last executing test programs: 5m29.868925849s ago: executing program 32 (id=378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r0) 5m8.239688606s ago: executing program 33 (id=527): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@remote, 0x4e23, 0xfffc, 0x4e2b, 0x3, 0xa, 0x80, 0x30, 0x84}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x7, 0x3f0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) (async, rerun: 32) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYRESHEX=r4], 0x48) (async) r6 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0xfffffffffffffffd}, 0xd) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) gettid() (async) r9 = getpid() connect$unix(r3, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1f) (async) process_vm_readv(r9, &(0x7f0000001d00)=[{0x0}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000940)=""/212, 0xd4}], 0x3, &(0x7f0000003040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 4m46.549141315s ago: executing program 34 (id=696): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xdf0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x4040000) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x26, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x26}}, 0x0) 4m30.280191048s ago: executing program 7 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a0, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4401, 0x0) 4m30.215489429s ago: executing program 7 (id=857): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='\n', 0x1}], 0x1}, 0x2004c811) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb4, 0x6a, 0x2c, 0x10, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x2, 0x2, 0x2b, 0x57, 0x33, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x81, 0x2, 0x40, 0x0, 0x3d, 0x1}}]}}]}}]}}, 0x0) 4m28.244416162s ago: executing program 7 (id=884): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000004000)={0xa0d000, &(0x7f0000003e80), &(0x7f0000003ec0), &(0x7f0000003f00), {0x2d}, &(0x7f0000003f40)=""/25, 0x19, &(0x7f0000003f80)=""/53, &(0x7f0000003fc0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) 4m28.225282002s ago: executing program 7 (id=885): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x10, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x37}, @remote, 0x7800, 0x20, 0x5, 0x41}}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) alarm(0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0xff, 0x81, 0x0, 0x6080, 0xef3, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) getpeername$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x40, 0x5, 0x64, @private1, @mcast2, 0x80, 0x40, 0xef3f, 0x9}}) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="880100001900040026bd7000fddbdf251c001008fc00fd08000900000c000900c20a3200", @ANYRES32=0x0, @ANYBLOB="8400130000000000000000000000010000000000000001000000060000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0f00000000000000000000000000000007000000010000000000140012001f000acf007bd09b02239176fa1c70c10c000900040029d2", @ANYRES32=r1, @ANYBLOB="0c000900e89397b4", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="0800010000000000840013000000000000000000000000000000000000000000000000000008040000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00140012002900555b13b422b6e6c965c43ee2aa4b"], 0x188}, 0x1, 0x0, 0x0, 0x4091}, 0x40005) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1000, @empty, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f00000005c0)}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0502103, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r11}, 0x18) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 4m28.132720012s ago: executing program 7 (id=887): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = dup(r1) ioctl$TCXONC(r4, 0x540a, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="74642c726664e7312fbec512fe6e6f3d00f600000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k']) fcntl$getownex(r2, 0x10, &(0x7f0000000280)) 4m28.095940582s ago: executing program 7 (id=888): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400)=[{{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000680)="f2200041231d81f8ed984bc05821d1b731546b928f463a21f67a28a275b9ca8ad803102763d9470bd10719f10dd8c581db2c05e67aa676a99caa40947a4cc4007a0c3ed90c9a57b132a3ab1f2207d3cb792e23240546f1ba84f7085dd5c7ee9483ece2804472215c9ab3b082bcdb7e55b9ba6c314c13f15f94", 0x79}, {&(0x7f00000002c0)="cd1b9caa2768ef6b6a961bc4b0558bf9b0812af480d5f9bb37fd", 0x1a}, {&(0x7f0000000780)="ccc2c0f1e6f65b246611989fbb94485a923bfe3f3c0cc1c116578caaed4f67deabafc5a6bd15287a17f9046e7e316db6d682019526327dca807ee836e8fc8b4b2e0da10fa4433fc133c32a93c8d01bddd5b5a4e9d301904824f51f5909df5d0b545cc0c74c90f396417ae34a3d007b89ee56a392960efb8831d98c9ce3b4f15fd3dfebd6389a2aab1092d18805768d7e8c6e3753171ab4eda5c5b80304f5", 0x9e}], 0x3}}], 0x1, 0x8080) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x2000000, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'vlan0\x00', @broadcast}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000540)={[{@nombcache}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_eq}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) 4m28.074576033s ago: executing program 35 (id=888): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400)=[{{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000680)="f2200041231d81f8ed984bc05821d1b731546b928f463a21f67a28a275b9ca8ad803102763d9470bd10719f10dd8c581db2c05e67aa676a99caa40947a4cc4007a0c3ed90c9a57b132a3ab1f2207d3cb792e23240546f1ba84f7085dd5c7ee9483ece2804472215c9ab3b082bcdb7e55b9ba6c314c13f15f94", 0x79}, {&(0x7f00000002c0)="cd1b9caa2768ef6b6a961bc4b0558bf9b0812af480d5f9bb37fd", 0x1a}, {&(0x7f0000000780)="ccc2c0f1e6f65b246611989fbb94485a923bfe3f3c0cc1c116578caaed4f67deabafc5a6bd15287a17f9046e7e316db6d682019526327dca807ee836e8fc8b4b2e0da10fa4433fc133c32a93c8d01bddd5b5a4e9d301904824f51f5909df5d0b545cc0c74c90f396417ae34a3d007b89ee56a392960efb8831d98c9ce3b4f15fd3dfebd6389a2aab1092d18805768d7e8c6e3753171ab4eda5c5b80304f5", 0x9e}], 0x3}}], 0x1, 0x8080) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x2000000, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'vlan0\x00', @broadcast}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000540)={[{@nombcache}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_eq}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) 3m53.883577471s ago: executing program 8 (id=1135): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1800004, &(0x7f0000000280)={[{@discard_unit_segment}, {}, {@acl}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, 'checkpoint=disable'}}, {@alloc_mode_def}, {@two_active_logs}, {@nouser_xattr}, {@checkpoint_diasble}, {@noacl}, {@atgc}, {@background_gc_on}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0xfd, 0x551d, &(0x7f00000079c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvLiWBIiHFsZvm85HO777vvn73PSuK8u4iB3BmLSS//1qKq3GxGK9GZPulYnucjIiXIuJaRMwc2kpF/nHifERcioiro+IRs8Wc0aEvbwyvr/zyzm/f/XDh3OWvvv1xOlcMPA1ejojuVr6/281j2srjwyJfG7az2L09LGJ+oDOfH++meX63uZFV2K0dzKtl8VYrn59u7fRHcbNTq49iq72Z5bd6+Qn7w9ZBnewND2vb2bjR3Mhiu59msbWfn3dvP//dtt8f5HUaRb1PsvIxGBzEPN/ca+bXs/Uoi/XeoMjnddNGc28Uh0UsThf1tNPI1rFxjA/6Kfduu7ezlwyb2/122ktWKtVXKtU75ep22mgOmrfLtW7jzu1ksdUZTSsPmrXuaitNW51mpZ52l5LFVr1erlaTxbvNjXatl1SrlVuVm+WVpWLvRvLm/Q+STiNZHMXX272dQbvTTzbT7SR/x1KyXLn16lJyvZq8t7aerD+4d29t/f2P7n54/7W1t98oJv1rWcni8s3l5XL1Znm5unSGrv+zYtFjvH44ltK0FwBw+hzu/0d/z17R/wMTcJz+v/uoGD+x/99+EHHy/X/o/8fiVPW/Z73/P4Hrh2PR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFk/zX39VrazkI8vF/nnitQLxbgUETMR8ecTzMb5IzVnizpz/zF/7h9r+L4UWYXROS4U26WIWC22P54/6U8BAAAAnl3ffHrti7xbz18Wpr0gJim/aTNz5eMx1ZuPiLmFn8dUbWb08uKYimU/3+dib0zVshtY82Mqlt9yOzeuav/L7JEwfyiU8jAz0eUAAAATcbQTmGwXAgAAwCR9Pu0FMB2lOHiUefAsOPvP+78fCF48MgIAAABOodK0FwAAAACcuKz/9/1/AAAA8GzLv/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/2Lmf28SBKA7AzwYv7D8tWu19W9kblLEl5JhjRAFpggJyoIY0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJDta7i5u9t25zdvp08owEAAAAu2VbrRf3PLPW/N/d/Nrd+N/0iIsqIuDR3H8WXs8xRk1O9Pn93+nz1pob7iDrh8B6T5voWEf+a6+lX158CAAAAfF6b5WqeZuvpz2zoguhTWrQpf/zPlFdERDV7zJRWHvL+ZAqrv9/juM6UVi9gTTOFpSW3ca60d6l/7sdVu+lJU6SmvPiyY5HZxg4AAPRodNb0OwsBAACgT1dDF8AwinjZyjxuBU5S02zvfT3rAQAAAB9QMXQBAAAAQOfq+X9P5//tnf8HAAAAw0jn/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANClbbVebJareduc3b6dPKMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZ/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePO7v/yfmBpnkrnXxtLzSLJ2amydGnvnxtEfxtevAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527udFbioOAPhLMpnaqjiuMocVUfCgFzud1tbexIOyePBPEJbttK6d+qPdgy1F3Is32XMvokcRQVlv/R96bqGXeuthDhXE40gyyUzaLjormKS7nw+8vG9CyPu+BJb95mUXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEqTdxdxkm16szgujt1+cH0j6+880mdu7txdzVoWR3Um/WR4uboT9ZtLBAAAgMMjKev7EMK9dHct6+NeXv+n5TlZzf/9s7O4rOcfrfvLvqz9s/bbr/dfnA/Um42TXfT85nh04vFUOv/fLNvtuX89o5Pf+fzdS5I/kPiD7RcmaX4/o29v3Xqvm4dH6sgWAPgvjpd9EZS/D2X9sMnEADg0OpXCu6z/k16zOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUYbIdni7jKISw2lnEmTsPrm/s1d/cubtatjM3buyErxfXzC6RhhDOb45HJ2qdTbtduXrt4vp4PLpcf/BKCKGp0d8ppn/xoyVODqGR+7P/4K92pNG2IC4edlvyeTKCBn8oAQBwIKVFy+r6e+nuWnYsWglh+sPD9f/rlTgsWf/f//jM7epY1fp/WNsM22+wdenzwZWr197cvLR+YXRh9OlbJ4dvD0+dPX367CB/VzLwxgQAAIB9m06n0/lOt2jV+j9eeXz9/1glDkvW/198N/yqOnCi/t/TYtGv6UwAAAAOt+df/fOPaI/jUbcbvlzf2ro8nG3n+ydn2wZS3bcjRavW/8lK01kBAAAAdZhsRw+t/5+rxGHJ9f9nfnzp5+o1kxDC0WL9//jGZ+Nz9U2n1er4c+Km5wgAAECzjhatuv6f5t//x/NPHuIQwhuvzeLi3wD+Y/2fFvV/8v43P1XHqn7/f6q+KbZS3J/dj7zvh9DpN50RAAAAB9lTRcuK/d/T3bVPfjn2Ydf3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+zsAAP//IvVAvA==") (async) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 32) close(r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid_for_children\x00') (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) listen(r6, 0x5) (async, rerun: 32) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) (rerun: 32) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r10 = dup(r9) sendmsg$netlink(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1a8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200400, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, '.'