xattr [ 303.271640][T15896] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.6399: couldn't read orphan inode 12 (err -117) [ 303.283902][T15896] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 303.316230][T14784] EXT4-fs (loop8): unmounting filesystem. [ 303.324623][T15901] loop1: detected capacity change from 0 to 128 [ 303.369423][T15901] syz.1.6400: attempt to access beyond end of device [ 303.369423][T15901] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 303.423899][T15907] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6403'. [ 303.543481][T15913] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.671578][T15920] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.679528][T15920] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.687815][T15920] device bridge_slave_0 entered promiscuous mode [ 303.694390][T15931] loop8: detected capacity change from 0 to 128 [ 303.700551][T15920] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.707878][T15920] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.712687][T15931] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 303.715622][T15920] device bridge_slave_1 entered promiscuous mode [ 303.730455][T15931] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.779856][T14784] EXT4-fs (loop8): unmounting filesystem. [ 303.876378][T15920] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.883589][T15920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.890950][T15920] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.898098][T15920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.930991][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.939192][T11919] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.947698][T11919] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.957487][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 303.957520][ T28] audit: type=1400 audit(2000000039.168:1960): avc: denied { write } for pid=15955 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 303.982870][ T293] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 303.995241][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.003514][ T293] asix: probe of 4-1:0.0 failed with error -71 [ 304.004360][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.010975][ T293] usb 4-1: USB disconnect, device number 27 [ 304.016788][T11919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.043259][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.052746][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.059842][T11919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.075062][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.088682][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.122911][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.136655][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.147143][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.154752][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.163939][T15920] device veth0_vlan entered promiscuous mode [ 304.193851][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.204430][T15920] device veth1_macvtap entered promiscuous mode [ 304.217749][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.229537][T11933] device bridge_slave_1 left promiscuous mode [ 304.243138][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.261774][T11933] device bridge_slave_0 left promiscuous mode [ 304.272055][T11933] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.294690][T11933] device veth1_macvtap left promiscuous mode [ 304.300785][T11933] device veth0_vlan left promiscuous mode [ 304.427805][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.724442][T15993] loop3: detected capacity change from 0 to 32768 [ 304.776141][T15993] loop3: p1 p3 < > [ 304.781894][ T28] audit: type=1400 audit(2000000039.935:1961): avc: denied { mounton } for pid=15992 comm="syz.3.6437" path="/proc/679/task" dev="proc" ino=83436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 304.890952][T16002] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6441'. [ 305.012170][T16011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6445'. [ 305.352451][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 305.545918][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 305.552418][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.566938][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.577161][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.586281][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.595259][ T24] usb 4-1: config 0 descriptor?? [ 305.601231][ T24] hub 4-1:0.0: USB hub found [ 305.815768][ T24] hub 4-1:0.0: 1 port detected [ 306.048192][T11933] device bridge_slave_1 left promiscuous mode [ 306.055585][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.070679][T11933] device bridge_slave_0 left promiscuous mode [ 306.076868][T11933] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.100753][T11933] device veth1_macvtap left promiscuous