last executing test programs: 48.378640131s ago: executing program 0 (id=68): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f0000000640), 0x0, 0x48d, &(0x7f0000000840)="$eJzs3M1vFOUfAPDvzLaFH2/lh4jKi1TR2PjS0oLKwYtGb5qY6AEvJrUtBFmooSURQrQag0dD4t14Mkb/Ak96MerJxKveDQlRYgJ60DUzO1O2pbulZbst7ueTzPZ5dp7d5/nuzDPzzDzdDaBrDWQPScSWiPg5Ivrr2fkFBup/rl+9MP7n1QvjSdRqr/yW5OWuXb0wXhYtX7e5yAymEekHSVHJfNPnzp8cq1YnzxT54ZlTbw1Pnzv/xIlTY8cnj0+eHj1y5PChkaefGn2yLXFmcV3b/c7U3qTntUsvjR+99Mb3X/ZExK599fWNcdyWdPNcciAL/PdabmGxh9tS2fqxtSGd9KxhQ1iWSkRkm6s37//9UYkbG68/Xnh/TRsHrKrs3LSh+erZWq22saEo8J+S6NjQpcoTfXb9Wy4dGHasG1eerV8AZXFfL5b6mp5IizK9q1j/vRFxdPavT7Iliu3w95ZVrBAA6HpfZ+Ofxxcb/6Wxq6HctmIOZXtE/D8idkTEXRGxMyLujsjL3lOMZ5ajPjVUmcvfPP5ML684uFuQjf+eKea25o//6qO/Wq32T6XIbc3j702OnahOHiw+k8Ho3ZDlR1rU8c3zP33UbN1Aw/gvW7L6y7Fg0Y7LPQtu0E2MzYy1a1B65b2I3T2LxZ/MzQQkEXFfROxe3ltvKxMnHv18b7NCS8ffQhvmmWqfRjxS3/6zsSD+UtJ6fnJ4Y1QnDw6Xe8XNfvjx4svN6r+t+Nsg2/6b5u//C0r0/5E0ztdOL7+Oi7982PSacqX7f1/yaj5n3Vc89/bYzMyZkYi+5MU8P+/50RuvLfNl+Sz+wQOL9/8dxWuy+PdERLYT74uI+yNif9H2ByLiwYg40CL+75576M2Vx7+6svgnFj3+lft/JeZv/+UnKie//apJ9emtbf/DeWqweCY//i2heXOiOpkd1le8NwMAAMCdJ42ILZGkQ3PpNB0aqv8P/87YlFanpmceOzZ19vRE/TsC26M3Le909Rf3Q7Or7ZFktnjH+v3R0eJecXm/9FBx3/jjyv/y/ND4VHVijWOHbre5Sf/P/FpZ69YBq873taB7Lez/6Rq1A+g853/oXvo/dC/9H7pXQ///4uzFPXni3fxx/9yKRecCWvxyCHBncP6H7qX/Q/davP/3dbwdQOctff7f2JF2AB11O9/rX9+JvvXRjOUnPutdF81YKhFpqzKvR8cbFuviY2l3Imn5YxarmFjrIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB7/BsAAP//KanpAA==") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8, 0x8, 0xa, 0xfffffed9, 0xfffffff7}) r1 = memfd_create(&(0x7f0000000000)=',\xea\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6, 0x3, 0x42, 0xff, "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", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x8, 0xfffffffffffffff7, 0xf5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) fstatfs(r1, &(0x7f00000002c0)=""/183) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x0, 0x0, {0x7, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mount$incfs(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000003e40), 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB='read_timeout_ms=0']) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f0000000640), 0x0, 0x48d, &(0x7f0000000840)="$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") (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8, 0x8, 0xa, 0xfffffed9, 0xfffffff7}) (async) memfd_create(&(0x7f0000000000)=',\xea\x00', 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6, 0x3, 0x42, 0xff, "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", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x8, 0xfffffffffffffff7, 0xf5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) (async) fstatfs(r1, &(0x7f00000002c0)=""/183) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x0, 0x0, {0x7, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) mount$incfs(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000003e40), 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB='read_timeout_ms=0']) (async) 47.196423024s ago: executing program 0 (id=72): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000003000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 45.058459798s ago: executing program 3 (id=86): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000000000095000076fd000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x19, &(0x7f0000000280)={@remote, @empty, @val={@val={0x88a8, 0x3}, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x3, 0x6, 0xf3}}}}, 0x0) (async) syz_emit_ethernet(0x19, &(0x7f0000000280)={@remote, @empty, @val={@val={0x88a8, 0x3}, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x3, 0x6, 0xf3}}}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6, 0x1}, {0xb, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x20044800) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000000c0)) (async) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 45.040263699s ago: executing program 3 (id=87): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x90000000, 0x4) sendto$unix(r0, 0x0, 0x803e, 0x4004, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="0500000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8084}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) r5 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_buf(r5, 0x1, 0x3b, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000280)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@discard}, {@barrier}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nobarrier}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sb}, {@noinit_itable}, {@journal_checksum}, {@norecovery}, {@abort}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@flag='sync'}, {@fowner_lt}], 0x2c}, 0xa, 0x532, &(0x7f0000000480)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x8a0fc9bfb7eec68d, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) 44.177649338s ago: executing program 3 (id=91): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000680)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001100010700000000000000000a000000060001001c000000e20e35597e077aca0544abf277ba843cb5abf2cce7afe9482c3f45f7bbe8aa20c4d52770e5735e535e181b9454910189f63b80e11d25e051a00b9b2477cec09d3a143c625efdad85a97b48aa2861df5b9cae9a0e683d55161b480912cc2625d32a44e3b24ad49f65d391468de38cea3117e5fc886d9d608fc70ad918ff10a16e3f9621c22189f902409866486a5a34351b5389"], 0x1c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x3b) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x180, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff0}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x3d, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000091, 0xec000000, 0x9}]}) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r7, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x41000}, 0x40) shutdown(r0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x2) 44.01965068s ago: executing program 3 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a000000000200000000000014000500"], 0x3c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000980)="027859546fd7e7a8758405037a8a8ae17a944562f61ff670c0520b13bcccae6f331e9b529a4330b05d8040609198c97dd5522c72282da377817ba71b44b8fc58d3e4d587d67181e46f635a000da5922febeaff30511ae8e712dbdac9751d7a15819b7c1e325531f0e74588c96f1a77ea02961486a11416a1f5ba79874f98ea9b9f3794f04f5f5bf5617f30d886ca7d3c07690ef8a7a70b0f5d44aa74e3c639907aa4f37550e3e4585de2099d96a0deecc4b5657e92b5a062631896036df86d878a2adcdbc338ca77ff0fe260cb7e4538ffc3c214149518de407356b062425ffb5c8d54ace1594e87543447ca57846a49d99ed27496520fb6", 0xf8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000007c0), &(0x7f0000000800)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000040), &(0x7f0000000840)=""/215}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) socket(0x10, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000000400), 0x1, 0x553, &(0x7f0000001080)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) fdatasync(r8) read$FUSE(r7, &(0x7f0000004500)={0x2020}, 0x2020) mkdir(&(0x7f0000000040)='.\x00', 0xbc) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2440c2, 0x8c) openat$incfs(r9, &(0x7f00000001c0)='.log\x00', 0x204241, 0x130) ioctl$RTC_UIE_OFF(r6, 0x7004) setresgid(0xee00, 0xffffffffffffffff, 0x0) 43.887821322s ago: executing program 0 (id=93): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x50}}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES64=0x0], 0x1, 0x374, &(0x7f0000000f80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00005ec000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180be7dce33e558413724c328fb0d50000000000000000000000000002000000000d0000ed0000000700000000000000000000000d00000000002e305f2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000200)={{r0}, r2, 0x0, @inherit={0x80, &(0x7f0000000180)={0x0, 0x7, 0x8, 0x5, {0x1, 0xff, 0x3, 0x5, 0x2}, [0x9, 0x9, 0x9, 0x8, 0x55, 0xffffffff, 0x0]}}, @devid}) 43.764124193s ago: executing program 0 (id=95): syz_usb_connect(0x2, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x4b, 0x9d, 0xbb, 0x8, 0x9e06, 0xc8f0, 0x36c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x4, 0x10, 0x87, "", [{{0x9, 0x4, 0x22, 0xbc, 0x0, 0x8, 0x3, 0x0, 0x7}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async) syz_usb_connect$uac1(0x5, 0x8f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x4, 0x80, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x19}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x403, 0x2, 0x3, 0xf}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x1, '@'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x3, 0x7, 0x6, "c502fe23238a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x7, 0x65, {0x7, 0x25, 0x1, 0x4, 0x0, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x4, 0x3, {0x7, 0x25, 0x1, 0x4, 0x4d, 0x8}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x62, 0x3, 0x20, 0x57}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xe, 0xdd, 0x2, 0x4, 0x5, 0xd}, @wireless={0xb, 0x10, 0x1, 0x4, 0x12, 0x15, 0x30, 0x1, 0x5}]}, 0x5, [{0xb8, &(0x7f0000000440)=ANY=[@ANYBLOB="b803f4c5742dd7f109f35ad84898380508dc36253544df3fb4ba4e1cfa03bc0442718c0800f1cb720b96892fabf24ef2c5b2d35b78f370d1ace7e84de02b32fcc97b0e582a7ccd79c9c13a4869dc76f1dab4d6fe4d3329c0ae56448901c6ed10f78e21db01bd76db1d10ecb54118b5d6bb05661aba8d31111fab3f76ca3d981cbdc2326a33086ec644b07dfd10ec89179b9346e619a087861ab509562b8f73578b5412926a34df7f8afe7801312cb3c22360fac4916f45afc97ed3c430ffa53f4b5ab84b"]}, {0xc6, &(0x7f0000000680)=@string={0xc6, 0x3, "683902cb2b12290a05150836824752c22aa6f58f748c5c40ef6fc5537c5b74ae1f461266f6b96fcaf0c43e0e6d842d2adb194c05a7e00017d543cfddaf30252b2fdf6f9b145774f1167483fd1fa0f3d590276dd48064b98c3f9333f1e9c09bada93d4b5959bcdcdddb7f1cea1ee094e528edf249dbd6db392604837a6cdc32903b27fe2260871c4e131be259f577e4cb39acc24be63c5f3612074884028231ef95ccf627fa9d9384139dfe53babed20964026ba0a5e13afba23ae6014af2186b5f605649"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc1a}}, {0x79, &(0x7f0000000340)=@string={0x79, 0x3, "f3773dcc9c589ce687592e5d2aa3e7bcc8471a83433354bd99eef5863d380955e4a950116c9329f8f84acc05390c54693653dec324810f7208ed16db74edeaab4a3fc6b6947ad1591c686226b5bca6b2e3b08dfb0c7d34e01d2d3bd6771c72799e522965d191aaf4da89a5001f9d7dc57e9717419d4588"}}]}) 43.069742371s ago: executing program 3 (id=96): socket$netlink(0x10, 0x3, 0x8000000004) r0 = getpid() r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x3, {{0xa, 0x0, 0xe5, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sched_setscheduler(r0, 0x3, &(0x7f0000000140)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x9f) setfsgid(0xee00) r4 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000100)='map_files\x00') fchdir(r6) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r7, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x6, 0x4, 0xffffffff, 0xb441, 0x1d8b, 0x9}) 42.850699563s ago: executing program 3 (id=97): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82, 0x80000001}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x5, 0xffffffff, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xb4, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0xfffffff9, 0x7, 0x6, 0x80, 0x1, 0x92, '\x00', r0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) 42.777158834s ago: executing program 32 (id=97): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82, 0x80000001}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x5, 0xffffffff, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xb4, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0xfffffff9, 0x7, 0x6, 0x80, 0x1, 0x92, '\x00', r0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) 42.410606298s ago: executing program 0 (id=102): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x10, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000050000000000000000ce5da733e4b0616895d8b9cf27f75ad1cdfe7f8146fd66e83737b3ecc00d7eab934d28fbd7c6bc9553107af72e09"], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x5000, r0}, 0x38) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x560c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @broadcast}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0xf}, {0xd}, {0x5, 0x2}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200408c1}, 0x800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000600200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x10, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000050000000000000000ce5da733e4b0616895d8b9cf27f75ad1cdfe7f8146fd66e83737b3ecc00d7eab934d28fbd7c6bc9553107af72e09"], 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x5000, r0}, 0x38) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_PASTESEL(r1, 0x560c, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async) socket(0x200000000000011, 0x2, 0xd) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) (async) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @broadcast}}}}}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0xf}, {0xd}, {0x5, 0x2}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200408c1}, 0x800) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000600200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa00000000010000000000"], 0x254}}, 0x0) (async) 42.26751511s ago: executing program 0 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800000000035, 0x7, 0x2, 0x184, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x101, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101}) ioctl$KVM_TDX_INIT_MEM_REGION(r4, 0xc008aeba, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000000/0x2000)=nil, 0xdddd1000, 0x5}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0xc, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x200000, 0x200000, 0x10, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0x10, 0x2, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x7b, 0xb, 0xff, 0x8, 0x7, 0xe, 0x3}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0xc, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x9, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x54000, 0x2024, 0x2, 0x0, 0xeeee0000, [0x6800000000000000, 0x4, 0x1ff, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@multicast, @random="c59a1b746cda", @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0xff, @remote, @local}}}}, 0x0) 42.2224638s ago: executing program 33 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800000000035, 0x7, 0x2, 0x184, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x101, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101}) ioctl$KVM_TDX_INIT_MEM_REGION(r4, 0xc008aeba, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000000/0x2000)=nil, 0xdddd1000, 0x5}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0xc, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x200000, 0x200000, 0x10, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0x10, 0x2, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x7b, 0xb, 0xff, 0x8, 0x7, 0xe, 0x3}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0xc, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x9, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x54000, 0x2024, 0x2, 0x0, 0xeeee0000, [0x6800000000000000, 0x4, 0x1ff, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@multicast, @random="c59a1b746cda", @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0xff, @remote, @local}}}}, 0x0) 6.789826812s ago: executing program 5 (id=399): syz_emit_ethernet(0xa6, &(0x7f00000004c0)={@link_local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33c83", 0x68, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9b5b, {0xe, 0x6, "90f26f", 0x5, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, [@srh={0x32, 0x6, 0x4, 0x3, 0xd, 0x68, 0x7, [@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0x8}]}]}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 6.789273262s ago: executing program 5 (id=400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="0c0100001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000100000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x10c}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="02170c091a0000002abd7000fedbdf2502000b00ac480000d00700000000000002000100000004d504f83001000000000100140001000000130009008004000093118bbb7cf6f4b6d3422795be218e8ff42534902b216c59cea93d24348a998f3c08e925c8e860d2b732519744f5f718371f0bb768de03c219949905296f874d5107d211e95418cdbece5fae847308d3f7984c3e3ff0280d5108b95b6541064260c03fd0d9215c8188fca01b2b4d85541fd47e17fd95b5db6c23e5ccb14f3f49ab3cf35c5dded2818d09a5c47e92055c"], 0xd0}}, 0x4000810) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r3, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="8a", 0x1}], 0x1}}], 0x1, 0x40080c5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0x6, 0x1}, {0xa, 0x3}}}, 0x24}}, 0x800) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x4, 0x5531, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xe) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)={'nat\x00', 0x0, [0x7a, 0x7fffffff, 0x7ff, 0x99d, 0x3]}, &(0x7f00000004c0)=0x54) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 5.605782566s ago: executing program 6 (id=409): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xb4440, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="120000000f0000000800000002"], 0x50) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000300), 0x0}, 0x20) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'macsec0\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x7}}) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1480, &(0x7f0000000340)={[{@minixdf}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@lazytime}, {@noload}, {@delalloc}, {@i_version}, {@discard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@nomblk_io_submit}, {@oldalloc}]}, 0x1, 0x477, &(0x7f0000001380)="$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") 5.605527696s ago: executing program 6 (id=410): r0 = socket(0x2, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x8804, &(0x7f00000001c0)={0x11, 0x5, 0x0, 0x1, 