}}]}) 3m53.828374761s ago: executing program 8 (id=1137): r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_path_chroot\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m53.778232151s ago: executing program 8 (id=1139): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x18}]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2}, 0x94) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) writev(r2, &(0x7f0000000200)=[{&(0x7f0000001b00)="3c5651e3ef52a6af9665231e017bec96f570a3f233af800a1d7bf766c6eb530585b3d2c25cc804574abf2989f4a17831548e68faf6b57845947e74a8bc4c33a59b6e446db84df681fd19424948aa01c3dc59a6de661cb950deb2998ac21b8558e70d6a328b07437ca3869a4a87868ca4616075585bdbe07d3bc42de72d83c6a1785a67", 0x83}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) sendmmsg(r1, &(0x7f0000003180), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x141, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') lseek(r8, 0x2, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd(r7, &(0x7f0000000280)={[0x1]}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) (async) r10 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r10, @ANYRESDEC, @ANYRESHEX], 0x1, 0x536, &(0x7f0000000400)="$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") (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000c00", @ANYRES32], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x40) 3m53.715639211s ago: executing program 8 (id=1140): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x81) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x1d) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x408, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x220400c, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair(0xb, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x0, 0x1, 0x64, 0x1000007, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8000, 0xfffffffe}}) sched_setscheduler(0x0, 0x6, &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) 3m52.823062507s ago: executing program 8 (id=1150): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000287000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r0, 0x955e0000) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) pipe2(0x0, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000200)) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000fffffeff0000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000000000000000000000000000ff7af9527b7a5d047574a228e09313b6f904b40b072e376caa2957868111a32b63ab592205946dca633baa7d32678918466951192ac6f3130001023608c03ccd1bed4f0ccb1de96f5fde652e66102c185e39364c138a1ed149ea698aea5c243f3e0981e6d4935824d91e9683e94e38d6eb7277e0fd790e21ebd6b331e1481a51936ecace51ff55fd680a54f56dabb94d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d0000000000000000000000040018"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) syz_usb_disconnect(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) 3m52.791064007s ago: executing program 8 (id=1151): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x10000a0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r8, @ANYRESDEC], 0x52) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) (async) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) 3m52.752776118s ago: executing program 36 (id=1151): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x10000a0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r8, @ANYRESDEC], 0x52) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) (async) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) 2m2.511307879s ago: executing program 9 (id=2125): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000000000), 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) fcntl$setlease(r0, 0x400, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x12, 0x1, 0x70bd2b, 0x25dfdbff, {0x1e, 0xf3, 0x0, 0x0, {0x4e22, 0x4e22, [0x4, 0x2, 0x4], [0x8, 0x5, 0x40, 0x8], r2, [0x6, 0x1]}, 0x4, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "e90b3fca8f7f5f1d762f88001e"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002180)={'syztnl2\x00', &(0x7f0000002100)={'ip6gre0\x00', r2, 0x2f, 0x9, 0x1, 0x5289, 0xa, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x8, 0x1, 0x49d900}}) sendmmsg$inet(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)="b5e39f2f4e1a8bf00436b9fd169447943d", 0x11}, {&(0x7f00000002c0)="fa74440b335d2f73d1f91f0552cc0ac7e326db3504a586776ed3397b724779f52f2b569a3acc99702d7f454fdb71836386389ceae1ee96ca131a52396fd3e000a1b54e1c2e8244f46d89bd379ba824db819f9b05ed1e0101e753cce75cc499c9d35ae00867f6339ab478a5e504f0851134cd19fa0107f087984fece7a3948add49abfda7511404a24b2b5693c99056a47f1e2ceecd08d45d3620fd880aa65b4fe913a1bc0474968f574726188dd0138090972ce184bad3c62c82190107996116352d6a34b1a9123e69b03595d8fb9e0abde767df4d8081f127d9e4caceaa01914db7e95e717e88c5af857d5c8ad3fffc61b2f94cee6b42af855e5b1b016373", 0xff}, {&(0x7f00000003c0)="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", 0x1000}], 0x3, &(0x7f0000001400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001480)="3a284cddc8544b172d1004da2bef3f7950543a4728e4fab1f3cfe7f63eb7abcbaa277d45a330f50b31e52f1e7040511e83afeb73f8a8f0924d3f549851adfdc1e2d58588bb10a03ae442e5ac3f634f3f2fee1031711d6a4942f8418ee78425b6b8eca17f3497ea9bb718210b35d1acc482f2b72ad1b3ded2366d79da787a4b0ae0bede0e02", 0x85}, {&(0x7f0000001540)="4f800f18c4a6cfd3d842bfaadd733caaef024555b505cb44164c667d235f1a837556170d24985b0c435cb49441cc7ec0d0d4467dcd26f6327a48ced39292d6e607a50ec8011086a9f6e4683b3c0da3bd56b16205ab1e61cb827e77ed103bc3d1ff410fc74c298d14c18d2c5f9a5cccac614ff1800aa3aa353e63dc8e34239c2996cc976524699765296bb279ec5d66630e47e5fa7c6442e05e79f9c3280f126806d78ff6a895323bc99b5c264222cd94522c16cd6cbf49619d535db940d6d010d645537ae9037b6e", 0xc8}, {&(0x7f0000001640)="73bcdf2f8a254d651fd615ebb02b65de62e42fd9f64b88da4f49b5773479ae60d7ef3a18cb4eff269cda2e5de9356d1fe719c8e37ade48814009fb3f93a393914cf778e2c3f65b3fcf031aa5da9a5178fff8fa427e6c1db5508eb1a255d01c202ebf023779f47692109d782b77f85c4478cf46c7372fa23501cebfcb4a7cf330a332b70ce563a0547835fc73417622799f82e60bc17519545e62e211cbd1703e76f80d0aa6c3c80c15a86469b885b6a2fb6f0800b29195ad4bf7e110acd5c24645243e272be818", 0xc7}, {&(0x7f0000001740)="07663d6b922726718e3221983b6195147eea7aaf0cebbfb0cd8489d80b494586326a91198a2003f509", 0x29}, {&(0x7f0000001780)="e9b05c0a392da1a8513ac8dd333be9835fb753555489b69646b98fc807f75c9a2928900f168e3c0565ad0646dfe1ccc6337e1906f58022", 0x37}], 0x5, &(0x7f0000001840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2c8}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@cipso={0x86, 0x44, 0x0, [{0x1, 0x10, "1b4c5d97b3c606db077e325259d4"}, {0x2, 0xd, "8577adac9dd5b3675b4172"}, {0x7, 0x10, "1681c8e24a3cad69af86162bad18"}, {0x6, 0x11, "c9ab095a0233ba69805b6672b9191e"}]}, @timestamp_addr={0x44, 0x1c, 0x6c, 0x1, 0x9, [{@multicast2, 0x6}, {@multicast1, 0x200}, {@multicast2, 0x80000}]}, @ssrr={0x89, 0x23, 0x6b, [@dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}, @empty, @loopback]}, @noop, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x28, 0x87, 0x0, 0xd, [0x8, 0x2, 0x8, 0xce40, 0x4e, 0x5, 0x6, 0x7, 0xa]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @dev={0xac, 0x14, 0x14, 0x30}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x160}}, {{&(0x7f00000019c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001a00)="941e02853aa70d671af659900d51fdf6524ce7e009a2498b8edf74eceeb8b25cf63f33711b8996a0de0f28f74625e886a8bbae6c3f9aa7f9ab9c2d76b6a541bc33c3df6a9dfc34c552553dfd19790cfcbb0682f7453867ad640d8c85f68feb74a9d97b690959b2192a8e25f873bbd9e13a3d38907f2546c891e3e087cf256f16527bf1277e9c73504a40d5c1a22659a2efc5421bde379df20a051a624dd7fd7cf9d8cccce2c14159c26073474bf974619c1061432e4cca03ad13a546eb0b12efe3222a2545496f31341f50034105153823e0cba5f9a0bedaa39ae11ff3", 0xdd}, {&(0x7f0000001b00)="5919c949d4ddbb123f7ad1b081272355c483c8363b6ebfb8552a499e902e60031e5f1f0cfdb7c064df22e9bd033cfd0af4235a07ebe7ae5346fbc320c38c6b03ebd26e43d7fda6526fd529256a0c4f90884220cc92fca126aa3940e22b27f9d68e65de18955ae704915e633452bd24740e8d98a9151fe6522996dab4abc516e1af2361c469e08d2d5603fc1e9c7757cdbee687e519906fdec7438cc9a1f06954fc04e941eb81590132123e46fa883e8d", 0xb0}], 0x2, &(0x7f0000001c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @multicast1}}}], 0x38}}, {{&(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000001c80)="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", 0xfa}, {&(0x7f0000001d80)="92217aa72798b285fcd48f3ab946cf966c84a4b6f83faf2388411a7b2d8cb785de5a129bade2b39590bcfde96d64f7e41b414b4a5724028ff0882cfc69e7a7be68a56d8405437de2906d27a9d1175a7b473c7b174c4c7f346a771d1a851e8ac0d8f9e70bcb45ee3f1afd578ac5ef91cde44d6a93535f04d3278f0ab0c4ef615f8e", 0x81}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)="330665f109b7077347f998efc7", 0xd}], 0x4, &(0x7f0000001f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @empty}}}], 0x70}}, {{&(0x7f0000001f80)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000001fc0)="26df5c902dbeea9e0fd6db872ed365fae8600577eec30683c3980d640194dbb211af52ffe9a4a18458e33bdbb602841b286abe0e2417781420e9cf017db0bdf2fef456980de1ed20a9970e12233525951f4c3cb30dca2d9cd52fbec9c424549ad93bfed45c061949dcf374d320b3be5d7b14f4187e4bdcf896dcec424380e1918db1c3e8687173534ed95ee6ac425cd98c329c30d0c05ee140271c5d024e37b46ce6e483be68f76a3769351176084ceba61d0d7121ec5cfe4d7e3da47e3bb49ed91d61ae78eff5afa1d3db69781671dbaa341490184d0783a12f5927b6cf1c50f06dcce842a066d8f0b7285d5e09b0629590b379edfb1f", 0xf7}], 0x1, &(0x7f00000021c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xc9, 0x3, 0xb, [{@private=0xa010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x8}, {@multicast1, 0xde}, {@rand_addr=0x64010100, 0x7}, {@multicast2, 0x3}, {@remote, 0x4}]}, @end, @noop, @lsrr={0x83, 0xf, 0xe7, [@multicast1, @local, @empty]}, @generic={0x86, 0x9, "9a1d70cb6b51f8"}, @timestamp_prespec={0x44, 0x4, 0x15, 0x3, 0x4}, @rr={0x7, 0xf, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}]}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0xda, 0x0, 0x6, [0x4, 0x6, 0x2, 0x0, 0x9, 0xd, 0x2, 0x8000000, 0xfff]}, @cipso={0x86, 0x10, 0x2, [{0x2, 0xa, "4e9eee1bedf415be"}]}, @timestamp_prespec={0x44, 0x54, 0xa7, 0x3, 0x9, [{@remote, 0xd7e}, {@local, 0x10}, {@multicast1, 0x1}, {@loopback, 0x8000}, {@private=0xa010101, 0x80}, {@loopback, 