mode [ 306.106840][T11933] device veth0_vlan left promiscuous mode [ 306.371653][T16046] loop8: detected capacity change from 0 to 2048 [ 306.378471][T16046] EXT4-fs: Ignoring removed bh option [ 306.396415][T16037] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.403962][T16037] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.406274][T16046] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 306.412105][T16037] device bridge_slave_0 entered promiscuous mode [ 306.442900][T16046] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 306.459287][T16037] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.459380][T16046] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 306.459495][ T347] hub 4-1:0.0: activate --> -90 [ 306.466611][T16037] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.478676][T16046] EXT4-fs (loop8): This should not happen!! Data will be lost [ 306.478676][T16046] [ 306.484768][T16037] device bridge_slave_1 entered promiscuous mode [ 306.490696][T16046] EXT4-fs (loop8): Total free blocks count 0 [ 306.513850][T16046] EXT4-fs (loop8): Free/Dirty block details [ 306.520134][T16046] EXT4-fs (loop8): free_blocks=2415919104 [ 306.525991][T16046] EXT4-fs (loop8): dirty_blocks=16 [ 306.531293][T16046] EXT4-fs (loop8): Block reservation details [ 306.537534][T16046] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 306.559978][T14784] EXT4-fs (loop8): unmounting filesystem. [ 306.581436][T16043] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.589306][T16043] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.597665][T16043] device bridge_slave_0 entered promiscuous mode [ 306.606845][T16043] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.614148][T16043] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.621843][T16043] device bridge_slave_1 entered promiscuous mode [ 306.657514][T11933] tipc: Left network mode [ 306.709106][T16052] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.716393][T16052] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.723982][T16052] device bridge_slave_0 entered promiscuous mode [ 306.739227][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.746483][T16052] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.754152][T16052] device bridge_slave_1 entered promiscuous mode [ 306.889406][ T39] usb 4-1: USB disconnect, device number 28 [ 306.895514][ T347] usb 4-1-port1: config error [ 306.911099][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.918761][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.929341][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.937931][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.954763][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.963205][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.971467][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.978545][T11919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.986344][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.995347][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.003954][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.012317][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.019350][T11919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.027703][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.040332][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.048823][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.057170][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.064231][T11919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.075862][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.084664][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.093097][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.100175][T11919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.121419][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.129631][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.137954][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.146028][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.154530][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.177162][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.194579][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.203112][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.219419][T16037] device veth0_vlan entered promiscuous mode [ 307.233472][T16043] device veth0_vlan entered promiscuous mode [ 307.241135][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.249170][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.257620][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.265294][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.273054][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.281587][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.289295][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.296851][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.305250][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.312329][T11919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.320098][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.337127][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.345514][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.353244][T11919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.365569][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.380094][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.389646][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.403597][T16043] device