0xa2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@remote, @private2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000045ac0300200012800b00010065727370616e000010000280040012000500090008000000"], 0x40}}, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x64000600) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4000000) r6 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x71) request_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x400017e) chmod(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 5.586453056s ago: executing program 6 (id=411): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) prlimit64(r0, 0xb, &(0x7f0000000200)={0x3, 0x4}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x20000880) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000140), 0x0, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000140), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccd, &(0x7f00000001c0)=0x2) setresgid(0xffffffffffffffff, 0xee01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r4, 0x5) (async) listen(r4, 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xc001, 0x0, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0xc001, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) syz_open_procfs(r1, &(0x7f0000000240)='stat\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, r8, 0x1, 0xfffffffc, 0x3, {{}, {}, {0x8, 0x11, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c810}, 0x4800) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, r8, 0x1, 0xfffffffc, 0x3, {{}, {}, {0x8, 0x11, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c810}, 0x4800) 5.477654218s ago: executing program 6 (id=413): clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001d00030029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007e010a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r3, &(0x7f0000001f40), 0x0, 0x40030002, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x1) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f00000000c0)=""/58, 0x3a) getdents64(r8, 0xfffffffffffffffe, 0x29) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4f23, 0x9, @private2, 0x3f}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711813000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r9, 0x0) 4.548699438s ago: executing program 4 (id=416): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204000, &(0x7f0000000600), 0x1, 0x592, &(0x7f00000014c0)="$eJzs3V+IXFcZAPDvzmw2yXRtmthAUx8STTD9Q7LbDmwafTA+6IOV+lBBCvVhSSa7MbNJzG6xu75s33yyCIpKsTT0QVAwAR/Uh2IVRAQjiCIGaUHxQW2rYvpgjbpyZ+4kk5076+jOzk1zfz+YzLlnzu53zp39zs6cs5kbQGntS/9JIiYi4nJE7Ggf3txgX/vuW/VLcxfrl+aSWF19/C9Jq92F+qW5TtPO190RESsRcU9E/PBkxPEtvXEXlpZPzzSbjfPZ8eTi/LnJhaXlQ6fmZ2Ybs40z9fojR6enjx6ZnvofRpOs++gnzr2+69dzj82+sPefTxyZf/HPSRxrjTvWjGOY8no0lkQc24xgBaim44mI2oDtdzeefWmTu8SAvrjrymT63N0dEQda+b8jqq1nM+IDzz/5tx3x/mv9vvbylef/OMq+AgDDs5rauv7DXXoqgLevSqTv/ZPK4YholyuVw4fb7+HvjlqleXZh8cGTZ586c6K9RnBXbKmcPNVsTGVrBXfFliQ9fqhVvnH88JrjekTsjIjPVbe3jg8fP9s8MdKZDuiYiHj1258+Pn7Hmvz/Q7Wd/8DtK83/X/7ou99Py29Wi+4NMEpp/n/jzflHQ/5D6ch/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kN5rZf/4wX1CRiN7vz36x/Kaefel68kEbHyvu2tW3T9/s/52B7gNrK6mvg//VBSXvtDeY0V3QGgMN7jA+t/cnbEtn4PnBt+X4DRqBTdAaAwB/fY/4Oysv4P5WX9H8rLa3zA+j+Uj/V/KK+JPtf/ekfXtbumIuLOiPhpdcvWzrW+2lYL7Tvw/5mIePW5y995MqLypyR7/X9wx4GJmddf+UF3u/Hk760tgvGI+Mxzj3/56ZnFxfMPpfV/vV6/+JWs/uGiRgMMopOnnTwGymthafn0TLPZOJ8WXqtlhes1t2jhxxFxC3RDQWH4he2jDNqZBy7UL811brkTxSb8ocCzD0S88cH2907jXsxunYDttcltrT3K2tXkpi4kQ9i7/PyhiJVnIuKevPEn2fXO2zsftavVnvjvzO7T255s/SRts3vA+NU7Nxb/3q74e7viv2vA+Fc+PmDDTbLzm8XGf+E32fmfGhvLO/8b/ZHf9V8ef/TrGwywQb//XbHxD+wtNv6Xzka8nM4/U3n5V0nT8vrO59r5Z2IIn5P42YM35r+LPfNf5fr8V+0z/+0bMM5Pnmh8Mq+++rOIN56JuDc3fifetlas2tVKT/z9XfPPfevEf+2jvzidV3/slYjVCxEHIz9+d6zJxflzkwtLy4dOzc/MNmYbZ+r1R45OTx89Mj012VqjnuysVPd67NruD+XV7/9ae/y1PvE74+93/gdd/V7+6qcm3p1T//M97fj37c9//ndl8dvnf6wn/nuy+/Tn5F/Z3/Kmbd6KiK1Z/f0R8b2Xdj6Q16+PXGvHP9Fn/JWb4veO/8EBx/+F3/77qYiPvbi2/ukPD/gNAICh6r80UHTPAACAYRvFTmPRYwTy1a6OR/c2cLLSta+wcmNfIa1/K9tfqK5E/CPbY0jr7892ydJy7kYDcMvZvfzeXxXdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICyW1haPj3TbDbOLxTdE2DU/hMAAP//hLQA8w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000440)) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x29, 0x33e, &(0x7f0000000480)="$eJzs3T1sW1UUAODjPidOIpVkQEIwGTYkVDVBDDAlqopUkQGKLP4WIppAyTOVYmEpDHWzFDGCWJDY2DrAyIwYEGJjYKUDKiAWulVqxUP2e7aff0JThMPf9w3V6bnn+N13cxW/RMnNq+uxe2Eudm7evBELC5Worp9Zj1uVWIkTkUTuSgAA/yW3six+zXJ3r/5gqR/Nz3heAMDs9N7/Xz+Z/yeNiFosTq+8eqzzAgBm54hf/z87NXtpZtMCAGZo4v3/kZHhsW/zVwc/EwAA/Hs9/9LLz2xsRpyv1xcimu+2G+1GPDUcX4y4GGlsx+lYjjsR+YNC/rTQ/ffpc5tnT9e7flyJRrej3YhodtqN/ElhI+n112I1lmOl6M8G/Um3f7XXX4+IK53e9aNZaTfmYqnbvxMXv1+K7ViL5bh/oj/i3ObZtXrxAo1mv78TcRAL/Zvozv9ULMe3r8WlSONCdHuH87+8Wq+fyTZH+tvXar06AAAAAAAAAAAAAAAAAAAAAACYhVP1gZXB+TdZs9O+en68YGXkfJxGPryx0zvf5yA/Hyir9U/neS8ZPx9o9HyedqMaJ/7WOwcAAAAAAAAAAAAAAAAAAIB/jtb+fGyl6fZea/+d3XLQKWXe+vrTLxdjvObNZJiJav5yIzVFLkpdSQzas0F7lozUFEESMSy+9vlgxuWa2uAuJtq7QW1iqFLMaStNTz78w8fTun4bZpKYWJbRoFJcvzTUvC9P/UHX4cHaXWquZ1l2WPvljya7ohJRnfjA/RXBVzfeePDx1gNP9DJfFIc+PPrY8gvXP/zk592tNIqlSdP5vdad7E9fKyntn0qxzpUpO2F6cDDMHOy19reS73558aH3v+nXVPOdkEzfP1k58/bh1/psPDOfB91pHuVO56Zs/unBK7cHu/eeF3O+WLSfjtpV+iThoA4AAAAAAAAAAAAAAAAAADgWpd8VvwdPPje7GQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8Rv+/f9ScDCROUpwuxOTQ7XtvdahF1881lsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7PcAAAD//9Yzc50=") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x14, "0062007d82000000000000002240f7ffffff00"}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x14, "0062007d82000000000000002240f7ffffff00"}) syz_open_pts(r1, 0x0) (async) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000180)={0x4, 0xcc41, 0x7, 0xa6f, 0x4, "a2e99c1d2c2ecc324a6c15f68e8f36bdcf297a"}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 4.465766489s ago: executing program 6 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0) getdents64(r1, &(0x7f0000000600)=""/102, 0x66) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e96cd"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="4800000010000173e663f2f6e7944d9d2fef2404ae07f4a4f502b45ed0faf74c4c538c1ecd25c4712c83e48cd3878d5e4e0b35c307a000"/67, @ANYRES32=0x0, @ANYBLOB="514200000100060013001280000001007663616e0000000000000280"], 0x48}}, 0x4000) pwritev2(r0, &(0x7f0000001200)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="aff25c57d97392b57ec3c789dada57cccae3d5439fcf2776c508483b23dd7b0fb4c26c49015508c452a9935071ce86b91104d57bb533babb9314becb938765c34db4bfa6d7141d01fece4ebe1ce3606903b9997abe9a3554dabeb9b2af0bb2378a6ee0a382e52c039becb0558a73def7121fe8a6f5a88b1521ed22f695461486df9a62ad0150fc1e8259ee87", 0x8c}], 0x2, 0x2, 0x3, 0x2) 4.3770506s ago: executing program 4 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r5, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.555967559s ago: executing program 5 (id=420): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$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") sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d0000180"], 0xe4}}, 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0xde, 0x0}, 0x40) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/55, 0x37) 3.42448309s ago: executing program 2 (id=424): socket$nl_generic(0x10, 0x3, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x2801cb0, 0x0, 0x0, 0x0, &(0x7f0000002980)) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/netfilter\x00') getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r4, 0x5, 0x4000003}) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async) r10 = fsmount(r9, 0x0, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r8, r10, 0x1e, 0x0, @void}, 0x10) (async) r11 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r11, &(0x7f0000002080)={0x2020}, 0x2020) 3.383451301s ago: executing program 4 (id=425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x4, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x60) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x7f}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000083c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r7 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="a4b5a9a17ac4c02300d6b8ebe250c618000000060000000000509f0fb7000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) 3.249777243s ago: executing program 2 (id=426): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xf) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x5ecfb203) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x0, @rand_addr=0x64010101, 0x4e22, 0x4, 'none\x00', 0x6874402917dc61fd, 0x8, 0x38}, 0x2c) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='[!{', 0x0, 0xffffffffffffffff) 3.246833253s ago: executing program 5 (id=427): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000011c0)=ANY=[@ANYBLOB="44010000100033062cbd700000000000fc020000000000000000000000000000ac1e00010000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000700000000000000000000000000000000000000020000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900000000"], 0x144}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000011c0)=ANY=[@ANYBLOB="44010000100033062cbd700000000000fc020000000000000000000000000000ac1e00010000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000700000000000000000000000000000000000000020000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900000000"], 0x144}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r5, @ANYBLOB="00646d61736b3d309a02003030303030303030303135322c696f63686172e8ffffff69736f383835392d312c6769643d00000000000000", @ANYRES16=r6, @ANYRESHEX=r5, @ANYRES64=r4, @ANYRESOCT=r6], 0x81, 0x14ff, &(0x7f0000002a80)="$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") setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, r5}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {0x7f}, 0x0, 0x0, 0x1, 0xfb307d8998585c96, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x3b, 0x0, &(0x7f00000014c0)) (async) getsockopt$sock_buf(r7, 0x1, 0x3b, 0x0, &(0x7f00000014c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001300050000000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000400000000001400030064756d6d793000000000000000000000050021000000000024002b8008000100", @ANYRES32, @ANYBLOB="080003000b"], 0x60}}, 0x8084) 2.456079332s ago: executing program 5 (id=429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x8000) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x2, 0x200, 0x5, 0x81, 0x1, 0xd5f}) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0x48f, 0x0, 0x6}, {0x96d, 0x0, 0x7}]}) 2.381847893s ago: executing program 4 (id=430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x1, 0x1, 0x0, 0xd, 0x80, 0x2, 0x80000000, 0x0, 0x7, 0x9}}, 0x3c}}, 0x20040000) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r1, 0x4008af75, &(0x7f00000000c0)={0x2, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x3}, 0xb5}) r4 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/10, 0xa}], 0x1, 0x81000006, 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="57bfe1f3d0f8"}) 2.284883774s ago: executing program 5 (id=431): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000006fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 2.257941454s ago: executing program 2 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x14000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x2}}, {@fscache}, {@afid={'afid', 0x3d, 0x17c}}, {@directio}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}], 0x6b}}) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) symlink(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.185799615s ago: executing program 2 (id=433): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r3, &(0x7f0000000480)=""/238, 0xee, 0x10120, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@sg0, 0xee01, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./file0\x00') 2.156081005s ago: executing program 4 (id=434): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x20040c0, &(0x7f0000000280)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@grpquota}, {@bh}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4, @ANYBLOB], 0x18}}, 0x1) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000a40)="2187c1e82b159db85c20c1b54ef5da0e9bce177e4537c0c2fb61eec3c09a78ca1e41f4d749463b2cebc25d8cd70b9f909cb29e8a056320d4dd2d95cd02a305f9c991c0ab676eb17fecc92a85926eaa8a02e9c48f9cca0408d5d670d159723be8e722469a75172f1acbc7e16a659b442a7cf3609961306252f76db5ac5c1eacf944bb390c2e08de68d9b9bb09037aac75f7ec817f11d0848fe4d7c4a727b6701c602fb2a95caf7e12cc155b6dfb3d81ed074eb80d4fb835df25cbb3630b418e22b039a7432c051952a4185b8f99176b52a0789392", &(0x7f0000000380)="48cef3920714a2106b5214a995871611cf7097095f4180ff3f4dce81718b538c43cd57e1303b9eed985145e80b5bf711bfc5a1e9ce515910d6cd4d2e037e30e823fbef1485464a98c0d0f564d03d87c9604b4e0ab70700ebe50ae1677cf57d5a306b44a24c825810bb2bfcbea3a7abfb5d"}}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000000)={0x0, 0x4, 0x4, @tid=r5}, &(0x7f0000000140)=0x0) timer_settime(r6, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYRES32=r0, @ANYBLOB="1da460e3b1d8f28d3f312b2af308313b0fcc333406dd2ea421e9e8bec6fb070e96d4b12c8968dd30bce6a7627075298883160621e5960bd1a3d7e9342d7356bc0a5c9e4b38", @ANYRES32, @ANYRESDEC=r3], 0x38}, 0x1, 0x0, 0x0, 0x4048917}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000440)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file1\x00', 0x200408dc, &(0x7f0000000380)=ANY=[], 0x81, 0x14f7, &(0x7f0000000c40)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@sg0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r10 = dup2(r9, r9) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1c00, 0xda3, 0x7fff, 0x5, 0x11}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa0a0000004803006400000000002f907800000000e000000186090000000300030e0181000000000010000800000086dd080088be000000041000003e0100000000003d6da5e20000080022eb00000001200b000202000000000000000000000008006558"], 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r11, 0x0) 2.068440376s ago: executing program 6 (id=435): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000013312400000024000000090000000c0000000000000804000000000000000000000300000000020000000200000006000000002e00000000306100"], 0x0, 0x45}, 0x28) syz_usb_connect$uac3(0x3, 0x89, &(0x7f0000000540)=ANY=[@ANYBLOB="120150020000000899040a154000010203010902770003010980d4080b0001012230020904000000010130000a2401000a008a0d0000090401000001023000090401010101"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 1.873805478s ago: executing program 2 (id=436): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x24005000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x8001, 0xf) (async) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000950000/0x3000)=nil, &(0x7f0000953000/0x1000)=nil, 0x3000, 0x2}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4002}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x10}}, 0x18}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x3}]}, @struct={0x2, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x1000000, 0x2, 0x1}]}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4074, 0x48, 0xfea, 0x2}, 0x28) (async) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000046f000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@in_dx={0x69, 0x20, {0x4e8a, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2809, 0xffffffff, 0xfff, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x2ae}}, @in_dx={0x69, 0x20, {0x4b0a, 0x3}}], 0xa8}) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/196, 0xc4}], 0x1) munmap(&(0x7f0000fdb000/0x4000)=nil, 0x4000) 1.803348429s ago: executing program 4 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x83, 0x10, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0x200009}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x42, 0x3, 0x6, {0xa, 0x25, 0x25, 0x2000, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x20000000, 0x5, 0xbe1}}}}}}}}]}}, 0x0) 1.316331165s ago: executing program 1 (id=442): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xf) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x5ecfb203) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x0, @rand_addr=0x64010101, 0x4e22, 0x4, 'none\x00', 0x6874402917dc61fd, 0x8, 0x38}, 0x2c) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='[!