last executing test programs: 3m21.246086416s ago: executing program 3 (id=189): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x1, 0x100, {{0x7, 0x4, 0x0, 0x2b, 0x1c, 0x66, 0x0, 0x74, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, {[@generic={0x44, 0x7, "f291f504a3"}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x1, 0x8000, 0x3, 0x6, {{0x29, 0x4, 0x2, 0xa, 0xa4, 0x68, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0xc6, 0x0, 0x9, [0xc7c8, 0x5, 0x8]}, @lsrr={0x83, 0x2b, 0x4e, [@dev={0xac, 0x14, 0x14, 0x42}, @remote, @remote, @remote, @multicast1, @empty, @private=0xa010102, @rand_addr=0x64010100, @multicast2, @remote]}, @end, @ra={0x94, 0x4}, @generic={0x88, 0xb, "a675dd289c53c5dd33"}, @timestamp_addr={0x44, 0x44, 0x24, 0x1, 0x8, [{@loopback, 0x7fff}, {@multicast1, 0xc}, {@multicast1}, {@local, 0x2}, {@remote}, {@rand_addr=0x64010100, 0x40}, {@broadcast, 0x9}, {@broadcast, 0xe1e}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa8, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0xc800) 3m21.045090906s ago: executing program 3 (id=192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) getpriority(0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001fc0)=@newtaction={0x1c, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}, {0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc880}, 0x40000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) 3m20.849370645s ago: executing program 3 (id=200): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pB \x00'}, 0x20) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@union={0x8, 0x6, 0x0, 0x5, 0x1, 0x9, [{0x6, 0x5, 0x7}, {0xa, 0x3, 0x5de8}, {0x1, 0x3, 0x47d7}, {0xc, 0x1, 0x6}, {0x10, 0x4, 0x4}, {0xa, 0x0, 0x3}]}]}, {0x0, [0x30, 0x2e, 0x61, 0x0]}}, &(0x7f00000003c0)=""/150, 0x72, 0x96, 0x1, 0xfffffff9, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000600), 0x9, 0x12c80) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) (rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x1, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x7, 0x1, 0x0, 0xa, 0xc, 0xffffffffffffffe0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0xffffff64, 0xbc, &(0x7f0000000200)=""/188, 0x41000, 0x40, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000004c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xa, 0x3, 0x200}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r4, 0x1, r5, 0x1, r6, 0xffffffffffffffff, 0x1, r7], &(0x7f0000000780)=[{0x2, 0x1, 0x8, 0x5}, {0x2, 0x4, 0xa, 0x8}, {0x4, 0x1, 0x5, 0xb}, {0x1, 0x3, 0x7, 0xb}], 0x10, 0x2}, 0x94) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x3) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000009c0)=0xe8) (async, rerun: 64) statx(r5, &(0x7f0000000a00)='./file0\x00', 0x7000, 0x80, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000b40)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0x8, 0x8, 0x3ff, 0x8, {0x0, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x32c8, 0x8000000000000001, 0x4, 0x8000, 0x4, 0xa, 0x0, 0x4, r9, r11, 0x9, 0x9075}}, {0x0, 0x10}}}, 0xa0) (async) r12 = syz_clone(0x80000, &(0x7f0000000c00)="249cf09a1134285f4157ab57c4bc2d9e70641f89733b2dbb3244ddc3e5c79e051700efc49001e09b49dc2e0c0674fb446127e162ac8ab979e54e5a132119630b1d19c7940f1c58d32de4d5f1388c9412b0fd53fffeaab2e2035d541ec14dccf08c884c8c8cf292d0beb1c19288653521f270d87f8b2eeef60e426f223ad79b6cd0816528711ded3661ad184f165b5586d0e621ea4ead4c67", 0x98, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)="81e3a1e455275a984c66a372896ce3034ce9e34fa691ebd5901963b4c2429315a885ebd03514fda1ff6be16be69fb183d6fc") fcntl$setown(r6, 0x8, r12) (async) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x180006c, &(0x7f0000000e00)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x2}}, {@uname={'uname', 0x3d, 'syzkaller\x00'}}, {@debug}, {@cache_none}, {@access_user}, {@access_uid={'access', 0x3d, r9}}], [{@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '/selinux/mls\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcs#\x00'}}, {@appraise}]}}) (async, rerun: 32) pwrite64(r7, &(0x7f0000000f00)="fffe336b45ddc32082ac95f7f326106ca7666211411cbd915c520928da3e7e521ce5be81016bed1f66c9c0425ab7da2929d46354abcb5843b529fef5da39", 0x3e, 0x8) (async, rerun: 32) r13 = open$dir(&(0x7f0000000f40)='./file0\x00', 0x210000, 0x184) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r13, 0xf505, 0x0) stat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000000f80)="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", 0x2000, &(0x7f0000003940)={&(0x7f0000002f80)={0x50, 0xfffffffffffffffe, 0x6, {0x7, 0x2b, 0x80000000, 0x20000000, 0x5, 0x2, 0x3, 0x5, 0x0, 0x0, 0x10, 0xd}}, &(0x7f0000003000)={0x18, 0xfffffffffffffffe, 0x3c1c, {0xf54}}, &(0x7f0000003040)={0x18, 0x0, 0xcb1, {0x684eecda}}, &(0x7f0000003080)={0x18, 0xfffffffffffffff5, 0x0, {0x7f}}, &(0x7f00000030c0)={0x18, 0x0, 0x4, {0x4}}, &(0x7f0000003100)={0x28, 0xfffffffffffffffe, 0x3ff, {{0x19, 0x7, 0x0, r12}}}, &(0x7f0000003140)={0x60, 0x0, 0x5, {{0x5, 0x2, 0x3, 0x100, 0x3, 0x200, 0x4, 0x2}}}, &(0x7f00000031c0)={0x18, 0x0, 0x7, {0x5}}, &(0x7f0000003200)={0x1c, 0x0, 0x2, {'smackfsfloor'}}, &(0x7f0000003240)={0x20, 0x0, 0x16a4}, &(0x7f0000003280)={0x78, 0x0, 0x4, {0x8, 0x1a47, 0x0, {0x4, 0x9, 0xdd2, 0x7fff, 0xfffffffffffff001, 0x0, 0x80, 0x6, 0x2, 0xa000, 0x0, r9, r11, 0xffff, 0x6}}}, &(0x7f0000003300)={0x90, 0x0, 0x8, {0x6, 0x2, 0x1, 0x2, 0xf7e7, 0x0, {0x0, 0x2, 0x6, 0xe97, 0x97, 0x0, 0x10000, 0xa, 0x2, 0x6000, 0xff, r9, r11, 0x5, 0x6}}}, &(0x7f00000033c0)={0x50, 0x7fffffffffffffed, 0x400, [{0x6, 0x0, 0x8, 0x9, 'appraise'}, {0x5, 0x703ae745, 0x3, 0x6dff, '*-@'}]}, &(0x7f0000003500)={0x1f0, 0xfffffffffffffff5, 0x5, [{{0x3, 0x2, 0x8001, 0x5, 0x2, 0x10, {0x1, 0x1, 0xfff, 0x9, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8000, 0x401, r9, r11, 0x10000, 0xfff}}, {0x1, 0xfffffffffffffffb, 0x1, 0x6, '\x1e'}}, {{0x6, 0x1, 0x100, 0x5, 0x40, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0x10b921f9, 0x753, 0x4, 0x7, 0x2, 0x4, 0x2000, 0x8000, r9, r11, 0x9, 0x1}}, {0x0, 0xd8b, 0x5, 0x5, '@%i\xb9^'}}, {{0x0, 0x3, 0x10001, 0x8, 0x6, 0x8, {0x2, 0xbc, 0x3, 0x0, 0x1ff, 0x96c, 0xe2bbca2, 0x2, 0x200, 0x1000, 0xffffff6c, r9, r14, 0x2, 0x2}}, {0x2, 0x4, 0x3, 0x4, '/\a$'}}]}, &(0x7f0000003700)={0xa0, 0x0, 0x84, {{0x3, 0x1, 0x6, 0x70, 0x9, 0x620, {0x6, 0x3, 0x7, 0x606, 0x6, 0x52c2, 0x9, 0x1, 0x7, 0x6000, 0x401, r10, r11, 0x8, 0x1}}, {0x0, 0x8aa0ae1f6bbdefa0}}}, &(0x7f00000037c0)={0x20, 0x0, 0x21fa, {0x9, 0x4, 0xc39f, 0x5}}, &(0x7f0000003800)={0x130, 0x0, 0x7fffffff, {0x38b3, 0x10000, 0x0, '\x00', {0x200, 0xfffffffe, 0xe, 0x0, r9, r11, 0x6000, '\x00', 0xadd3, 0x2, 0x2, 0xd9, {0x8, 0x4}, {0x4, 0xfffffffd}, {0x0, 0x10001}, {0x1, 0xfffffffd}, 0x4, 0xff, 0x7, 0x5}}}}) (async, rerun: 32) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x5) (async) fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f0000003a00)=0x3) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000003a40)={0x2e, 0x6, 0x0, {0x6, 0x0, 0x5, 0x0, 'debug'}}, 0x2e) (async) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003cc0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003d80)={0x11, 0x2f, &(0x7f0000003a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fff}, [@jmp={0x5, 0x0, 0x8, 0x3, 0x5, 0x80, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @generic={0x1, 0x6, 0x6, 0x7, 0xfffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @map_fd={0x18, 0x5d65d1abd8a5ded1, 0x1, 0x0, r5}]}, &(0x7f0000003c00)='GPL\x00', 0x0, 0x44, &(0x7f0000003c40)=""/68, 0x41000, 0x3, '\x00', r2, 0x0, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003d00)={0x5, 0xe, 0x7fffffff, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000003d40)=[{0x1, 0x1, 0xd, 0x3}, {0x4, 0x4, 0x9, 0x7}, {0x3, 0x2, 0x10, 0x6}], 0x10, 0x3}, 0x94) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000003e80)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) 3m20.592214391s ago: executing program 3 (id=203): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), 0x0, 0xb7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', r0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0xcdd9370a3c1003d6, 0x5, 0xfffffbfe) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3m20.332902017s ago: executing program 3 (id=209): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) (async) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(r4, 0x6, &(0x7f0000000580)={0x0, 0x4, 0x2, 0xb2ea, r5}) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0xe8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @local, 0xff000000, 0x0, 0x0, 0x8, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xbeee31289927e310]}}, 0xc5b, 0x81, 0x1, 0x8, 0x4, 0x0, 'pim6reg0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0xff000000, 0xff000000, 0x0, 0x20, {@empty, {[0xff]}}, {}, 0x0, 0x0, 0x4, 0xfffc, 0x0, 0x0, 'veth1_vlan\x00', 'pimreg\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x418) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800002, &(0x7f0000000100)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec590d6e84de0249d09f31ef580c3d00000000", @ANYRESDEC, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32], 0x1, 0x1b0, &(0x7f0000000700)="$eJzs3UGLEmEYB/BH150k9rDn6DDQpZNUn8CKXVgaCAoPdSrYumgEeZk6+S0KuvdV+jrhyUNgTCNaMkFBM+Pq73eQB//K87yCvniYd17cfDO+fDt9/eXrx+j3O9EbxjAWnTiNbhxFaRYAwD5ZLJfxbVn6i5c/aGAkAKBm/7j/AwB74Nf9v9v2MABAI/z/B4DD8/TZ80f3s+zsSZr2I+azfJSPIk5mxWPh/CI7u5P+dLp51zzPR0fr/G6Zp7/nx3F9ld+rzJO4favMi+zh42wrvxaXVQMPO//9MwAAAAAAAAAAAAAAAAAAAAAAgKYN0rXK830Gg+QPeVmdXySr57bP9+nFjV5Fw6SWZQAAAAAAAAAAAAAAAAAAAMCVNn3/YfxyMnn1bieL452fUNFM8anppp+/t73k6uJk9cWtvVfLP0wAAAAAAAAAAAAAAAAAAHCANhf9tj0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALRnc///+oqiT7fthQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcNB+BAAA///ZUkfe") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x20001, 0x15d) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000040)) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x1fa, &(0x7f0000000380)="$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") (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xffffffffffffff49, r9, 0x1, 0x0, 0x25dfdbfd, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3m18.772992026s ago: executing program 3 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x8000100, &(0x7f00000005c0)="c65b9a9a5e421f3d65320956094233c13b22186d16c96e3d4077a2554627ed7fd4b36968d9197c2713b662f4bae8c77757360871b40c7ca175e239ae407fdc509e0bdbe0d24ce748afc047e550a756484bdb3f27c162dae91e340e079718c29276a944aa7a4151f45e01807a4660fb8f6e1c3a57fde5ac714259287407412ac82b41e33c0fb08a85856a39ecfcf9f686e2ca5c590cb85eaebdc887f7e9bd3c2f4e9edb6a8177fbe1d562dc5e1a7468a0e8519cfbc389174d482f09b96a2984f4e5744c268708f27f9471ccfc4b1b84ee7c14668d388ff778168a", 0xda, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="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") ptrace(0x8, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000940), 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x20, 0xc, 0xb, {0xb, 0x21, "4b9721e791eccff6c1"}}, &(0x7f0000000180)={0x0, 0x3, 0x50, @string={0x50, 0x3, "fc28156b4059e93c956425ecd74d522f1cd91aa8b3a117014a88aa96a2bab7cafba09af751f6088c7fb3f035ad5497016b2d9c298af5e0c4c86b1bf7f6783a8ef31810cf2430ae0671512b4395c9"}}, &(0x7f0000000840)=ANY=[@ANYBLOB="000e681ba27cdc4628fc391fe055b370bf41047ed8ca44a5d47755fcb7e4e769587d4f0cfc969e91e601a990b890698a1daef48879c8c307701070b18b0f7390433fab9703ba8183c928afdee67b38651d009788d5f866f7ac26a3cfcb8c40d686c57cc12667d7445640608170be27e85e29a25bad93d5008f47e23983f96a2905ff47969f9e1dce360fad93d35c271ecfb4f6c81ba91963dae0e2eefbde80a90160a04ee3e6c92e38430b051f02aba5c0f0b19f68cc8f2a25d6b4f039c4e8186e0e2a5a49f767ea209672c7ac249b3e31fc071f569689e63a6223fa2e86f41224fd0459f91054507bb57441dcd0aeef"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xfc, 0x1, {0x22, 0xd3a}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="20123b000000b9502df80f48398f818f750ce00dc13c78a7f1e3ce42690590d583082e9e597d9de2662f658fb3207bad9538a9ca1d2f8cbb017ae50aa1ed220000"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x60, "a4a5d4d53aeaeb58760ba9b45b3ce5037ffccaa6bf1fb9c74b1f9905ebdc83e925c54142682d55c13369b3a65c05aa2b439495f8c3d11cc14caeb54a9919f26161a7440c20aafbec2ce30c93b8ea2ccb948dcb69301ed2d785b07e315c80e673"}, &(0x7f00000003c0)={0x20, 0x3, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt(r6, 0x0, 0x1000, &(0x7f0000000580)="ed3a41322b9178cd9b723b3d53511f834cda79ab4aba4f46a23794bfcc514a7af8d32781", 0x24) (async) setsockopt(r6, 0x0, 0x1000, &(0x7f0000000580)="ed3a41322b9178cd9b723b3d53511f834cda79ab4aba4f46a23794bfcc514a7af8d32781", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4001}, 0x0) add_key$user(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) 3m18.772291975s ago: executing program 32 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x8000100, &(0x7f00000005c0)="c65b9a9a5e421f3d65320956094233c13b22186d16c96e3d4077a2554627ed7fd4b36968d9197c2713b662f4bae8c77757360871b40c7ca175e239ae407fdc509e0bdbe0d24ce748afc047e550a756484bdb3f27c162dae91e340e079718c29276a944aa7a4151f45e01807a4660fb8f6e1c3a57fde5ac714259287407412ac82b41e33c0fb08a85856a39ecfcf9f686e2ca5c590cb85eaebdc887f7e9bd3c2f4e9edb6a8177fbe1d562dc5e1a7468a0e8519cfbc389174d482f09b96a2984f4e5744c268708f27f9471ccfc4b1b84ee7c14668d388ff778168a", 0xda, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="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") ptrace(0x8, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000940), 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x20, 0xc, 0xb, {0xb, 0x21, "4b9721e791eccff6c1"}}, &(0x7f0000000180)={0x0, 0x3, 0x50, @string={0x50, 0x3, "fc28156b4059e93c956425ecd74d522f1cd91aa8b3a117014a88aa96a2bab7cafba09af751f6088c7fb3f035ad5497016b2d9c298af5e0c4c86b1bf7f6783a8ef31810cf2430ae0671512b4395c9"}}, &(0x7f0000000840)=ANY=[@ANYBLOB="000e681ba27cdc4628fc391fe055b370bf41047ed8ca44a5d47755fcb7e4e769587d4f0cfc969e91e601a990b890698a1daef48879c8c307701070b18b0f7390433fab9703ba8183c928afdee67b38651d009788d5f866f7ac26a3cfcb8c40d686c57cc12667d7445640608170be27e85e29a25bad93d5008f47e23983f96a2905ff47969f9e1dce360fad93d35c271ecfb4f6c81ba91963dae0e2eefbde80a90160a04ee3e6c92e38430b051f02aba5c0f0b19f68cc8f2a25d6b4f039c4e8186e0e2a5a49f767ea209672c7ac249b3e31fc071f569689e63a6223fa2e86f41224fd0459f91054507bb57441dcd0aeef"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xfc, 0x1, {0x22, 0xd3a}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="20123b000000b9502df80f48398f818f750ce00dc13c78a7f1e3ce42690590d583082e9e597d9de2662f658fb3207bad9538a9ca1d2f8cbb017ae50aa1ed220000"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x60, "a4a5d4d53aeaeb58760ba9b45b3ce5037ffccaa6bf1fb9c74b1f9905ebdc83e925c54142682d55c13369b3a65c05aa2b439495f8c3d11cc14caeb54a9919f26161a7440c20aafbec2ce30c93b8ea2ccb948dcb69301ed2d785b07e315c80e673"}, &(0x7f00000003c0)={0x20, 0x3, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt(r6, 0x0, 0x1000, &(0x7f0000000580)="ed3a41322b9178cd9b723b3d53511f834cda79ab4aba4f46a23794bfcc514a7af8d32781", 0x24) (async) setsockopt(r6, 0x0, 0x1000, &(0x7f0000000580)="ed3a41322b9178cd9b723b3d53511f834cda79ab4aba4f46a23794bfcc514a7af8d32781", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4001}, 0x0) add_key$user(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) 6.650205407s ago: executing program 4 (id=2176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) poll(&(0x7f0000000040), 0x0, 0xd065) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0) 5.207499393s ago: executing program 4 (id=2191): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x0, 0x2}) 5.154232858s ago: executing program 4 (id=2192): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x4, 0x550f, &(0x7f00000089c0)="$eJzs3EtvG9UXAPA7SdP3v/8IsWDXkSqkBNVWnEcFuwCteIhUUYEFK3DsieXW9kSx44SsWLBELPgmCCRWLPkMLFizQyxA7JBAnjuGhocEihOT5veTxmfu9fWZc62q0pmJHIBzaz796Yck3AhXQgizIYTrIRTnSXkU1mN4pjxmHjuScu63iYshhKshhBuj5DFnUr71ye3hrbXvX//xy68vXbj26RffTG/XwLQ9G0Lo7sTz/W6MeSvGh+V8fdguYnd1WMb4RvdROc5j3M+2igz79fG6ehFXWnF9vrPXH8XtTr0xiq32djG/04sX7A9b4zzFBx7Wd4txM9sqYrufF7F1GOs6OIz/tx32BzFPs8z3fpE+DAbjGOezgyzuZ+dRERu9QTkf8+bN7GAUh2UsLxcaeadZ1LF1nG/6v+2Ndm/vIB1mu/123kvXqrXnq7U7ldpu3swG2Wql3m3eWU0XWp3Rssogq3fXW3ne6mTVRt5dTBdajUalVksX7mZb7XovrdWqK9WlytpieXY7feX+22mnmS6M4kvt3t6g3emn2/luGj+xmC5XV15YTG/V0jc3NtPNB/fubWy+9e7dd+6/uPHay+WiP5X1XFheWl6u1JYqy7XFc7T/D8ui04WJ7R+OJZl2AQBnz7/t/2/q/4EJOLn+f/dBCCff/wf9/0Scqf53XNYE+9/zvn84Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ68WJ/NxfK2c/1859VQ5TkIIMyGEX/7CbLh4JOdsmWfub9bP/aGGr5JQZBhd41J5XA0hrJfHz/8/6W8BAAAAnlyff3Dz49itx5f5aRfEaYo3bWauvzehfEkIYW7+uwllmxm9PD2hZMW/7wvhYELZihtYlyeULN5yuzCpbP/I7JFw+bGQxDBzquUAAACn4mgncLpdCAAAAKfpo2kXwHQkYfwoc/wsuPjL+98fCF45MgIAAADOoGTaBQAAAAAnruj//f4fAAAAPNni7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7JzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv31Xpxe/X7um3Obt9OntEAAAAAl2yr9aL+Z5b6X5v735tbP5t+ERFlRFyau4/i01nmqMmpXp6/OX2+elXDXUSdcHiPSXN9iYg/zfX4o+tPAQAAAD6uzXI1T7P19Gc2dEH0KS3alN/+ZsorIqKaPWRKKw95vzKF1d/vcfzPlFYvYE0zhaUlt3GutDepf+7HVbvpSVOkprz4smOR2cYOAAD0aHTW9DsLAQAAoE//hi6AYRTxvJV53AqcpKbZ3vt81gMAAADeoWLoAgAAAIDO1fP/ns7/2zv/DwAAAIaRzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqvdgsV/O2Obt9O3lGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAH+zs7OxVXGNsoeIKHjQi91ua2tv4kEJHvwThJBua+zWH20OthQxF2+Scy+iRxFBibf+Dz0nkEu85bCHCJ4jMzuzO/kBrj86s0k+H3jzvjsM875vFkK+814CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQGL47ieP00B7Fjfzc5t6D5bTfOtSnHq1vL6QtjaMqkz4ZXi5/iDrjcK+OZAAAADgb4qK+DyHsJBuLad9oZ/V/UlyT1vzfPzuKi3r+cN1f9EXtn7bfft19cTxQezROetMbK4P+xaOpNJ/cLGfbc397RTN78tm7lzj7QhofrL0wTLLnGX37+PF7rSycqyJbAODfuFD0eVD8PpT2vToTA+DMaJYK76L+j9v15gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQheFaeLqIoxDCQnMSp7b2Hiwf1z9a314o2tWHD9fD15N7prdIQgg3Vgb9i5XOZrbdvXf/1tJg0L9TffBKCKGu0d/Jp3/roykuDqGW5yP4f4L9ufzLnpF8TkhQ4w8lAABOpSRvaV2/k2wspuei+RD2fzhY/79eisOU9f/ux1c3y2OV6/9eZTOcfd3V25937967/+bK7aWb/Zv9T9+61Hu7d/nalSvXutm7kq43JgAAAPw3rbyV6//G/NH1//OlOExZ/3/xXe+r8lix+v9Yk0W/ujMBAAA4255/9c8/omPOR61W+HJpdfVOb3Qcf740OtaQ6j82l7dy/R/P150VAAAAUIXhWnRg/f96KQ5Trv8/8+NLP5fvGYcQzuXr/xeWPxtcr246M62KPyeue44AAADU61zeyuv/Sbb/vzHe8tAIIbzx2ijO/w3gVPV//P43P5XHKu//v1zdFGdSozN6HlnfCaHZqTsjAAAATrOn8pYW+78nG4uf/HL+w5b9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABV+ysAAP//+Cw/6Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x104) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xc0406619, 