veth1_macvtap entered promiscuous mode [ 307.410767][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.420795][T16037] device veth1_macvtap entered promiscuous mode [ 307.429225][T11933] device bridge_slave_1 left promiscuous mode [ 307.435385][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.443106][T11933] device bridge_slave_0 left promiscuous mode [ 307.449698][T11933] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.460281][T11933] device veth1_macvtap left promiscuous mode [ 307.466349][T11933] device veth0_vlan left promiscuous mode [ 307.473389][T11933] device veth1_macvtap left promiscuous mode [ 307.479464][T11933] device veth0_vlan left promiscuous mode [ 307.832658][ T58] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 307.855728][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.867362][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.876674][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.885063][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.911118][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.919618][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.927989][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.936506][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.945285][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.954255][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.978574][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.990207][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.002200][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.012470][T16099] loop5: detected capacity change from 0 to 512 [ 308.021217][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.029148][T16052] device veth0_vlan entered promiscuous mode [ 308.030511][ T58] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 308.044409][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.044447][ T58] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 308.053433][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.067849][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.071486][T16099] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 308.080608][T16052] device veth1_macvtap entered promiscuous mode [ 308.087926][T16099] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.110562][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.124065][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.132364][ T58] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 308.151669][T16037] EXT4-fs (loop5): unmounting filesystem. [ 308.159222][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.179128][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.191965][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.204774][ T58] usb 4-1: config 0 has no interface number 0 [ 308.230164][ T58] usb 4-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.270460][ T58] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 308.302408][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.335351][ T58] usb 4-1: config 0 descriptor?? [ 308.367256][ T58] usb 4-1: MIDIStreaming interface descriptor not found [ 308.387641][T16120] __nla_validate_parse: 3 callbacks suppressed [ 308.387661][T16120] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6476'. [ 308.486863][T16129] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 308.600500][ T347] usb 4-1: USB disconnect, device number 29 [ 308.608174][T16141] loop0: detected capacity change from 0 to 256 [ 308.631578][T16141] FAT-fs (loop0): Directory bread(block 64) failed [ 308.649218][T16141] FAT-fs (loop0): Directory bread(block 65) failed [ 308.659999][T16141] FAT-fs (loop0): Directory bread(block 66) failed [ 308.677089][T16141] FAT-fs (loop0): Directory bread(block 67) failed [ 308.698654][T16141] FAT-fs (loop0): Directory bread(block 68) failed [ 308.705318][T16141] FAT-fs (loop0): Directory bread(block 69) failed [ 308.730275][T16145] option changes via remount are deprecated (pid=16144 comm=syz.8.6495) [ 308.738789][ T28] audit: type=1400 audit(2000000043.621:1962): avc: denied { remount } for pid=16144 comm="syz.8.6495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 308.738820][T16141] FAT-fs (loop0): Directory bread(block 70) failed [ 308.810330][ T28] audit: type=1400 audit(2000000043.668:1963): avc: denied { unmount } for pid=14784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 308.827048][T16141] FAT-fs (loop0): Directory bread(block 71) failed [ 308.853819][T16141] FAT-fs (loop0): Directory bread(block 72) failed [ 308.880503][T16141] FAT-fs (loop0): Directory bread(block 73) failed [ 309.123783][T16140] loop5: detected capacity change from 0 to 40427 [ 309.150179][T16140] F2FS-fs (loop5): invalid crc value [ 309.177846][T16140] F2FS-fs (loop5): Found nat_bits in checkpoint [ 309.265203][T16140] F2FS-fs (loop5): Start checkpoint disabled! [ 309.291370][T16140] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 309.385598][T16157] loop8: detected capacity change from 0 to 40427 [ 309.392642][T16157] F2FS-fs (loop8): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 309.403620][T16157] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 309.412030][T16157] F2FS-fs (loop8): fault_type options not supported [ 309.419369][T16157] F2FS-fs (loop8): fault_injection options not supported [ 309.433744][T16157] F2FS-fs (loop8): Image doesn't support compression [ 309.443828][T16157] F2FS-fs (loop8): invalid crc value [ 309.467430][T16157] F2FS-fs (loop8): Found nat_bits in checkpoint [ 309.471077][T11919] kworker/u4:337: attempt to access beyond end of device [ 309.471077][T11919] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 309.552419][T16157] F2FS-fs (loop8): Start checkpoint disabled! [ 309.592030][T16157] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 309.601359][T16157] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 309.693800][T11919] kworker/u4:337: attempt to access beyond end of device [ 309.693800][T11919] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 309.708418][ T28] audit: type=1400 audit(2000000044.537:1964): avc: denied { getopt } for pid=16199 comm="syz.6.6508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 309.826447][T16206] kvm [16205]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 310.074661][T16230] syz.5.6531[16230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.074745][T16230] syz.5.6531[16230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.259545][T16241] loop6: detected capacity change from 0 to 256 [ 310.291109][T16241] FAT-fs (loop6): bogus number of FAT sectors [ 310.304214][T16241] FAT-fs (loop6): Can't find a valid FAT filesystem [ 310.824165][T16269] loop6: detected capacity change from 0 to 256 [ 310.832643][T16269] FAT-fs (loop6): Unrecognized mount option "shortname=wpˆÒ@" or missing value [ 311.032245][T11933] Bluetooth: hci0: Frame reassembly failed (-84) [ 311.040290][T16294] loop3: detected capacity change from 0 to 128 [ 311.051837][T16294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 311.060549][T16294] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 311.099396][T16294] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 63: comm syz.3.6558: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 311.118246][T16294] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 311.136483][T11254] EXT4-fs (loop3): unmounting filesystem. [ 311.886600][T16326] kvm: apic: phys broadcast and lowest prio [ 312.308043][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6580'. [ 312.461165][T16346] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6579'. [ 312.550344][T11796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=11796 comm=kworker/0:14 [ 312.575081][T16354] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 312.733189][T16371] syz.3.6590[16371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.733289][T16371] syz.3.6590[16371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.825803][T16377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16377 comm=syz.8.6594 [ 312.949320][T16382] input: syz1 as /devices/virtual/input/input67 [ 313.242129][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 313.248382][ T9710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 313.883502][T16404] IPv6: sit1: Disabled Multicast RS [ 314.375194][T11796] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 314.568826][T11796] usb 9-1: config index 0 descriptor too short (expected 65274, got 45) [ 314.582251][T11796] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 314.600469][T11796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.617674][T11796] usb 9-1: Product: syz [ 314.626511][T11796] usb 9-1: Manufacturer: syz [ 314.635597][T11796] usb 9-1: SerialNumber: syz [ 314.867944][T11796] usb 9-1: USB disconnect, device number 6 [ 315.035290][T16413] SELinux: failed to load policy [ 315.067434][T16421] xt_bpf: check failed: parse error [ 315.098991][T16425] loop3: detected capacity change from 0 to 2048 [ 315.127282][T16425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 315.145574][T11254] EXT4-fs (loop3): unmounting filesystem. [ 315.192926][T16436] loop3: detected capacity change from 0 to 256 [ 315.243802][T16441] loop3: detected capacity change from 0 to 512 [ 315.412184][T11796] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 315.478822][T16459] loop3: detected capacity change from 0 to 128 [ 315.541743][T16466] loop3: detected capacity change from 0 to 128 [ 