{', 0x0, 0xffffffffffffffff) 800.72921ms ago: executing program 2 (id=443): syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x22eb, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) syz_usb_connect$uac1(0x2, 0xf5, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x4661, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x80, 0x0, 0x20, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x48}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x4, 0x8, "c7"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x1, 0x2e, 0x6b0, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x3, 0x5, 0x5, 0xe1, 0x1}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x4, 0x0, "30da8260a1"}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x1, 0x1, [0x4], 0x4}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x6, 0xb6, "7cba"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7f, 0x4, "f43905264529ba60"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7f, 0x101, 0x8, '`'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x1}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3f, 0xa, "7927fbef8d278b59"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xc0, 0x1, 0x3e, 0xb1, "a281c7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0xe9, 0x9, {0x7, 0x25, 0x1, 0x8, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x9, 0x40}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd1, 0x0, 0xf8, {0x7, 0x25, 0x1, 0xc, 0x4, 0x6}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x50, 0x7, 0x40, 0xa, 0x10, 0x3d}, 0x28, &(0x7f0000000580)={0x5, 0xf, 0x28, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x3c}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x8001, 0xf00, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x4, 0x4}]}, 0x1, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x409}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100b410ed3393f55b209f42dcac26bd7000fddbdf2501000000080002800400018018000180140002006c6f00"/58], 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x800) 353.701005ms ago: executing program 1 (id=444): ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x4) init_module(&(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x7b, 0x1, 0xff, 0x4, 0x8, 0x2, 0x3e, 0x8, 0xee, 0x40, 0x20, 0xdc92, 0x3, 0x38, 0x1, 0x6, 0x8, 0xffff}, [{0x1, 0x5b, 0x1, 0x4, 0x2, 0x1ff, 0xe33, 0x8}]}, 0x78, 0x0) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x2000, 0x5) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x52b}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001640)={'syztnl1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002680)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x8001, r1}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 318.217536ms ago: executing program 1 (id=445): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x100bfff) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x3000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x0, 0x1b8, 0x288, 0x288, 0x0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [0xffffffff, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0xd}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @local, [0xffffff00, 0xff000000, 0xffff00, 0xffffff], [0xff, 0x0, 0xff, 0xff000000], 'veth1_macvtap\x00', 'geneve0\x00', {}, {0xff}, 0x3c, 0xff, 0x1, 0x78}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x17}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xca, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r5 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {0x2}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x1}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0xfffffffffffffe61}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2600c2, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r6, @ANYBLOB="62b5ee06954619910bef810bb8bb93169ac25423bd095dee82d48e95d09c67c164e48065208655dfe8423398ba86629cd7e0c9b44de6ee1957d98192dc9c2f0cbcffd238068fdea2f58054d68ec59767022f731d26db1002f4c2022bc5e0312ae58f9185d464f2f2aa23aa518002ebc3f4336471d197a610aa775bc0", @ANYBLOB=',wfdno=', @ANYRES16=r6, @ANYRESOCT=r6]) 307.210716ms ago: executing program 1 (id=446): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) setuid(0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183b41, 0x51) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x2, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) r1 = fsopen(&(0x7f0000004900)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000004940)='inode32', &(0x7f0000004980)="9c", 0x1) readv(r1, &(0x7f0000000080), 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x71a00000}, 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x9, 0x800800}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) syz_clone(0x2c800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x304, 0x0) 172.197918ms ago: executing program 1 (id=447): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000240)={[{@nobh}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@usrjquota}, {@barrier}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x48f, &(0x7f0000001380)="$eJzs289rHGUfAPDvTLJJ+/ZH8vbtq7ZWjRYhKCZNWrUHL0oFkYqCHuoxJtsSum2kiWJrsamIJ0EKehaPon+BJ0UQ9SR49eRJCkV7aespMpOZZLPd/KDZZNPu5wMz+zwzz+w8333mx7Pz7AbQsQayWRKxMyJ+j4i++ezSAgPzLzevXxy/df3ieBJzc6//leTlbly/OF4WLbfbUWQG04j0o6TYyVLT5y+cHqvVqueK/PDMmbeHp89feOrdM2OnqqeqZ0ePHj1yeOTZZ0afbkmcWVw39n8wdWDfS29eeWX8xJW3fv4mq+/OYn19HK0ykAX+91yucd3jrd5Zm+3K5735POluc2VYs66IyJqrkp//fdEVi43XFy9+2NbKARsquzf1Lr96dg64hyWx1pKVumsGcPcrb/TZ999y2oRux5Zx7fn5L0BZ3DeLaX5Nd6RFmcrC99vWG4iIE7P/fJFNsUHPIQAA6n0y/vnxnuiN9299/XLW9+hbWJPGffnrH/l8dzGG0h8R/42IPRHxv4jYGxH/j8jL3h8RD6yzPrf3f9Kr63zLFWX9v+eKsa2l/b+y9xf9XUVuVx5/JTk5WaseKj6Twaj0ZvmRFfbx/bHfPl1uXX3/L5uy/Zd9waIeV7sbHtBNjM2MRWU9US+6djlif3ez+JOFkYAkIvZFxP6FrdY0wLO7TEw+8dWB5QqtHv8KWjDONPdlFt5sFv9sNMRfSurHJydvG58c3ha16qHh8qi43S+/fvzacvtfV/wtcK06/1rX/o1F+pP68drp1u7/Do//tCd5Ix9n7inGHN8bm5k5NxLRkxzP898VzZcvH13ctsyX5bPjf/Bg8/N/T7FN9lYPRkR2ED8UEQ9HxCNF3R+NiMci4uAKMf70wurxR9qm9r8cMdH0+rdw/De0//kLp8tL4+KSFRNdp3/8drn9r639j+SpwWJJfv1bRbPqdDep8p1+bgAAAHA3SfPfwCfp0EI6TYeG5n/Dvzf+k9ampmeePDn1ztmJ+d/K90clLZ909RXPQ2uTtepIMlu8YyU5FrXqaPGsuHxeerh4bvxZ1/Y8PzQ+VZtoc+zQ6XYsc/5n/uxqd+2ADba96dLRnk2vCNAGjePo6dLspVfDxQDuVf6vDZ1rlfM/3ax6AJvP/R86V7Pz/1JD3lgA3Jvc/6FzOf+hQ6U/tLsGQBu5/0NHWvXP++1JbKtf0rNy4Z4tUueWJbZqo+SJiDKRbon6SGxQot1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA//9vGdqJ") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ppoll(&(0x7f0000000480)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=448): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x41, 0x0, [{0x486, 0x0, 0x7f}]}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000280)={[{@noinit_itable}]}, 0xf7, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYBLOB="a06fa3d001c57a9e8744d0b211f6c05efdd1ce7bbabf7c344ef8f191a15451ebc8d31981f8", @ANYBLOB="040000000000800008000000", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="abe2b898a056bbaf52d1a9706a6e1011d007babbe668a1ed8574495db53c0d7cd782b27808324376be2fdc7df4aec6d0017b46d507b08a7a226a4f", @ANYBLOB="100000000000000020"], 0x5c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)="1e45275b378ef8530f52df44cee7fa90768c", &(0x7f0000000100), 0x4, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ab2}, [@call={0x85, 0x0, 0x0, 0x9}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000000)='./bus\x00', 0x39) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) mount$bind(0x0, 0x0, 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 22.077361][ T24] audit: type=1400 audit(1778092645.109:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.078355][ T271] cgroup: Unknown subsys name 'net' [ 22.100087][ T24] audit: type=1400 audit(1778092645.109:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.127474][ T24] audit: type=1400 audit(1778092645.139:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.127620][ T271] cgroup: Unknown subsys name 'devices' [ 22.271254][ T271] cgroup: Unknown subsys name 'hugetlb' [ 22.277397][ T271] cgroup: Unknown subsys name 'rlimit' [ 22.383651][ T24] audit: type=1400 audit(1778092645.419:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.406799][ T24] audit: type=1400 audit(1778092645.419:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.415723][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.432009][ T24] audit: type=1400 audit(1778092645.419:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.463753][ T24] audit: type=1400 audit(1778092645.509:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.489173][ T24] audit: type=1400 audit(1778092645.509:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.489332][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.514725][ T24] audit: type=1400 audit(1778092645.509:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.514739][ T24] audit: type=1400 audit(1778092645.509:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.012756][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.019979][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.027242][ T279] device bridge_slave_0 entered promiscuous mode [ 23.034890][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.042017][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.049243][ T279] device bridge_slave_1 entered promiscuous mode [ 23.162687][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.169712][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.177290][ T283] device bridge_slave_0 entered promiscuous mode [ 23.186679][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.193836][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.201196][ T283] device bridge_slave_1 entered promiscuous mode [ 23.214870][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.222061][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.229290][ T286] device bridge_slave_0 entered promiscuous mode [ 23.249385][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.256569][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.263961][ T280] device bridge_slave_0 entered promiscuous mode [ 23.270568][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.277583][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.284945][ T286] device bridge_slave_1 entered promiscuous mode [ 23.306517][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.313733][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.321050][ T280] device bridge_slave_1 entered promiscuous mode [ 23.354897][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.362087][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.369411][ T285] device bridge_slave_0 entered promiscuous mode [ 23.377497][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.384621][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.392035][ T285] device bridge_slave_1 entered promiscuous mode [ 23.448282][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.455346][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.506487][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.514468][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.522044][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.561557][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.569751][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.577928][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.584944][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.592796][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.600927][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.607948][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.615264][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.640420][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.670489][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.681705][ T279] device veth0_vlan entered promiscuous mode [ 23.691051][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.699001][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.706476][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.723892][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.731704][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.739023][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.747148][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.754171][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.762016][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.769351][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.777611][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.784632][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.792077][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.800224][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.807316][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.815459][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.823087][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.835592][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.844051][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.852454][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.859478][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.867420][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.875638][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.882662][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.890016][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.898077][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.905094][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.912562][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.925778][ T279] device veth1_macvtap entered promiscuous mode [ 23.937590][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.945726][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.955391][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.975892][ T283] device veth0_vlan entered promiscuous mode [ 23.986738][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.995184][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.003065][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.011038][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.018425][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.026789][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.034764][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.043148][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.051114][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.059165][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.066193][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.073797][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.092210][ T283] device veth1_macvtap entered promiscuous mode [ 24.103050][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.111493][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.111721][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 24.119672][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.133520][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.142228][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.150640][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.159149][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.167308][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.175218][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.183282][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.191378][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.199132][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.207218][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.215559][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.223810][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.231516][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.238877][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.248015][ T285] device veth0_vlan entered promiscuous mode [ 24.258363][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.260402][ T285] device veth1_macvtap entered promiscuous mode [ 24.279186][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.292321][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.301314][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.309394][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.317640][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.325969][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.334225][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.341880][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.356555][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.376522][ T280] device veth0_vlan entered promiscuous mode [ 24.388012][ T280] device veth1_macvtap entered promiscuous mode [ 24.394910][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.404458][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.413186][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.421511][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.429974][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.437928][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.446099][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.455326][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.463684][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.472118][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.480275][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.490057][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.497652][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.514231][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.530076][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.538359][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.547323][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.571603][ T286] device veth0_vlan entered promiscuous mode [ 24.582019][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.591744][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.600948][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.609180][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.617881][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.625897][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.634188][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.641703][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.656904][ T286] device veth1_macvtap entered promiscuous mode [ 24.667864][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.686444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.697401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.714714][ T306] F2FS-fs (loop1): invalid crc value [ 24.718884][ T312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 24.749281][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.754641][ T306] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.758848][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.772881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.783010][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.864811][ T319] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 24.875465][ T316] mmap: syz.3.4 (316) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 24.892895][ T316] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 24.898956][ T306] F2FS-fs (loop1): Start checkpoint disabled! [ 25.180195][ T306] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 25.326730][ T334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.429544][ T7] attempt to access beyond end of device [ 25.429544][ T7] loop1: rw=2049, want=40984, limit=40427 [ 25.821905][ T343] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.8: inode has both inline data and extents flags [ 25.835032][ T343] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.8: couldn't read orphan inode 15 (err -117) [ 25.846855][ T343] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 25.873527][ T343] process 'syz.1.8' launched './file0' with NULL argv: empty string added [ 25.884035][ T343] Invalid argument reading file caps for ./file0 [ 25.911706][ T348] fuse: Bad value for 'user_id' [ 26.023113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 26.026663][ T359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=359 comm=syz.2.14 [ 26.031982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.053036][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 26.061479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.069711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.082467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.094879][ T359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 26.107518][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.117311][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.264264][ T362] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.16: iget: bad i_size value: 38620345925642 [ 26.264802][ T365] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 26.276957][ T362] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.16: couldn't read orphan inode 15 (err -117) [ 26.336984][ T365] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.348510][ T362] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 26.385270][ T355] F2FS-fs (loop3): Unrecognized mount option "V1Kg |sdS:ӳW@q'h{Հ4E> #Nr Rb" or missing value [ 26.870579][ T385] ====================================================== [ 26.870579][ T385] WARNING: the mand mount option is being deprecated and [ 26.870579][ T385] will be removed in v5.15! [ 26.870579][ T385] ====================================================== [ 26.904029][ T367] F2FS-fs (loop4): Test dummy encryption mode enabled [ 26.918157][ T367] F2FS-fs (loop4): invalid crc value [ 26.934989][ T367] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.962820][ T385] EXT4-fs (loop1): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 27.077714][ T367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 27.179131][ T24] kauditd_printk_skb: 87 callbacks suppressed [ 27.179142][ T24] audit: type=1400 audit(1778092656.208:161): avc: denied { read write } for pid=396 comm="syz.2.22" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.228199][ T367] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 27.240141][ T24] audit: type=1400 audit(1778092656.208:162): avc: denied { open } for pid=396 comm="syz.2.22" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.300206][ T24] audit: type=1400 audit(1778092656.208:163): avc: denied { ioctl } for pid=396 comm="syz.2.22" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.386586][ T24] audit: type=1400 audit(1778092656.258:164): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.406907][ T24] audit: type=1400 audit(1778092656.308:165): avc: denied { lock } for pid=399 comm="syz.3.23" path="socket:[15074]" dev="sockfs" ino=15074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 27.431910][ T24] audit: type=1400 audit(1778092656.308:166): avc: denied { setopt } for pid=399 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.451263][ T395] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 27.523241][ T385] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 27.530885][ T385] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 27.540167][ T385] F2FS-fs (loop1): Unrecognized mount option "whint_mo" or missing value [ 27.618282][ T388] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.649852][ T388] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.679394][ T418] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.24: iget: bad i_size value: 38620345925642 [ 27.692443][ T418] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.24: couldn't read orphan inode 15 (err -117) [ 27.705599][ T418] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue [ 27.712490][ T387] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 27.730444][ T395] usb 3-1: device descriptor read/64, error -71 [ 27.736847][ T24] audit: type=1400 audit(1778092656.768:167): avc: denied { remove_name } for pid=386 comm="syz.0.21" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.749284][ T415] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,,errors=continue [ 27.763393][ T24] audit: type=1400 audit(1778092656.768:168): avc: denied { rename } for pid=386 comm="syz.0.21" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.791696][ T24] audit: type=1400 audit(1778092656.768:169): avc: denied { unlink } for pid=386 comm="syz.0.21" name="file0" dev="loop0" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.814038][ T24] audit: type=1400 audit(1778092656.778:170): avc: denied { append } for pid=386 comm="syz.0.21" name="file1" dev="loop0" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.838012][ T440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30'. [ 27.858649][ T440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30'. [ 27.871053][ T440] Zero length message leads to an empty skb [ 28.009924][ T308] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.033782][ T457] Illegal XDP return value 51, expect packet loss! [ 28.304669][ T395] usb 3-1: device descriptor read/64, error -71 [ 28.339853][ T308] usb 2-1: Using ep0 maxpacket: 8 [ 28.579854][ T287] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.599851][ T395] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 28.619914][ T308] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 28.629047][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.637081][ T308] usb 2-1: Product: syz [ 28.641285][ T308] usb 2-1: Manufacturer: syz [ 28.645870][ T308] usb 2-1: SerialNumber: syz [ 28.837274][ T287] usb 1-1: Using ep0 maxpacket: 16 [ 28.843531][ T469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37'. [ 28.869880][ T395] usb 3-1: device descriptor read/64, error -71 [ 28.949902][ T308] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 28.959915][ T287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.970193][ T308] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 28.977467][ T287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.989888][ T308] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 29.009958][ T308] snd-usb-audio: probe of 2-1:1.1 failed with error -2 [ 29.029949][ T308] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 29.049903][ T308] snd-usb-audio: probe of 2-1:1.2 failed with error -2 [ 29.058596][ T308] usb 2-1: USB disconnect, device number 2 [ 29.079988][ T309] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 29.139878][ T287] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.139886][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.156430][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.164971][ T287] usb 1-1: Product: syz [ 29.169120][ T287] usb 1-1: Manufacturer: syz [ 29.173767][ T287] usb 1-1: SerialNumber: syz [ 29.269875][ T395] usb 3-1: device descriptor read/64, error -71 [ 29.359875][ T309] usb 4-1: device descriptor read/64, error -71 [ 29.389893][ T395] usb usb3-port1: attempt power cycle [ 29.410286][ T462] udc-core: couldn't find an available UDC or it's busy [ 29.417238][ T462] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.509888][ T5] usb 5-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 29.509906][ T287] usb 1-1: 0:2 : does not exist [ 29.520100][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.529407][ T287] usb 1-1: USB disconnect, device number 2 [ 29.555090][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.745685][ T5] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 29.809872][ T395] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 29.909910][ T5] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 29.918994][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.927007][ T5] usb 5-1: Product: syz [ 29.931203][ T309] usb 4-1: device descriptor read/64, error -71 [ 29.937426][ T5] usb 5-1: Manufacturer: syz [ 29.942101][ T5] usb 5-1: SerialNumber: syz [ 29.979979][ T395] usb 3-1: device descriptor read/8, error -71 [ 30.005834][ T480] netlink: 'syz.0.41': attribute type 12 has an invalid length. [ 30.013830][ T480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.41'. [ 30.171366][ T484] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 30.182215][ T54] usb 5-1: USB disconnect, device number 2 [ 30.200093][ T309] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 30.209980][ T395] usb 3-1: device descriptor read/8, error -71 [ 30.299967][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.316045][ T490] netlink: 'syz.2.45': attribute type 12 has an invalid length. [ 30.324211][ T490] netlink: 'syz.2.45': attribute type 29 has an invalid length. [ 30.332331][ T490] netlink: 148 bytes leftover after parsing attributes in process `syz.2.45'. [ 30.341339][ T490] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 30.348989][ T490] netlink: 'syz.2.45': attribute type 2 has an invalid length. [ 30.356704][ T490] netlink: 15 bytes leftover after parsing attributes in process `syz.2.45'. [ 30.365684][ T491] netlink: 'syz.2.45': attribute type 12 has an invalid length. [ 30.373916][ T491] netlink: 'syz.2.45': attribute type 29 has an invalid length. [ 30.381698][ T491] netlink: 148 bytes leftover after parsing attributes in process `syz.2.45'. [ 30.390723][ T491] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 30.398329][ T491] netlink: 'syz.2.45': attribute type 2 has an invalid length. [ 30.406084][ T491] netlink: 15 bytes leftover after parsing attributes in process `syz.2.45'. [ 30.479855][ T309] usb 4-1: device descriptor read/64, error -71 [ 30.539457][ T496] 9pnet: Unknown protocol version 9~2000.L [ 30.579905][ T5] usb 1-1: device descriptor read/64, error -71 [ 30.586859][ T498] EXT4-fs (loop2): filesystem is read-only [ 30.593350][ T498] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 30.605075][ T498] EXT4-fs (loop2): filesystem is read-only [ 30.610946][ T498] EXT4-fs (loop2): orphan cleanup on readonly fs [ 30.617522][ T498] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.47: bg 0: block 64: padding at end of block bitmap is not set [ 30.631744][ T498] EXT4-fs (loop2): Remounting filesystem read-only [ 30.638259][ T498] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 30.647319][ T498] EXT4-fs (loop2): 1 orphan inode deleted [ 30.653080][ T498] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,noblock_validity,barrier=0x0000000000000008,barrier,noblock_validity,noblock_validity,minixdf,nolazytime,errors=remount-ro,norecovery, [ 30.675307][ T498] EXT4-fs error (device loop2): ext4_lookup:1830: inode #15: comm syz.2.47: iget: bad i_size value: 360287970189639690 [ 30.879832][ T309] usb 4-1: device descriptor read/64, error -71 [ 30.983729][ T5] usb 1-1: device descriptor read/64, error -71 [ 31.000066][ T309] usb usb4-port1: attempt power cycle [ 32.106646][ T522] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.113804][ T522] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.142390][ T522] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 32.159931][ T395] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 32.214356][ T24] kauditd_printk_skb: 43 callbacks suppressed [ 32.214366][ T24] audit: type=1400 audit(1778092661.248:214): avc: denied { setopt } for pid=528 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.240171][ T5] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.248073][ T24] audit: type=1400 audit(1778092661.248:215): avc: denied { write } for pid=528 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.267259][ T24] audit: type=1400 audit(1778092661.248:216): avc: denied { bind } for pid=528 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.286369][ T24] audit: type=1400 audit(1778092661.278:217): avc: denied { connect } for pid=530 comm="syz.3.59" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.379877][ T395] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 32.390743][ T15] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.398300][ T395] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.463611][ T24] audit: type=1400 audit(1778092661.498:218): avc: denied { getopt } for pid=537 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.499990][ T395] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.509908][ T5] usb 1-1: device descriptor read/64, error -71 [ 32.519975][ T395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 32.528025][ T395] usb 3-1: SerialNumber: syz [ 32.559866][ T504] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 32.583709][ T534] F2FS-fs (loop3): invalid crc value [ 32.614372][ T534] F2FS-fs (loop3): Found nat_bits in checkpoint [ 32.629916][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 32.651079][ T534] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 32.658709][ T24] audit: type=1400 audit(1778092661.688:219): avc: denied { mount } for pid=532 comm="syz.3.60" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.759946][ T15] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.775441][ T15] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.784888][ T504] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 32.919948][ T5] usb 1-1: device descriptor read/64, error -71 [ 32.959892][ T15] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.972231][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.988901][ T15] usb 5-1: Product: syz [ 32.997542][ T15] usb 5-1: Manufacturer: syz [ 33.002547][ T504] SELinux: duplicate or incompatible mount options [ 33.010879][ T15] usb 5-1: SerialNumber: syz [ 33.018997][ T24] audit: type=1326 audit(1778092662.048:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=503 comm="syz.2.49" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95b1b9dd9 code=0x7ffc0000 [ 33.039972][ T5] usb usb1-port1: attempt power cycle [ 33.079743][ T24] audit: type=1326 audit(1778092662.078:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=503 comm="syz.2.49" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95b1b9dd9 code=0x7ffc0000 [ 33.104845][ T24] audit: type=1326 audit(1778092662.078:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=503 comm="syz.2.49" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95b1b9dd9 code=0x7ffc0000 [ 33.132052][ T548] EXT4-fs (loop0): Ignoring removed nobh option [ 33.132060][ T24] audit: type=1326 audit(1778092662.078:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=503 comm="syz.2.49" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa95b1b9dd9 code=0x7ffc0000 [ 33.246421][ T548] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.253841][ T548] EXT4-fs (loop0): Ignoring removed orlov option [ 33.260348][ T548] EXT4-fs (loop0): Can't change test_dummy_encryption on remount [ 33.379882][ T15] usb 5-1: 0:2 : does not exist [ 33.399681][ T15] usb 5-1: USB disconnect, device number 3 [ 33.429854][ T504] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 33.436213][ T504] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 33.504033][ T504] F2FS-fs (loop2): invalid crc value [ 33.538328][ T504] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 33.793497][ T567] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.68: inode has both inline data and extents flags [ 33.878715][ T567] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.68: couldn't read orphan inode 15 (err -117) [ 33.994407][ T504] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 34.012849][ T567] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 34.024555][ T504] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 34.515978][ T567] devpts: called with bogus options [ 34.639368][ T567] incfs: Can't find or create .index dir in ./file0 [ 34.654274][ T567] incfs: mount failed -1 [ 34.699968][ T395] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 34.707492][ T395] usb 3-1: USB disconnect, device number 5 [ 34.831798][ T586] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff" or missing value [ 34.982097][ T15] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 35.001168][ T588] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 35.031403][ T588] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 35.039972][ T588] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.046710][ T588] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.71: Inode bitmap for bg 0 marked uninitialized [ 35.059244][ T588] EXT4-fs (loop2): Remounting filesystem read-only [ 35.065846][ T588] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000080,errors=remount-ro,inode_readahead_blks=0x0000000000800000,lazytime, [ 35.149913][ T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.229846][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 35.269903][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 36.092628][ T644] udc-core: couldn't find an available UDC or it's busy [ 36.111492][ T644] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.130632][ T644] udc-core: couldn't find an available UDC or it's busy [ 36.137590][ T644] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.147587][ T645] udc-core: couldn't find an available UDC or it's busy [ 36.164073][ T645] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.229924][ T15] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.243028][ T15] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 36.253288][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.262502][ T15] usb 5-1: config 0 descriptor?? [ 36.279857][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.289961][ T5] usb 1-1: config 0 has no interfaces? [ 36.295424][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.312148][ T308] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.321106][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.331536][ T5] usb 1-1: config 0 descriptor?? [ 36.619913][ T308] usb 3-1: device descriptor read/64, error -71 [ 36.839048][ T660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 37.012046][ T665] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 37.022141][ T665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e01c, mo2=0002] [ 37.030118][ T665] System zones: 1-12 [ 37.034300][ T665] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.040643][ T665] EXT4-fs error (device loop3): ext4_orphan_get:1421: comm syz.3.87: bad orphan inode 3 [ 37.050434][ T308] usb 3-1: device descriptor read/64, error -71 [ 37.056903][ T665] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,discard,barrier,data=writeback,errors=continue [ 37.132360][ T669] EXT4-fs (loop4): Unrecognized mount option "subj_type=[#[" or missing value [ 37.169864][ T15] usbhid 5-1:0.0: can't add hid device: -71 [ 37.175947][ T15] usbhid: probe of 5-1:0.0 failed with error -71 [ 37.183182][ T15] usb 5-1: USB disconnect, device number 4 [ 37.189580][ T313] udevd[313]: setting mode of /dev/bus/usb/005/004 to 020664 failed: No such file or directory [ 37.200119][ T313] udevd[313]: setting owner of /dev/bus/usb/005/004 to uid=0, gid=0 failed: No such file or directory [ 37.229521][ T673] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 37.237109][ T673] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.259481][ T673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 37.268269][ T673] System zones: 0-1, 3-36 [ 37.274164][ T673] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,grpjquota=,,errors=continue [ 37.314432][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 37.314443][ T24] audit: type=1400 audit(1778092666.348:242): avc: denied { map } for pid=668 comm="syz.4.88" path="/13/bus/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.575338][ T24] audit: type=1400 audit(1778092666.608:243): avc: denied { read } for pid=680 comm="syz.4.90" dev="nsfs" ino=4026532630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.599852][ T308] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.607389][ T24] audit: type=1400 audit(1778092666.608:244): avc: denied { open } for pid=680 comm="syz.4.90" path="net:[4026532630]" dev="nsfs" ino=4026532630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.732355][ T681] F2FS-fs (loop4): invalid crc value [ 37.738970][ T681] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.772723][ T681] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.876676][ T691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 37.886575][ T24] audit: type=1400 audit(1778092666.928:245): avc: denied { write } for pid=690 comm="syz.3.92" name="ptype" dev="proc" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.899851][ T308] usb 3-1: device descriptor read/64, error -71 [ 37.916397][ T24] audit: type=1400 audit(1778092666.928:246): avc: denied { read } for pid=690 comm="syz.3.92" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.945940][ T309] usb 1-1: USB disconnect, device number 5 [ 37.979724][ T24] audit: type=1400 audit(1778092666.928:247): avc: denied { open } for pid=690 comm="syz.3.92" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 38.005300][ T24] audit: type=1400 audit(1778092666.988:248): avc: denied { read } for pid=690 comm="syz.3.92" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.029676][ T24] audit: type=1400 audit(1778092666.988:249): avc: denied { open } for pid=690 comm="syz.3.92" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.085535][ T24] audit: type=1400 audit(1778092666.988:250): avc: denied { ioctl } for pid=690 comm="syz.3.92" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.201781][ T693] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 38.319895][ T308] usb 3-1: device descriptor read/64, error -71 [ 38.440047][ T287] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 38.448460][ T308] usb usb3-port1: attempt power cycle [ 38.820150][ T287] usb 1-1: config 4 has an invalid interface number: 34 but max is 0 [ 38.844971][ T287] usb 1-1: config 4 has no interface number 0 [ 38.859891][ T308] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.902278][ T287] usb 1-1: config 4 interface 34 has no altsetting 0 [ 39.129932][ T287] usb 1-1: New USB device found, idVendor=9e06, idProduct=c8f0, bcdDevice=36.c3 [ 39.153246][ T24] audit: type=1400 audit(1778092668.188:251): avc: denied { create } for pid=714 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.154790][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.199940][ T308] usb 3-1: device descriptor read/8, error -71 [ 39.219828][ T287] usb 1-1: Product: syz [ 39.224103][ T287] usb 1-1: Manufacturer: syz [ 39.228917][ T287] usb 1-1: SerialNumber: syz [ 39.254312][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.261402][ T720] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.268879][ T720] device bridge_slave_0 entered promiscuous mode [ 39.278389][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.285572][ T720] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.293168][ T720] device bridge_slave_1 entered promiscuous mode [ 39.345927][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.353003][ T720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.360259][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.367280][ T720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.391246][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.399235][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.407790][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.413135][ T727] EXT4-fs (loop4): old and new quota format mixing [ 39.421436][ T308] usb 3-1: device descriptor read/8, error -71 [ 39.432933][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.444439][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.451544][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.458935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.467201][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.474240][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.484471][ T727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 39.507060][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.516097][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.531124][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.540297][ T287] usb-storage 1-1:4.34: USB Mass Storage device detected [ 39.543082][ T720] device veth0_vlan entered promiscuous mode [ 39.554546][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.563005][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.571673][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.571935][ T725] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 39.583798][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.594232][ T725] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.615826][ T287] usb 1-1: USB disconnect, device number 6 [ 39.624000][ T720] device veth1_macvtap entered promiscuous mode [ 39.630432][ T725] F2FS-fs (loop2): invalid crc value [ 39.639222][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.661450][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.670739][ T725] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 39.685713][ T742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.106'. [ 39.701322][ T725] F2FS-fs (loop2): recover fsync data on readonly fs [ 39.705081][ T742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 39.708471][ T725] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 39.724350][ T725] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.856070][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.863282][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.907486][ T300] device bridge_slave_1 left promiscuous mode [ 39.914310][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.923660][ T300] device bridge_slave_0 left promiscuous mode [ 39.923758][ T757] EXT4-fs (loop4): Ignoring removed nobh option [ 39.930429][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.945691][ T300] device veth1_macvtap left promiscuous mode [ 39.949235][ T757] EXT4-fs (loop4): Test dummy encryption mode enabled [ 39.952928][ T300] device veth0_vlan left promiscuous mode [ 39.980096][ T757] EXT4-fs error (device loop4): __ext4_iget:5027: inode #11: block 1: comm syz.4.112: invalid block [ 40.001094][ T757] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.112: couldn't read orphan inode 11 (err -117) [ 40.014945][ T757] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 40.043241][ T5] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 40.082154][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.089222][ T752] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.096911][ T752] device bridge_slave_0 entered promiscuous mode [ 40.104350][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.112758][ T752] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.121661][ T752] device bridge_slave_1 entered promiscuous mode [ 40.141066][ T779] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 40.154729][ T779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e01c, mo2=0002] [ 40.163771][ T779] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.170790][ T779] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.115: bad orphan inode 3 [ 40.174249][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.180992][ T779] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,grpjquota=,data=writeback,errors=continue [ 40.187661][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.209917][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.216932][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.219714][ T779] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.115: dx entry: limit 0 != root limit 125 [ 40.236904][ T779] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.115: Corrupt directory, running e2fsck is recommended [ 40.237467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.257257][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.264879][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.274829][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.285364][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.292421][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.302032][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.310239][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.317334][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.334211][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.346978][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.377618][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.390359][ T752] device veth0_vlan entered promiscuous mode [ 40.400297][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.415391][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.429411][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.450893][ T752] device veth1_macvtap entered promiscuous mode [ 40.459904][ T5] usb 6-1: config 29 has an invalid interface number: 168 but max is 0 [ 40.468595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.476547][ T5] usb 6-1: config 29 has no interface number 0 [ 40.483007][ T5] usb 6-1: config 29 interface 168 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 40.494357][ T5] usb 6-1: config 29 interface 168 has no altsetting 0 [ 40.501816][ T794] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.514225][ T794] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.525304][ T794] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (49809!=33349) [ 40.535592][ T794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 40.543663][ T794] EXT4-fs (loop4): failed to initialize system zone (-117) [ 40.558848][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.570913][ T794] EXT4-fs (loop4): mount failed [ 40.576140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.679933][ T5] usb 6-1: New USB device found, idVendor=07c4, idProduct=a003, bcdDevice= c.4f [ 40.691044][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.699166][ T5] usb 6-1: Product: syz [ 40.703687][ T5] usb 6-1: Manufacturer: syz [ 40.708274][ T5] usb 6-1: SerialNumber: syz [ 40.737051][ T810] xt_hashlimit: size too large, truncated to 1048576 [ 41.009951][ T287] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 41.258498][ T300] device bridge_slave_1 left promiscuous mode [ 41.269994][ T287] usb 3-1: Using ep0 maxpacket: 16 [ 41.288500][ T815] EXT4-fs (loop4): Invalid log cluster size: 2048 [ 41.305220][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.381656][ T300] device bridge_slave_0 left promiscuous mode [ 41.400290][ T287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.453417][ T287] usb 3-1: config 0 has no interfaces? [ 41.466490][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.555104][ T287] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 41.582587][ T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.691490][ T287] usb 3-1: config 0 descriptor?? [ 41.697973][ T300] device veth1_macvtap left promiscuous mode [ 41.704566][ T300] device veth0_vlan left promiscuous mode [ 41.779782][ C0] sched: RT throttling activated [ 42.007380][ T5] ums-datafab 6-1:29.168: USB Mass Storage device detected [ 42.072869][ T5] usb 6-1: USB disconnect, device number 2 [ 42.077378][ T835] EXT4-fs (loop6): Test dummy encryption mode enabled [ 42.085656][ T835] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 42.085656][ T835] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 42.085656][ T835] [ 42.108775][ T835] EXT4-fs warning (device loop6): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 42.123727][ T835] EXT4-fs (loop6): mount failed [ 42.261832][ T839] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 42.271150][ T839] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.299850][ T308] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.420723][ T853] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.436451][ T853] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.470426][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 42.470436][ T24] audit: type=1400 audit(1778092671.508:265): avc: denied { create } for pid=855 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.522623][ T857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 42.549845][ T308] usb 5-1: Using ep0 maxpacket: 32 [ 42.649828][ T5] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 42.669893][ T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.681156][ T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.691015][ T308] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 42.700154][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.708627][ T308] usb 5-1: config 0 descriptor?? [ 42.739831][ T395] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 42.750365][ T308] hub 5-1:0.0: USB hub found [ 42.889825][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 43.010009][ T308] hub 5-1:0.0: 3 ports detected [ 43.049897][ T5] usb 6-1: unable to get BOS descriptor or descriptor too short [ 43.109925][ T395] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.120950][ T395] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 43.131670][ T5] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.141964][ T395] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 43.154840][ T5] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.163762][ T395] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 43.173077][ T395] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.181670][ T395] usb 7-1: config 0 descriptor?? [ 43.199873][ T853] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 43.261126][ T24] audit: type=1326 audit(1778092672.298:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.4.122" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669fbddd9 code=0x7ffc0000 [ 43.261321][ T815] futex_wake_op: syz.4.122 tries to shift op by -2048; fix this program [ 43.285837][ T24] audit: type=1326 audit(1778092672.298:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.4.122" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669fbddd9 code=0x7ffc0000 [ 43.318776][ T308] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 43.318961][ T24] audit: type=1326 audit(1778092672.298:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.4.122" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669fbddd9 code=0x7ffc0000 [ 43.350285][ T24] audit: type=1326 audit(1778092672.338:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.4.122" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669fbddd9 code=0x7ffc0000 [ 43.350603][ T308] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 43.375122][ T5] usb 6-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 43.392336][ T24] audit: type=1326 audit(1778092672.338:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.4.122" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f2669fbddd9 code=0x7ffc0000 [ 43.417337][ T24] audit: type=1326 audit(1778092672.338:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.4.122" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669fbddd9 code=0x7ffc0000 [ 43.442172][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.442650][ T24] audit: type=1326 audit(1778092672.338:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.4.122" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669fbddd9 code=0x7ffc0000 [ 43.450384][ T5] usb 6-1: Product: o䁤雖柨왹峆㇖㺫ꯍ攋鞚Ꭷ넦윝鹪쑗㦟૚嵲襪࿮툩❎Ǻ藈닑䫻弤駡뼾塴뼁浧鸨㚍ཱ˲視ṵ﫷ﮅ✥邬 [ 43.491408][ T5] usb 6-1: Manufacturer: ᠁ [ 43.496150][ T5] usb 6-1: SerialNumber: ࠠ [ 43.569940][ T308] usbhid 5-1:0.0: can't add hid device: -71 [ 43.575962][ T308] usbhid: probe of 5-1:0.0 failed with error -71 [ 43.623128][ T308] usb 5-1: USB disconnect, device number 5 [ 43.733192][ T24] audit: type=1400 audit(1778092672.768:273): avc: denied { mount } for pid=852 comm="syz.6.134" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 43.771032][ T843] udc-core: couldn't find an available UDC or it's busy [ 43.789102][ T853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.134'. [ 43.821328][ T843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.858197][ T287] usb 3-1: USB disconnect, device number 10 [ 43.974748][ T843] udc-core: couldn't find an available UDC or it's busy [ 44.062502][ T843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 44.071709][ T843] udc-core: couldn't find an available UDC or it's busy [ 44.078796][ T843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 44.087943][ T843] udc-core: couldn't find an available UDC or it's busy [ 44.095131][ T843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 44.104545][ T843] udc-core: couldn't find an available UDC or it's busy [ 44.111826][ T843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 44.294019][ T24] audit: type=1400 audit(1778092673.328:274): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 44.439937][ T395] usb 7-1: string descriptor 0 read error: -71 [ 44.450052][ T287] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.519995][ T5] usb 6-1: unit 6 not found! [ 44.524625][ T5] usb 6-1: unit 3 not found! [ 44.530124][ T883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 44.541933][ T395] usbhid 7-1:0.0: can't add hid device: -71 [ 44.548082][ T5] usb 6-1: USB disconnect, device number 3 [ 44.558008][ T395] usbhid: probe of 7-1:0.0 failed with error -71 [ 44.559220][ T883] device ip6erspan0 entered promiscuous mode [ 44.569029][ T395] usb 7-1: USB disconnect, device number 2 [ 44.720874][ T287] usb 3-1: Using ep0 maxpacket: 32 [ 44.869889][ T287] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 44.880267][ T287] usb 3-1: config 0 has no interface number 0 [ 44.890804][ T287] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 44.950563][ T903] netlink: 'syz.5.150': attribute type 4 has an invalid length. [ 44.958322][ T903] netlink: 60 bytes leftover after parsing attributes in process `syz.5.150'. [ 45.069902][ T287] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 45.078954][ T287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.087147][ T287] usb 3-1: Product: syz [ 45.090098][ T906] exfat: Deprecated parameter 'utf8' [ 45.092045][ T287] usb 3-1: Manufacturer: syz [ 45.101164][ T906] exfat: Deprecated parameter 'namecase' [ 45.101515][ T287] usb 3-1: SerialNumber: syz [ 45.111555][ T906] exfat: Deprecated parameter 'namecase' [ 45.120066][ T906] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 45.123779][ T287] usb 3-1: config 0 descriptor?? [ 45.146938][ T906] fuse: Unknown parameter '' [ 45.148209][ T921] netlink: 44 bytes leftover after parsing attributes in process `syz.1.155'. [ 45.170036][ T869] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 45.281928][ T526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=526 comm=kworker/0:6 [ 45.295325][ T929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=929 comm=syz.4.158 [ 45.394859][ T869] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 45.657839][ T939] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 45.703133][ T939] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 45.726593][ T939] EXT4-fs error (device loop4): htree_dirblock_to_tree:1063: inode #2: comm syz.4.161: Directory block failed checksum [ 45.755661][ T962] EXT4-fs (loop5): 1 truncate cleaned up [ 45.761414][ T962] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue [ 45.910547][ T970] EXT4-fs (loop5): Ignoring removed orlov option [ 45.917357][ T970] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 45.925730][ T970] EXT4-fs (loop5): orphan cleanup on readonly fs [ 45.932300][ T970] EXT4-fs error (device loop5): ext4_ext_check_inode:500: inode #3: comm syz.5.170: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 45.950138][ T970] EXT4-fs (loop5): Remounting filesystem read-only [ 45.956692][ T970] EXT4-fs error (device loop5): ext4_quota_enable:6449: comm syz.5.170: Bad quota inode: 3, type: 0 [ 45.967951][ T970] EXT4-fs warning (device loop5): ext4_enable_quotas:6490: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 45.982571][ T970] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 45.989284][ T970] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,block_validity,errors=remount-ro,lazytime,grpquota,noblock_validity,norecovery,orlov, [ 45.999861][ T442] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 46.079894][ T287] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 46.109870][ T708] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 46.189950][ T444] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 46.197519][ T444] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 46.229848][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 46.259873][ T442] usb 7-1: Using ep0 maxpacket: 8 [ 46.379864][ T442] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.390155][ T442] usb 7-1: New USB device found, idVendor=1833, idProduct=0201, bcdDevice=2a.d5 [ 46.399199][ T442] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.407460][ T708] usb 5-1: device descriptor read/64, error -71 [ 46.416864][ T442] usb 7-1: config 0 descriptor?? [ 46.435494][ T1002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 46.663360][ T309] usb 7-1: USB disconnect, device number 3 [ 46.679884][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 46.703315][ T1006] 9pnet: Insufficient options for proto=fd [ 46.799828][ T708] usb 5-1: device descriptor read/64, error -71 [ 46.921405][ T1015] capability: warning: `syz.5.184' uses 32-bit capabilities (legacy support in use) [ 46.960354][ T1015] EXT4-fs (loop5): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 47.081748][ T708] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 47.089882][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 47.359959][ T708] usb 5-1: device descriptor read/64, error -71 [ 47.430691][ T1020] FAT-fs (loop6): "posix" option is obsolete, not supported now [ 47.530866][ T1029] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.544003][ T1029] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 47.554985][ T1029] EXT4-fs (loop6): 1 truncate cleaned up [ 47.560822][ T1029] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro, [ 47.749827][ T708] usb 5-1: device descriptor read/64, error -71 [ 47.779983][ T287] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 47.791000][ T287] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 47.801995][ T287] asix: probe of 3-1:0.188 failed with error -71 [ 47.843742][ T1048] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=abort,delalloc,inlinecrypt,discard,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 47.866850][ T287] usb 3-1: USB disconnect, device number 11 [ 47.887649][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 47.887659][ T24] audit: type=1400 audit(1778092676.918:302): avc: denied { rename } for pid=1047 comm="syz.6.192" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.915876][ T708] usb usb5-port1: attempt power cycle [ 47.977854][ T1054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.193'. [ 48.330091][ T708] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 48.417747][ T1059] netlink: 276 bytes leftover after parsing attributes in process `syz.1.195'. [ 48.428888][ T24] audit: type=1400 audit(1778092677.388:303): avc: denied { create } for pid=1055 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.520183][ T708] usb 5-1: device descriptor read/8, error -71 [ 48.538842][ T24] audit: type=1400 audit(1778092677.398:304): avc: denied { read } for pid=1055 comm="syz.1.195" path="socket:[17139]" dev="sockfs" ino=17139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.773519][ T1064] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 48.782241][ T1064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1064 comm=syz.5.197 [ 48.795581][ T1064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.197'. [ 48.804860][ T708] usb 5-1: device descriptor read/8, error -71 [ 48.862119][ T24] audit: type=1400 audit(1778092677.898:305): avc: denied { execute } for pid=1057 comm="syz.2.196" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.930302][ T1069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18290 sclass=netlink_route_socket pid=1069 comm=syz.6.194 [ 48.946573][ T1069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18290 sclass=netlink_route_socket pid=1069 comm=syz.6.194 [ 48.959472][ T1069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18290 sclass=netlink_route_socket pid=1069 comm=syz.6.194 [ 48.960282][ T1074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 48.972397][ T1069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18290 sclass=netlink_route_socket pid=1069 comm=syz.6.194 [ 49.000642][ T1069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18290 sclass=netlink_route_socket pid=1069 comm=syz.6.194 [ 49.013344][ T24] audit: type=1400 audit(1778092678.038:306): avc: denied { unlink } for pid=1073 comm="syz.2.200" name="#3" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.014516][ T1069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18290 sclass=netlink_route_socket pid=1069 comm=syz.6.194 [ 49.048075][ T1069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18290 sclass=netlink_route_socket pid=1069 comm=syz.6.194 [ 49.107239][ T1077] FAT-fs (loop5): Directory bread(block 64) failed [ 49.114027][ T1077] FAT-fs (loop5): Directory bread(block 65) failed [ 49.120876][ T1077] FAT-fs (loop5): Directory bread(block 66) failed [ 49.130008][ T1077] FAT-fs (loop5): Directory bread(block 67) failed [ 49.140814][ T1077] FAT-fs (loop5): Directory bread(block 68) failed [ 49.147568][ T1077] FAT-fs (loop5): Directory bread(block 69) failed [ 49.159217][ T1077] FAT-fs (loop5): Directory bread(block 70) failed [ 49.171022][ T1082] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 49.177889][ T1077] FAT-fs (loop5): Directory bread(block 71) failed [ 49.187413][ T1082] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.197976][ T1077] FAT-fs (loop5): Directory bread(block 72) failed [ 49.204659][ T1077] FAT-fs (loop5): Directory bread(block 73) failed [ 49.249145][ T1084] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 49.259248][ T1071] kernel profiling enabled (shift: 55) [ 49.265006][ T1071] profiling shift: 55 too large [ 49.468212][ T24] audit: type=1400 audit(1778092678.498:307): avc: denied { remount } for pid=1111 comm="syz.6.210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.778713][ T24] audit: type=1400 audit(1778092678.808:308): avc: denied { mounton } for pid=1127 comm="syz.6.214" path="/syzcgroup/unified/syz6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 49.821971][ T1134] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 49.938705][ T1128] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 49.948300][ T1128] ext4 filesystem being mounted at /syzcgroup/unified/syz6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 49.951184][ T24] audit: type=1400 audit(1778092678.988:309): avc: denied { getopt } for pid=1133 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.119866][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 50.360771][ T24] audit: type=1400 audit(1778092679.398:310): avc: denied { accept } for pid=1138 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 50.419152][ T24] audit: type=1400 audit(1778092679.398:311): avc: denied { ioctl } for pid=1127 comm="syz.6.214" path="" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.455091][ T1148] netlink: 'syz.2.221': attribute type 5 has an invalid length. [ 50.506623][ T1142] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.527805][ T1142] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 50.550874][ T1142] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 50.601197][ T1158] netlink: 'syz.2.224': attribute type 2 has an invalid length. [ 50.618753][ T1155] SELinux: failed to load policy [ 50.740920][ T1137] F2FS-fs (loop5): invalid crc value [ 50.747550][ T1137] F2FS-fs (loop5): Found nat_bits in checkpoint [ 50.755412][ T1177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.227'. [ 50.778171][ T1137] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 50.785526][ T1137] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 50.830114][ T1177] erofs: Unknown parameter ' ' [ 51.079838][ T287] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 51.559902][ T287] usb 7-1: unable to get BOS descriptor or descriptor too short [ 51.639028][ T1197] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro, [ 51.658339][ T1197] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.669014][ T287] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 51.688140][ T287] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 51.710775][ T287] usb 7-1: too many endpoints for config 1 interface 1 altsetting 18: 82, using maximum allowed: 30 [ 51.726145][ T287] usb 7-1: config 1 interface 1 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 51.739839][ T287] usb 7-1: config 1 interface 1 has no altsetting 0 [ 51.839886][ T395] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 51.840757][ T1207] tipc: Failed to remove local publication {66,1,1}/1573333186 [ 51.856902][ T1202] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 51.866185][ T1202] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.944034][ T287] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 51.955770][ T287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.963992][ T287] usb 7-1: Product: syz [ 51.964099][ T1218] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 51.968147][ T287] usb 7-1: Manufacturer: syz [ 51.968155][ T287] usb 7-1: SerialNumber: syz [ 51.985594][ T1218] EXT4-fs (loop2): Ignoring removed bh option [ 51.991803][ T1218] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 52.001296][ T1218] EXT4-fs (loop2): Unrecognized mount option "mask=MAY_READ" or missing value [ 52.010495][ T287] usb 7-1: selecting invalid altsetting 1 [ 52.010848][ T1225] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.016460][ T287] usb 7-1: unit 6 not found! [ 52.031140][ T1225] EXT4-fs (loop4): 1 truncate cleaned up [ 52.036922][ T1225] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 52.239910][ T395] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 4 [ 52.251373][ T1231] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 52.253607][ T395] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 52.259201][ T1231] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 52.269829][ T395] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 52.289749][ T1231] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.311883][ T1231] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 52.318963][ T1231] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 52.440143][ T526] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 52.499888][ T395] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.508934][ T395] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.517096][ T395] usb 6-1: Product: 訴鹏韣墉烤㖥⩝睤葓巐䆏茵਽῎駽囂財ྤ酥ᳯ韫仉淧ᕦ♵韚㧫捃閌뤰䧖凤젟⼅救閃ꯛ㈊拲념芔頍褒̑皤솃ⴿ贽䐣鑝⚀඘묗ᖪ袬烈㢳阎℈쀊ஓꕿ⿓毎⧄ᖪ录⦶௎ഞ魖ఁ펴ҧ橵횔鈫ޚ짭녧翌ឝ㝈鯓ힵ [ 52.520085][ T1241] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 52.545689][ T395] usb 6-1: Manufacturer: ࠾ [ 52.557825][ T1241] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue [ 52.559253][ T395] usb 6-1: SerialNumber: 胈鿭ɓ뙲秵肎즴ꛯ흭䱢抛쏟㦊࢑劗硵㜚켐ꚃ敥䂊쟘岎ᷫ좈⾼驱ॶ乱袻Ⳅ먯䡄歊㼮敔㠾᫪對໯몇涙㦳槇읪䠏烑닭糏켤싈⭄㟬궤느欨ﵸ䒾䃡 [ 52.571995][ T1241] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.604137][ T1240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.244'. [ 52.649955][ T287] usb 7-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 52.672577][ T287] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 52.699899][ T287] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 52.720144][ T287] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 52.727605][ T287] usb 7-1: selecting invalid altsetting 1 [ 52.749925][ T287] usb 7-1: unit 6 not found! [ 52.769875][ T287] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 52.779623][ T287] usb 7-1: 2:0: cannot get min/max values for control 1 (id 2) [ 52.799851][ T287] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 52.809723][ T287] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 52.819241][ T287] usb 7-1: USB disconnect, device number 4 [ 52.849926][ T526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.863503][ T526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.874202][ T526] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.887261][ T526] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.905838][ T526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.917618][ T526] usb 5-1: config 0 descriptor?? [ 52.950002][ T395] usb 6-1: low speed audio streaming not supported [ 52.956624][ T395] usb 6-1: low speed audio streaming not supported [ 52.989741][ T395] usb 6-1: USB disconnect, device number 4 [ 53.380993][ T526] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description [ 53.392727][ T526] plantronics 0003:047F:FFFF.0001: parse failed [ 53.399079][ T526] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 53.426788][ T1258] overlayfs: missing 'lowerdir' [ 53.542984][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 53.542995][ T24] audit: type=1400 audit(1778092682.578:320): avc: denied { mounton } for pid=1261 comm="syz.2.252" path="/36/file0" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 53.604580][ T5] usb 5-1: USB disconnect, device number 10 [ 53.643766][ T1270] overlayfs: './file0' not a directory [ 53.745418][ T287] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 53.770662][ T1274] device bridge_slave_1 left promiscuous mode [ 53.777113][ T1274] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.787166][ T1274] device bridge_slave_0 left promiscuous mode [ 53.793539][ T1274] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.320052][ T287] usb 7-1: unable to get BOS descriptor or descriptor too short [ 54.487280][ T287] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.581400][ T287] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.616727][ T24] audit: type=1400 audit(1778092683.648:321): avc: denied { setattr } for pid=1282 comm="syz.4.257" name="tty29" dev="devtmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 54.756405][ T1289] exfat: Deprecated parameter 'utf8' [ 54.761877][ T287] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 54.770970][ T1289] exfat: Deprecated parameter 'utf8' [ 54.776527][ T287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.788015][ T287] usb 7-1: Product: syz [ 54.792356][ T287] usb 7-1: Manufacturer: syz [ 54.797700][ T287] usb 7-1: SerialNumber: syz [ 54.804751][ T1296] bridge_slave_0: FDB only supports static addresses [ 