0x932}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010102, 0xaf66}, {@multicast2, 0xfffffff7}, {@empty, 0x8}]}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @ssrr={0x89, 0x23, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @loopback, @loopback, @broadcast]}, @generic={0x94, 0x2}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x36, 0x1, 0x3, [{@empty, 0x2ff4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0xd}, {@local, 0xc94}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@multicast1, 0x227}, {@local, 0x4}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @multicast1}}}], 0x278}}, {{&(0x7f0000002440)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002480)="00cac8f3f148694c4aa67d8a263ff24afe3e149a955e9fec894b132b2f9b8e0dac8e549af404604f2704afe4ca598b348f4ae9dd276fb61300519b3d4d34a88ba166fb600ebc8e0510f04d4c5d56e6f547e9cb247cf2859f60b74007693dea664beea227a042d392e34de7be679bc3eccece05", 0x73}, {&(0x7f0000002500)="dcee9fe5c68eab7739f94ac600d877e5c06eb0d5208d6a8c51738caf8543cb524b13260b78afd508d09c2d", 0x2b}, {&(0x7f0000002540)="ccab4ed15402d1324be7fb5bc80e618bd68026c6dd0e3def76aa3475c5b06971cd9796a487847cdca25978dd6e9753c2f78fb33b59fbcf5b67a70dd9aeaf33ec74cf2f3a4b261ab275bcd89992b0126da78aff2b81f4b6ea3b4634e64f80b0778366fda26ba568d5a4641999502fd1a34251bc95cbff78317a334e03f449ea4054ffb7c42b59ff429850dbc058212c56e0c593f64caec8df75b80cb4ab8ca889a427f1f8a9dc80bded73332a63e508a57863803635a4f1de3376f73ce5abd86aac8eadb2", 0xc4}], 0x3, &(0x7f0000002680)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x66, 0x1, 0x2, [{@remote, 0xffffffff}, {@loopback, 0x3}, {@multicast1, 0x1}]}, @lsrr={0x83, 0x7, 0xdd, [@local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x80}}], 0x6, 0x54) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f0000002880)="65437ffafb4719f4095afe8e876b40f9481e21c14a06eb7ca85b7bfa196cdec58c936af6ef962428f4bed850b272c39e2561b5d4feeb37200cf126dbaf9194445c5fb8a133ab794df527767cb83618cc5bc1f9a9d33295dd9a2eece15ad64e518c623b9a0c2357f9fe1d325fa3a3c63e39ab06a2e899533c5d56b453c11b31f04f4b4bd4953cdd39583434188354ea6469d4322037ea64e633f42bd9f9eee1b0caddb32e171d26c0f57bfa456ec94b7a37fd74fd05e84539090eafbe5e018c1dc31c44361c53686ae31297d73f4ad041cf00c15d5826b58484463313384c5a6495d59ff89879411ac5ff98ea6bdde01366c0dd21f50fed822139a1bfbeed9cc324994d0e7f64aa7bd6996c2284f35ebd834b0a0ea67381133fcf5bd6066c2baeaa1e3faf2cd7585e0958e1bfc66bb7f1eb980c1acbf767c155c38a9c1d5dc195f32733e720e5e693e91b53b2b130b75b226b9da818dee0ee13a691e84a50ccbc54e03dd64b2cab734b3182afd8e98989ab88329701b43030a8ae511ed473d3008960c6b817a472edcf0e6922fa4b1b5c724402350fdb70c488d8e5ab9cea518ccf0f3d07c59b03fd3763c5ce1c4baa777cc956e4a84b6c29b43f653a9a6d8010a690fdb69555c305922b3a069e2495836a71e424abd4601d156fba207b663bc8ebac807f4bcc59dfe76a4ed98c9bcd919a3ac77d2c0e717e0071d80396f98b9374389729d8216c6cdd46a39eec8d88b45876eb46ecb4b7722ad0b0483bb2c20de3a357fb1a9e56604bf2f8eba265f211ff5659620a51556e2bcf47cd1a3a71c08e0523de1de8ceb1c0eee134654d9e0cfb433efcceafedb1fa38f01b3480131d9ea26699ef32d2e948113519548a4915db76a288dd37a954cfc72c9c1bb6af161d167f222e26dc25ee80ff03919812f9623f35c4a34fc57fdef6e918b38f9078bc2ae636e1882966ecfe549ee1b4b7ad4ec9b9103a5a799e2c24441fa56a9d37d9b864620700456b47e79f09de60acbabcac32e550e992215b477efb22d015e4cfb5467960890eb85249873e7566caa59c1ecdb76ab0b28dd3134448c86e4c976e4e68de9a52cf67fafab646cce274c291e8359c121e5a767a8d0402a078aa4bd09dac0799551f9a84c2a8ef930cf3920da501af21cf22dba67f063038fcca88e69e4ff1dc4c6c1b6ec4b9b2abfb4ed8816b2618ed0b6af0ea61ada0220210c2a64851be61782bc44b675b740f933e9668a8b00d0c704612b9a3e73b867f38f4331a25cf5f3695b3acb086f208d3a79bae29304a1995e832e9791d1c61532d0520952655aa8ae3af9b32a89a486aeab2e35ad3ff14c2763c0d7ee79eeeae710b8e8b9f053de6cdc5cfafd31c092ff448c00c5066173830ed199806737cb261351a82644a8ac2d7612fc46979473d2d8729d2eb5555d14e969037f52429c7f39ab5d92692536eaee9f098e2609372e5c961c433112a077b84a65f3551b34df31a538e9ecbf2d524eca2b593a32735fc15bdb5c158dcf973340a3ee32356cfd4df3e8e244c7c7baf0a45f45993cc058d65c2ae1c7b004ecb6d8c46c750ac368ec2101995fe395a7748368e009a2daab66938918f3d7218ea5594fbb09726d2a12139c0a4caab63d19105b18f8aa17890384a8d7d3021b5a4c082f37ea12d799436a0d2084e32e847a820caae8369ff5f29485f91f504983cdee78b4ddd1a5c88895449f3c231e7acbf4d42973b2838c34d8130147d3ce73a9c8cfc4beed3b946115e3f2e7e8df45d1f6e189c980b8eabc3755047089a5042b65718dd1c08d7b5eab20f08cdde7e383a95e5d6d6d9e07441636eea60edcc0cda0d35b888ca31aabf82c5273b116f72c36b466914b25f07afc78674eeb485f67f3320b1b5743c1accca032f21e1eab2c57e927d588a217570fd0b468ffd2e09821e8a3d2101199cfcb42a8cb7cdcfb5c567438c933320f91faa45b5a71d94d0f2d53b91a013d8f68706e499289391b36f183ceb43a31a64aec73a6fc69ace3e78110be2c7866c0177d7997e597d8ed113853ca5299c7b5115a1c7eaf5599dd9310ace6bd08579c106729a1df36d305c874542005d7058f2f0320456003378f96563357e1dbb612cf767a7ff73b3d19ae74d12ee53c17b55f53b8f894713752747988b35fdeb3993cc589ba5f1937dffdde800b22587f2899944850f1d8f55bb45b97c84c4854aec02cd02732847bb91dc89e052c2b8be796acbd22c3f73415c8c5c72b9e5c6139522322bd1ffb18ce625449d99f8f2a1c4439eb65884f2308042fd73b6a61f7ebb2a4a239e99fdab17fa1b01ead094e7e2fec1e73cb6be49535c259c9440e1263b4dae4810a87d418173a868deb8d60fedb33cc83c752206c6bdaefb60421377faa23dec87eb4249d9846d6a9faecc14d2c326f3147fa749fb5d594c8d525f2b3d612e36c6244fd1e50fc00a68987b3ce2f99701d8900c5885f183f5d9272f117a2cb1d6cf02630509fe17f3bf20964c997684e4d8212958921ddacbb41ccd56b1f5c743ddbc305b1d4711460e9efd4b63dc2bea90aa89cf5be76936ddcd820f7cdee3384841043c14088750b8acfd48976e33e180af0f81581dd8d5cf257bfed0d8a9f950b933d161caa4f90ac57472d70a7279346b4ff3423e3e22b9a2d0a88c7653a78336032a6b1628d34a8f8794c01e9935848b650986252fd389b5013ea664c4e9224d26300cbfa28eb1469fe8d602d32236c52d73c0b594591d52f5f0dcb8b76bea1e5fd5cb454f2b54eb6388e8f7ae837b841a4bccf80eaa8ba0c7691186eeb2aae14e5d0e63a0e6e0c072594be7a7e4dee3b920c3ba4b51ab7b7071c3e9de302a6b22bfc79d2d6e397d4193c04267219d6ad1a17d1b0af9ba468c98c47010033e56affa6b175980f450971f6b52bdb238375a098c27167c179418bf51d57649ddfedae557a12a69934e267500aee33a387cb9fea1783e066e740e2940ff1633553381aa68a530c72891a1d0f30b673341642e5a18f956daf7f5ff083f2fa6186bc7e94ed12a3ef04841945a41d1fc62c4138cbf702492ac97cfda73968d210d5dcb46f7e51006819542737ba87236f028968f83bc69315c74785a340b082ea421e851149905522e5210f4b9347a6e0ff0dc4ee017c8b806d273691eb2331b4c1c78303245e7f9f87b1f87aa68d26e2b69682ba1b934003526c1e6aea6f930b78d5b243a936b222a09818b5e2500b11ba64c71e87d76998eb14cf43c36fd2eef0ddfb4ab25eb85a9a7875a5f5bea642482e59faa58c564e6d2547cd4819a8983d6880840194d327f1592d0fbb9e9d64ed9e95760d6da970490c260a1a2b185b23d9c81c2fcb96bfd2605c0a8a0c5e4ee547f8b14c74371e5e3f5e752c6ba4f45f071bf4ca22a406578f44062e46a1a37c3f49744353b601cbeca511138250945a4c84fa0c7f7744b59941871e2ca6fa1bc6d4d9e15bee5d6a710404453526c86a95c68f04e61623b22e8ea313f7e82621070dc9352d7280cd022b881308822f246f407b9f6409c029559082a3d4c68a0d88282b65774ba83ad7d5e2e0e2cbc9078909937615cc3b17cc5aabdb1791c677dbacfe5f028c5407dfe716816dc6b9b3905213d2dcda1ed7914d4dc34e481aa74272a80a33495114a6ff16ce54a9d0f06d042ae0df9ab45a645aec7bc287f68668fa9ccfa649eddfb860494e4971a00b9fba91ffe0449d081d25521e309d2221d0e3dffdd07b22643b39d8419b0c82245037af72b20c366357a1453a5836d887c4a7b4c73b9a758f990b392385ab4f8369edaeee65fa4f46ae53f51bf1b5f42c15dc7f11906fee3bf67be5871f8fdc5d53e17b64446850d6749e1344fbb85adebd8b781eaa43b593121f02961e597ed2af9bfadbe91c8704e657cfa522cebe606d3b378dd89ec33d26fcd9fb75f59c66c1f7968c65ef650c521f807a1451de427081356a192b83729d6fab6c6e01e3d4fcecf68ea4256175071b8a6e385ec5c7888e53906e6d37361e333871050319d23a5596f679d2c1131d219593f547507783172fce30e2ed1078df354c0ece00cc38aca3d381d8ea75e87e42a9496b2c04d2be426959792fa1d750e8c1f12f9df01d1ba63ea63b15aad9e12f96e7dd54a08e4aed2bc900795bbb24f95ee2f064410858a9499a639bceaca8c6d7b0ea98de18dffb1c97d6335b6cb86e10344ce9cde4320c3aa850324e97f0f5e1d55e751446052def9b62b68024f9ca7ef9e01761faa245aab2b09b44e7184d5947b1d5ae2c13ef5e81fad873a9f76b51f5c718faf56747b7052d445c8eae1af6927011633b9bd8e26ab349e6106654c590dccc74190f961b704cedb201407393448432eae2b612140134f263a09f3e82e057833508041db79a2e968cd690d71d378f00920a65bb1e42221da8e8f002886fbe4ee971169d358a6bfab97b14aa5cedc535dc7926fba65fd5e0ba6d0effb070032ecc66f6812f337840c0ff1524371a0bc6e062c525e978074fbc99e0af8440c8cdb1b4a93bccb67d5aeda69790bbd6d976cd4ba5185f937843443ef5e7004960e62898bacfdb5134ee5080cec6aebd567ecab1c42fecb5dab46d88604280fe6782c55be587effbc1c61e317a2422a5c277ec09af69813538303450204bc30487353f9bcaf24548d13186c7af035d17f9f33ec76478d816e3694ad874353a866ecd6544a6f02d5acb89ce7423ab508dfbab79ff811e405f35dfffc113d691fcc366d286dd920b208839d8bb604451519ec7e0603f81f6466d6bbd89a08c5d02d3e5c29990e2210da72e7fc8796a26da3e00cf6aa670b6611dee88191681185ed1aa22b96fb5afdbb14ae7d5f76d280f35cab74aca86ef8c6aae6f042796293a23ee013609bb9fbc491a6cde3f84a4cb913040d8e4776cafa39dc3ccebe39f79e795bf69ef889a388dfe2bc2719f307b7565c8d6db24295480e6b5a17990c7ce5b569bd65802d617cb759e5eb8073a6e43180110491140e0752d71332ac907131a038034b2f903e4c106ecdd16f7fcbd9d655e0f86d79a2b8c2cae3f25bf47a9f1b7d760c3af21284931f14bce561a98fb83137a72969b80014bbeb83ea2a540955da62c452bd0f0fa7ab7181e6d2e43c27182e6663c13f6090be3c016c24a287a99bd47a7e687239ab9fa5ba4a71edd2437216e62835cd4479d3ed62d4f0af396b219cf00c1f0f34ecfefc89cb9d59c91cc8ce8db73b6d4ce14fb87148a4d7f827ac2cb6872211e12f774ffdb34ddb83ac5e866e1280dc1c9f2035ce0b7e4531a8aa1677629f1d89a5d08e87748d164bfb40ed65595d87019486b2ab2220f339a41dcbf67fa5791a551e5dad5a0aac3953bc9510c318aed67781f8efe3c47f32c04ccba4c05c7ce4b52d418c3d6afe099d74f255d129c7c281535e2c417316da3b5fe08df5238df19dcad7d05c47cae18cc79ab80a064fbdcb6ba518e5f44721bb0df08f252926d561f7d28ec514867b871674595c66109312ecad753e161b579020d4de8bb74f5378fc382d373da341ba95121c0800d6a8cd5926e80df2d8d9a898bd86e9fee186e160162817dcd069f10b1aaed412126c33e90f3af2eb6990364436a7ad6a44f0ea6d05bcb65ebec3772eb024d6ec89e79c071258c3847a1ae0d5f89490225b4f039ca7cc707922263e9e557d82c8b1fb722762f698fa7b30ee27d6e8bf56199cb012e6297da31450e518c97465786c24004560d70fedadeb1a671d31c9bfdd407c4565f039307d9237cdda121b8b57b6c1f1fc00c6340877", 0x1000) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000003880)) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000038c0)={0xa, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000003940)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000003900)=0x4b}) (async) r6 = syz_open_dev$vcsa(&(0x7f0000003980), 0x0, 0x220000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000004840)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004800)={&(0x7f0000003a00)=@newchain={0xdf8, 0x64, 0x0, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x1}, {0x0, 0xfff2}, {0xd, 0x8}}, [@f_rsvp6={{0xa}, {0x8a4, 0x2, [@TCA_RSVP_POLICE={0x850, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff9}, @TCA_POLICE_RATE={0x404, 0x2, [0x914, 0x6, 0x4, 0x6, 0x7, 0x4, 0x20cef421, 0x3, 0x800, 0x2, 0x40, 0x6, 0xffffdee6, 0x9, 0x200, 0x3ff, 0x4, 0xd2, 0xa06, 0x1, 0x5a, 0x9, 0x4, 0x0, 0x8, 0x0, 0x2, 0x5, 0x8, 0xa, 0xc00, 0xfff, 0x1, 0x1, 0x54, 0x1, 0x10, 0x4000000, 0x7, 0x9, 0x2, 0x5, 0x8e, 0x1, 0x8, 0x5, 0x8, 0x8, 0x45c6, 0x1, 0x30fe, 0x6, 0x10001, 0x8, 0x0, 0x7, 0xfffffffe, 0x2, 0x7, 0x6, 0x3e9, 0x2, 0x800, 0x1, 0x6, 0x200, 0x3, 0xf1, 0x1ff, 0x4, 0x7fffffff, 0x420, 0x3, 0x7, 0x47, 0xfffffff7, 0x3, 0x40, 0xfffffff7, 0x100, 0xceac, 0x7ff, 0xecb, 0x13958387, 0x5, 0x0, 0xba2, 0xd3cf, 0xffffffff, 0x7, 0x40, 0x1, 0x4, 0x6, 0x0, 0x5809, 0x2362, 0xfffffff7, 0x8001, 0x3, 0x600000, 0x6, 0xc3, 0x44c, 0x7, 0x1778, 0xb, 0x6, 0x0, 0x6, 0x2, 0x8, 0x0, 0x7f, 0xfff, 0x5, 0x4, 0x4, 0x6, 0x3, 0xa6, 0x7ff, 0x0, 0x8, 0x7, 0x9, 0x1, 0x6, 0x6, 0x65, 0x8, 0x8, 0x7fffffff, 0x9, 0x5, 0x1, 0x4, 0x5, 0x4, 0x1, 0xffffffff, 0xe1c, 0x1, 0x4, 0x6fc6, 0x8, 0x80000001, 0xffffffff, 0x9, 0xfffffffa, 0x8, 0x7be, 0x4, 0x0, 0x5, 0x373, 0x9, 0x17, 0x0, 0x8, 0x2, 0x3, 0x4, 0x80d3, 0xd, 0xffffff7f, 0x4, 0x5, 0x7, 0x4, 0x7, 0x80000001, 0x2, 0x7, 0x7fff, 0x2, 0xc, 0x9f65, 0x3065, 0x0, 0x52, 0x0, 0xb, 0x401, 0x0, 0x78d2, 0x6, 0x6, 0x5, 0x1, 0x7, 0x6, 0x2, 0x5, 0x0, 0x8, 0x1, 0x1, 0x9, 0x8, 0xfffffff2, 0x3, 0x6, 0x6, 0x7, 0xfffffff9, 0x2, 0x5, 0x1, 0xb75, 0x4, 0x9, 0x4, 0x5, 0x7, 0x4, 0x1, 0x7ff, 0x2, 0x4, 0x297, 0x1, 0x1, 0x5aa787c1, 0x3, 0xffff, 0x805, 0x1, 0x3, 0x9, 0x1, 0x1c21, 0xbb2, 0x5, 0xe91, 0x0, 0x0, 0x7, 0x5, 0x1000, 0xe3e0, 0x7fffffff, 0x2, 0x443, 0xd24, 0x8, 0x9, 0xa8, 0x2, 0xfffffbff, 0x0, 0x2, 0x6, 0x8, 0x2, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbb}, @TCA_POLICE_RATE={0x404, 0x2, [0xe8a, 0x3, 0x70, 0x2, 0x3, 0x1, 0x1, 0x7, 0x5, 0x7ff, 0x6, 0xfff, 0x7fff, 0x4, 0x7, 0x9, 0x4, 0x5, 0xb6, 0x1dcf, 0x6, 0x1, 0x20, 0x5, 0x8, 0xfff, 0x1, 0x375, 0x0, 0x7, 0x1ff, 0xc1, 0x10001, 0x8, 0x9, 0xb0d, 0x4fe, 0x7, 0x0, 0x1, 0x9f97, 0x9, 0x7f, 0x1, 0x8000, 0x0, 0x8, 0x5, 0x81, 0x40, 0x4, 0xf, 0xd4, 0x8, 0x1, 0x8, 0x4, 0x0, 0x87d4, 0x664b1657, 0x61, 0x8000000, 0x2, 0x5, 0x5, 0x2, 0x67c, 0x6, 0x81, 0x7f, 0x3, 0x401, 0x6, 0x5, 0xfffff001, 0x100, 0xffff, 0x222b, 0x1, 0xc, 0x3, 0x8, 0x6, 0x9, 0x6, 0x401, 0xe562, 0x7, 0x9698, 0x3c8, 0x3, 0x5, 0x2, 0x10, 0x5fa, 0x89, 0x3, 0x5, 0x8, 0x3, 0x6, 0xfffffff7, 0x10000, 0x9, 0x8, 0x3, 0x9, 0x6, 0x0, 0x5, 0x5, 0x9, 0x6, 0x3, 0x9, 0x5, 0xfffff157, 0x27a, 0x3, 0x3, 0xffff356a, 0x7, 0x9, 0x4, 0x0, 0xff, 0xfffffb90, 0x8, 0x1bbb, 0x8, 0x7, 0x3, 0x1, 0xffffffff, 0x3, 0x3, 0x6c, 0xb921, 0x9, 0x4, 0x7, 0x9, 0x400, 0x4, 0x1, 0x800, 0x1, 0x101, 0xff, 0xc, 0x6, 0xa4, 0x5, 0x8, 0xb198, 0x1, 0x5e, 0x8, 0x5, 0x7fff, 0x2, 0x12, 0x7, 0xa598, 0x5, 0xa, 0x8, 0xa, 0xff, 0x63, 0x3, 0xfffffff5, 0x3, 0x2, 0x18dc4c34, 0x4, 0x5, 0x6, 0x3, 0x1, 0x6, 0x0, 0x7, 0x2, 0x18b, 0x1, 0x4, 0x6, 0x22d, 0xfffffffa, 0x7f, 0x7fff, 0xe9b, 0x7, 0xfffffff7, 0x7, 0x9, 0x2, 0x1, 0x8, 0x80000000, 0x3, 0x0, 0xc, 0x3, 0x7fff, 0x6, 0x9, 0x7e58, 0x9, 0xf, 0x4, 0x5, 0x401, 0x8, 0xfffffff9, 0x3, 0xffff, 0x200, 0x101, 0x7, 0x7, 0x0, 0xb, 0x651, 0x7, 0x80000001, 0x4, 0x218, 0xe, 0x22, 0x2, 0x400, 0x200, 0x1, 0x8, 0x1, 0xfffffffe, 0xfffffffd, 0x5, 0x7, 0x1, 0xe0, 0x4, 0x10, 0x80, 0x2, 0x4b95, 0x7fff, 0x5, 0x401, 0x4, 0x9, 0xe971, 0x3ff, 0x4]}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x6, 0x2}, {0x0, 0x6, 0xa7}, 0x8, 0x8, 0x40}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff4, 0xfff3}}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_SRC={0x14, 0x3, @remote}]}}, @f_tcindex={{0xc}, {0x484, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x10, 0x8}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xe68f}, @TCA_TCINDEX_ACT={0x2c4, 0x7, [@m_sample={0x120, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x80000001, 0x3}}]}, {0xdb, 0x6, "5ab0a0d68abb1fd0177955a0c48a517bb317732b70cad4dfbf4bd575c3aaee721c032f3a1c76da58beb06ed97ef0524c0056644af532313e273ac357a68baf851de41cf949c3d3f4136a01f8ecdf732e8703e7e82537ea3b8f82d077da4316371565225296488898b5e957af9c14ad482c727a994fd35ae50ef4cbb5af163fe5dcf6ea392c6086617dcc3154b2c56dcb7c00743770d4dc611567fd926e2f8bd5ccdfe8f88e56e2a54d8d238c665178377e9d5c725d19475a0d727059e9317d2a5eaf72f4a5512606d338e4cdc7b66fb06cf7a0f716775f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xe4, 0xa, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0xad, 0x6, "670b9c91951184b2938511a276267fba6a38e6a0cd535901d0ab812a116f756d8b37288ae31da159274cefae4f444b5a68388e887ea9a710b12c9933c74b536111de2f4609c6561856463adbd08f1d00a48349274e7325d533f53008ca3e2a00c4b4cf6b864df031afbac46379f3a96814a2623a5f65801de7c00895a657d8dc022fc8bb0820a6802801ce091a0c54a303bc31ac936688bc46206e9f5c7264757cbbe0a6217d3db06f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xbc, 0x6, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_ACTION={0x6, 0x3, 0x32}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x1, 0x2, 0x10000}}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x1a}]}, {0x4b, 0x6, "04947fcba6cc742d9d1dc8e30987fd2749f060289de16945f5696a06ac2f9297be4521845f3c31075dfae64cc105ccf49a939203c6f6f97f822a07a31ad1ca50c44bc8f0e67a9f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0x1a4, 0x7, [@m_mpls={0x44, 0xc, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0xd, 0x6, "1e50b211c966c5a938"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x15c, 0x1b, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x2, 0x0, 0x800, 0xc}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x1, 0xffffffffffffffff, 0xd, 0x7}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x0, 0x2, 0x6}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0xffffffffffffffff, 0x0, 0xffff}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbb6, 0x4, 0x10000000, 0x5, 0x80}, 0x4d}}]}, {0xa2, 0x6, "b9a9f515821ec8aaaf561acdabdf7cf72b9c8d6380f93a7832eb75542098ab72223448162a2e8a225ce1069968e53fed490a362d78180b3d0c84de8747503cf5ae83d763aab6c7cd11feb0d1998de779cd920882d89bc51e241259c0a78eaf9fe35792f999c8dcbb58f3b10216d55f4353832ddc231d12273da938684e74627dfabbabfbc200befafcf09d8d75c05a593f40afb378beb8e487f67784474e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @f_rsvp={{0x9}, {0x34, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0xfff3}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0xfff2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x63, 0x6, 0x3}, {0x9, 0x4efa, 0x6}, 0x4, 0x8c, 0xa}}]}}, @f_tcindex={{0xc}, {0x30, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}, @TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_POLICE={0x1c, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x3}]}}]}, 0xdf8}, 0x1, 0x0, 0x0, 0x7a9fac0083ff68c6}, 0x8800) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) (async) mknodat$null(r6, &(0x7f0000004880)='./file0\x00', 0x8, 0x103) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004900), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000004a00)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004940)={0x44, r7, 0x720, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x80) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000004a80)=@generic={&(0x7f0000004a40)='./file0\x00', r6}, 0x18) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f0000004ac0)=""/179, &(0x7f0000004b80)=0xb3) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00), r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000004d80)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004c40)={0xf0, r8, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xcc, 0x11d, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xe0af, 0xc, 0x8, 0x8, 0x100, 0xe, 0xe591]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5}, {0x6}, {0x0, 0x9}, {0x1}, {0x6, 0x5}, {0x7, 0x9}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcb, 0x5, 0x7, 0x7a7, 0x0, 0x7ff, 0x6, 0xa4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x3, 0xa, 0x9, 0x5, 0x512f]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x17}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x6) socket(0x21, 0x1, 0x9) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000004dc0), 0x2100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004e00)) 2m1.989283163s ago: executing program 9 (id=2132): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1233, &(0x7f0000000740)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) close(0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1, 0x0, r3, 0xfff, '\x00', 0x0, r7, 0x2, 0x2, 0x4}, 0x50) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000004c0)=0x0) setresuid(r5, r6, r8) 2m0.86335925s ago: executing program 9 (id=2135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0xfffffffe) (async, rerun: 64) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x301003, 0x0) pwritev(r0, &(0x7f0000001640)=[{0x0}], 0x1, 0xcc1, 0x9) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xc) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x1000, 0x2001) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setresuid(0x0, 0xee00, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:pinentry_exec_t:s0\x00', 0x25, 0x2) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) close(0x3) (async) socket$inet6(0xa, 0x1, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getpid() 2m0.699413381s ago: executing program 9 (id=2140): timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) fadvise64(r3, 0x3, 0x8000, 0x2) 2m0.652375281s ago: executing program 9 (id=2141): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000006cd825797b1194c4049961f7014f9efb5f59cac252cf40b4a6a0836c0f6495571060a40bcf57739cbf7c1e7897ebfc04", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r6}, &(0x7f0000000f00), &(0x7f0000000f40)=r4}, 0x20) recvfrom(r5, 0x0, 0x0, 0x40, 0x0, 0x0) r7 