315.549880][T16466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 315.559021][T16466] ext4 filesystem being mounted at /366/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.573365][T16466] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 1853189997 (only 1 groups) [ 315.592772][T11254] EXT4-fs (loop3): unmounting filesystem. [ 315.635316][T11796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.657863][T11796] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 315.667270][T11796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.676392][T11796] usb 7-1: config 0 descriptor?? [ 315.818436][ T347] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 316.011995][ T347] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 316.020134][ T347] usb 9-1: config 0 has no interface number 0 [ 316.026553][ T347] usb 9-1: config 0 interface 41 has no altsetting 0 [ 316.035327][ T347] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 316.044640][ T347] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.052695][ T347] usb 9-1: Product: syz [ 316.057155][ T347] usb 9-1: Manufacturer: syz [ 316.061812][ T347] usb 9-1: SerialNumber: syz [ 316.067363][ T347] usb 9-1: config 0 descriptor?? [ 316.112934][T11796] keytouch 0003:0926:3333.005B: fixing up Keytouch IEC report descriptor [ 316.123386][T11796] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.005B/input/input68 [ 316.205563][T11796] keytouch 0003:0926:3333.005B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 316.931125][ T347] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 317.037387][ T342] usb 7-1: USB disconnect, device number 12 [ 317.157855][ T347] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 317.168585][ T347] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 317.179844][ T347] CoreChips: probe of 9-1:0.41 failed with error -71 [ 317.187672][ T347] usb 9-1: USB disconnect, device number 7 [ 317.441344][T16491] loop3: detected capacity change from 0 to 32768 [ 317.500782][T16491] loop3: p1 p3 < > [ 317.725106][ T28] audit: type=1400 audit(2000000052.039:1965): avc: denied { link } for pid=16502 comm="syz.6.6649" name="#9d" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 317.768024][ T28] audit: type=1400 audit(2000000052.067:1966): avc: denied { rename } for pid=16502 comm="syz.6.6649" name="#9e" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 317.826309][T16515] futex_wake_op: syz.6.6654 tries to shift op by -1; fix this program [ 317.919464][ T28] audit: type=1400 audit(2000000052.217:1967): avc: denied { bind } for pid=16519 comm="syz.3.6656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 317.941871][T11919] Bluetooth: hci0: Frame reassembly failed (-84) [ 318.049261][T16530] loop3: detected capacity change from 0 to 512 [ 318.065241][T16530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 318.074354][T16530] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.089114][T16530] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.6660: invalid size [ 318.099827][T16530] EXT4-fs (loop3): Remounting filesystem read-only [ 318.108808][ T28] audit: type=1400 audit(2000000052.404:1968): avc: denied { link } for pid=16529 comm="syz.3.6660" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 318.132086][T11254] EXT4-fs (loop3): unmounting filesystem. [ 318.384452][T16543] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6664'. [ 318.815544][T16556] loop3: detected capacity change from 0 to 512 [ 318.828878][T16556] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 318.860614][T16556] EXT4-fs (loop3): 1 truncate cleaned up [ 318.867574][T16556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 318.919874][T11254] EXT4-fs (loop3): unmounting filesystem. [ 319.077621][ T28] audit: type=1400 audit(2000000053.302:1969): avc: denied { mount } for pid=16568 comm="syz.3.6675" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 319.135790][ T28] audit: type=1400 audit(2000000053.330:1970): avc: denied { mounton } for pid=16568 comm="syz.3.6675" path="/397/file0" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 319.213590][ T28] audit: type=1400 audit(2000000053.358:1971): avc: denied { read } for pid=16570 comm="syz.3.6676" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 319.269070][ T28] audit: type=1400 audit(2000000053.358:1972): avc: denied { open } for pid=16570 comm="syz.3.6676" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 319.295312][ T28] audit: type=1400 audit(2000000053.386:1973): avc: denied { ioctl } for pid=16570 comm="syz.3.6676" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 319.322444][ T28] audit: type=1400 audit(2000000053.386:1974): avc: denied { write } for pid=16570 comm="syz.3.6676" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 319.408940][T16587] syz.8.6692[16587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.409020][T16587] syz.8.6692[16587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.459492][T16592] loop8: detected capacity change from 0 to 512 [ 