0x0) 4.825466012s ago: executing program 0 (id=2194): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() open(0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f0000000440)='mnt/encrypted_dir\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$eJzs3c1rXFUbAPDnTpKmTfu+iSBo3RgQNFA6MTW2CgoVFyJYKOjadphMQ80kUzKT0oSALSK4EVRcCLrpyoUfdefWj63+Fy7EUjUtVlxI5E5m0kkzk07SZCaa3w9u5px77+ScZ879ODPncm8Ae9Zw+icTcTgi3ksiBmvzk4joq6Z6I06urHd7aTGfTkksL7/6W1Jd59bSYj4a3pM6WMs8HBHfvR1xJLO+3PL8wlSuWCzM1vKjlekLo+X5haPnp3OThcnCzPGx8fFjJ54+cXz7Yv3jx4VD199/6YkvT/711kPX3v0+iZNxqLasMY4te35tdjiGa59JX/oRrvHifRe2uyTdrgBbku6aPSt7eRyOweippgCA/7I3I2IZANhjEud/ANhj6r8D3FpazNen7v4i0Vk3XoiI/Svx18c3V5b01sbs9lfHQQduJWtGRpKIGNqG8ocj4pOvX/88nWK7xiEB2nD5SkScHRpef/xP1l2zsFlPbrBsX+11+K75aflGoKEzvkn7P8806/9lVvs/0aT/099k392KZvt/EnF5dcaBbShkAzc+jXiu4dq22w3x1wz11HL/q/b5+pJz54uF9Nj2/4gYib7+ND+2QRkjN/++2WpZY//v9w/e+CwtP329s0bml97+te+ZyFVy9xNzoxtXIh7pbRZ/str+SYv+7+k2y3j52Xc+brUsjT+Ntz6ti7/a/jt3Rli+GvF40/a/c0VbsuH1iaPVzWG0vlE08dVPHw20Kr+x/dMpLb/+XaAT0vYf2Dj+oaTxes3y5sv44ergt62W3Tv+5tv/vuS1arrej7iUq1RmxyL2Ja+sn3/sznsv5R6tpVbWT+Mfeaz5/r/R9p9+JzzbZvy913/9Yuvx76w0/olNtf/mE9duT/W0Kr+99h+vpkZqc9o5/rVbwfv57AAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOBRJJruazmSy2ZVneD8YA5liqVw5cq40NzMR1WdlD0Vfpn6ry8GG+6GO1e6HX88fuyv/VEQ8EBEf9h9I6vdRnOhy7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQd7DF8/9TP/d3u3YAwI7Z3+0KAAAd5/wPAHuP8z8A7D3tnf97drweAEDn+P4PAHuP8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA77PSpU+m0/OfSYj7NT1ycn5sqXTw6UShPZafn8tl8afZCdrJUmiwWsvnS9L3+X7FUujAeM3OXRiuFcmW0PL9wZro0N1M5c346N1k4U+jrSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDnl+YWpXLFYmJXYQmJ5d1Sj+4me2ua0W+rT0USyO6qxzYkuH5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/iX+CQAA//8vWSHt") openat(0xffffffffffffff9c, 0x0, 0x444ec3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x4, 0xbb}, @generic="1a"]}, 0x1c}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) 4.409486934s ago: executing program 4 (id=2195): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = epoll_create(0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)={0x10000014}) socket$netlink(0x10, 0x3, 0x4) 3.886625646s ago: executing program 0 (id=2202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f0000003880)={@void, @val={0x1, 0x83, 0x8, 0xe057, 0x19, 0x8}, @x25={0x1, 0xd, 0xb, "eb958680d44be65a9c13fc7f73cce7fb8da15b2fa690994e6b3fcbf0ea55b8b8"}}, 0x2d) 3.806087825s ago: executing program 0 (id=2203): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa050800450000300064008009029078ffffffffe0000001030090780098000045aa00010068000a64010003e000000164010100"], 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$eJzs3T9rE2EYAPAnf5qmRWxncQi46FLU2SVIBTFQqGRQFwNVkFaEdImCkK/gIn4AJz+Sgx+iU8EhcrmzSZPUQrnexfb3g2ufu6d98+S43nvD+zSvb7/f3/tw+Hb081s0m62oRzPiOGIzqlGLVCX50vwbN2LasHZqN1YDAFh2u7u99lm5YbGlkIv63JF+v91bWfhs1v1RUFEAAAAAAAAAAADkbH79fwwXrv+PiOrp9f/jYDjTDwAALL9/rf/nauj327319PltplvT+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgPPUYbYxGo3s30t0knmyN2Ci7PgAgf8fT8/3J9nuUMf8DwBW0eP6fbGXXBwDkb2r+jzhn/q+VVyYAkKPnL14+a3c627utVjPiaDjoDrrp9zT/5Gln+35rbDMiqunRo8GgWzvJP0jzrcmoSX4l1rP8w4X5Rty9k+aT3OOdzkx+NfaKOQUAAAAAAAAAAAAAAAAAAABQuq1xG38lIu3vz0z6+7e2dr7+enfS/z+VT6Ps/wNUY6a///P3etyqp3vVM199Ned3AwAAAAAAAAAAAAAAAAAAAP+nw4+f9nsHB2/6xQSViMh35FpEjIN6dqSW+0tMBZc3chI0YxxUYi7ViIgLj5yc9MWpJHPRmr+kQcRFfv3Rq4hzf7iyvxZzqbXiL9rLDdayv8RlqedmdrWcdcdoFHdzAgAAAAAAAAAAAAAAAACAa2bS/Vt2JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnsnn/19eUPZ7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6HPwEAAP//GQR1Iw==") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 3.796765866s ago: executing program 0 (id=2204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) pause() openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000640)='S', 0x1) 3.439521402s ago: executing program 0 (id=2207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, 0x0) 2.943327322s ago: executing program 2 (id=2208): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x10000) 2.889744257s ago: executing program 2 (id=2211): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000011000010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x4, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xb, 0x5, 0x52a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x800809, 0x4, 0xa7, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff77, 0x401, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x8, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0x10000, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x401, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x9, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x603, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x7, 0x5, 0x7f, 0x59, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x84, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x2, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.889598317s ago: executing program 4 (id=2212): bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x58}}, 0x0) 2.876021199s ago: executing program 4 (id=2213): r0 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() creat(0x0, 0xa1) open(0x0, 0x66842, 0x19) sched_setaffinity(0x0, 0xfffffffffffffe9a, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e25, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.686294258s ago: executing program 1 (id=2215): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000094"], 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.686104178s ago: executing program 1 (id=2216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(r1, &(0x7f0000000500)='net/nf_conntrack\x00') preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x80, 0x8) 2.56910899s ago: executing program 5 (id=2217): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, 0x0}, 0x20) 2.533933554s ago: executing program 5 (id=2218): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x1, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000013c0)='./file1\x00', 0x14507e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x0) pwrite64(r1, &(0x7f0000000000)='\"', 0x1, 0x4fed0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 2.46611826s ago: executing program 0 (id=2219): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716, @ANYRES64, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20018000}, 0x20000045) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x2, 0xc}, 0x50) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x78f, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 2.394308887s ago: executing program 5 (id=2220): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x1700, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x40}}}}}]}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.948951713s ago: executing program 2 (id=2221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40) r1 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x0, 0x12) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x80106725, &(0x7f00000000c0)) 1.842091243s ago: executing program 2 (id=2222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) pipe(0x0) unshare(0x62040200) 1.827130305s ago: executing program 5 (id=2223): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x33, 0x51b) 1.809422277s ago: executing program 5 (id=2224): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) unshare(0x22020400) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000008, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000003c0)={0x60, 0x2, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00005ee000/0xc000)=nil, 0x4, &(0x7f0000000180)=[{0xfffffffffffffbff, 0x7, 0x3}, {0xe37, 0x7}], 0x2, 0xfffffffffffffffc, 0x68, 0x0, 0x86, 0x52}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c46040700030400000000000000020003000800000009030000250000f51c0000000e0000000b0020000100050005000004000000000300000008000000f30000007f0000000402000004002000e10c000000040000c798fbffbed5862716da6e4c32f95882f2bc6954b105cf4753cabb6df782103a69d4304372e92325fd38782fc3eeeaa164cb80b314c11f46628c386c612f79f882d97c7f2d510f4b988c26ed8e8f9695e42720debda61f4b787692549273fc79ebe75837ae4aa31ac97a"], 0x58) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="650f07c4e2fda7c10f017904c4c15b5157000f0966b850000f00d89a05000000e600ea00000000d000c4c255bce70f06", 0x30}], 0x1, 0x8, &(0x7f0000000100)=[@dstype0={0x6, 0x2}], 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000020018000009500000000000000000000000000000063910943d3469a9f8c937af6a63960cd83d21d214a1e33ffa9335f1a1c228ea32821b828642403290bff1441c8ad942fa2066d2d3bace44bcc3ea3d966831558faee54679bc8"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0xb3, &(0x7f0000000700)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) io_uring_setup(0x2654, &(0x7f0000000080)={0x0, 0xbb95, 0x0, 0x2, 0x1ad}) socket$inet6(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) 1.358184852s ago: executing program 1 (id=2225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.357959972s ago: executing program 1 (id=2226): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) inotify_rm_watch(r6, r5) readlinkat(r6, 0x0, &(0x7f0000000340)=""/215, 0xd7) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 953.931193ms ago: executing program 2 (id=2227): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x3, 0x3a) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000006c0)={0x2, 'macvlan1\x00', {0x500000}, 0x6}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) eventfd(0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffec8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0xfffd, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0x0, 0x8, 0x3, 0x1]}}, 0x5c) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 547.106305ms ago: executing program 5 (id=2228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) statfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), 0x0, 0x0) 362.228263ms ago: executing program 1 (id=2229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 188.509201ms ago: executing program 1 (id=2230): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="8cba0c7810deeafacf44e201902729a13954535d8dc456e19a70b24c9b68d78c3582331ddab21242c3923477ed2fbfcd46883eb43eca48d6373d4886ed10b5fa5b7606a477e82af63b8b3616ace4be6ac58215fc105218ff2e5d3c6abc0385e9e83f435279d5f83e655b313289139f6bc2bffb82500033b2023aa6c13d7abf4d156a6da44b9065f9d8ccebc24a4f3b7a4744d4ee33897bab504cf2810246240ab2a8cdf79a95474070a809e143ba0724397e04c23b6611b5c0d222176097ac4b3b29fd7054b977324686be33d2", 0xcd}], 0x1, 0xe7b, 0x0, 0x1) 0s ago: executing program 2 (id=2231): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) socketpair(0x10, 0x2, 0x4, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): NGE): ip6_vti0: link becomes ready [ 104.679099][ T3054] loop2: detected capacity change from 0 to 16 [ 104.773138][ T3054] /dev/loop2: Can't open blockdev [ 104.785193][ T3072] netlink: 11 bytes leftover after parsing attributes in process `syz.0.891'. [ 104.849562][ T3078] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 104.890814][ T3083] overlayfs: failed to clone upperpath [ 104.919784][ T3083] overlayfs: failed to clone upperpath [ 104.996277][ T3096] loop4: detected capacity change from 0 to 2048 [ 105.037592][ T3096] loop4: p1 p3 p4 [ 105.043433][ T3096] loop4: p4 size 589824 extends beyond EOD, truncated [ 105.138542][ T101] loop4: p1 p3 p4 [ 105.147118][ T101] loop4: p4 size 589824 extends beyond EOD, truncated [ 105.169282][ T3119] loop2: detected capacity change from 0 to 256 [ 105.414509][ T3119] FAT-fs (loop2): bogus number of FAT sectors [ 105.420709][ T3119] FAT-fs (loop2): Can't find a valid FAT filesystem [ 105.434409][ T351] udevd[351]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 105.446390][ T414] udevd[414]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 105.469858][ T414] udevd[414]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 105.469893][ T3122] udevd[3122]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 105.564119][ T3124] loop4: detected capacity change from 0 to 512 [ 105.659553][ T3124] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 106.003519][ T3142] bridge: RTM_NEWNEIGH with invalid ether address [ 106.012080][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 106.012094][ T30] audit: type=1400 audit(1768189871.133:858): avc: denied { execute } for pid=3139 comm="syz.5.915" name="cgroup" dev="tmpfs" ino=823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 106.050108][ T3129] loop4: detected capacity change from 0 to 40427 [ 106.087722][ T3129] F2FS-fs (loop4): user quota file already specified [ 106.111396][ T30] audit: type=1400 audit(1768189871.227:859): avc: denied { bind } for pid=3146 comm="syz.0.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.149099][ T30] audit: type=1400 audit(1768189871.227:860): avc: denied { name_bind } for pid=3146 comm="syz.0.918" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 106.170877][ T3141] bridge0: port 3(gretap0) entered blocking state [ 106.177310][ T3141] bridge0: port 3(gretap0) entered disabled state [ 106.212710][ T30] audit: type=1400 audit(1768189871.227:861): avc: denied { node_bind } for pid=3146 comm="syz.0.918" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 106.215263][ T3141] device gretap0 entered promiscuous mode [ 106.240986][ T30] audit: type=1400 audit(1768189871.245:862): avc: denied { block_suspend } for pid=3146 comm="syz.0.918" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.286555][ T3141] device gretap0 left promiscuous mode [ 106.297933][ T3141] bridge0: port 3(gretap0) entered disabled state [ 106.557879][ T30] audit: type=1400 audit(1768189871.648:863): avc: denied { read } for pid=3168 comm="syz.5.927" path="socket:[26772]" dev="sockfs" ino=26772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.684066][ T3160] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 106.693476][ T3160] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 106.705204][ T3160] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 107.028685][ T3167] loop2: detected capacity change from 0 to 40427 [ 107.039537][ T3184] syz.4.930[3184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.039905][ T3184] syz.4.930[3184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.053726][ T3183] loop4: detected capacity change from 0 to 256 [ 107.072263][ T3167] F2FS-fs (loop2): invalid crc value [ 107.080517][ T3167] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 107.110495][ T3167] F2FS-fs (loop2): write access unavailable, skipping recovery [ 107.118438][ T3167] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.521990][ T3208] loop2: detected capacity change from 0 to 256 [ 107.549636][ T3208] /dev/loop2: Can't open blockdev [ 107.674063][ T30] audit: type=1400 audit(1768189872.686:864): avc: denied { bind } for pid=3204 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.698978][ T3208] loop2: detected capacity change from 0 to 512 [ 107.866505][ T3224] loop2: detected capacity change from 0 to 16 [ 107.879895][ T3220] incfs_lookup_dentry err:-13 [ 107.889118][ T3220] incfs: Can't find or create .index dir in ./file0 [ 107.902471][ T3220] incfs: mount failed -13 [ 107.976131][ T3224] /dev/loop2: Can't open blockdev [ 108.077626][ T30] audit: type=1400 audit(1768189873.060:865): avc: denied { execute_no_trans } for pid=3240 comm="syz.5.945" path="/159/file0" dev="tmpfs" ino=872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.105717][ T30] audit: type=1400 audit(1768189873.060:866): avc: denied { write } for pid=3223 comm="syz.2.940" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.584941][ T3249] loop4: detected capacity change from 0 to 8192 [ 108.644235][ T3249] loop4: p1 p2 p4 < > [ 108.648501][ T3249] loop4: partition table partially beyond EOD, truncated [ 108.667414][ T3249] loop4: p1 start 16777216 is beyond EOD, truncated [ 108.683527][ T3249] loop4: p2 size 515840 extends beyond EOD, truncated [ 108.694801][ T3249] loop4: p4 start 16777216 is beyond EOD, truncated [ 108.814296][ T349] udevd[349]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 108.878104][ T3258] xt_bpf: check failed: parse error [ 108.928086][ T30] audit: type=1400 audit(1768189873.854:867): avc: denied { append } for pid=3267 comm="syz.4.952" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.008166][ T3268] device wg2 entered promiscuous mode [ 109.446843][ T3300] device veth1_macvtap left promiscuous mode [ 109.459596][ T3300] device macsec0 entered promiscuous mode [ 109.487783][ T3303] overlayfs: failed to clone upperpath [ 109.494429][ T3303] overlayfs: failed to clone lowerpath [ 109.710126][ T42] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 109.966712][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 110.024063][ T3321] SELinux: failed to load policy [ 110.105826][ T42] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 110.115057][ T42] usb 1-1: config 0 has no interface number 0 [ 110.184874][ T3326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.964'. [ 110.225308][ T3327] loop4: detected capacity change from 0 to 16 [ 110.255703][ T3327] erofs: Unknown parameter '0xffffffffffffffff' [ 110.287754][ T42] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 110.297265][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.326143][ T42] usb 1-1: Product: syz [ 110.334325][ T42] usb 1-1: Manufacturer: syz [ 110.339149][ T42] usb 1-1: SerialNumber: syz [ 110.351623][ T42] usb 1-1: config 0 descriptor?? [ 110.395154][ T42] asix: probe of 1-1:0.251 failed with error -22 [ 110.518856][ T3332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 110.528309][ T3332] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 110.611718][ T418] usb 1-1: USB disconnect, device number 16 [ 110.659844][ T3339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 111.385244][ T3348] 9pnet: Insufficient options for proto=fd [ 111.431646][ T3355] 9p: Unknown access argument ò’vÍ›©ünb}F4oá^:…çÈ^VXŠr'*´›pún˜cÐV [ 111.431646][ T3355] . [ 111.457936][ T3362] binfmt_misc: register: failed to install interpreter file ./file0 [ 111.551376][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 111.619284][ T3371] loop4: detected capacity change from 0 to 512 [ 111.894434][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 111.894450][ T30] audit: type=1326 audit(1768189876.632:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3378 comm="syz.5.