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r7) r8 = inotify_init1(0x800) inotify_add_watch(r8, 0x0, 0x0) 2m0.605301731s ago: executing program 9 (id=2142): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) chmod(&(0x7f0000000640)='./file0\x00', 0x51) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x61}, 0x94) rmdir(&(0x7f0000000040)='./file0\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f00000001c0)="62158437bee93cdc6a341af4bb90e4f5118e995bb48c46657898ad4e5704bb7eded2ba9d69cf2f5394be1cad65544a4e454b", &(0x7f00000002c0)=""/110}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) io_setup(0x3, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) chmod(&(0x7f0000000640)='./file0\x00', 0x51) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x61}, 0x94) (async) rmdir(&(0x7f0000000040)='./file0\x00') (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f00000001c0)="62158437bee93cdc6a341af4bb90e4f5118e995bb48c46657898ad4e5704bb7eded2ba9d69cf2f5394be1cad65544a4e454b", &(0x7f00000002c0)=""/110}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) io_setup(0x3, &(0x7f0000000340)) (async) 2m0.500555282s ago: executing program 37 (id=2142): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) chmod(&(0x7f0000000640)='./file0\x00', 0x51) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x61}, 0x94) rmdir(&(0x7f0000000040)='./file0\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f00000001c0)="62158437bee93cdc6a341af4bb90e4f5118e995bb48c46657898ad4e5704bb7eded2ba9d69cf2f5394be1cad65544a4e454b", &(0x7f00000002c0)=""/110}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) io_setup(0x3, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) chmod(&(0x7f0000000640)='./file0\x00', 0x51) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x61}, 0x94) (async) rmdir(&(0x7f0000000040)='./file0\x00') (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f00000001c0)="62158437bee93cdc6a341af4bb90e4f5118e995bb48c46657898ad4e5704bb7eded2ba9d69cf2f5394be1cad65544a4e454b", &(0x7f00000002c0)=""/110}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) io_setup(0x3, &(0x7f0000000340)) (async) 1m58.247564977s ago: executing program 2 (id=2171): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r2, 0x0}]) wait4(r0, 0x0, 0x8, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x18) pwrite64(0xffffffffffffffff, &(0x7f0000000100)="8f1f55", 0x3, 0xe7c) 1m57.288296423s ago: executing program 2 (id=2186): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, 0x0, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000a40)=[{&(0x7f00000007c0)="4eabf26665e1929a09a8ede6203e707a34484302bc4d8537319f8fec4dc37280aa77", 0x22}, {&(0x7f0000000640)="5e1d", 0x2}], 0x2) 1m57.252875123s ago: executing program 2 (id=2188): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffd, 0x0, 0x7ff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@remote, @private=0x5000000}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000bec1e420713d1b8f01aa920000000109022400010224400209045600029d4a4e0009058203ff03060c0309050a0330060700"], 0x0) 1m54.008635173s ago: executing program 2 (id=2214): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = timerfd_create(0x9, 0x0) timerfd_gettime(r3, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x1, 0x1c5, &(0x7f00000004c0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5"], 0xf5, 0x30a, &(0x7f0000000480)="$eJzs3c9rE00YwPEnaZM07du3Pb28iMJQQRTp0hS8ebBIC2JAaRvBCsLWbjVkm5RsKETE9iB49eyhB48iiODNi4jXXvwL/HXrpTcLFkc2+6NpsmxjpbWt38+hme48z+zszmybTpPN+sUnC6V5x/iuu6WFXvYLK3Lu/eqnU1Pv/vG+V2pibDo3qlRSRG49eDH0ttZ34/W/bzKyNnh7fWP069rJaZEf0/ckqYqOKmuttZqtVGoJN3mu6JQMpa7blulYqlh2rGpNmY16c9a21LxdWVysK7M819+7WLUcR5nluipZdVWrqFq1rsy7ZrGsDMNQ/b2tff47DYalZFtdIi6x8HxTa9lwByizIlrriOiVoJDyHzO/11kcJi3jHxvbNjm69rNnOAibujsc//Qu44/jx7v+Pz/t5PrH8TN1c+bqWD4/PqlUj8jC46XCUsF79Oo/9klRbLFkdfL8zJa4c8QnCffrxJX8+IhqGJQzC8t+/vJSwfvlMDbv5+dkwH2e0pQvQX7Oy1c781PS25QfPOmIyh8N8iXZlJ+Ws6eb9m/IgHy4IxWxZa7Rznb+w5xSl6/lW/afbcQBAAAAAAAAAHAUGSq0vX6fCP/VmzWMTOMVH2F91t3sxnkB4fr6iAzIVvT6/Ejk+n63nGh7yQkAAAAAANgPTv1+ybRtq/rrBekgputZNmYXKRFxCyKPhtzOxDb4n9/jliq3jYistIi0t9PVSZ/9QvaCt7+Xk37HZK8nah8LSRFp3uK9WcM9ePtVEJONOj9OMn4CNOoS4TkcTrefedO2ew70kJuPVLTWkcHSs7eJnYk8wE4Kia1gy/+RMTphp3ZrR5tBTHBh7rb3S9GXQ3whnAnu6Hsj2Hqihr947doxPzS+hUt8AAAAAI6Qpj+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH7KnO7EF9+3fWSX+R8S335Kt9XPiue8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEPoZwAAAP//k0Cqiw==") 1m53.02911926s ago: executing program 2 (id=2220): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) fcntl$setsig(r0, 0xa, 0x9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3}) r1 = syz_clone3(&(0x7f0000000280)={0x100000000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, {0x17}, &(0x7f0000000180)=""/21, 0x15, &(0x7f00000001c0)=""/77, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x9) ioprio_set$pid(0x2, r3, 0x4000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000340)) ptrace$peek(0x3, r3, &(0x7f0000000380)) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0500, 0x0) ptrace(0x11, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip6erspan0\x00'}) r6 = fcntl$getown(r0, 0x9) fcntl$setown(r2, 0x8, r6) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) sched_rr_get_interval(r4, &(0x7f0000000440)) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r7 = accept$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f00000004c0)=0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000500)) ptrace$ARCH_MAP_VDSO_X32(0x1e, r6, 0x400, 0x2001) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), 0xffffffffffffffff) clock_getres(0x3, &(0x7f0000000580)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000600)={0x4, 0x3, "47982a", 0x4, 0xa}) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000640)={0x0, 'batadv0\x00', {}, 0x5}) bind$xdp(r9, &(0x7f0000000680)={0x2c, 0xd, 0x0, 0x37}, 0x10) gettid() 1m52.628035723s ago: executing program 2 (id=2226): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r5, 0x0, 0x20000000}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d0000000000000000000000040018"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 1m52.610326833s ago: executing program 38 (id=2226): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r5, 0x0, 0x20000000}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d0000000000000000000000040018"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 59.109664623s ago: executing program 3 (id=2605): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') pipe2$9p(0x0, 0x44080) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) wait4(0x0, 0x0, 0x40000000, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 59.043349313s ago: executing program 3 (id=2606): syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) (async) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) close_range(r9, r10, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async, rerun: 32) r11 = inotify_init1(0x0) (rerun: 32) inotify_add_watch(r11, &(0x7f0000000180)='./control\x00', 0xa4000960) (async) close_range(r5, 0xffffffffffffffff, 0x0) 58.956252295s ago: executing program 3 (id=2607): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) (async) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) (async) pwritev2(r3, &(0x7f0000002300)=[{&(0x7f0000001e40)="7dc761b60d5cb90d0dffd9", 0xb}], 0x1, 0x6, 0x6, 0x10) (async) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c9d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) (async) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x5}, 0x8) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 58.938515524s ago: executing program 3 (id=2608): syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc8c7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x428, 0x230, 0xf8, 0x2f8, 0xf8, 0x0, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, &(0x7f0000000200), {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'wg1\x00', 'dummy0\x00', {}, {}, 0x73, 0x0, 0x7}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x841, 0x80}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x80, 0x7, @remote, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xb5, 0x7, 0x5, 0x2}}}, {{@ip={@private=0xa010100, @empty, 0xffffff00, 0xffffffff, 'syzkaller0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x62, 0x2, 0x64}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xb47}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x4, @broadcast, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000020000000000000800000000000000000000000d00000000010000000000000c02000000021000000000000e0300000000000000002e61"], 0x0, 0x50}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="d1"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c4, &(0x7f00000003c0)={[{@dioread_lock}, {@inlinecrypt}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x140) r5 = openat$incfs(r4, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x80) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0)) 58.741680366s ago: executing program 3 (id=2610): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r1], 0x0) 58.531276917s ago: executing program 3 (id=2612): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x3, 0x5, 0x6, 0x5, 0x9, 0x1, 0x3}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r7) (async) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x11000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0xc000, 0xe, r9, 0x0, 0x4}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) (async) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000180), 0x10) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 58.140419939s ago: executing program 39 (id=2612): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x3, 0x5, 0x6, 0x5, 0x9, 0x1, 0x3}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r7) (async) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x11000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0xc000, 0xe, r9, 0x0, 0x4}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) (async) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000180), 0x10) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 531.199927ms ago: executing program 0 (id=3141): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) 