319.477941][T16592] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 319.489906][T16592] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.6693: invalid indirect mapped block 4294967295 (level 0) [ 319.505399][T16592] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.6693: invalid indirect mapped block 4294967295 (level 1) [ 319.521103][T16592] EXT4-fs (loop8): 1 orphan inode deleted [ 319.526914][T16592] EXT4-fs (loop8): 1 truncate cleaned up [ 319.532671][T16592] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 319.550356][T14784] EXT4-fs (loop8): unmounting filesystem. [ 320.084001][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 320.090151][ T9710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 320.430636][T16598] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 320.723216][ T6738] Bluetooth: hci0: Frame reassembly failed (-84) [ 320.758888][T16631] kvm [16630]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc1) = 0x60000000 [ 320.767778][T16631] kvm [16630]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc2) = 0x60000000 [ 320.779723][T16631] kvm [16630]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0x11e) = 0x60000000 [ 320.792033][T16631] kvm [16630]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0x186) = 0x60000000 [ 320.800987][T16631] kvm [16630]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0x187) = 0x60000000 [ 321.196905][T16646] serio: Serial port ptm1 [ 321.541346][T16675] overlayfs: upper fs is r/o, try multi-lower layers mount [ 321.600036][T16676] kvm [16672]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 321.920493][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.939205][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 321.957517][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.975424][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 321.985203][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.993733][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.002709][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.011721][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.020367][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.051111][ T342] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 322.244686][ T342] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 322.255838][ T342] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 322.268669][ T342] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.278006][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.286055][ T342] usb 4-1: Product: syz [ 322.290566][ T342] usb 4-1: Manufacturer: syz [ 322.295218][ T342] usb 4-1: SerialNumber: syz [ 322.301382][T16690] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 322.382445][T11796] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 322.577535][T11796] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 322.586816][T11796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.594875][T11796] usb 7-1: Product: syz [ 322.599932][T11796] usb 7-1: Manufacturer: syz [ 322.604580][T11796] usb 7-1: SerialNumber: syz [ 322.611181][T11796] usb 7-1: config 0 descriptor?? [ 322.906300][ T9710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 322.906825][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 323.382910][ T342] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 323.391321][ T342] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 323.408105][ T342] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 323.597373][ T342] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 323.626861][ T342] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 323.635409][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 323.635428][ T28] audit: type=1400 audit(2000000057.558:1979): avc: denied { read write } for pid=16720 comm="syz.0.6740" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 323.656313][ T342] usb 4-1: USB disconnect, device number 30 [ 323.670050][ T58] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 323.693125][T11796] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 323.703958][ T58] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.712996][ T342] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 323.726374][T11796] asix: probe of 7-1:0.0 failed with error -71 [ 323.743083][T11796] usb 7-1: USB disconnect, device number 13 [ 323.754857][ T28] audit: type=1400 audit(2000000057.605:1980): avc: denied { open } for pid=16720 comm="syz.0.6740" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 323.785632][ T293] ================================================================== [ 323.793740][ T293] BUG: KASAN: use-after-free in worker_thread+0x9ff/0x11f0 [ 323.802481][ T293] Read of size 8 at addr ffff888144fc8ce0 by task kworker/0:2/293 [ 323.810321][ T293] [ 323.812667][ T293] CPU: 0 PID: 293 Comm: kworker/0:2 Not tainted syzkaller #0 [ 323.820056][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 323.830146][ T293] Workqueue: 0x0 (events) [ 323.834619][ T293] Call