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 111.896512][ T3375] loop2: detected capacity change from 0 to 1024 [ 111.930213][ T30] audit: type=1326 audit(1768189876.632:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3378 comm="syz.5.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 111.963572][ T30] audit: type=1326 audit(1768189876.678:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3378 comm="syz.5.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 111.990205][ T30] audit: type=1326 audit(1768189876.678:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3378 comm="syz.5.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 112.018233][ T30] audit: type=1326 audit(1768189876.678:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3378 comm="syz.5.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 112.042296][ T30] audit: type=1326 audit(1768189876.697:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3378 comm="syz.5.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 112.066876][ T30] audit: type=1326 audit(1768189876.697:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3378 comm="syz.5.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 112.092622][ T30] audit: type=1326 audit(1768189876.697:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3378 comm="syz.5.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 112.130798][ T3383] loop2: detected capacity change from 0 to 256 [ 112.141032][ T3383] exfat: Bad value for 'uid' [ 112.145910][ T30] audit: type=1326 audit(1768189876.697:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3378 comm="syz.5.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 112.169989][ T30] audit: type=1326 audit(1768189876.697:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3378 comm="syz.5.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 112.264308][ T3385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.979'. [ 112.284156][ T3385] syz.5.979[3385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.284591][ T3385] syz.5.979[3385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.506640][ T3383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'. [ 112.760527][ T3405] loop4: detected capacity change from 0 to 1024 [ 112.882648][ T3405] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 112.928375][ T3405] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.935492][ T3405] EXT4-fs warning (device loop4): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 112.950684][ T3405] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 113.089473][ T3405] EXT4-fs (loop4): 1 truncate cleaned up [ 113.209241][ T3405] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 114.000795][ T3422] device veth0_vlan left promiscuous mode [ 114.012709][ T3422] device veth0_vlan entered promiscuous mode [ 114.037701][ T3422] device veth1_macvtap left promiscuous mode [ 114.045095][ T3422] device veth1_macvtap entered promiscuous mode [ 114.060882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.084763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.100274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.109224][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.116642][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.125625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.134777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.143554][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.151280][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.165404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.184462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): 70: link becomes ready [ 114.200013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.217939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 114.226341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.238673][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.248044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.257025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.265373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.279362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.288636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.303076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.318209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.332406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.348057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.363045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.377720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.393673][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.408235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.416729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.424948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.433047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.455018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.469224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.490380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.514828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.534154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.654089][ T3445] loop4: detected capacity change from 0 to 512 [ 114.754173][ T3445] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2776: inode #11: comm syz.4.995: corrupted xattr block 95 [ 114.769992][ T3442] loop2: detected capacity change from 0 to 256 [ 114.777030][ T3445] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.995: bg 0: block 7: invalid block bitmap [ 114.795026][ T3445] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 114.811267][ T3445] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2942: inode #11: comm syz.4.995: corrupted xattr block 95 [ 114.825696][ T3445] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 114.837523][ T3445] EXT4-fs (loop4): 1 orphan inode deleted [ 114.849440][ T3445] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.094271][ T42] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 116.122742][ T3621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1072'. [ 116.351826][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 116.429827][ T3664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1091'. [ 116.440149][ T3664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1091'. [ 116.500754][ T42] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.523621][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.537656][ T42] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 116.557394][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.574787][ T42] usb 1-1: config 0 descriptor?? [ 117.102595][ T42] hid-generic 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 117.278575][ T30] kauditd_printk_skb: 230 callbacks suppressed [ 117.278591][ T30] audit: type=1326 audit(1768189881.663:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 117.310359][ T30] audit: type=1326 audit(1768189881.663:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 117.335204][ T30] audit: type=1326 audit(1768189881.681:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 117.360177][ T30] audit: type=1326 audit(1768189881.681:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 117.385793][ T30] audit: type=1326 audit(1768189881.681:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 117.410994][ T30] audit: type=1326 audit(1768189881.681:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 117.434931][ T30] audit: type=1326 audit(1768189881.681:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 117.458961][ T30] audit: type=1326 audit(1768189881.681:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 117.483823][ T30] audit: type=1326 audit(1768189881.681:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 117.507501][ T30] audit: type=1326 audit(1768189881.681:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc5236e7749 code=0x7ffc0000 [ 117.614142][ T1796] usb 1-1: USB disconnect, device number 17 [ 117.791056][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1160'. [ 118.802671][ T3892] loop4: detected capacity change from 0 to 512 [ 118.812616][ T3888] x_tables: duplicate underflow at hook 1 [ 118.911982][ T3892] EXT4-fs (loop4): 1 orphan inode deleted [ 118.928330][ T3892] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.949623][ T3892] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.700952][ T3901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1196'. [ 119.836178][ T3913] loop4: detected capacity change from 0 to 1024 [ 119.924899][ T3913] EXT4-fs (loop4): Ignoring removed orlov option [ 119.953658][ T3913] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: writeback. [ 120.372045][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 120.385966][ T3926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 120.407532][ T3926] overlayfs: unrecognized mount option "verity=require" or missing value [ 120.477419][ T3928] device veth0 entered promiscuous mode [ 121.189564][ T3924] device veth0 left promiscuous mode [ 121.269946][ T3956] 9pnet: Insufficient options for proto=fd [ 121.905751][ T3984] loop2: detected capacity change from 0 to 512 [ 122.096025][ T3983] loop4: detected capacity change from 0 to 40427 [ 122.571361][ T3980] syz.0.1217[3980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.571523][ T3980] syz.0.1217[3980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.625728][ T3980] syz.0.1217[3980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.654095][ T3983] loop4: detected capacity change from 0 to 40427 [ 122.660366][ T3980] syz.0.1217[3980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.679129][ T3983] F2FS-fs (loop4): Unrecognized mount option "0x0000000000000000" or missing value [ 122.738415][ T4004] device lo entered promiscuous mode [ 122.744650][ T4004] device tunl0 entered promiscuous mode [ 122.750917][ T4004] device gre0 entered promiscuous mode [ 122.758935][ T4004] device gretap0 entered promiscuous mode [ 122.765856][ T4004] device erspan0 entered promiscuous mode [ 122.772584][ T4004] device ip_vti0 entered promiscuous mode [ 122.779066][ T4004] device ip6_vti0 entered promiscuous mode [ 122.785895][ T4004] device sit0 entered promiscuous mode [ 122.792945][ T4004] device ip6tnl0 entered promiscuous mode [ 122.799959][ T4004] device ip6gre0 entered promiscuous mode [ 122.806613][ T4004] device syz_tun entered promiscuous mode [ 122.813215][ T4004] device ip6gretap0 entered promiscuous mode [ 122.820371][ T4004] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.827672][ T4004] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.835268][ T4004] device bridge0 entered promiscuous mode [ 122.842900][ T4004] device dummy0 entered promiscuous mode [ 122.849702][ T4004] device veth0 entered promiscuous mode [ 122.856613][ T4004] device veth1 entered promiscuous mode [ 122.863368][ T4004] device wg0 entered promiscuous mode [ 122.870134][ T4004] device wg1 entered promiscuous mode [ 122.876392][ T4004] device wg2 entered promiscuous mode [ 122.882569][ T4004] device veth0_to_bridge entered promiscuous mode [ 122.890739][ T4004] device veth1_to_bridge entered promiscuous mode [ 122.898684][ T4004] device veth0_to_bond entered promiscuous mode [ 122.905772][ T4004] device 70 entered promiscuous mode [ 122.912309][ T4004] device veth1_to_bond entered promiscuous mode [ 122.919603][ T4004] device bond_slave_1 entered promiscuous mode [ 122.926803][ T4004] device veth0_to_team entered promiscuous mode [ 122.934362][ T4004] device team_slave_0 entered promiscuous mode [ 122.941430][ T4004] device veth1_to_team entered promiscuous mode [ 122.949364][ T4004] device team_slave_1 entered promiscuous mode [ 122.958272][ T4004] device veth0_to_batadv entered promiscuous mode [ 122.966433][ T4004] device batadv_slave_0 entered promiscuous mode [ 122.974668][ T4004] device veth1_to_batadv entered promiscuous mode [ 122.982779][ T4004] device batadv_slave_1 entered promiscuous mode [ 122.990800][ T4004] device xfrm0 entered promiscuous mode [ 122.998190][ T4004] device veth0_to_hsr entered promiscuous mode [ 123.011105][ T4004] device hsr_slave_0 entered promiscuous mode [ 123.020887][ T4004] device veth1_to_hsr entered promiscuous mode [ 123.029510][ T4004] device hsr_slave_1 entered promiscuous mode [ 123.450436][ T4004] device veth1_virt_wifi entered promiscuous mode [ 123.458639][ T4004] device veth0_virt_wifi entered promiscuous mode [ 123.466135][ T4004] device veth1_vlan entered promiscuous mode [ 123.475453][ T4004] device vlan0 entered promiscuous mode [ 123.481299][ T4004] device vlan1 entered promiscuous mode [ 123.488219][ T4004] device veth0_macvtap entered promiscuous mode [ 123.495549][ T4004] device macsec0 entered promiscuous mode [ 123.502718][ T4004] device syztnl2 entered promiscuous mode [ 123.509377][ T4004] device syztnl1 entered promiscuous mode [ 123.516128][ T4004] device sit1 entered promiscuous mode [ 123.558579][ T42] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 123.994054][ T4017] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1226'. [ 124.277458][ T42] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 124.287138][ T42] usb 1-1: config 0 has no interface number 0 [ 124.293810][ T42] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 124.306175][ T42] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x84 has invalid maxpacket 19479, setting to 64 [ 125.002259][ T42] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 125.013835][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 125.013850][ T30] audit: type=1400 audit(1768189888.901:1357): avc: denied { connect } for pid=4025 comm="syz.1.