451.670617ms ago: executing program 0 (id=3144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000240000000000000ae6014000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 451.386947ms ago: executing program 0 (id=3147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 434.469917ms ago: executing program 0 (id=3150): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 371.540167ms ago: executing program 0 (id=3154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x48000) 361.358137ms ago: executing program 0 (id=3156): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/217, 0xd9}, 0xb86}, {{0x0, 0x0, 0x0}, 0x7fff}], 0x2, 0x10022, 0x0) 272.424498ms ago: executing program 6 (id=3164): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x400}]}, 0x24}}, 0x0) r2 = getpid() r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) close(0x3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) close(0x3) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid\x00') 271.518448ms ago: executing program 6 (id=3168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x2, &(0x7f00000007c0)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r0}], 0x0}, 0x94) 271.441788ms ago: executing program 4 (id=3169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000020c0019800800010007"], 0x50}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) 215.618138ms ago: executing program 5 (id=3171): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 215.286269ms ago: executing program 4 (id=3174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000002000000030000005800018044000400200001000a000004000000000000000000000000005885d6a76549ccd9000000200002000a00ff0000000000fe800000001b571151000000ffec00bb000001000d0001007564703a73"], 0x6c}}, 0x0) 209.960389ms ago: executing program 6 (id=3175): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x800}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001200010100000000000000000700000008", @ANYRES32, @ANYBLOB], 0x70}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x1c, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80ad}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x4080) 209.807578ms ago: executing program 5 (id=3176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 169.619969ms ago: executing program 1 (id=3177): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) 115.740889ms ago: executing program 5 (id=3178): unshare(0x8040600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, &(0x7f0000000100)) 115.558539ms ago: executing program 1 (id=3179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000001480)="63bbbdc7760f7c8a7f33c95e1089", 0x0, 0xfae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 115.393989ms ago: executing program 4 (id=3180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfffffffa, 0x7, 0x5, 0x5, 0x0, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x5}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 115.219469ms ago: executing program 1 (id=3181): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 104.673609ms ago: executing program 6 (id=3182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x6f63fe4a4d3f2aa0}, @TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x2, 0xffff7a73, 0x3}}]}}}]}, 0x6c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 104.485639ms ago: executing program 1 (id=3183): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000040)="3085cd487da7c2f75b1f2294d88c812d8c771076", 0x0, 0x4, 0x0, 0x3c, 0xf, &(0x7f00000000c0)="a9554cf7838fe6d8fd12d25eb0d197c9b1fa69b00047974c8c8bfcecf225aa8113878f945776a11886d84e3650a5cc790f44b76fcd4e3ea139d5d29a", &(0x7f0000000140)="53bfc20efc92ebb5b65675e387a8c2", 0x6, 0x0, 0x3}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @broadcast, @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @random="b85dcc31c80b", @remote, @link_local, @private=0xa010102}}}}, &(0x7f0000000040)={0x1, 0x2, [0x223, 0x1c7, 0x44, 0xbe]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x0) 104.319869ms ago: executing program 5 (id=3184): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061127b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) 86.418449ms ago: executing program 5 (id=3185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000000088a8", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 56.88763ms ago: executing program 6 (id=3186): socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r3, 0x2f, 0xac, 0x3, 0x9, 0x50, @remote, @mcast2, 0x7800, 0x8000, 0x40, 0x50}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, 0x0, &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0) 56.72055ms ago: executing program 1 (id=3187): syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x6, 0x4, 0x0, 0x0, "8010000008008000"}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf={0x0, 0xffffffffffffffff}) 56.566839ms ago: executing program 6 (id=3188): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x5, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "6bad71b350e22a00", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 56.03749ms ago: executing program 1 (id=3189): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 3.73961ms ago: executing program 4 (id=3190): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000cc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x0, 0x98, 0x158, 0x158, 0x158, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x3b0}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xc1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4, 0x1}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 'ip_vti0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x9d, 0x4, 0x4}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x100, 0x7, @dev={0xac, 0x14, 0x14, 0x2e}, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x6, @remote, 0x4e20}}}, {{@ip={@local, @private=0xa010101, 0xffffffff, 0xff000000, 'caif0\x00', 'nr0\x00', {0xff}, {}, 0x2, 0x2, 0x4}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 3.53954ms ago: executing program 5 (id=3191): bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0xffff261c) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) close(r1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 3.4338ms ago: executing program 4 (id=3192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x840) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd2b, 0x0, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20081}, 0x800) 0s ago: executing program 4 (id=3193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x84, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14, 0x10}}, 0x110}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): as an invalid length. [ 280.016002][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.023296][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.030657][ T8704] device bridge_slave_0 entered promiscuous mode [ 280.038471][ T8716] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2232'. [ 280.049898][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.061977][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.078292][ T8704] device bridge_slave_1 entered promiscuous mode [ 280.183158][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.190298][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.197573][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.204668][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.447038][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.456918][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.464611][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.472760][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.492497][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.500837][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.507894][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.515355][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.525933][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.532985][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.540514][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.548556][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.584552][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.598368][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.608126][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.615978][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.624827][ T8704] device veth0_vlan entered promiscuous mode [ 280.642224][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.651610][ T8704] device veth1_macvtap entered promiscuous mode [ 280.664750][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.713169][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.719554][ T8745] overlayfs: failed to clone upperpath [ 280.753063][ T8751] x_tables: duplicate underflow at hook 1 [ 280.823972][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2243'. [ 280.908314][ T5799] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 281.045107][ T8766] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 281.053018][ T8766] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 281.062107][ T8766] F2FS-fs (loop3): invalid crc value [ 281.073823][ T8766] F2FS-fs (loop3): Found nat_bits in checkpoint [ 281.100765][ T8766] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 281.107886][ T8766] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 281.164821][ T5799] usb 2-1: Using ep0 maxpacket: 8 [ 281.272150][ T8783] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 281.279563][ T8783] EXT4-fs (loop3): Test dummy encryption mode enabled [ 281.286492][ T8783] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 281.293144][ T5799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.293997][ T8783] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.304251][ T5799] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.315279][ T8783] EXT4-fs (loop3): 1 truncate cleaned up [ 281.322537][ T5799] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 281.329483][ T8783] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,max_dir_size_kb=0x0000000000000006,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 