54.860565][ T287] usb 7-1: selecting invalid altsetting 1 [ 54.870029][ T287] usb 7-1: unit 6 not found! [ 54.874985][ T287] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 54.893520][ T1291] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 54.903605][ T1289] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x25d9abd0) [ 54.915865][ T1291] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000056" or missing value [ 54.926027][ T1289] exFAT-fs (loop4): invalid boot region [ 54.931856][ T1289] exFAT-fs (loop4): failed to recognize exfat type [ 55.065728][ T442] usb 7-1: USB disconnect, device number 5 [ 55.889913][ T442] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 56.627120][ T1330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'. [ 56.680129][ T442] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 56.713371][ T442] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 56.754170][ T442] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 56.775373][ T442] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 56.859980][ T442] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.887258][ T442] usb 7-1: config 0 descriptor?? [ 56.909873][ T1315] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 57.039515][ T24] audit: type=1326 audit(1778092686.068:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.5.276" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae411add9 code=0x7ffc0000 [ 57.099971][ T24] audit: type=1326 audit(1778092686.108:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.5.276" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3ae40d722c code=0x7ffc0000 [ 57.144361][ T24] audit: type=1326 audit(1778092686.108:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.5.276" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3ae40d728e code=0x7ffc0000 [ 57.220920][ T24] audit: type=1326 audit(1778092686.108:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.5.276" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3ae411add9 code=0x7ffc0000 [ 57.245746][ T24] audit: type=1326 audit(1778092686.108:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.5.276" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae411add9 code=0x7ffc0000 [ 57.274041][ T24] audit: type=1326 audit(1778092686.108:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.5.276" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae411add9 code=0x7ffc0000 [ 57.300174][ T24] audit: type=1326 audit(1778092686.108:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.5.276" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3ae40d722c code=0x7ffc0000 [ 57.325932][ T24] audit: type=1326 audit(1778092686.108:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.5.276" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3ae40d728e code=0x7ffc0000 [ 57.362814][ T1358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'. [ 57.380619][ T442] hkems 0003:2006:0118.0002: unknown main item tag 0x0 [ 57.387516][ T442] hkems 0003:2006:0118.0002: item fetching failed at offset 6/40 [ 57.415679][ T442] hkems 0003:2006:0118.0002: parse failed [ 57.425647][ T442] hkems: probe of 0003:2006:0118.0002 failed with error -22 [ 58.209828][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 58.511039][ T287] usb 7-1: USB disconnect, device number 6 [ 58.739342][ T24] kauditd_printk_skb: 43 callbacks suppressed [ 58.739352][ T24] audit: type=1400 audit(1778092687.768:373): avc: denied { mount } for pid=1404 comm="syz.1.297" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 58.803886][ T395] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.830831][ T1408] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 58.850577][ T24] audit: type=1326 audit(1778092687.888:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1407 comm="syz.6.295" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd98df5dd9 code=0x0 [ 58.912233][ T24] audit: type=1400 audit(1778092687.928:375): avc: denied { map } for pid=1406 comm="syz.5.292" path="/34/file0/file1" dev="loop5" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.957969][ T24] audit: type=1400 audit(1778092687.948:376): avc: denied { write } for pid=1336 comm="syz.4.275" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 58.982124][ T24] audit: type=1400 audit(1778092687.948:377): avc: denied { open } for pid=1336 comm="syz.4.275" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.020348][ T24] audit: type=1400 audit(1778092687.948:378): avc: denied { connect } for pid=1336 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.075416][ T24] audit: type=1400 audit(1778092687.948:379): avc: denied { read write } for pid=1336 comm="syz.4.275" dev="sockfs" ino=18775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.139866][ T395] usb 3-1: Using ep0 maxpacket: 16 [ 59.177712][ T1434] EXT4-fs (loop4): dax option not supported [ 59.259913][ T395] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.271161][ T395] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 249, changing to 11 [ 59.369843][ T526] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 59.519823][ T287] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 59.519875][ T395] usb 3-1: string descriptor 0 read error: -22 [ 59.533534][ T395] usb 3-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 59.542791][ T395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.821592][ T395] usb 3-1: MIDIStreaming interface descriptor not found [ 59.957180][ T526] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 59.968127][ T526] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 8 [ 59.990162][ T287] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 60.001539][ T287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.013809][ T287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.024547][ T287] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 60.091671][ T708] usb 3-1: USB disconnect, device number 12 [ 60.120320][ T287] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 60.129848][ T287] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 60.138013][ T287] usb 6-1: Manufacturer: syz [ 60.202048][ T287] usb 6-1: config 0 descriptor?? [ 60.692199][ T287] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 60.699468][ T287] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 60.743284][ T1452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.308'. [ 60.785290][ T287] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 61.740427][ T1479] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 61.746894][ T1479] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 61.756262][ T1479] F2FS-fs (loop2): invalid crc value [ 61.793556][ T1479] F2FS-fs (loop2): invalid journal entries nats 512 sits 6 [ 61.800927][ T1479] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-22) [ 62.645732][ T1495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'. [ 62.711390][ T1497] overlayfs: unrecognized mount option "subj_role=-[\," or missing value [ 62.761336][ T24] audit: type=1400 audit(1778092691.718:380): avc: denied { connect } for pid=1478 comm="syz.2.315" lport=115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.787221][ T526] usb 7-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 62.797206][ T526] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.805416][ T526] usb 7-1: Product: 犠땋礋ϖ柘㉄筇ঋ뛤겗Ἑ璹ӿ磰ꍩ඲鏓覘䤚梌䀮⫬歽묂᎒䡭᪙鐮࿜᧦ᰯ [ 62.827221][ T526] usb 7-1: Manufacturer: ᐊ [ 62.849879][ T526] usb 7-1: can't set config #1, error -71 [ 62.868779][ T526] usb 7-1: USB disconnect, device number 7 [ 62.912007][ T1505] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 62.940556][ T24] audit: type=1400 audit(1778092691.968:381): avc: denied { setopt } for pid=1502 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.156898][ T1505] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue [ 63.190627][ T1505] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.211924][ T1511] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 63.211924][ T1511] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 63.211924][ T1511] [ 63.312980][ T1511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8038198, mo2=0002] [ 63.324235][ T1511] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.324: inode #1: comm syz.4.324: iget: illegal inode # [ 63.341688][ T1511] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.324: error while reading EA inode 1 err=-117 [ 63.355990][ T1511] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2797: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.369120][ T1511] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.324: inode #1: comm syz.4.324: iget: illegal inode # [ 63.385067][ T1511] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.324: error while reading EA inode 1 err=-117 [ 63.400597][ T1511] EXT4-fs (loop4): 1 orphan inode deleted [ 63.406378][ T1511] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000000,norecovery,noinit_itable,debug,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,nouser_xattr,dioread_lock,noblock_validity,noquota,noauto_da_alloc,debug,minixdf,,errors=continue [ 64.054426][ T24] audit: type=1400 audit(1778092691.968:382): avc: denied { connect } for pid=1502 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.094898][ T24] audit: type=1400 audit(1778092691.968:383): avc: denied { read } for pid=1502 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.114698][ T24] audit: type=1326 audit(1778092692.328:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1515 comm="syz.1.326" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9116efedd9 code=0x0 [ 64.177306][ T24] audit: type=1400 audit(1778092693.208:385): avc: denied { sys_admin } for pid=1521 comm="syz.1.329" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.210122][ T24] audit: type=1400 audit(1778092693.238:386): avc: denied { associate } for pid=1521 comm="syz.1.329" name="cpuacct.usage_percpu_user" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 64.230964][ T1527] fuse: Bad value for 'fd' [ 64.282810][ T1527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.310196][ T395] usb 6-1: USB disconnect, device number 5 [ 64.813214][ T24] audit: type=1326 audit(1778092693.848:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1535 comm="syz.6.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98df5dd9 code=0x7ffc0000 [ 64.825635][ T1501] F2FS-fs (loop2): Test dummy encryption mode enabled [ 64.860991][ T1501] F2FS-fs (loop2): invalid crc value [ 64.863472][ T24] audit: type=1326 audit(1778092693.878:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1535 comm="syz.6.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98df5dd9 code=0x7ffc0000 [ 64.891183][ T24] audit: type=1326 audit(1778092693.878:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1535 comm="syz.6.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98df5dd9 code=0x7ffc0000 [ 64.917161][ T24] audit: type=1326 audit(1778092693.878:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1535 comm="syz.6.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98df5dd9 code=0x7ffc0000 [ 64.943602][ T1501] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.943748][ T24] audit: type=1326 audit(1778092693.878:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1535 comm="syz.6.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd98db660e code=0x7ffc0000 [ 65.041894][ T1501] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 65.268179][ T526] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 65.330630][ T1568] erofs: (device loop5): mounted with root inode @ nid 36. [ 65.340423][ T1568] erofs: (device loop5): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 65.359898][ T1568] netlink: 60 bytes leftover after parsing attributes in process `syz.5.341'. [ 65.435318][ T1577] netlink: 'syz.5.344': attribute type 4 has an invalid length. [ 65.561993][ T526] usb 5-1: device descriptor read/64, error -71 [ 66.037555][ T1588] FAULT_INJECTION: forcing a failure. [ 66.037555][ T1588] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.050669][ T1588] CPU: 1 PID: 1588 Comm: syz.6.342 Not tainted syzkaller #0 [ 66.057941][ T1588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 66.067995][ T1588] Call Trace: [ 66.071280][ T1588] __dump_stack+0x21/0x24 [ 66.075599][ T1588] dump_stack_lvl+0x1a7/0x208 [ 66.080265][ T1588] ? show_regs_print_info+0x18/0x18 [ 66.085453][ T1588] dump_stack+0x15/0x1c [ 66.089598][ T1588] should_fail+0x3c1/0x510 [ 66.094004][ T1588] should_fail_usercopy+0x1a/0x20 [ 66.099033][ T1588] strncpy_from_user+0x24/0x2e0 [ 66.103884][ T1588] bpf_prog_load+0x18c/0x14a0 [ 66.108563][ T1588] ? avc_has_perm_noaudit+0x260/0x260 [ 66.114050][ T1588] ? map_freeze+0x320/0x320 [ 66.118553][ T1588] ? vfs_write+0xb27/0xdc0 [ 66.122986][ T1588] ? selinux_bpf+0xc7/0xf0 [ 66.127390][ T1588] ? security_bpf+0x82/0xa0 [ 66.132209][ T1588] __se_sys_bpf+0x49a/0x740 [ 66.137050][ T1588] ? __x64_sys_bpf+0x90/0x90 [ 66.141629][ T1588] ? debug_smp_processor_id+0x17/0x20 [ 66.147102][ T1588] __x64_sys_bpf+0x7b/0x90 [ 66.151513][ T1588] do_syscall_64+0x31/0x40 [ 66.155925][ T1588] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 66.161800][ T1588] RIP: 0033:0x7fdd98df5dd9 [ 66.166210][ T1588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.185807][ T1588] RSP: 002b:00007fdd9780e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.194387][ T1588] RAX: ffffffffffffffda RBX: 00007fdd9906f180 RCX: 00007fdd98df5dd9 [ 66.202352][ T1588] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 66.210311][ T1588] RBP: 00007fdd9780e090 R08: 0000000000000000 R09: 0000000000000000 [ 66.218271][ T1588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.226265][ T1588] R13: 00007fdd9906f218 R14: 00007fdd9906f180 R15: 00007ffcdb854de8 [ 66.268757][ T1586] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,,errors=continue [ 66.439676][ T1591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.348'. [ 66.525912][ T1596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.350'. [ 66.559197][ T1599] selinux_netlink_send: 58 callbacks suppressed [ 66.559211][ T1599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1599 comm=syz.5.351 [ 66.578554][ T1599] netlink: 6 bytes leftover after parsing attributes in process `syz.5.351'. [ 66.579867][ T526] usb 5-1: device descriptor read/64, error -71 [ 67.778439][ T1610] xt_hashlimit: size too large, truncated to 1048576 [ 68.389923][ T708] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.529930][ T526] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 68.631202][ T1631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 68.649953][ T708] usb 6-1: Using ep0 maxpacket: 8 [ 68.859901][ T1647] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nombcache,quota,,errors=continue [ 68.888667][ T1647] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.923441][ T1647] EXT4-fs error (device loop2) in ext4_do_update_inode:5355: error 27 [ 68.932039][ T1647] EXT4-fs error (device loop2): ext4_dirty_inode:6162: inode #2: comm syz.2.364: mark_inode_dirty error [ 68.943901][ T1647] EXT4-fs error (device loop2) in ext4_do_update_inode:5355: error 27 [ 69.005040][ T1647] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.364: mark_inode_dirty error [ 69.021684][ T1641] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #2: block 22: comm syz.2.364: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 69.159910][ T708] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 69.170269][ T708] usb 6-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 69.179296][ T708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.190392][ T708] usb 6-1: config 0 descriptor?? [ 69.304796][ T1660] netlink: 112 bytes leftover after parsing attributes in process `syz.1.369'. [ 69.609276][ T1660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 69.736945][ T1660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 69.764753][ T1660] tc_dump_action: action bad kind [ 69.878651][ T443] usb 6-1: USB disconnect, device number 6 [ 70.049186][ T1668] erofs: (device loop2): mounted with root inode @ nid 36. [ 70.105444][ T395] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 70.187962][ T24] kauditd_printk_skb: 70 callbacks suppressed [ 70.187974][ T24] audit: type=1400 audit(1778092699.218:462): avc: denied { map } for pid=1678 comm="syz.2.373" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.290422][ T1682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 70.589809][ T1695] xt_TPROXY: Can be used only with -p tcp or -p udp [ 70.599653][ T1695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'. [ 70.723029][ T1691] EXT4-fs (loop5): invalid first ino: 8 [ 70.757224][ T395] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.765968][ T395] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.776075][ T395] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.785277][ T395] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.847823][ T526] usb usb5-port1: attempt power cycle [ 70.954974][ T395] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.964068][ T395] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.972259][ T395] usb 7-1: Product: syz [ 70.976833][ T395] usb 7-1: Manufacturer: syz [ 71.040428][ T395] cdc_wdm 7-1:1.0: invalid descriptor buffer length [ 71.047226][ T395] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 71.189690][ T287] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 71.268545][ T708] usb 7-1: USB disconnect, device number 8 [ 71.339303][ T526] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 71.478227][ T287] usb 6-1: device descriptor read/64, error -71 [ 71.916383][ T287] usb 6-1: device descriptor read/64, error -71 [ 72.014053][ T1714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.385'. [ 72.204822][ T287] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 72.294037][ T24] audit: type=1400 audit(1778092701.218:463): avc: denied { mounton } for pid=1715 comm="syz.6.386" path="/proc/163/task" dev="proc" ino=20559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 72.372793][ T24] audit: type=1400 audit(1778092701.293:464): avc: denied { associate } for pid=1715 comm="syz.6.386" name="blkio.bfq.sectors_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.395405][ T526] usb 5-1: Using ep0 maxpacket: 16 [ 72.430677][ T24] audit: type=1400 audit(1778092701.321:465): avc: denied { create } for pid=1715 comm="syz.6.