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.040285][ T42] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 125.051602][ T42] usb 1-1: Product: syz [ 125.056270][ T42] usb 1-1: SerialNumber: syz [ 125.067620][ T30] audit: type=1400 audit(1768189888.947:1358): avc: denied { mounton } for pid=4031 comm="wg1" path="/321/file0" dev="tmpfs" ino=1713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 125.099574][ T4027] netlink: 'syz.4.1229': attribute type 27 has an invalid length. [ 125.115715][ T4027] bridge0: port 3(gretap0) entered disabled state [ 125.123426][ T42] usb 1-1: config 0 descriptor?? [ 125.141294][ T4007] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.169789][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.177386][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.209949][ T4027] device wg2 left promiscuous mode [ 125.432356][ T4029] bridge0: port 3(gretap0) entered blocking state [ 125.439280][ T4029] bridge0: port 3(gretap0) entered forwarding state [ 125.442170][ T42] usb 1-1: USB disconnect, device number 18 [ 125.469314][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.477067][ T4029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.486774][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.494194][ T4029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.506998][ T4029] device veth0_vlan left promiscuous mode [ 125.513003][ T4029] device veth0_vlan entered promiscuous mode [ 125.521090][ T4029] device veth1_macvtap left promiscuous mode [ 125.528654][ T4029] device veth1_macvtap entered promiscuous mode [ 125.536039][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.544078][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.553349][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.562977][ T30] audit: type=1326 audit(1768189889.415:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4051 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ce3bb749 code=0x7ffc0000 [ 125.590701][ T30] audit: type=1326 audit(1768189889.443:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4051 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f83ce3bb749 code=0x7ffc0000 [ 125.622017][ T30] audit: type=1326 audit(1768189889.443:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4051 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ce3bb749 code=0x7ffc0000 [ 125.634341][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.648141][ T30] audit: type=1326 audit(1768189889.443:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4051 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ce3bb749 code=0x7ffc0000 [ 125.660937][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.696027][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.706474][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.718194][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.728923][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.799072][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 125.807954][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.817986][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 125.827996][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.852171][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.910014][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.920060][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.929529][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.939662][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.956940][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.969012][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.991606][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.222672][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 126.242492][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 126.253766][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 126.261417][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 126.261972][ T4071] loop2: detected capacity change from 0 to 40427 [ 126.269725][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 126.286968][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 126.295316][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 126.309271][ T4049] device veth1_macvtap entered promiscuous mode [ 126.326705][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 126.335795][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.347267][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 126.365010][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.381166][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.398171][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.409658][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.421883][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.433621][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.610866][ T4094] overlayfs: failed to clone upperpath [ 126.882902][ T4127] loop2: detected capacity change from 0 to 512 [ 127.003960][ T4127] loop2: detected capacity change from 0 to 16 [ 127.083682][ T30] audit: type=1400 audit(1768189890.836:1363): avc: denied { write } for pid=4130 comm="syz.2.1262" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.084376][ T4131] input: syz1 as /devices/virtual/input/input6 [ 127.117541][ T30] audit: type=1400 audit(1768189890.836:1364): avc: denied { ioctl } for pid=4130 comm="syz.2.1262" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.165633][ T30] audit: type=1400 audit(1768189890.911:1365): avc: denied { map } for pid=4132 comm="syz.2.1263" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.296456][ T4154] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 127.305994][ T4154] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 128.496382][ T30] audit: type=1400 audit(1768189892.155:1366): avc: denied { create } for pid=4189 comm="syz.5.1287" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.662308][ T4200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1290'. [ 128.687678][ T4202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'. [ 128.710841][ T4204] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1294'. [ 129.431224][ T4227] Invalid ELF header type: 3 != 1 [ 130.478146][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 130.478162][ T30] audit: type=1400 audit(1768189894.016:1376): avc: denied { write } for pid=4251 comm="syz.5.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.583888][ T30] audit: type=1400 audit(1768189894.100:1377): avc: denied { write } for pid=4255 comm="syz.5.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.660531][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1315'. [ 130.999787][ T4288] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1326'. [ 131.159312][ T26] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 131.323123][ T30] audit: type=1400 audit(1768189894.745:1378): avc: denied { setopt } for pid=4296 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.482644][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 131.501206][ T4302] loop4: detected capacity change from 0 to 256 [ 131.611031][ T26] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 131.621345][ T26] usb 3-1: config 0 has no interface number 0 [ 131.629446][ T26] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.643318][ T4302] exfat: Deprecated parameter 'namecase' [ 131.655677][ T26] usb 3-1: config 0 interface 85 has no altsetting 0 [ 131.665006][ T4302] exfat: Deprecated parameter 'namecase' [ 131.743637][ T4302] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 131.801093][ T30] audit: type=1400 audit(1768189895.241:1379): avc: denied { watch watch_reads } for pid=4301 comm="syz.4.1331" path="/111/file0/file1" dev="loop4" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.830807][ T42] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 131.882639][ T26] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 131.892854][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.901845][ T26] usb 3-1: Product: syz [ 131.906310][ T26] usb 3-1: Manufacturer: syz [ 131.911638][ T26] usb 3-1: SerialNumber: syz [ 131.916824][ T26] usb 3-1: config 0 descriptor?? [ 132.102922][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 132.252642][ T42] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 132.261632][ T42] usb 1-1: config 0 has no interface number 0 [ 132.268250][ T42] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.280849][ T42] usb 1-1: config 0 interface 85 has no altsetting 0 [ 132.447774][ T26] usb 3-1: USB disconnect, device number 16 [ 132.520321][ T42] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 132.544158][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.556746][ T42] usb 1-1: Product: syz [ 132.561017][ T42] usb 1-1: Manufacturer: syz [ 132.568567][ T42] usb 1-1: SerialNumber: syz [ 133.078896][ T42] usb 1-1: config 0 descriptor?? [ 133.926943][ T4327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1342'. [ 133.937067][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 134.056530][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 134.065784][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 134.074427][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 134.075371][ T42] usb 1-1: USB disconnect, device number 19 [ 134.091531][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 134.102359][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 134.352605][ T30] audit: type=1400 audit(1768189897.466:1380): avc: denied { write } for pid=4351 comm="syz.4.1351" path="socket:[30891]" dev="sockfs" ino=30891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.372876][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 134.397741][ T4327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1342'. [ 134.410233][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 134.418956][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 134.430285][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 134.440143][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 134.458851][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 134.469128][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 134.478223][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 135.489533][ T30] audit: type=1400 audit(1768189898.691:1381): avc: denied { execute } for pid=4402 comm="syz.4.1370" name="file0" dev="ramfs" ino=30956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 135.516795][ T30] audit: type=1400 audit(1768189898.691:1382): avc: denied { execute_no_trans } for pid=4402 comm="syz.4.1370" path="/file0" dev="ramfs" ino=30956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 135.533493][ T4407] loop4: detected capacity change from 0 to 128 [ 135.557489][ T4410] loop2: detected capacity change from 0 to 512 [ 135.584996][ T4407] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.597881][ T4407] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.631877][ T1796] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 135.640682][ T4407] fscrypt (loop4, inode 12): Mutually exclusive encryption flags (0x19) [ 135.723117][ T4418] loop4: detected capacity change from 0 to 128 [ 135.747892][ T4421] loop2: detected capacity change from 0 to 128 [ 135.753524][ T4418] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 135.772068][ T4418] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.789307][ T30] audit: type=1400 audit(1768189898.972:1383): avc: denied { setattr } for pid=4417 comm="syz.4.1376" path="/124/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 135.986283][ T30] audit: type=1400 audit(1768189899.140:1384): avc: denied { mount } for pid=4425 comm="syz.4.1378" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 136.019459][ T4428] loop4: detected capacity change from 0 to 512 [ 136.047671][ T4428] EXT4-fs (loop4): Unrecognized mount option "uid<00000000000000000000" or missing value [ 136.189438][ T30] audit: type=1400 audit(1768189899.355:1385): avc: denied { append } for pid=4427 comm="syz.4.1380" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.200977][ T1796] usb 1-1: Using ep0 maxpacket: 32 [ 136.224823][ T30] audit: type=1400 audit(1768189899.383:1386): avc: denied { map } for pid=4427 comm="syz.4.1380" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.380474][ T1796] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 136.399533][ T1796] usb 1-1: config 0 has no interface number 0 [ 136.407003][ T1796] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.421366][ T1796] usb 1-1: config 0 interface 85 has no altsetting 0 [ 136.957991][ T1794] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 137.022138][ T1796] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 137.033048][ T1796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.042129][ T1796] usb 1-1: Product: syz [ 137.047564][ T1796] usb 1-1: Manufacturer: syz [ 137.052633][ T1796] usb 1-1: SerialNumber: syz [ 137.059152][ T1796] usb 1-1: config 0 descriptor?? [ 137.075823][ T42] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 137.437901][ T1794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.449577][ T1794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.459716][ T1794] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.460549][ T42] usb 3-1: device descriptor read/64, error -71 [ 137.473428][ T1794] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.489611][ T1794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.498851][ T1794] usb 5-1: config 0 descriptor?? [ 137.580772][ T1796] usb 1-1: USB disconnect, device number 20 [ 137.920332][ T42] usb 3-1: device descriptor read/64, error -71 [ 138.017411][ T1794] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 138.026099][ T1794] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 138.035942][ T1794] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 138.250536][ T42] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 138.361152][ T625] usb 5-1: USB disconnect, device number 15 [ 138.540618][ T42] usb 3-1: device descriptor read/64, error -71 [ 138.984541][ T4563] loop4: detected capacity change from 0 to 4096 [ 139.181677][ T4563] EXT4-fs (loop4): Test dummy encryption mode enabled [ 139.192996][ T1788] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 139.193932][ T4563] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 139.211743][ T30] audit: type=1400 audit(1768189902.170:1387): avc: denied { read } for pid=4577 comm="syz.5.1418" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.211989][ T4563] System zones: 0-5 [ 139.252422][ T4563] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 139.546724][ T4654] /dev/loop0: Can't open blockdev [ 139.668341][ T4645] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 139.833221][ T4664] loop4: detected capacity change from 0 to 128 [ 139.877316][ T42] usb 3-1: device descriptor read/64, error -71 [ 139.880562][ T4664] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.895956][ T4664] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.930867][ T1788] usb 1-1: Using ep0 maxpacket: 16 [ 140.027850][ T42] usb usb3-port1: attempt power cycle [ 140.069927][ T1788] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 140.079486][ T1788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.292814][ T1788] usb 1-1: config 0 has no interface number 0 [ 141.300105][ T1788] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 141.309805][ T1788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.337144][ T1788] usb 1-1: config 0 descriptor?? [ 141.386174][ T1788] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 141.617124][ T1788] usb 1-1: No valid video chain found. [ 141.640861][ T4692] loop4: detected capacity change from 0 to 512 [ 141.661166][ T1788] usb 1-1: USB disconnect, device number 21 [ 141.758781][ T4692] [EXT4 FS bs=1024, gc=1, bpg=255, ipg=32, mo=8802c018, mo2=0000] [ 141.768289][ T4692] EXT4-fs (loop4): orphan cleanup on readonly fs [ 141.777035][ T4692] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1434: invalid indirect mapped block 28777 (level 2) [ 141.793154][ T4692] EXT4-fs (loop4): 1 truncate cleaned up [ 141.799673][ T4692] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,debug,,errors=continue. Quota mode: none. [ 141.863663][ T30] audit: type=1400 audit(1768189904.657:1388): avc: denied { remount } for pid=4691 comm="syz.4.1434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 141.863718][ T4692] EXT4-fs (loop4): Ignoring removed bh option [ 141.891481][ T4692] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 141.903827][ T4692] [EXT4 FS bs=1024, gc=1, bpg=255, ipg=32, mo=a006c018, mo2=0000] [ 141.913241][ T4692] System zones: 1-12 [ 142.061632][ T4692] EXT4-fs (loop4): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,bh,block_validity,quota,. Quota mode: writeback. [ 142.311227][ T30] audit: type=1400 audit(1768189905.069:1389): avc: denied { write } for pid=4719 comm="syz.0.1445" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 142.769458][ T4736] overlayfs: failed to clone upperpath [ 142.776316][ T4736] overlayfs: failed to clone upperpath [ 143.171876][ T4744] overlayfs: failed to clone upperpath [ 143.192349][ T4746] overlayfs: failed to clone upperpath [ 143.234013][ T30] audit: type=1400 audit(1768189905.929:1390): avc: denied { read } for pid=4741 comm="syz.2.1452" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 143.275790][ T30] audit: type=1400 audit(1768189905.929:1391): avc: denied { open } for pid=4741 comm="syz.2.1452" path="/310/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 143.356331][ T4750] overlayfs: failed to clone upperpath [ 143.363320][ T4750] overlayfs: failed to clone upperpath [ 143.373097][ T4756] overlayfs: unrecognized mount option "verity=require" or missing value [ 143.542907][ T4773] overlayfs: failed to clone upperpath [ 143.825645][ T4806] netlink: 'syz.2.1479': attribute type 1 has an invalid length. [ 143.834668][ T30] audit: type=1400 audit(1768189906.499:1392): avc: denied { append } for pid=4805 comm="syz.2.1479" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.865970][ T30] audit: type=1400 audit(1768189906.499:1393): avc: denied { open } for pid=4805 comm="syz.2.1479" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.920538][ T30] audit: type=1400 audit(1768189906.499:1394): avc: denied { ioctl } for pid=4805 comm="syz.2.1479" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 144.850260][ T4816] loop4: detected capacity change from 0 to 512 [ 144.937015][ T4816] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 144.948774][ T4816] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 144.966572][ T4816] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1481: attempt to clear invalid blocks 2 len 1 [ 144.987349][ T4816] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 145.005712][ T4816] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1481: invalid indirect mapped block 1819239214 (level 0) [ 145.020701][ T4816] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1481: invalid indirect mapped block 1819239214 (level 1) [ 145.036519][ T4816] EXT4-fs (loop4): 1 truncate cleaned up [ 145.043048][ T4816] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 145.653135][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 145.663200][ T4826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4826 comm=syz.0.1484 [ 145.677697][ T4825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4825 comm=syz.0.1484 [ 146.734339][ T30] audit: type=1400 audit(1768189909.211:1395): avc: denied { read write } for pid=4849 comm="syz.0.1491" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 146.796297][ T30] audit: type=1400 audit(1768189909.277:1396): avc: denied { open } for pid=4849 comm="syz.0.1491" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.430466][ T30] audit: type=1326 audit(1768189909.866:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.4.