281.337350][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.341442][ T5799] usb 2-1: config 0 descriptor?? [ 281.374839][ T8783] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2249'. [ 281.378652][ T5793] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 281.432653][ T9] device bridge_slave_1 left promiscuous mode [ 281.444896][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.452859][ T9] device bridge_slave_0 left promiscuous mode [ 281.459470][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.467616][ T9] device veth1_macvtap left promiscuous mode [ 281.473706][ T9] device veth0_vlan left promiscuous mode [ 281.688730][ T5793] usb 6-1: device descriptor read/64, error -71 [ 282.018749][ T8802] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 282.028030][ T8802] overlayfs: missing 'lowerdir' [ 282.116292][ T5793] usb 6-1: device descriptor read/64, error -71 [ 282.226793][ T8825] EXT4-fs (loop3): Test dummy encryption mode enabled [ 282.234313][ T8825] EXT4-fs (loop3): Unrecognized mount option "euid>00000000000000000000" or missing value [ 282.404936][ T5793] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 282.462640][ T8827] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 282.471902][ T8827] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 282.483872][ T8832] netlink: 'syz.0.2260': attribute type 5 has an invalid length. [ 282.502195][ T8827] F2FS-fs (loop1): Found nat_bits in checkpoint [ 282.546577][ T8827] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 282.553707][ T8827] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 282.693805][ T5793] usb 6-1: device descriptor read/64, error -71 [ 282.777068][ T24] kauditd_printk_skb: 128 callbacks suppressed [ 282.777081][ T24] audit: type=1326 audit(1762084755.015:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 282.807061][ T24] audit: type=1326 audit(1762084755.015:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 282.830593][ T24] audit: type=1326 audit(1762084755.025:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 282.854077][ T24] audit: type=1326 audit(1762084755.025:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 282.877689][ T24] audit: type=1326 audit(1762084755.025:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 282.901171][ T24] audit: type=1326 audit(1762084755.025:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 282.924540][ T24] audit: type=1326 audit(1762084755.025:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 282.948057][ T24] audit: type=1326 audit(1762084755.025:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 282.971558][ T24] audit: type=1326 audit(1762084755.025:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 282.994920][ T24] audit: type=1326 audit(1762084755.025:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 283.121185][ T5793] usb 6-1: device descriptor read/64, error -71 [ 283.249525][ T5793] usb usb6-port1: attempt power cycle [ 283.698482][ T5793] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 283.901673][ T5793] usb 6-1: device descriptor read/8, error -71 [ 284.013301][ T5796] usb 2-1: USB disconnect, device number 2 [ 284.083428][ T373] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 284.229889][ T8871] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2273: bg 0: block 5: invalid block bitmap [ 284.242480][ T8871] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 284.251775][ T8871] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.2273: invalid indirect mapped block 3 (level 2) [ 284.265639][ T8871] EXT4-fs (loop1): 2 truncates cleaned up [ 284.271421][ T8871] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 285.248674][ T373] usb 4-1: not running at top speed; connect to a high speed hub [ 285.334785][ T373] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 285.348324][ T373] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 285.365703][ T373] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 285.470541][ T8891] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 285.483660][ T8891] EXT4-fs (loop1): Test dummy encryption mode enabled [ 285.498915][ T5793] usb 6-1: device descriptor read/8, error -71 [ 285.502810][ T8891] EXT4-fs (loop1): Unrecognized mount option "dont_measure" or missing value [ 285.534327][ T8893] tipc: Resetting bearer [ 285.548389][ T373] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.557599][ T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.565616][ T373] usb 4-1: Product: 乧柀ᱡ芨砑細礨澬㮏袰戇봤㗖環麺꣕䘭✒▃떌旸作줜聫紝᪖ﶶ굚ထ謁鶾ଛȔʒ吀츌ﯕ벾㎤㹏瑤ᦠ♏⿚쥜逘贯䒉뼴ಙ꥞㉁讪黮陼텮잃떁ꗢ錔癯ॱ뜆킏◟㖢恏ถ봔㳏ꦹ孔情ᔔ匄愲㓦뱩煎溩ꋖ䪅截陽৕羗輦歄Ƶ㧪ᢞ乗운鐫ݚ僻ꑭ裲駹Ꮞ㚍믁촭 [ 285.597861][ T373] usb 4-1: Manufacturer: 귖댱㓇౩᪟厵⼕伔둭㯰︣饴梲첕륰 [ 285.606967][ T373] usb 4-1: SerialNumber: ည [ 285.633514][ T8845] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 285.669853][ T8910] overlayfs: failed to resolve './file0': -2 [ 286.018472][ T5793] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 286.253586][ T5793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.263755][ T5793] usb 6-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 286.272832][ T5793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.282376][ T5793] usb 6-1: config 0 descriptor?? [ 286.329096][ T5793] usb 6-1: unsupported MDLM descriptors [ 286.791272][ T8927] erofs: (device loop1): mounted with root inode @ nid 36. [ 287.301361][ T373] cdc_ncm 4-1:1.0: bind() failure [ 287.307474][ T373] cdc_ncm 4-1:1.1: bind() failure [ 287.320544][ T373] usb 4-1: USB disconnect, device number 46 [ 287.594054][ T8943] syz.0.2291[8943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.594310][ T8943] syz.0.2291[8943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.298452][ T8957] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 288.332357][ T8957] EXT4-fs (loop3): re-mounted. Opts: (null) [ 288.690871][ T24] kauditd_printk_skb: 125 callbacks suppressed [ 288.690882][ T24] audit: type=1400 audit(1762084760.544:9141): avc: denied { setopt } for pid=8965 comm="syz.1.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.751009][ T6823] usb 6-1: USB disconnect, device number 8 [ 288.760152][ T24] audit: type=1400 audit(1762084760.618:9142): avc: denied { ioctl } for pid=8967 comm="syz.1.2298" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 288.802872][ T24] audit: type=1326 audit(1762084760.656:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 288.826694][ T24] audit: type=1326 audit(1762084760.656:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 288.894805][ T24] audit: type=1326 audit(1762084760.656:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 288.918493][ T24] audit: type=1326 audit(1762084760.656:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 288.951498][ T24] audit: type=1326 audit(1762084760.656:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 288.976035][ T24] audit: type=1326 audit(1762084760.656:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 289.000307][ T24] audit: type=1326 audit(1762084760.656:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 289.023862][ T24] audit: type=1326 audit(1762084760.656:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 289.088931][ T8986] syz.0.2301[8986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.089260][ T8986] syz.0.2301[8986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.123576][ T8986] sch_tbf: burst 0 is lower than device veth1_macvtap mtu (1514) ! [ 290.166323][ T5800] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 290.201592][ T9032] overlayfs: failed to clone lowerpath [ 290.241107][ C0] hrtimer: interrupt took 13749 ns [ 290.589819][ T9032] overlayfs: missing 'lowerdir' [ 290.623167][ T9034] SELinux: security_context_str_to_sid(3lƑh.h.h.h.h) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 290.638898][ T9035] SELinux: security_context_str_to_sid(3lƑh.h.h.h.h) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 290.728445][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.861662][ T5800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.872221][ T5800] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.968149][ T5800] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.977354][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.985587][ T5800] usb 4-1: SerialNumber: syz [ 291.265647][ T9059] syz.1.2323[9059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.265683][ T9059] syz.1.2323[9059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.356106][ T9064] EXT4-fs (loop1): Test dummy encryption mode enabled [ 291.376596][ T9064] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 291.384984][ T9064] System zones: 0-5 [ 291.393952][ T9064] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 291.560429][ T5800] usb 4-1: 0:2 : does not exist [ 291.566719][ T5800] usb 4-1: unit 120 not found! [ 291.571669][ T5800] usb 4-1: unit 48 not found! [ 291.852652][ T5800] usb 4-1: USB disconnect, device number 47 [ 291.966527][ T9087] syz.6.2327[9087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.967443][ T9087] syz.6.2327[9087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.889556][ T9114] Unknown ioctl 1074310762 [ 294.036840][ T24] kauditd_printk_skb: 127 callbacks suppressed [ 294.036850][ T24] audit: type=1400 audit(1762084765.557:9278): avc: denied { read } for pid=9131 comm="syz.6.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.125518][ T9146] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 294.195529][ T9146] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro, [ 294.197432][ T9155] FAT-fs (loop3): Unrecognized mount option "fs" or missing value [ 294.223393][ T9160] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=9160 comm=syz.5.2348 [ 294.242043][ T9160] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2348'. [ 294.264400][ T9146] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3342: comm syz.1.2344: Allocating blocks 497-513 which overlap fs metadata [ 294.266435][ T24] audit: type=1400 audit(1762084765.763:9279): avc: denied { create } for pid=9161 comm="syz.5.