Trace: [ 323.837938][ T293] [ 323.840906][ T293] __dump_stack+0x21/0x24 [ 323.845284][ T293] dump_stack_lvl+0xee/0x150 [ 323.849912][ T293] ? __cfi_dump_stack_lvl+0x8/0x8 [ 323.854999][ T293] ? __cfi__printk+0x8/0x8 [ 323.859451][ T293] ? __schedule+0xb8f/0x14e0 [ 323.864083][ T293] ? worker_thread+0x9ff/0x11f0 [ 323.868967][ T293] print_address_description+0x71/0x200 [ 323.874552][ T293] print_report+0x4a/0x60 [ 323.878938][ T293] kasan_report+0x122/0x150 [ 323.883482][ T293] ? worker_thread+0x9ff/0x11f0 [ 323.888364][ T293] __asan_report_load8_noabort+0x14/0x20 [ 323.894063][ T293] worker_thread+0x9ff/0x11f0 [ 323.898774][ T293] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 323.904276][ T293] kthread+0x281/0x320 [ 323.908377][ T293] ? __cfi_worker_thread+0x10/0x10 [ 323.913518][ T293] ? __cfi_kthread+0x10/0x10 [ 323.918137][ T293] ret_from_fork+0x1f/0x30 [ 323.922596][ T293] [ 323.925642][ T293] [ 323.927986][ T293] Allocated by task 342: [ 323.932241][ T293] kasan_set_track+0x4b/0x70 [ 323.936878][ T293] kasan_save_alloc_info+0x25/0x30 [ 323.942049][ T293] __kasan_kmalloc+0x95/0xb0 [ 323.946712][ T293] __kmalloc_node+0xb2/0x1e0 [ 323.951346][ T293] kvmalloc_node+0x294/0x480 [ 323.956023][ T293] alloc_netdev_mqs+0x8d/0xf90 [ 323.960796][ T293] alloc_etherdev_mqs+0x37/0x40 [ 323.965651][ T293] usbnet_probe+0x20c/0x2780 [ 323.970246][ T293] usb_probe_interface+0x610/0xaf0 [ 323.975351][ T293] really_probe+0x2cb/0x960 [ 323.979846][ T293] __driver_probe_device+0x198/0x280 [ 323.985124][ T293] driver_probe_device+0x54/0x3e0 [ 323.990142][ T293] __device_attach_driver+0x2e9/0x4a0 [ 323.995505][ T293] bus_for_each_drv+0x183/0x210 [ 324.000353][ T293] __device_attach+0x2a2/0x400 [ 324.005120][ T293] device_initial_probe+0x1a/0x20 [ 324.010132][ T293] bus_probe_device+0xc0/0x1f0 [ 324.014903][ T293] device_add+0xb4d/0xef0 [ 324.019233][ T293] usb_set_configuration+0x19c2/0x1f10 [ 324.024688][ T293] usb_generic_driver_probe+0x91/0x150 [ 324.030155][ T293] usb_probe_device+0x159/0x270 [ 324.035004][ T293] really_probe+0x2cb/0x960 [ 324.039510][ T293] __driver_probe_device+0x198/0x280 [ 324.044784][ T293] driver_probe_device+0x54/0x3e0 [ 324.049800][ T293] __device_attach_driver+0x2e9/0x4a0 [ 324.055168][ T293] bus_for_each_drv+0x183/0x210 [ 324.060025][ T293] __device_attach+0x2a2/0x400 [ 324.064778][ T293] device_initial_probe+0x1a/0x20 [ 324.069792][ T293] bus_probe_device+0xc0/0x1f0 [ 324.074549][ T293] device_add+0xb4d/0xef0 [ 324.078876][ T293] usb_new_device+0xa70/0x1520 [ 324.083648][ T293] hub_event+0x2850/0x4350 [ 324.088062][ T293] process_one_work+0x71f/0xc40 [ 324.092904][ T293] worker_thread+0xa29/0x11f0 [ 324.097568][ T293] kthread+0x281/0x320 [ 324.101626][ T293] ret_from_fork+0x1f/0x30 [ 324.106036][ T293] [ 324.108346][ T293] Freed by task 342: [ 324.112221][ T293] kasan_set_track+0x4b/0x70 [ 324.116803][ T293] kasan_save_free_info+0x31/0x50 [ 324.121819][ T293] ____kasan_slab_free+0x132/0x180 [ 324.126921][ T293] __kasan_slab_free+0x11/0x20 [ 324.131677][ T293] slab_free_freelist_hook+0xc2/0x190 [ 324.137050][ T293] __kmem_cache_free+0xb7/0x1b0 [ 324.141903][ T293] kfree+0x6f/0xf0 [ 324.145641][ T293] kvfree+0x35/0x40 [ 324.149460][ T293] netdev_freemem+0x3f/0x60 [ 324.153994][ T293] netdev_release+0x7f/0xb0 [ 324.158503][ T293] device_release+0xa4/0x1d0 [ 324.163086][ T293] kobject_put+0x19d/0x280 [ 324.167493][ T293] put_device+0x1f/0x30 [ 324.171643][ T293] free_netdev+0x392/0x490 [ 324.176190][ T293] usbnet_disconnect+0x25a/0x3b0 [ 324.181128][ T293] usb_unbind_interface+0x223/0x8d0 [ 324.186326][ T293] device_release_driver_internal+0x508/0x820 [ 324.192555][ T293] device_release_driver+0x19/0x20 [ 324.197652][ T293] bus_remove_device+0x2ee/0x350 [ 324.202581][ T293] device_del+0x6a4/0xeb0 [ 324.206908][ T293] usb_disable_device+0x3a8/0x750 [ 324.211947][ T293] usb_disconnect+0x31e/0x860 [ 324.216665][ T293] hub_event+0x1a78/0x4350 [ 324.221081][ T293] process_one_work+0x71f/0xc40 [ 324.225923][ T293] worker_thread+0xd2e/0x11f0 [ 324.230595][ T293] kthread+0x281/0x320 [ 324.234672][ T293] ret_from_fork+0x1f/0x30 [ 324.239192][ T293] [ 324.241547][ T293] Last potentially related work creation: [ 324.247852][ T293] kasan_save_stack+0x3a/0x60 [ 324.252545][ T293] __kasan_record_aux_stack+0xb6/0xc0 [ 324.257922][ T293] kasan_record_aux_stack_noalloc+0xb/0x10 [ 324.263737][ T293] insert_work+0x51/0x300 [ 324.268063][ T293] __queue_work+0x9b1/0xd30 [ 324.272562][ T293] queue_work_on+0xd2/0x140 [ 324.277058][ T293] usbnet_link_change+0x189/0x1b0 [ 324.282084][ T293] usbnet_probe+0x1d55/0x2780 [ 324.286757][ T293] usb_probe_interface+0x610/0xaf0 [ 324.291856][ T293] really_probe+0x2cb/0x960 [ 324.296347][ T293] __driver_probe_device+0x198/0x280 [ 324.301619][ T293] driver_probe_device+0x54/0x3e0 [ 324.306756][ T293] __device_attach_driver+0x2e9/0x4a0 [ 324.312140][ T293] bus_for_each_drv+0x183/0x210 [ 324.316998][ T293] __device_attach+0x2a2/0x400 [ 324.321827][ T293] device_initial_probe+0x1a/0x20 [ 