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ce3bb749 code=0x7ffc0000 [ 147.491308][ T30] audit: type=1326 audit(1768189909.903:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.4.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f83ce3bb749 code=0x7ffc0000 [ 147.566291][ T30] audit: type=1326 audit(1768189909.903:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83ce3ee005 code=0x7ffc0000 [ 147.596440][ T4869] netlink: 'syz.4.1494': attribute type 12 has an invalid length. [ 147.638207][ T30] audit: type=1326 audit(1768189909.903:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.4.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ce3bb749 code=0x7ffc0000 [ 147.691634][ T30] audit: type=1326 audit(1768189909.903:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.4.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f83ce3bb749 code=0x7ffc0000 [ 147.756746][ T30] audit: type=1326 audit(1768189910.053:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.4.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f83ce3bb749 code=0x7ffc0000 [ 148.331402][ T4885] loop4: detected capacity change from 0 to 512 [ 148.467862][ T4885] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 148.563865][ T4885] EXT4-fs (loop4): orphan cleanup on readonly fs [ 148.593287][ T4885] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1500: bad orphan inode 15 [ 148.748295][ T4885] ext4_test_bit(bit=14, block=18) = 1 [ 148.754396][ T4885] is_bad_inode(inode)=0 [ 148.759188][ T4885] NEXT_ORPHAN(inode)=1023 [ 148.764631][ T4885] max_ino=32 [ 148.768013][ T4885] i_nlink=0 [ 148.783765][ T4885] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2942: inode #15: comm syz.4.1500: corrupted xattr block 19 [ 148.827383][ T4885] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 148.886600][ T4885] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.091707][ T4848] loop2: detected capacity change from 0 to 131072 [ 149.223911][ T30] audit: type=1326 audit(1768189911.530:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 149.290866][ T30] audit: type=1326 audit(1768189911.530:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 149.497061][ T4848] 9pnet: p9_fd_create_tcp (4848): problem connecting socket to 127.0.0.1 [ 149.624022][ T30] audit: type=1326 audit(1768189911.530:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 149.678224][ T4901] loop2: detected capacity change from 0 to 1024 [ 149.705202][ T30] audit: type=1326 audit(1768189911.530:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 152.526993][ T4933] loop4: detected capacity change from 0 to 40427 [ 152.560325][ T4933] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 152.567949][ T4933] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 152.603397][ T4933] F2FS-fs (loop4): invalid crc value [ 152.640416][ T4933] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 152.727977][ T4933] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 152.739907][ T4933] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.766082][ T4933] attempt to access beyond end of device [ 152.766082][ T4933] loop4: rw=10241, want=53256, limit=40427 [ 152.854909][ T4933] attempt to access beyond end of device [ 152.854909][ T4933] loop4: rw=2049, want=53304, limit=40427 [ 152.890162][ T4933] attempt to access beyond end of device [ 152.890162][ T4933] loop4: rw=2049, want=53320, limit=40427 [ 153.208006][ T1950] attempt to access beyond end of device [ 153.208006][ T1950] loop4: rw=2049, want=45104, limit=40427 [ 153.305652][ T4959] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.822096][ T625] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 154.260844][ T625] usb 5-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 154.420949][ T625] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.428952][ T625] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 154.504734][ T625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.519324][ T625] usb 5-1: config 0 descriptor?? [ 154.615776][ T4992] netlink: 'syz.5.1533': attribute type 27 has an invalid length. [ 154.670493][ T4992] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.678237][ T4992] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.741540][ T4992] device macsec0 left promiscuous mode [ 154.758605][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 154.772762][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 154.793760][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 154.806583][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 154.827867][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 154.849178][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 154.857274][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 154.908475][ T4993] device veth0_vlan left promiscuous mode [ 154.924127][ T4993] device veth0_vlan entered promiscuous mode [ 154.942609][ T4993] device veth1_macvtap left promiscuous mode [ 154.953131][ T4993] device veth1_macvtap entered promiscuous mode [ 154.973441][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.981914][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.006963][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.015944][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.023609][ T4617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.033779][ T625] nintendo 0003:057E:2009.0009: unknown main item tag 0x0 [ 155.036958][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.054007][ T625] nintendo 0003:057E:2009.0009: unknown main item tag 0x0 [ 155.072016][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.082290][ T625] nintendo 0003:057E:2009.0009: hidraw0: USB HID v0.fd Device [HID 057e:2009] on usb-dummy_hcd.4-1/input0 [ 155.085861][ T5008] overlayfs: failed to clone upperpath [ 155.105655][ T4617] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.113232][ T4617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.123581][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.136152][ T5008] overlayfs: failed to clone upperpath [ 155.146210][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 155.151332][ T5014] syz.0.1540[5014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.154512][ T5014] syz.0.1540[5014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.155178][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.207035][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 155.217491][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.226793][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.236475][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.245561][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.256816][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.266097][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.286710][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.297773][ T625] nintendo 0003:057E:2009.0009: Failed to read stick cal, using defaults; ret=-71 [ 155.301238][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.318579][ T625] nintendo 0003:057E:2009.0009: Analog stick positions may be inaccurate [ 155.329095][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.351342][ T625] nintendo 0003:057E:2009.0009: Failed to set report mode; ret=-71 [ 155.351953][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.364077][ T625] nintendo 0003:057E:2009.0009: probe - fail = -71 [ 155.384699][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.393179][ T625] nintendo: probe of 0003:057E:2009.0009 failed with error -71 [ 155.402433][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.412194][ T625] usb 5-1: USB disconnect, device number 16 [ 155.428893][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.438024][ T5036] fido_id[5036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 155.448568][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.485802][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.503804][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.522593][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.539454][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.556752][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.574476][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.591798][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.600527][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.633561][ T5030] loop2: detected capacity change from 0 to 40427 [ 155.642015][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 155.642028][ T30] audit: type=1400 audit(1768189917.543:1428): avc: denied { map } for pid=5052 comm="syz.0.1549" path="socket:[33035]" dev="sockfs" ino=33035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 155.738860][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 155.751995][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 155.761893][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 155.773382][ T5061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5061 comm=syz.0.1552 [ 155.787797][ T5061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 155.815898][ T30] audit: type=1400 audit(1768189917.702:1429): avc: denied { mounton } for pid=5063 comm="syz.0.1553" path="/213/file0" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.841856][ T30] audit: type=1400 audit(1768189917.702:1430): avc: denied { read } for pid=5063 comm="syz.0.1553" name="file0" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.903843][ T30] audit: type=1400 audit(1768189917.702:1431): avc: denied { open } for pid=5063 comm="syz.0.1553" path="/213/file0" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.948882][ T30] audit: type=1400 audit(1768189917.702:1432): avc: denied { ioctl } for pid=5063 comm="syz.0.1553" path="/213/file0" dev="tmpfs" ino=1177 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.973684][ T1794] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 156.087825][ T5073] loop4: detected capacity change from 0 to 40427 [ 156.110036][ T30] audit: type=1400 audit(1768189917.973:1433): avc: denied { write } for pid=5082 comm="syz.1.1558" path="socket:[32375]" dev="sockfs" ino=32375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.134388][ T30] audit: type=1400 audit(1768189917.973:1434): avc: denied { read } for pid=5082 comm="syz.1.1558" path="socket:[32374]" dev="sockfs" ino=32374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.137817][ T5073] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 156.166512][ T5073] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 156.181730][ T5073] F2FS-fs (loop4): invalid crc value [ 156.189283][ T5073] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.212275][ T5073] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 156.221870][ T5073] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.238461][ T30] audit: type=1400 audit(1768189918.095:1435): avc: denied { mounton } for pid=5072 comm="syz.4.1556" path="/155/bus/file0" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 156.258302][ T1950] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 156.263257][ T1950] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 156.263896][ T30] audit: type=1400 audit(1768189918.104:1436): avc: denied { write } for pid=5072 comm="syz.4.1556" name="bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 156.271617][ T1950] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 156.302736][ T1950] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 156.308211][ T30] audit: type=1400 audit(1768189918.104:1437): avc: denied { add_name } for pid=5072 comm="syz.4.1556" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 156.342794][ T1950] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 156.343052][ T1950] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 156.352389][ T1950] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 156.356729][ T1794] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 156.378368][ T1794] usb 3-1: config 1 has no interface number 0 [ 156.384854][ T1794] usb 3-1: config 1 interface 105 has no altsetting 0 [ 156.559951][ T1794] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 156.573465][ T1794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.582087][ T1794] usb 3-1: Product: syz [ 156.586407][ T1794] usb 3-1: Manufacturer: syz [ 156.591023][ T1794] usb 3-1: SerialNumber: syz [ 156.795633][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 156.804093][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.813350][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 156.824109][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.833502][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.837796][ T418] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 156.843277][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.860284][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.870499][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.879104][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.960842][ T5102] SELinux: security_context_str_to_sid(±¸­šõïÿ3ÏlÞù‡Æ‘h.ù‡æ’h.ù‡æ’h.ù‡æ’h.ù‡æ’h®óù) failed for (dev ?, type ?) errno=-22 [ 156.977539][ T5102] SELinux: security_context_str_to_sid(±¸­šõïÿ3ÏlÞù‡Æ‘h.ù‡æ’h.ù‡æ’h.ù‡æ’h.ù‡æ’h®óù) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 157.105021][ T418] usb 5-1: Using ep0 maxpacket: 8 [ 157.297966][ T418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.317933][ T418] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 157.341905][ T418] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 157.373306][ T418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.402098][ T418] usb 5-1: config 0 descriptor?? [ 157.919029][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 157.932024][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 157.950649][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 157.969770][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 157.991174][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 158.009085][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 158.023232][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 158.038436][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 158.054333][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 158.069852][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 158.087664][ T418] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 158.113963][ T418] saitek 0003:06A3:0621.000A: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0 [ 158.147949][ T418] usb 5-1: USB disconnect, device number 17 [ 158.178581][ T5131] fido_id[5131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 158.291879][ T5133] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1572'. [ 158.670193][ T5144] fuse: Unknown parameter '0xffffffffffffffff' [ 158.924038][ T1794] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 158.956414][ T1794] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 158.988176][ T1794] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 06:59:c4:67:07:b2 [ 159.010755][ T1794] usb 3-1: USB disconnect, device number 20 [ 159.041110][ T1794] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 159.106497][ T5146] loop2: detected capacity change from 0 to 40427 [ 159.117187][ T1794] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 159.137444][ T1794] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 159.157144][ T1794] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 159.292733][ T5148] loop4: detected capacity change from 0 to 40427 [ 159.324349][ T5148] F2FS-fs (loop4): invalid crc value [ 159.332884][ T5178] netlink: 'syz.2.1580': attribute type 12 has an invalid length. [ 159.345942][ T5148] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.380362][ T5148] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 160.987370][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.464180][ T5227] loop4: detected capacity change from 0 to 1024 [ 161.556995][ T5227] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 161.584441][ T5227] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.618614][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 162.467536][ T5245] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1599'. [ 165.153093][ T5304] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 166.088164][ T5312] syz.4.1617[5312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.088246][ T5312] syz.4.1617[5312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.463767][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 166.463786][ T30] audit: type=1400 audit(1768192505.372:1462): avc: denied { mounton } for pid=5310 comm="syz.2.1619" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 166.556585][ T30] audit: type=1400 audit(1768192505.746:1463): avc: denied { getopt } for pid=5318 comm="syz.1.