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 72.482677][ T1725] 9pnet: Insufficient options for proto=fd [ 72.525552][ T526] usb 5-1: config index 0 descriptor too short (expected 52, got 36) [ 72.533652][ T526] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 72.542863][ T526] usb 5-1: config 0 has no interface number 0 [ 72.549123][ T526] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 72.559262][ T526] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 72.589522][ T287] usb 6-1: device descriptor read/64, error -71 [ 72.739158][ T526] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 72.748201][ T526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.756209][ T526] usb 5-1: Product: syz [ 72.760356][ T526] usb 5-1: Manufacturer: syz [ 72.764944][ T526] usb 5-1: SerialNumber: syz [ 72.770020][ T526] usb 5-1: config 0 descriptor?? [ 72.792616][ T1676] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.799616][ T1676] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.867384][ T708] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 73.049017][ T287] usb 6-1: device descriptor read/64, error -71 [ 73.076736][ T1676] FAT-fs (loop4): Directory bread(block 64) failed [ 73.083436][ T1676] FAT-fs (loop4): Directory bread(block 65) failed [ 73.089955][ T1676] FAT-fs (loop4): Directory bread(block 66) failed [ 73.096478][ T1676] FAT-fs (loop4): Directory bread(block 67) failed [ 73.103016][ T1676] FAT-fs (loop4): Directory bread(block 68) failed [ 73.109500][ T1676] FAT-fs (loop4): Directory bread(block 69) failed [ 73.116056][ T1676] FAT-fs (loop4): Directory bread(block 70) failed [ 73.122554][ T1676] FAT-fs (loop4): Directory bread(block 71) failed [ 73.129091][ T1676] FAT-fs (loop4): Directory bread(block 72) failed [ 73.135617][ T1676] FAT-fs (loop4): Directory bread(block 73) failed [ 73.155885][ T708] usb 7-1: device descriptor read/64, error -71 [ 73.177353][ T287] usb usb6-port1: attempt power cycle [ 73.177386][ T526] asix: probe of 5-1:0.251 failed with error -71 [ 73.193046][ T526] usb 5-1: USB disconnect, device number 13 [ 73.599926][ T1742] attempt to access beyond end of device [ 73.599926][ T1742] loop2: rw=2049, want=793, limit=128 [ 73.642301][ T24] audit: type=1326 audit(1778092702.238:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1737 comm="syz.2.392" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95b1b9dd9 code=0x7ffc0000 [ 73.668932][ T24] audit: type=1326 audit(1778092702.238:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1737 comm="syz.2.392" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95b1b9dd9 code=0x7ffc0000 [ 73.673774][ T1737] attempt to access beyond end of device [ 73.673774][ T1737] loop2: rw=524288, want=369, limit=128 [ 73.693773][ T24] audit: type=1326 audit(1778092702.247:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1737 comm="syz.2.392" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fa95b1b9dd9 code=0x7ffc0000 [ 73.729741][ T24] audit: type=1326 audit(1778092702.247:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1737 comm="syz.2.392" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95b1b9dd9 code=0x7ffc0000 [ 73.736946][ T1738] attempt to access beyond end of device [ 73.736946][ T1738] loop2: rw=0, want=153, limit=128 [ 73.754837][ T287] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 73.765819][ T1738] attempt to access beyond end of device [ 73.765819][ T1738] loop2: rw=0, want=153, limit=128 [ 73.773379][ T24] audit: type=1326 audit(1778092702.247:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1737 comm="syz.2.392" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa95b1b9dd9 code=0x7ffc0000 [ 73.783639][ T1738] attempt to access beyond end of device [ 73.783639][ T1738] loop2: rw=0, want=153, limit=128 [ 73.818824][ T24] audit: type=1326 audit(1778092702.247:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1737 comm="syz.2.392" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95b1b9dd9 code=0x7ffc0000 [ 73.846725][ T708] usb 7-1: device descriptor read/64, error -71 [ 74.004305][ T287] usb 6-1: device descriptor read/8, error -71 [ 74.041003][ T1748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 74.448931][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.037781][ T708] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 75.073622][ T1755] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 75.111474][ T287] usb 6-1: device descriptor read/8, error -71 [ 75.263334][ T1762] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 75.263549][ T1762] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 75.271958][ T1762] F2FS-fs (loop5): invalid crc value [ 75.287646][ T1762] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 75.305427][ T1762] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 75.305439][ T1762] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 75.318762][ T1772] attempt to access beyond end of device [ 75.318762][ T1772] loop5: rw=2049, want=45112, limit=40427 [ 75.333477][ T1762] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=1762 comm=syz.5.400 [ 75.357203][ T708] usb 7-1: device descriptor read/64, error -71 [ 75.731224][ T443] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 75.738835][ T287] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 75.773952][ T708] usb 7-1: device descriptor read/64, error -71 [ 75.817273][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 75.817284][ T24] audit: type=1326 audit(1778092704.521:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.405" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98df5dd9 code=0x7ffc0000 [ 75.838115][ T287] usb 6-1: Using ep0 maxpacket: 16 [ 75.852797][ T24] audit: type=1326 audit(1778092704.540:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.405" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd98defb57 code=0x7ffc0000 [ 75.877949][ T24] audit: type=1326 audit(1778092704.540:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.405" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd98d97159 code=0x7ffc0000 [ 75.879930][ T1784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.405'. [ 75.902946][ T24] audit: type=1326 audit(1778092704.540:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.405" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd98defb57 code=0x7ffc0000 [ 75.911703][ T708] usb usb7-port1: attempt power cycle [ 75.936375][ T24] audit: type=1326 audit(1778092704.540:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.405" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd98d97159 code=0x7ffc0000 [ 75.970020][ T24] audit: type=1326 audit(1778092704.540:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.405" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd98defb57 code=0x7ffc0000 [ 75.995104][ T24] audit: type=1326 audit(1778092704.540:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.405" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd98d97159 code=0x7ffc0000 [ 75.998470][ T287] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.022607][ T24] audit: type=1326 audit(1778092704.540:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.405" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd98defb57 code=0x7ffc0000 [ 76.029933][ T443] usb 3-1: Using ep0 maxpacket: 32 [ 76.055019][ T24] audit: type=1326 audit(1778092704.540:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.405" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd98d97159 code=0x7ffc0000 [ 76.060931][ T287] usb 6-1: config 0 has no interfaces? [ 76.084554][ T24] audit: type=1326 audit(1778092704.540:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.405" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd98defb57 code=0x7ffc0000 [ 76.090059][ T287] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.123823][ T287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.135481][ T287] usb 6-1: config 0 descriptor?? [ 76.201466][ T443] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 76.209885][ T443] usb 3-1: config 0 has no interface number 0 [ 76.216015][ T443] usb 3-1: config 0 interface 184 has no altsetting 0 [ 76.261171][ T1795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1795 comm=syz.6.410 [ 76.432633][ T443] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 76.441791][ T443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.449959][ T443] usb 3-1: Product: syz [ 76.454133][ T443] usb 3-1: Manufacturer: syz [ 76.458762][ T443] usb 3-1: SerialNumber: syz [ 76.516945][ T443] usb 3-1: config 0 descriptor?? [ 76.568352][ T443] smsc75xx v1.0.0 [ 76.838190][ T1808] cgroup: Invalid name [ 77.270386][ T443] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 77.287020][ T443] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 77.408983][ T1812] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 77.427222][ T1812] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.601349][ T443] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 77.622652][ T443] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 77.644018][ T443] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 77.653471][ T443] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 77.671050][ T443] usb 3-1: USB disconnect, device number 13 [ 77.763375][ T1825] netlink: 'syz.4.418': attribute type 4 has an invalid length. [ 77.908645][ T5] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 78.281430][ T443] usb 6-1: USB disconnect, device number 10 [ 78.296045][ T5] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 78.304855][ T5] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.315277][ T5] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.325091][ T5] usb 7-1: config 1 has no interface number 0 [ 78.331604][ T5] usb 7-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 78.344614][ T5] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 78.467183][ T1833] FAT-fs (loop5): Directory bread(block 32) failed [ 78.473822][ T1833] FAT-fs (loop5): Directory bread(block 33) failed [ 78.480587][ T1833] FAT-fs (loop5): Directory bread(block 34) failed [ 78.487182][ T1833] FAT-fs (loop5): Directory bread(block 35) failed [ 78.493761][ T1833] FAT-fs (loop5): Directory bread(block 36) failed [ 78.507998][ T1833] FAT-fs (loop5): Directory bread(block 37) failed [ 78.516456][ T1833] FAT-fs (loop5): Directory bread(block 38) failed [ 78.523642][ T1833] FAT-fs (loop5): Directory bread(block 39) failed [ 78.530226][ T1833] FAT-fs (loop5): Directory bread(block 40) failed [ 78.536798][ T1833] FAT-fs (loop5): Directory bread(block 41) failed [ 78.552390][ T5] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.557227][ T1833] netlink: 204 bytes leftover after parsing attributes in process `syz.5.420'. [ 78.563202][ T5] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.578709][ T5] usb 7-1: Product: syz [ 78.578906][ T7] tipc: Subscription rejected, illegal request [ 78.582910][ T5] usb 7-1: Manufacturer: syz [ 78.593773][ T5] usb 7-1: SerialNumber: syz [ 78.638301][ T5] cdc_ncm 7-1:1.1: bind() failure [ 78.666115][ T1847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.427'. [ 78.675512][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.427'. [ 78.705847][ T1847] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 79.064150][ T1848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.427'. [ 79.111278][ T1848] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 79.199819][ T1817] netlink: 40 bytes leftover after parsing attributes in process `syz.6.417'. [ 79.226567][ T287] usb 7-1: USB disconnect, device number 12 [ 79.644478][ T1882] device syzkaller0 entered promiscuous mode [ 79.764103][ T1886] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.775574][ T1886] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 79.809466][ T1891] netlink: 188 bytes leftover after parsing attributes in process `syz.1.428'. [ 79.811652][ T1886] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 79.837634][ T1889] EXT4-fs (loop4): Invalid want_extra_isize 4 [ 79.847201][ T1889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.434'. [ 79.927716][ T5] usb 6-1: new high-speed USB device number 11 using dummy_hcd Stopping sshd: stopped /usr/sbin/sshd (pid 186) OK [ 80.123481][ T442] usb 7-1: new high-speed USB device number 13 using dummy_hcd Stopping crond: stopped /usr/sbin/crond (pid 179) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 133) Stopping network: [ 80.219353][ T5] usb 6-1: Using ep0 maxpacket: 16 OK Stopping iptables: OK Stopping system message bus: [ 80.369070][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.379346][ T5] usb 6-1: config 0 has no interfaces? [ 80.379663][ T442] usb 7-1: Using ep0 maxpacket: 8 [ 80.385097][ T5] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.390447][ T443] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 80.399233][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.418570][ T5] usb 6-1: config 0 descriptor?? done killall: can't kill pid 560: No such process Stopping klogd: [ 80.550696][ T442] usb 7-1: unable to get BOS descriptor or descriptor too short OK Stopping acpid: [ 80.646896][ T442] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.657018][ T442] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 80.666070][ T442] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.807392][ T443] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 4 [ 80.819245][ T443] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 80.860698][ T442] usb 7-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice= 0.40 [ 80.870382][ T442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.878864][ T442] usb 7-1: Product: syz [ 80.883466][ T442] usb 7-1: Manufacturer: syz [ 80.888160][ T442] usb 7-1: SerialNumber: syz [ 80.999667][ T443] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 81.021860][ T443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.062108][ T443] usb 5-1: Product: syz [ 81.066675][ T443] usb 5-1: Manufacturer: syz [ 81.071322][ T443] usb 5-1: SerialNumber: syz [ 81.369377][ T442] usb 7-1: USB disconnect, device number 13 [ 81.394945][ T25] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 81.437877][ T443] usb 5-1: Can't get UAC3 power state for id 10 [ 81.492341][ T24] kauditd_printk_skb: 169 callbacks suppressed [ 81.492350][ T24] audit: type=1400 audit(1778092709.827:681): avc: denied { sys_module } for pid=1959 comm="syz.1.444" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.492692][ T1960] Module has invalid ELF structures [ 81.498530][ T24] audit: type=1400 audit(1778092709.827:682): avc: denied { module_load } for pid=1959 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 81.523114][ T443] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 81.553800][ T443] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 81.566461][ T443] usb 5-1: USB disconnect, device number 14 [ 81.638791][ T24] audit: type=1400 audit(1778092709.958:683): avc: denied { module_request } for pid=1963 comm="syz.1.446" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 OK Stopping syslogd: stopped /sbin/syslogd (pid 77) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy [ 81.793111][ T24] audit: type=1400 audit(1778092710.108:684): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[13184]" dev="pipefs" ino=13184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Connection to 10.128.0.164 closed by remote host. [ 81.857437][ T24] audit: type=1400 audit(1778092710.145:685): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.907798][ T25] usb 3-1: unable to get BOS descriptor set [ 81.952430][ T24] audit: type=1400 audit(1778092710.145:686): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.976572][ T24] audit: type=1400 audit(1778092710.145:687): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.036106][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 82.043769][ T25] usb 3-1: can't read configurations, error -71 [ 82.068386][ T442] usb 6-1: USB disconnect, device number 11 [ 82.848781][ T307] device bridge_slave_1 left promiscuous mode [ 82.854903][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.862185][ T307] device bridge_slave_0 left promiscuous mode [ 82.868270][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.876258][ T307] device bridge_slave_1 left promiscuous mode [ 82.882447][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.889715][ T307] device bridge_slave_0 left promiscuous mode [ 82.895886][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.903473][ T307] device bridge_slave_1 left promiscuous mode [ 82.909590][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.917018][ T307] device bridge_slave_0 left promiscuous mode [ 82.923212][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.930875][ T307] device bridge_slave_1 left promiscuous mode [ 82.937038][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.944735][ T307] device bridge_slave_0 left promiscuous mode [ 82.950868][ T307] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to[ 82.959348][ T307] device veth1_macvtap left promiscuous mode all processes [ 82.965342][ T307] device veth0_vlan left promiscuous mode Requesting syst[ 82.972680][ T307] device veth1_macvtap left promiscuous mode em poweroff [ 82.979835][ T307] device veth0_vlan left promiscuous mode [ 82.986751][ T307] device veth1_macvtap left promiscuous mode [ 82.992797][ T307] device veth0_vlan left promiscuous mode [ 82.998762][ T307] device veth1_macvtap left promiscuous mode [ 83.004730][ T307] device veth0_vlan left promiscuous mode [ 84.042069][ T1976] kvm: exiting hardware virtualization [ 84.048153][ T1976] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 84.054798][ T1976] ACPI: Preparing to enter system sleep state S5 [ 84.061548][ T1976] reboot: Power down serialport: VM disconnected.