324.326864][ T293] bus_probe_device+0xc0/0x1f0 [ 324.331642][ T293] device_add+0xb4d/0xef0 [ 324.335977][ T293] usb_set_configuration+0x19c2/0x1f10 [ 324.341438][ T293] usb_generic_driver_probe+0x91/0x150 [ 324.346899][ T293] usb_probe_device+0x159/0x270 [ 324.351769][ T293] really_probe+0x2cb/0x960 [ 324.356365][ T293] __driver_probe_device+0x198/0x280 [ 324.361646][ T293] driver_probe_device+0x54/0x3e0 [ 324.366671][ T293] __device_attach_driver+0x2e9/0x4a0 [ 324.372045][ T293] bus_for_each_drv+0x183/0x210 [ 324.376890][ T293] __device_attach+0x2a2/0x400 [ 324.381723][ T293] device_initial_probe+0x1a/0x20 [ 324.386756][ T293] bus_probe_device+0xc0/0x1f0 [ 324.391518][ T293] device_add+0xb4d/0xef0 [ 324.395842][ T293] usb_new_device+0xa70/0x1520 [ 324.400599][ T293] hub_event+0x2850/0x4350 [ 324.405019][ T293] process_one_work+0x71f/0xc40 [ 324.409885][ T293] worker_thread+0xa29/0x11f0 [ 324.414564][ T293] kthread+0x281/0x320 [ 324.418703][ T293] ret_from_fork+0x1f/0x30 [ 324.423153][ T293] [ 324.425472][ T293] The buggy address belongs to the object at ffff888144fc8000 [ 324.425472][ T293] which belongs to the cache kmalloc-4k of size 4096 [ 324.439517][ T293] The buggy address is located 3296 bytes inside of [ 324.439517][ T293] 4096-byte region [ffff888144fc8000, ffff888144fc9000) [ 324.452958][ T293] [ 324.455275][ T293] The buggy address belongs to the physical page: [ 324.461674][ T293] page:ffffea000513f200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x144fc8 [ 324.471903][ T293] head:ffffea000513f200 order:3 compound_mapcount:0 compound_pincount:0 [ 324.480212][ T293] flags: 0x4000000000010200(slab|head|zone=1) [ 324.486300][ T293] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 324.494872][ T293] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 324.503442][ T293] page dumped because: kasan: bad access detected [ 324.509850][ T293] page_owner tracks the page as allocated [ 324.515552][ T293] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 14784, tgid 14784 (syz-executor), ts 284504480399, free_ts 284493406592 [ 324.538637][ T293] post_alloc_hook+0x1f5/0x210 [ 324.543406][ T293] prep_new_page+0x1c/0x110 [ 324.547906][ T293] get_page_from_freelist+0x2c7b/0x2cf0 [ 324.553448][ T293] __alloc_pages+0x1c3/0x450 [ 324.558043][ T293] alloc_slab_page+0x6e/0xf0 [ 324.562648][ T293] new_slab+0x98/0x3d0 [ 324.566714][ T293] ___slab_alloc+0x6bd/0xb20 [ 324.571309][ T293] __slab_alloc+0x5e/0xa0 [ 324.575644][ T293] __kmem_cache_alloc_node+0x203/0x2c0 [ 324.581094][ T293] kmalloc_trace+0x29/0xb0 [ 324.585508][ T293] kobject_uevent_env+0x287/0x730 [ 324.590546][ T293] kobject_uevent+0x1d/0x30 [ 324.595057][ T293] netdev_queue_update_kobjects+0x22c/0x470 [ 324.600948][ T293] netdev_register_kobject+0x26e/0x320 [ 324.606402][ T293] register_netdevice+0xe3d/0x14a0 [ 324.611504][ T293] veth_newlink+0x592/0xbe0 [ 324.616003][ T293] page last free stack trace: [ 324.620661][ T293] free_unref_page_prepare+0x742/0x750 [ 324.626119][ T293] free_unref_page+0x8f/0x530 [ 324.630788][ T293] __free_pages+0x67/0x100 [ 324.635195][ T293] __free_slab+0xca/0x1a0 [ 324.639605][ T293] discard_slab+0x29/0x40 [ 324.643928][ T293] __slab_free+0x201/0x280 [ 324.648338][ T293] ___cache_free+0xbf/0xd0 [ 324.652836][ T293] qlist_free_all+0xc6/0x140 [ 324.657416][ T293] kasan_quarantine_reduce+0x14a/0x170 [ 324.662878][ T293] __kasan_slab_alloc+0x24/0x80 [ 324.667720][ T293] slab_post_alloc_hook+0x4f/0x2d0 [ 324.672829][ T293] __kmem_cache_alloc_node+0x192/0x2c0 [ 324.678282][ T293] kmalloc_trace+0x29/0xb0 [ 324.682738][ T293] ref_tracker_alloc+0x139/0x430 [ 324.687667][ T293] netdev_queue_update_kobjects+0x185/0x470 [ 324.693582][ T293] netdev_register_kobject+0x26e/0x320 [ 324.699040][ T293] [ 324.701371][ T293] Memory state around the buggy address: [ 324.706991][ T293] ffff888144fc8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.715057][ T293] ffff888144fc8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.723107][ T293] >ffff888144fc8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.731151][ T293] ^ [ 324.738349][ T293] ffff888144fc8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.746397][ T293] ffff888144fc8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.754446][ T293] ================================================================== [ 324.762492][ T293] Disabling lock debugging due to kernel taint [ 324.793428][ T28] audit: type=1400 audit(2000000058.653:1981): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 324.818494][ T28] audit: type=1400 audit(2000000058.653:1982): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.842720][ T28] audit: type=1400 audit(2000000058.653:1983): avc: denied { append } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.865234][ T28] audit: type=1400 audit(2000000058.653:1984): avc: denied { open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.888189][ T28] audit: type=1400 audit(2000000058.653:1985): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1