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.169825][ T5313] 9pnet: p9_fd_create_tcp (5313): problem connecting socket to 127.0.0.1 [ 167.664599][ T30] audit: type=1400 audit(1768192506.784:1464): avc: denied { ioctl } for pid=5329 comm="syz.0.1624" path="socket:[33805]" dev="sockfs" ino=33805 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.698655][ T4601] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.787825][ T5328] loop2: detected capacity change from 0 to 40427 [ 167.832873][ T5328] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 167.841410][ T5328] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 167.864503][ T5328] F2FS-fs (loop2): invalid crc value [ 167.883537][ T5328] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 167.913565][ T5328] F2FS-fs (loop2): write access unavailable, skipping recovery [ 167.921275][ T5328] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 167.929022][ T5328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.154323][ T5354] loop2: detected capacity change from 0 to 128 [ 168.670034][ T5369] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.922081][ T5377] fuse: Bad value for 'fd' [ 169.468614][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.886122][ T5394] loop2: detected capacity change from 0 to 128 [ 169.886202][ T1794] Bluetooth: hci0: command 0x1003 tx timeout [ 169.961117][ T5341] Bluetooth: hci0: sending frame failed (-49) [ 172.121032][ T1796] Bluetooth: hci0: command 0x1001 tx timeout [ 172.127895][ T5341] Bluetooth: hci0: sending frame failed (-49) [ 172.668656][ T5430] loop4: detected capacity change from 0 to 40427 [ 172.722164][ T5430] F2FS-fs (loop4): fault_type options not supported [ 172.729927][ T5430] F2FS-fs (loop4): invalid crc value [ 172.736666][ T5430] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.757998][ T5430] F2FS-fs (loop4): Start checkpoint disabled! [ 172.765156][ T5430] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 172.805564][ T5438] device veth0_vlan left promiscuous mode [ 172.812254][ T5438] device veth0_vlan entered promiscuous mode [ 172.819968][ T5438] device veth1_macvtap left promiscuous mode [ 172.827873][ T5438] device veth1_macvtap entered promiscuous mode [ 172.845220][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.854306][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.863142][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.881395][ T4642] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.888949][ T4642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.902061][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.913138][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.922864][ T4642] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.930247][ T4642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.982271][ T5444] attempt to access beyond end of device [ 172.982271][ T5444] loop4: rw=2049, want=77960, limit=40427 [ 173.234180][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.359269][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 173.616170][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.634700][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 173.653684][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.918781][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.933696][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.944640][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.954039][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.962698][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.966693][ T4617] attempt to access beyond end of device [ 173.966693][ T4617] loop4: rw=2049, want=40976, limit=40427 [ 173.972241][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.993344][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.002511][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.011574][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.020098][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.028531][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.037215][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.045905][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.058888][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.068930][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.078040][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.087554][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.097191][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.113027][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.122033][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.130429][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.382991][ T1796] Bluetooth: hci0: command 0x1009 tx timeout [ 175.106938][ T5475] loop2: detected capacity change from 0 to 1024 [ 176.197551][ T5481] netlink: 'syz.4.1675': attribute type 12 has an invalid length. [ 176.712110][ T5493] syz.5.1678[5493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.712385][ T5493] syz.5.1678[5493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.726677][ T5493] netlink: 'syz.5.1678': attribute type 4 has an invalid length. [ 176.755551][ T5493] netlink: 'syz.5.1678': attribute type 4 has an invalid length. [ 176.783009][ T5494] loop4: detected capacity change from 0 to 512 [ 176.833992][ T5494] EXT4-fs (loop4): Test dummy encryption mode enabled [ 176.849782][ T5494] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 176.917203][ T5494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0002] [ 176.930033][ T5494] EXT4-fs (loop4): orphan cleanup on readonly fs [ 176.938747][ T5494] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1676: bg 0: block 361: padding at end of block bitmap is not set [ 176.958449][ T5494] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 176.969368][ T5494] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1676: attempt to clear invalid blocks 33619980 len 1 [ 176.988357][ T5494] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1676: invalid indirect mapped block 1811939328 (level 0) [ 177.020005][ T5494] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1676: invalid indirect mapped block 2185560079 (level 1) [ 177.045521][ T5494] EXT4-fs (loop4): 1 truncate cleaned up [ 177.053103][ T5494] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000006,noblock_validity,dioread_lock,test_dummy_encryption=v1,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 177.699032][ T5504] device bridge0 entered promiscuous mode [ 177.707065][ T5504] device macsec1 entered promiscuous mode [ 177.715412][ T5504] bridge0: port 3(macsec1) entered blocking state [ 177.722901][ T5504] bridge0: port 3(macsec1) entered disabled state [ 177.731476][ T5504] device bridge0 left promiscuous mode [ 177.740454][ T5511] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 177.752225][ T5511] 9pnet: p9_fd_create_tcp (5511): problem connecting socket to 127.0.0.1 [ 177.873072][ T5510] loop4: detected capacity change from 0 to 40427 [ 177.901605][ T5510] F2FS-fs (loop4): invalid crc value [ 177.908891][ T5510] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.028681][ T5510] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 178.067674][ T625] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 178.530451][ T625] usb 3-1: Using ep0 maxpacket: 16 [ 178.664256][ T1950] attempt to access beyond end of device [ 178.664256][ T1950] loop4: rw=2049, want=45104, limit=40427 [ 178.752276][ T625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.765135][ T625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.781853][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 178.785743][ T625] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.810041][ T625] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 178.824633][ T625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.836038][ T625] usb 3-1: config 0 descriptor?? [ 179.083614][ T1794] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 179.458428][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.468152][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.476212][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.485094][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.496530][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.532294][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.547556][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.557150][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.575339][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.586028][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.595344][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.612683][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.622831][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.636882][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.646867][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.656886][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.675305][ T1794] usb 5-1: too many configurations: 180, using maximum allowed: 8 [ 179.684227][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.704364][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.713041][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.722999][ T625] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 179.733428][ T625] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 179.781459][ T625] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 179.794896][ T625] microsoft 0003:045E:07DA.000B: no inputs found [ 179.803068][ T625] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 179.823354][ T625] usb 3-1: USB disconnect, device number 21 [ 179.981988][ T1794] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 179.997963][ T1794] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 180.013866][ T5535] fido_id[5535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 180.292173][ T1794] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 180.302770][ T1794] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 180.351240][ T5548] syz.2.1694[5548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.351314][ T5548] syz.2.1694[5548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.686955][ T1794] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 180.709557][ T1794] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 180.966046][ T1794] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 180.984600][ T1794] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 181.438064][ T5572] overlayfs: failed to clone upperpath [ 181.677003][ T1794] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 181.690307][ T1794] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 181.738258][ T42] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 181.805022][ T5577] bridge0: port 3(gretap0) entered blocking state [ 181.813077][ T5577] bridge0: port 3(gretap0) entered disabled state [ 181.960656][ T1794] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 181.976957][ T1794] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 182.001394][ T5581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.010295][ T5581] IPv6: NLM_F_CREATE should be set when creating new route [ 183.104132][ T1794] usb 5-1: unable to read config index 6 descriptor/start: -71 [ 183.132114][ T5588] loop4: detected capacity change from 0 to 256 [ 183.157680][ T1794] usb 5-1: can't read configurations, error -71 [ 183.169150][ T42] usb 1-1: config 0 has an invalid interface number: 166 but max is 0 [ 183.177780][ T42] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 183.193051][ T5592] loop2: detected capacity change from 0 to 512 [ 183.194374][ T42] usb 1-1: config 0 has no interface number 0 [ 183.206869][ T42] usb 1-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.220441][ T42] usb 1-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 183.230919][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.242567][ T42] usb 1-1: config 0 descriptor?? [ 183.303871][ T42] hub 1-1:0.166: bad descriptor, ignoring hub [ 183.382661][ T42] hub: probe of 1-1:0.166 failed with error -5 [ 184.035903][ T5608] loop2: detected capacity change from 0 to 512 [ 184.458528][ T30] audit: type=1400 audit(1768192522.315:1465): avc: denied { mount } for pid=5607 comm="syz.2.1716" name="/" dev="pstore" ino=14691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 184.876251][ T5618] loop4: detected capacity change from 0 to 40427 [ 185.097972][ T42] usb 1-1: USB disconnect, device number 22 [ 185.175418][ T5618] F2FS-fs (loop4): invalid crc value [ 185.352966][ T5618] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.395797][ T5618] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 185.885837][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.941416][ T5650] attempt to access beyond end of device [ 185.941416][ T5650] loop4: rw=10241, want=45104, limit=40427 [ 185.965562][ T30] audit: type=1400 audit(1768192523.867:1466): avc: denied { watch watch_reads } for pid=5617 comm="syz.4.1719" path="/185/file0" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.531387][ T5658] loop2: detected capacity change from 0 to 16 [ 187.632763][ T1950] attempt to access beyond end of device [ 187.632763][ T1950] loop4: rw=2049, want=45112, limit=40427 [ 187.644930][ T5658] /dev/loop2: Can't open blockdev [ 187.660608][ T5662] overlayfs: failed to resolve './file1': -2 [ 187.971765][ T30] audit: type=1400 audit(1768192525.709:1467): avc: denied { map } for pid=5657 comm="syz.2.1731" path="/361/file2" dev="tmpfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 188.370432][ T30] audit: type=1400 audit(1768192525.709:1468): avc: denied { setopt } for pid=5657 comm="syz.2.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.609325][ T30] audit: type=1400 audit(1768192525.709:1469): avc: denied { bind } for pid=5657 comm="syz.2.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.253896][ T5688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1739'. [ 189.288449][ T5688] block device autoloading is deprecated and will be removed. [ 189.396454][ T5693] netlink: 'syz.1.1741': attribute type 3 has an invalid length. [ 189.419064][ T5695] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1742'. [ 189.429851][ T5695] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1742'. [ 190.139597][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1746'. [ 191.665617][ T5743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1758'. [ 191.719682][ T5750] futex_wake_op: syz.2.1760 tries to shift op by 32; fix this program [ 191.877960][ T5750] loop2: detected capacity change from 0 to 40427 [ 192.490161][ T30] audit: type=1326 audit(1768192529.991:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 192.540341][ T30] audit: type=1326 audit(1768192530.019:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 192.554715][ T5764] loop4: detected capacity change from 0 to 40427 [ 192.583498][ T5764] F2FS-fs (loop4): fault_injection options not supported [ 192.599139][ T5764] F2FS-fs (loop4): invalid crc value [ 192.604037][ T30] audit: type=1326 audit(1768192530.019:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 192.637184][ T5764] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.658216][ T30] audit: type=1326 audit(1768192530.028:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 192.708829][ T5764] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.737833][ T30] audit: type=1326 audit(1768192530.028:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 192.810053][ T30] audit: type=1326 audit(1768192530.028:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 192.855930][ T30] audit: type=1326 audit(1768192530.028:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 192.881695][ T30] audit: type=1326 audit(1768192530.028:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 192.881728][ T1950] attempt to access beyond end of device [ 192.881728][ T1950] loop4: rw=2049, want=45112, limit=40427 [ 192.978785][ T5785] xt_hashlimit: max too large, truncated to 1048576 [ 193.154525][ T5791] loop4: detected capacity change from 0 to 1024 [ 193.166917][ T5770] syz.0.1765 (5770) used greatest stack depth: 19424 bytes left [ 193.239973][ T5791] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 193.255045][ T30] audit: type=1400 audit(1768192530.692:1478): avc: denied { attach_queue } for pid=5794 comm="syz.0.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 193.257600][ T5791] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.707247][ T60] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 194.035579][ T60] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 194.281395][ T418] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 194.385733][ T5821] incfs: Backing dir is not set, filesystem can't be mounted. [ 194.400464][ T5821] incfs: mount failed -2 [ 194.774169][ T5834] sysfs: Unknown parameter 'uuid' [ 194.784623][ T30] audit: type=1400 audit(1768192532.132:1479): avc: denied { remount } for pid=5829 comm="syz.0.1786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 194.910003][ T418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 194.933800][ T418] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 194.948026][ T418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.973663][ T60] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 194.993238][ T418] usb 5-1: config 0 descriptor?? [ 195.000323][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.016358][ T60] usb 3-1: config 0 descriptor?? [ 195.030145][ T5813] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 195.053193][ T5838] device bridge0 entered promiscuous mode [ 195.067100][ T5838] bridge0: port 3(vlan1) entered blocking state [ 195.078299][ T5838] bridge0: port 3(vlan1) entered disabled state [ 195.088320][ T5838] device bridge0 left promiscuous mode [ 195.281461][ T5843] netlink: 'syz.5.1789': attribute type 13 has an invalid length. [ 195.296010][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 195.306580][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 195.318714][ T5843] gretap0: refused to change device tx_queue_len [ 195.323859][ T60] usb 3-1: USB disconnect, device number 22 [ 195.325853][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 195.343559][ T5843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 196.109944][ T418] apple 0003:05AC:0241.000C: collection stack underflow [ 196.118784][ T418] apple 0003:05AC:0241.000C: item 0 0 0 12 parsing failed [ 196.126630][ T418] apple 0003:05AC:0241.000C: parse failed [ 196.133016][ T418] apple: probe of 0003:05AC:0241.000C failed with error -22 [ 196.496238][ T5878] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1801'. [ 196.506960][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'. [ 196.826723][ T1788] usb 5-1: USB disconnect, device number 20 [ 198.637379][ T30] audit: type=1400 audit(1768192535.741:1480): avc: denied { accept } for pid=5928 comm="syz.0.1819" path="socket:[36050]" dev="sockfs" ino=36050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.747167][ T30] audit: type=1400 audit(1768192535.769:1481): avc: denied { create } for pid=5927 comm="syz.1.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 198.778851][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'. [ 198.802476][ T5911] loop4: detected capacity change from 0 to 40427 [ 198.838816][ T5911] F2FS-fs (loop4): fault_injection options not supported [ 198.872215][ T5911] F2FS-fs (loop4): fault_type options not supported [ 198.883622][ T5945] futex_wake_op: syz.0.1826 tries to shift op by 32; fix this program [ 198.965169][ T5911] F2FS-fs (loop4): invalid crc value [ 198.982743][ T5911] F2FS-fs (loop4): Found nat_bits in checkpoint [ 199.721773][ T5911] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 199.768402][ T5911] attempt to access beyond end of device [ 199.768402][ T5911] loop4: rw=524288, want=45072, limit=40427 [ 199.780532][ T5911] attempt to access beyond end of device [ 199.780532][ T5911] loop4: rw=0, want=45072, limit=40427 [ 199.792878][ T5911] attempt to access beyond end of device [ 199.792878][ T5911] loop4: rw=0, want=45072, limit=40427 [ 199.824308][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'. [ 200.146130][ T1950] attempt to access beyond end of device [ 200.146130][ T1950] loop4: rw=2049, want=45104, limit=40427 [ 202.281478][ T30] audit: type=1400 audit(1768192538.481:1482): avc: denied { getopt } for pid=5977 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.594093][ T5994] loop2: detected capacity change from 0 to 512 [ 202.614773][ T6002] loop4: detected capacity change from 0 to 16 [ 202.624859][ T30] audit: type=1400 audit(1768192539.472:1483): avc: denied { module_load } for pid=5995 comm="syz.0.1843" path="/sys/power/wakeup_count" dev="sysfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 202.657830][ T6002] erofs: (device loop4): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 202.668640][ T6002] erofs: (device loop4): z_erofs_load_lzma_config: lzma algorithm isn't enabled [ 202.716748][ T6014] futex_wake_op: syz.4.1850 tries to shift op by 32; fix this program [ 202.811807][ T6015] mmap: syz.2.1841 (6015) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 203.182431][ T6014] loop4: detected capacity change from 0 to 40427 [ 203.207908][ T30] audit: type=1400 audit(1768192540.014:1484): avc: denied { read write } for pid=6024 comm="syz.2.1854" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 203.237258][ T30] audit: type=1400 audit(1768192540.014:1485): avc: denied { open } for pid=6024 comm="syz.2.1854" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 203.267203][ T6014] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 203.275669][ T6014] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 203.288658][ T6014] F2FS-fs (loop4): invalid crc value [ 203.533119][ T6014] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 203.627080][ T6014] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 203.638559][ T6031] loop2: detected capacity change from 0 to 40427 [ 203.658520][ T6014] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 203.762392][ T6050] attempt to access beyond end of device [ 203.762392][ T6050] loop4: rw=2049, want=55296, limit=40427 [ 203.965657][ T6050] attempt to access beyond end of device [ 203.965657][ T6050] loop4: rw=2049, want=57344, limit=40427 [ 204.057867][ T6050] attempt to access beyond end of device [ 204.057867][ T6050] loop4: rw=2049, want=51200, limit=40427 [ 204.093388][ T6050] attempt to access beyond end of device [ 204.093388][ T6050] loop4: rw=2049, want=53248, limit=40427 [ 204.136424][ T6050] attempt to access beyond end of device [ 204.136424][ T6050] loop4: rw=2049, want=59392, limit=40427 [ 204.190939][ T6050] attempt to access beyond end of device [ 204.190939][ T6050] loop4: rw=2049, want=61440, limit=40427 [ 204.808110][ T6082] netlink: 'syz.0.1870': attribute type 13 has an invalid length. [ 204.821054][ T6082] device gretap0 left promiscuous mode [ 205.558969][ T6082] gretap0: refused to change device tx_queue_len [ 205.566181][ T6082] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 206.049349][ T6091] loop4: detected capacity change from 0 to 16 [ 206.065800][ T6091] erofs: (device loop4): mounted with root inode @ nid 36. [ 206.211335][ T6068] overlayfs: failed to clone lowerpath [ 206.212345][ T30] audit: type=1400 audit(1768192542.819:1486): avc: denied { mount } for pid=6059 comm="syz.5.1865" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 206.447164][ T6098] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=89 [ 206.466620][ T6098] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=89 [ 206.476929][ T6098] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=89 [ 207.231891][ T6105] overlayfs: failed to clone upperpath [ 207.578603][ T30] audit: type=1400 audit(1768192544.100:1487): avc: denied { create } for pid=6124 comm="syz.4.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.637073][ T30] audit: type=1400 audit(1768192544.119:1488): avc: denied { ioctl } for pid=6124 comm="syz.4.1886" path="socket:[36355]" dev="sockfs" ino=36355 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 208.912501][ T1796] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 209.164996][ T6173] loop2: detected capacity change from 0 to 512 [ 209.700352][ T1796] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 209.711842][ T1796] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 209.885737][ T1796] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 209.927863][ T1796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.936186][ T1796] usb 5-1: Product: syz [ 209.949772][ T1796] usb 5-1: Manufacturer: syz [ 209.960474][ T1796] usb 5-1: SerialNumber: syz [ 209.974009][ T1796] usb 5-1: config 0 descriptor?? [ 209.981860][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1910'. [ 210.024733][ T6157] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.042607][ T6157] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.501693][ T1796] dm9601: probe of 5-1:0.0 failed with error -71 [ 210.507331][ T6199] futex_wake_op: syz.0.1912 tries to shift op by 32; fix this program [ 210.510339][ T1796] usb 5-1: USB disconnect, device number 21 [ 210.864349][ T6217] loop2: detected capacity change from 0 to 512 [ 210.989852][ T6221] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 211.139504][ T6222] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1921'. [ 212.391661][ T6235] futex_wake_op: syz.1.1926 tries to shift op by -1; fix this program [ 212.730103][ T6226] loop4: detected capacity change from 0 to 512 [ 212.760674][ T6226] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 212.779168][ T6226] EXT4-fs (loop4): Test dummy encryption mode enabled [ 212.807811][ T6226] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1923: inode #13: comm syz.4.1923: iget: illegal inode # [ 212.832905][ T6226] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1923: couldn't read orphan inode 13 (err -117) [ 212.846656][ T6226] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000007,i_version,noblock_validity,abort,mblk_io_submit,noblock_validity,max_dir_size_kb=0x000000000080222a,delalloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 213.031291][ T6263] loop4: detected capacity change from 0 to 1024 [ 213.117796][ T6263] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 213.130056][ T6263] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 213.141365][ T6263] JBD2: no valid journal superblock found [ 213.147236][ T6263] EXT4-fs (loop4): error loading journal [ 214.314868][ T30] audit: type=1326 audit(1768192550.402:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 214.421269][ T30] audit: type=1326 audit(1768192550.430:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 215.411102][ T30] audit: type=1326 audit(1768192550.430:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 215.445780][ T30] audit: type=1326 audit(1768192550.430:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 215.470149][ T30] audit: type=1326 audit(1768192550.430:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 215.494812][ T30] audit: type=1326 audit(1768192550.430:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 215.518687][ T30] audit: type=1326 audit(1768192550.430:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 215.578112][ T30] audit: type=1326 audit(1768192550.430:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 215.720028][ T30] audit: type=1326 audit(1768192550.430:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 215.917710][ T30] audit: type=1326 audit(1768192550.430:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7ff5ca61b749 code=0x7ffc0000 [ 216.025568][ T6303] loop2: detected capacity change from 0 to 40427 [ 216.207297][ T6325] device bridge0 entered promiscuous mode [ 216.213173][ T6325] device macsec1 entered promiscuous mode [ 216.221237][ T6325] bridge0: port 3(macsec1) entered blocking state [ 216.228087][ T6325] bridge0: port 3(macsec1) entered disabled state [ 216.299283][ T6325] device bridge0 left promiscuous mode [ 216.390790][ T6330] loop2: detected capacity change from 0 to 1024 [ 216.399025][ T60] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 217.250052][ T60] usb 1-1: config 0 has an invalid interface number: 166 but max is 0 [ 217.258363][ T60] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 217.269104][ T60] usb 1-1: config 0 has no interface number 0 [ 217.275775][ T60] usb 1-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.296944][ T60] usb 1-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 217.316749][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.338850][ T60] usb 1-1: config 0 descriptor?? [ 217.384871][ T60] hub 1-1:0.166: bad descriptor, ignoring hub [ 217.401816][ T60] hub: probe of 1-1:0.166 failed with error -5 [ 217.462464][ T6362] fuse: Bad value for 'fd' [ 217.714594][ T441] usb 1-1: USB disconnect, device number 23 [ 217.757710][ T6364] loop2: detected capacity change from 0 to 40427 [ 218.741254][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.029740][ T1790] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 219.735212][ T6409] futex_wake_op: syz.2.1986 tries to shift op by -1; fix this program [ 219.939112][ T1790] usb 1-1: Using ep0 maxpacket: 8 [ 220.361934][ T6422] loop2: detected capacity change from 0 to 256 [ 220.431321][ T1790] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.634389][ T1790] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 220.648650][ T1790] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 220.668322][ T1790] usb 1-1: config 8 interface 0 has no altsetting 0 [ 220.775940][ T6434] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 220.785949][ T6434] fuse: Bad value for 'fd' [ 220.895751][ T1790] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 220.912409][ T1790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.920422][ T1790] usb 1-1: Product: syz [ 220.933960][ T1790] usb 1-1: Manufacturer: syz [ 220.938685][ T1790] usb 1-1: SerialNumber: syz [ 221.366904][ T6449] hub 6-0:1.0: USB hub found [ 221.371871][ T6449] hub 6-0:1.0: 1 port detected [ 221.947865][ T6447] loop4: detected capacity change from 0 to 1024 [ 221.987529][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2001'. [ 221.999628][ T6447] EXT4-fs (loop4): Test dummy encryption mode enabled [ 222.024877][ T6447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002] [ 222.033066][ T6447] System zones: 0-1, 3-36 [ 222.039655][ T6447] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000004,nojournal_checksum,sysvgroups,nobarrier,data=ordered,test_dummy_encryption,nogrpid,debug,,errors=continue. Quota mode: writeback. [ 222.063848][ T1790] usb 1-1: selecting invalid altsetting 0 [ 222.070372][ T6447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002] [ 222.083274][ T1790] snd-usb-audio: probe of 1-1:8.0 failed with error -12 [ 222.096241][ T6447] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 222.115048][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 222.115062][ T30] audit: type=1400 audit(1768192557.695:1529): avc: denied { relabelfrom } for pid=6453 comm="syz.0.2001" name="NETLINK" dev="sockfs" ino=37155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.159131][ T1790] usb 1-1: USB disconnect, device number 24 [ 222.232223][ T30] audit: type=1400 audit(1768192557.723:1530): avc: denied { relabelto } for pid=6453 comm="syz.0.2001" name="NETLINK" dev="sockfs" ino=37155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 222.280333][ T30] audit: type=1400 audit(1768192557.723:1531): avc: denied { connect } for pid=6453 comm="syz.0.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 223.762761][ T30] audit: type=1400 audit(1768192559.238:1532): avc: denied { name_bind } for pid=6502 comm="syz.1.2018" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 223.855343][ T6505] loop4: detected capacity change from 0 to 256 [ 223.885829][ T1790] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 223.921741][ T6505] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 224.185255][ T6524] hub 8-0:1.0: USB hub found [ 224.190028][ T6524] hub 8-0:1.0: 1 port detected [ 224.453182][ T1790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.475114][ T6527] loop2: detected capacity change from 0 to 1024 [ 224.481661][ T1790] usb 1-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 224.495696][ T1790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.508614][ T1790] usb 1-1: config 0 descriptor?? [ 224.678149][ T6540] futex_wake_op: syz.4.2032 tries to shift op by 32; fix this program [ 224.976525][ T6540] loop4: detected capacity change from 0 to 40427 [ 225.009831][ T1790] wacom 0003:056A:00C6.000D: unbalanced collection at end of report description [ 225.019105][ T1790] wacom 0003:056A:00C6.000D: parse failed [ 225.030249][ T1790] wacom: probe of 0003:056A:00C6.000D failed with error -22 [ 225.040452][ T6540] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 225.058368][ T6540] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 225.097440][ T6540] F2FS-fs (loop4): invalid crc value [ 225.159352][ T6540] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 225.203018][ T6540] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 225.210439][ T6540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 225.233630][ T30] audit: type=1400 audit(1768192560.612:1533): avc: denied { setopt } for pid=6497 comm="syz.0.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.255531][ T1790] usb 1-1: USB disconnect, device number 25 [ 225.298842][ T6564] syz.1.2039[6564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.299344][ T6564] syz.1.2039[6564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.510514][ T6553] loop2: detected capacity change from 0 to 40427 [ 225.922307][ T6566] overlayfs: failed to resolve './file1': -2 [ 226.114394][ T6568] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 226.155700][ T6568] SELinux: failed to load policy [ 227.361060][ T6576] loop2: detected capacity change from 0 to 40427 [ 227.465026][ T1950] handle_bad_sector: 3 callbacks suppressed [ 227.465046][ T1950] attempt to access beyond end of device [ 227.465046][ T1950] loop4: rw=2049, want=45104, limit=40427 [ 227.493946][ T6576] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 227.507841][ T6576] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 227.520863][ T6576] F2FS-fs (loop2): Unrecognized mount option "kfree" or missing value [ 228.196677][ T6618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6618 comm=syz.2.2059 [ 228.424846][ T6618] loop2: detected capacity change from 0 to 32768 [ 228.904285][ T349] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 228.918781][ T349] loop2: p1 start 460800 is beyond EOD, truncated [ 228.977451][ T349] loop2: p2 size 83886080 extends beyond EOD, truncated [ 229.103926][ T349] loop2: p5 start 460800 is beyond EOD, truncated [ 229.132957][ T349] loop2: p6 size 83886080 extends beyond EOD, truncated [ 229.142930][ T6618] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 229.148924][ T6618] loop2: p1 start 460800 is beyond EOD, truncated [ 229.157717][ T6618] loop2: p2 size 83886080 extends beyond EOD, truncated [ 229.166533][ T6618] loop2: p5 start 460800 is beyond EOD, truncated [ 229.180151][ T6618] loop2: p6 size 83886080 extends beyond EOD, truncated [ 229.212612][ T101] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 229.222301][ T101] loop2: p1 start 460800 is beyond EOD, truncated [ 229.234576][ T6647] loop4: detected capacity change from 0 to 1024 [ 229.240978][ T101] loop2: p2 size 83886080 extends beyond EOD, truncated [ 229.249305][ T101] loop2: p5 start 460800 is beyond EOD, truncated [ 229.256300][ T101] loop2: p6 size 83886080 extends beyond EOD, truncated [ 229.271808][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'. [ 229.288943][ T6647] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 229.300807][ T6649] loop2: detected capacity change from 0 to 512 [ 229.315282][ T6647] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 229.389980][ T6647] JBD2: no valid journal superblock found [ 229.404436][ T6647] EXT4-fs (loop4): error loading journal [ 229.455782][ T349] udevd[349]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 229.466995][ T3122] udevd[3122]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 229.478104][ T414] udevd[414]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 229.484459][ T351] udevd[351]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 229.509116][ T349] udevd[349]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 229.520604][ T3122] udevd[3122]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 229.532282][ T351] udevd[351]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 229.543138][ T414] udevd[414]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 229.639398][ T351] udevd[351]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 229.808588][ T3122] udevd[3122]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 230.159085][ T30] audit: type=1326 audit(2000000003.534:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.5.2078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5236e7749 code=0x0 [ 230.578627][ T6686] loop2: detected capacity change from 0 to 40427 [ 232.409912][ T6717] loop2: detected capacity change from 0 to 128 [ 232.989700][ T6721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2092'. [ 233.002590][ T30] audit: type=1400 audit(2000000006.189:1535): avc: denied { create } for pid=6716 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 234.677277][ T30] audit: type=1400 audit(2000000007.704:1536): avc: denied { connect } for pid=6743 comm="syz.2.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.823606][ T30] audit: type=1400 audit(2000000007.704:1537): avc: denied { read write } for pid=6743 comm="syz.2.2100" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.599666][ T6791] loop2: detected capacity change from 0 to 512 [ 236.923059][ T60] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 237.241666][ T6808] binder: BINDER_SET_CONTEXT_MGR already set [ 237.247785][ T6808] binder: 6801:6808 ioctl 4018620d 200000004a80 returned -16 [ 237.577165][ T6812] netlink: 'syz.0.2121': attribute type 13 has an invalid length. [ 237.599949][ T6812] gretap0: refused to change device tx_queue_len [ 237.609168][ T6812] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 237.718587][ T60] usb 3-1: Using ep0 maxpacket: 8 [ 238.263921][ T6818] loop4: detected capacity change from 0 to 512 [ 238.292098][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.310835][ T6818] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 238.321059][ T60] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.348264][ T6818] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.2125: bad orphan inode 131083 [ 238.361984][ T6818] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 238.766767][ T6830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2128'. [ 238.776170][ T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.786286][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2128'. [ 238.796070][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.804108][ T60] usb 3-1: Product: syz [ 238.808862][ T60] usb 3-1: Manufacturer: syz [ 238.813594][ T60] usb 3-1: SerialNumber: syz [ 238.860759][ T60] usb 3-1: bad CDC descriptors [ 239.076860][ T60] usb 3-1: USB disconnect, device number 23 [ 240.315606][ T6855] loop4: detected capacity change from 0 to 256 [ 240.822295][ T6862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2138'. [ 242.093940][ T6898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6898 comm=syz.2.2151 [ 242.293042][ T6910] loop4: detected capacity change from 0 to 512 [ 242.326406][ T6910] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 242.337829][ T6910] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.516736][ T30] audit: type=1400 audit(2000000015.062:1538): avc: denied { name_bind } for pid=6907 comm="syz.1.2154" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 242.910229][ T6925] loop2: detected capacity change from 0 to 256 [ 243.001680][ T6933] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 243.530449][ T6936] loop2: detected capacity change from 0 to 2048 [ 243.709502][ T625] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 244.741264][ T625] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 244.751298][ T625] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 244.781256][ T625] usb 5-1: config 1 interface 0 has no altsetting 0 [ 244.908528][ T30] audit: type=1400 audit(2000000017.325:1539): avc: denied { lock } for pid=6960 comm="syz.1.2169" path="socket:[39026]" dev="sockfs" ino=39026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 244.976592][ T625] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 244.985679][ T625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.055459][ T625] usb 5-1: Product: syz [ 245.059686][ T625] usb 5-1: Manufacturer: syz [ 245.064692][ T625] usb 5-1: SerialNumber: syz [ 245.083502][ T6929] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.107540][ T6929] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 246.344572][ T6977] netlink: 'syz.5.2174': attribute type 46 has an invalid length. [ 246.352471][ T6977] netlink: 'syz.5.2174': attribute type 19 has an invalid length. [ 246.360409][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2174'. [ 246.957461][ T30] audit: type=1400 audit(2000000019.232:1540): avc: denied { ioctl } for pid=6999 comm="syz.5.2184" path="socket:[39153]" dev="sockfs" ino=39153 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.213406][ T7029] 9pnet: Insufficient options for proto=fd [ 248.404802][ T7024] loop4: detected capacity change from 0 to 40427 [ 248.423885][ T7024] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 248.433479][ T7024] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 248.446439][ T7024] F2FS-fs (loop4): fault_type options not supported [ 248.454246][ T7024] F2FS-fs (loop4): fault_injection options not supported [ 248.462419][ T7024] F2FS-fs (loop4): invalid crc value [ 248.512605][ T7024] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.547832][ T7024] F2FS-fs (loop4): Start checkpoint disabled! [ 248.557592][ T7024] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 248.762822][ T7024] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 248.895496][ T4604] attempt to access beyond end of device [ 248.895496][ T4604] loop4: rw=2049, want=40976, limit=40427 [ 249.123802][ T7052] loop2: detected capacity change from 0 to 16 [ 249.204236][ T7052] erofs: (device loop2): mounted with root inode @ nid 36. [ 250.997962][ T625] rtl8150 5-1:1.0: couldn't reset the device [ 251.004822][ T625] rtl8150: probe of 5-1:1.0 failed with error -5 [ 251.030722][ T625] usb 5-1: USB disconnect, device number 22 [ 251.307849][ T30] audit: type=1400 audit(2000000023.309:1541): avc: denied { ioctl } for pid=7111 comm="syz.2.2221" path="/445/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.357671][ T7113] syz.0.2219[7113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.357743][ T7113] syz.0.2219[7113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.375012][ T7144] ================================================================== [ 253.394396][ T7144] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 253.403617][ T7144] Read of size 1 at addr ffff88810ac063f8 by task syz.2.2231/7144 [ 253.411425][ T7144] [ 253.413759][ T7144] CPU: 0 PID: 7144 Comm: syz.2.2231 Not tainted syzkaller #0 [ 253.421146][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.431216][ T7144] Call Trace: [ 253.434581][ T7144] [ 253.437595][ T7144] __dump_stack+0x21/0x30 [ 253.441954][ T7144] dump_stack_lvl+0xee/0x150 [ 253.446543][ T7144] ? show_regs_print_info+0x20/0x20 [ 253.451746][ T7144] ? load_image+0x3a0/0x3a0 [ 253.456250][ T7144] ? unwind_get_return_address+0x4d/0x90 [ 253.461904][ T7144] print_address_description+0x7f/0x2c0 [ 253.467456][ T7144] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 253.473962][ T7144] kasan_report+0xf1/0x140 [ 253.478385][ T7144] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 253.484892][ T7144] __asan_report_load1_noabort+0x14/0x20 [ 253.490535][ T7144] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 253.496969][ T7144] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 253.503126][ T7144] ? xfrm_netlink_rcv+0x72/0x90 [ 253.507985][ T7144] ? netlink_unicast+0x876/0xa40 [ 253.512915][ T7144] ? netlink_sendmsg+0x86a/0xb70 [ 253.517855][ T7144] ? ____sys_sendmsg+0x5a2/0x8c0 [ 253.522808][ T7144] ? ___sys_sendmsg+0x1f0/0x260 [ 253.527704][ T7144] ? x64_sys_call+0x4b/0x9a0 [ 253.532298][ T7144] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.538379][ T7144] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 253.544542][ T7144] xfrm_policy_inexact_insert+0x70/0x1130 [ 253.550273][ T7144] ? __get_hash_thresh+0x10c/0x420 [ 253.555645][ T7144] ? policy_hash_bysel+0x110/0x4f0 [ 253.560777][ T7144] xfrm_policy_insert+0x126/0x9a0 [ 253.565810][ T7144] ? xfrm_policy_construct+0x54f/0x1f00 [ 253.571358][ T7144] xfrm_add_policy+0x4d1/0x830 [ 253.576133][ T7144] ? xfrm_dump_sa_done+0xc0/0xc0 [ 253.581168][ T7144] xfrm_user_rcv_msg+0x45c/0x6e0 [ 253.586112][ T7144] ? xfrm_netlink_rcv+0x90/0x90 [ 253.590976][ T7144] ? __schedule+0xb76/0x14c0 [ 253.595568][ T7144] ? release_firmware_map_entry+0x190/0x190 [ 253.601466][ T7144] netlink_rcv_skb+0x1e0/0x430 [ 253.606243][ T7144] ? xfrm_netlink_rcv+0x90/0x90 [ 253.611103][ T7144] ? netlink_ack+0xb60/0xb60 [ 253.615721][ T7144] ? wait_for_completion_killable_timeout+0x10/0x10 [ 253.622317][ T7144] ? __netlink_lookup+0x387/0x3b0 [ 253.627438][ T7144] xfrm_netlink_rcv+0x72/0x90 [ 253.632227][ T7144] netlink_unicast+0x876/0xa40 [ 253.637003][ T7144] netlink_sendmsg+0x86a/0xb70 [ 253.641775][ T7144] ? netlink_getsockopt+0x530/0x530 [ 253.646983][ T7144] ? security_socket_sendmsg+0x82/0xa0 [ 253.652543][ T7144] ? netlink_getsockopt+0x530/0x530 [ 253.657764][ T7144] ____sys_sendmsg+0x5a2/0x8c0 [ 253.662546][ T7144] ? __sys_sendmsg_sock+0x40/0x40 [ 253.667600][ T7144] ? import_iovec+0x7c/0xb0 [ 253.672128][ T7144] ___sys_sendmsg+0x1f0/0x260 [ 253.676999][ T7144] ? __sys_sendmsg+0x250/0x250 [ 253.681790][ T7144] ? compat_start_thread+0x20/0x20 [ 253.687009][ T7144] ? __fdget+0x1a1/0x230 [ 253.691266][ T7144] __x64_sys_sendmsg+0x1e2/0x2a0 [ 253.696210][ T7144] ? ___sys_sendmsg+0x260/0x260 [ 253.701075][ T7144] ? __kasan_check_write+0x14/0x20 [ 253.706198][ T7144] ? switch_fpu_return+0x15d/0x2c0 [ 253.711323][ T7144] x64_sys_call+0x4b/0x9a0 [ 253.715749][ T7144] do_syscall_64+0x4c/0xa0 [ 253.720215][ T7144] ? clear_bhb_loop+0x50/0xa0 [ 253.724906][ T7144] ? clear_bhb_loop+0x50/0xa0 [ 253.729579][ T7144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.735478][ T7144] RIP: 0033:0x7ff5ca61b749 [ 253.739880][ T7144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.759476][ T7144] RSP: 002b:00007ff5c9083038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.767891][ T7144] RAX: ffffffffffffffda RBX: 00007ff5ca871fa0 RCX: 00007ff5ca61b749 [ 253.775859][ T7144] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000005 [ 253.783821][ T7144] RBP: 00007ff5ca69ff91 R08: 0000000000000000 R09: 0000000000000000 [ 253.791820][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.799783][ T7144] R13: 00007ff5ca872038 R14: 00007ff5ca871fa0 R15: 00007ffd9ec87778 [ 253.807774][ T7144] [ 253.810780][ T7144] [ 253.813088][ T7144] Allocated by task 7144: [ 253.817397][ T7144] __kasan_kmalloc+0xda/0x110 [ 253.822065][ T7144] __kmalloc+0x13d/0x2c0 [ 253.826304][ T7144] sk_prot_alloc+0xed/0x320 [ 253.830788][ T7144] sk_alloc+0x38/0x430 [ 253.834839][ T7144] pfkey_create+0x12a/0x660 [ 253.839330][ T7144] __sock_create+0x38d/0x7a0 [ 253.843907][ T7144] __sys_socket+0xec/0x190 [ 253.848436][ T7144] __x64_sys_socket+0x7a/0x90 [ 253.853114][ T7144] x64_sys_call+0x8c5/0x9a0 [ 253.857635][ T7144] do_syscall_64+0x4c/0xa0 [ 253.862051][ T7144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.867937][ T7144] [ 253.870250][ T7144] Last potentially related work creation: [ 253.875943][ T7144] kasan_save_stack+0x3a/0x60 [ 253.880617][ T7144] __kasan_record_aux_stack+0xd2/0x100 [ 253.886062][ T7144] kasan_record_aux_stack_noalloc+0xb/0x10 [ 253.891853][ T7144] kvfree_call_rcu+0xae/0x7e0 [ 253.896523][ T7144] drop_sysctl_table+0x2ef/0x410 [ 253.901442][ T7144] unregister_sysctl_table+0x7a/0x120 [ 253.906796][ T7144] unregister_net_sysctl_table+0x15/0x20 [ 253.912420][ T7144] neigh_sysctl_unregister+0x78/0x90 [ 253.917714][ T7144] addrconf_ifdown+0x15c0/0x1880 [ 253.922644][ T7144] addrconf_notify+0x3bd/0xde0 [ 253.927405][ T7144] raw_notifier_call_chain+0x90/0x100 [ 253.932766][ T7144] unregister_netdevice_many+0xfb8/0x1990 [ 253.938471][ T7144] vti6_exit_batch_net+0x26a/0x2b0 [ 253.943567][ T7144] cleanup_net+0x602/0xad0 [ 253.947970][ T7144] process_one_work+0x6be/0xba0 [ 253.952807][ T7144] worker_thread+0xa59/0x1200 [ 253.957467][ T7144] kthread+0x411/0x500 [ 253.961517][ T7144] ret_from_fork+0x1f/0x30 [ 253.966007][ T7144] [ 253.968315][ T7144] Second to last potentially related work creation: [ 253.974888][ T7144] kasan_save_stack+0x3a/0x60 [ 253.979566][ T7144] __kasan_record_aux_stack+0xd2/0x100 [ 253.985013][ T7144] kasan_record_aux_stack_noalloc+0xb/0x10 [ 253.990808][ T7144] kvfree_call_rcu+0xae/0x7e0 [ 253.995470][ T7144] drop_sysctl_table+0x2ef/0x410 [ 254.000389][ T7144] unregister_sysctl_table+0x7a/0x120 [ 254.005749][ T7144] unregister_net_sysctl_table+0x15/0x20 [ 254.011366][ T7144] neigh_sysctl_unregister+0x78/0x90 [ 254.016635][ T7144] inetdev_event+0x7f5/0x10a0 [ 254.021296][ T7144] raw_notifier_call_chain+0x90/0x100 [ 254.026652][ T7144] unregister_netdevice_many+0xfb8/0x1990 [ 254.032365][ T7144] xfrmi_exit_batch_net+0x202/0x250 [ 254.037649][ T7144] cleanup_net+0x602/0xad0 [ 254.042053][ T7144] process_one_work+0x6be/0xba0 [ 254.046895][ T7144] worker_thread+0xa59/0x1200 [ 254.051558][ T7144] kthread+0x411/0x500 [ 254.055610][ T7144] ret_from_fork+0x1f/0x30 [ 254.060017][ T7144] [ 254.062322][ T7144] The buggy address belongs to the object at ffff88810ac06000 [ 254.062322][ T7144] which belongs to the cache kmalloc-1k of size 1024 [ 254.076443][ T7144] The buggy address is located 1016 bytes inside of [ 254.076443][ T7144] 1024-byte region [ffff88810ac06000, ffff88810ac06400) [ 254.089877][ T7144] The buggy address belongs to the page: [ 254.095491][ T7144] page:ffffea00042b0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ac00 [ 254.105717][ T7144] head:ffffea00042b0000 order:3 compound_mapcount:0 compound_pincount:0 [ 254.114028][ T7144] flags: 0x4000000000010200(slab|head|zone=1) [ 254.120104][ T7144] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 254.128672][ T7144] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 254.137235][ T7144] page dumped because: kasan: bad access detected [ 254.143644][ T7144] page_owner tracks the page as allocated [ 254.149346][ T7144] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 1992092099, free_ts 0 [ 254.165651][ T7144] post_alloc_hook+0x192/0x1b0 [ 254.170409][ T7144] prep_new_page+0x1c/0x110 [ 254.174898][ T7144] get_page_from_freelist+0x2cc5/0x2d50 [ 254.180430][ T7144] __alloc_pages+0x18f/0x440 [ 254.185009][ T7144] new_slab+0xa1/0x4d0 [ 254.189068][ T7144] ___slab_alloc+0x381/0x810 [ 254.193644][ T7144] __slab_alloc+0x49/0x90 [ 254.197958][ T7144] __kmalloc+0x16a/0x2c0 [ 254.202185][ T7144] blk_alloc_flush_queue+0xe3/0x250 [ 254.207365][ T7144] blk_mq_realloc_hw_ctxs+0xb7b/0x1700 [ 254.212810][ T7144] blk_mq_init_allocated_queue+0x3fa/0x17e0 [ 254.218694][ T7144] blk_mq_init_queue+0x6c/0xd0 [ 254.223443][ T7144] scsi_alloc_sdev+0x66c/0x9c0 [ 254.228190][ T7144] scsi_probe_and_add_lun+0x18d/0x33b0 [ 254.233631][ T7144] __scsi_scan_target+0x1d6/0xb50 [ 254.238644][ T7144] scsi_scan_host_selected+0x343/0x5f0 [ 254.244088][ T7144] page_owner free stack trace missing [ 254.249429][ T7144] [ 254.251731][ T7144] Memory state around the buggy address: [ 254.257342][ T7144] ffff88810ac06280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.265381][ T7144] ffff88810ac06300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.273419][ T7144] >ffff88810ac06380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 254.281457][ T7144] ^ [ 254.289413][ T7144] ffff88810ac06400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.297456][ T7144] ffff88810ac06480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.305495][ T7144] ================================================================== [ 254.313534][ T7144] Disabling lock debugging due to kernel taint [ 254.385943][ T30] audit: type=1400 audit(2000000026.189:1542): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 254.416684][ T30] audit: type=1400 audit(2000000026.217:1543): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.438526][ T30] audit: type=1400 audit(2000000026.217:1544): avc: denied { append } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.461174][ T30] audit: type=1400 audit(2000000026.217:1545): avc: denied { open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.483882][ T30] audit: type=1400 audit(2000000026.217:1546): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1