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 294.298216][ T9146] EXT4-fs (loop1): Remounting filesystem read-only [ 294.299307][ T24] audit: type=1400 audit(1762084765.800:9280): avc: denied { link } for pid=9145 comm="syz.1.2344" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 294.313215][ T9146] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2344'. [ 294.339961][ T9145] EXT4-fs (loop1): pa ffff88811a08b7e0: logic 128, phys. 385, len 8 [ 294.347985][ T9145] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 295.299377][ T24] audit: type=1326 audit(1762084766.736:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.5.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 295.366796][ T24] audit: type=1326 audit(1762084766.755:9282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.5.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 295.426378][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2353'. [ 295.446546][ T24] audit: type=1326 audit(1762084766.755:9283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 295.498295][ T24] audit: type=1326 audit(1762084766.755:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 295.547844][ T24] audit: type=1326 audit(1762084766.755:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 295.595781][ T24] audit: type=1326 audit(1762084766.755:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 295.645419][ T24] audit: type=1326 audit(1762084766.755:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 295.811494][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'. [ 295.861414][ T9202] attempt to access beyond end of device [ 295.861414][ T9202] loop1: rw=2049, want=212, limit=128 [ 295.884871][ T9202] attempt to access beyond end of device [ 295.884871][ T9202] loop1: rw=2049, want=1041, limit=128 [ 295.915607][ T9] attempt to access beyond end of device [ 295.915607][ T9] loop1: rw=1, want=209, limit=128 [ 295.926779][ T9] attempt to access beyond end of device [ 295.926779][ T9] loop1: rw=1, want=218, limit=128 [ 295.937843][ T9] Buffer I/O error on dev loop1, logical block 217, lost async page write [ 296.435618][ T9217] netlink: 'syz.6.2361': attribute type 12 has an invalid length. [ 296.451712][ T9217] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9217 comm=syz.6.2361 [ 296.538467][ T9226] 9pnet: Insufficient options for proto=fd [ 297.078030][ T5] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 297.468081][ T5] usb 4-1: config index 0 descriptor too short (expected 65525, got 71) [ 297.476813][ T5] usb 4-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 297.487077][ T5] usb 4-1: config 1 has no interfaces? [ 297.671202][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=64.3a [ 297.680366][ T5] usb 4-1: New USB device strings: Mfr=83, Product=244, SerialNumber=1 [ 297.688857][ T5] usb 4-1: Product: syz [ 297.693291][ T5] usb 4-1: Manufacturer: syz [ 297.697938][ T5] usb 4-1: SerialNumber: syz [ 297.836938][ T9254] syz.0.2372[9254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.837291][ T9254] syz.0.2372[9254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.865218][ T9254] sch_tbf: burst 0 is lower than device veth1_macvtap mtu (1514) ! [ 298.024980][ T5] usb 4-1: USB disconnect, device number 48 [ 298.341885][ T9262] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 298.351125][ T9262] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.323497][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2381'. [ 299.351948][ T9288] device veth0_vlan left promiscuous mode [ 299.358104][ T9288] device veth0_vlan entered promiscuous mode [ 299.365246][ T9288] device veth1_macvtap left promiscuous mode [ 299.366303][ T9290] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 299.372537][ T9288] device veth1_macvtap entered promiscuous mode [ 299.385877][ T9288] device macsec0 left promiscuous mode [ 299.392029][ T9288] device ip6gretap0 entered promiscuous mode [ 299.398448][ T9288] device macsec1 left promiscuous mode [ 299.409919][ T9288] device veth2 left promiscuous mode [ 299.416924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.424297][ T24] kauditd_printk_skb: 446 callbacks suppressed [ 299.424313][ T24] audit: type=1326 audit(1762084770.590:9734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d0bfc9 code=0x7ffc0000 [ 299.434945][ T9290] EXT4-fs (loop1): Remounting filesystem read-only [ 299.455158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.470439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.473000][ T9290] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #16: comm syz.1.2379: mark_inode_dirty error [ 299.481042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.497898][ T24] audit: type=1326 audit(1762084770.627:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d0bfc9 code=0x7ffc0000 [ 299.513860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.521566][ T9290] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 299.540407][ T9295] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 299.546961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.565390][ T9290] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.2379: mark_inode_dirty error [ 299.576648][ T24] audit: type=1326 audit(1762084770.730:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3316d0bfc9 code=0x7ffc0000 [ 299.626993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 299.647004][ T9290] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 299.672240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.684651][ T24] audit: type=1326 audit(1762084770.730:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d0bfc9 code=0x7ffc0000 [ 299.714878][ T9290] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 299.720948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.730533][ T9290] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 299.741828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.747971][ T9290] EXT4-fs error (device loop1): ext4_truncate:4390: inode #16: comm syz.1.2379: mark_inode_dirty error [ 299.757727][ T24] audit: type=1326 audit(1762084770.730:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d0bfc9 code=0x7ffc0000 [ 299.774562][ T9290] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 299.785545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.793911][ T9290] EXT4-fs (loop1): 1 truncate cleaned up [ 299.805821][ T9290] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,data_err=ignore, [ 299.816738][ T9290] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.840110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.865235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.879926][ T24] audit: type=1326 audit(1762084770.730:9739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f3316d0bfc9 code=0x7ffc0000 [ 299.903522][ T24] audit: type=1326 audit(1762084770.730:9740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d0bfc9 code=0x7ffc0000 [ 299.907029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.927027][ T24] audit: type=1326 audit(1762084770.730:9741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d0bfc9 code=0x7ffc0000 [ 300.057769][ T24] audit: type=1326 audit(1762084770.730:9742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3316d0bfc9 code=0x7ffc0000 [ 300.081235][ T24] audit: type=1326 audit(1762084770.730:9743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d0bfc9 code=0x7ffc0000 [ 300.105345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.114752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.128844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.137129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.147572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.155933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.164234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.172895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.181191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.190397][ T9304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9304 comm=syz.0.2383 [ 300.190412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.215205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.223098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.225974][ T9304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9304 comm=syz.0.2383 [ 300.232125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.254375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.278089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 300.299903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 302.054505][ T5] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 302.300153][ T5793] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 302.342928][ T5] usb 6-1: device descriptor read/64, error -71 [ 302.627292][ T9360] tipc: Started in network mode [ 302.632374][ T9360] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 302.641694][ T9360] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 302.649814][ T9357] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 302.653433][ T9360] tipc: Enabled bearer , priority 10 [ 302.666745][ T9357] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 302.678196][ T9357] F2FS-fs (loop1): invalid crc value [ 302.684620][ T9357] F2FS-fs (loop1): Found nat_bits in checkpoint [ 302.710787][ T9357] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 302.717935][ T9357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 302.738516][ T5793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.749723][ T5793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.759641][ T5793] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 302.769237][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.770590][ T5] usb 6-1: device descriptor read/64, error -71 [ 302.784668][ T5793] usb 4-1: config 0 descriptor?? [ 303.038583][ T9331] udc-core: couldn't find an available UDC or it's busy [ 303.045670][ T9331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 303.080608][ T5] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 303.155448][ T6823] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 303.193618][ T9372] overlayfs: failed to clone upperpath [ 303.390668][ T5] usb 6-1: device descriptor read/64, error -71 [ 303.550965][ T5793] usb 4-1: string descriptor 0 read error: -71 [ 303.572362][ T5793] uclogic 0003:256C:006E.000E: failed retrieving string descriptor #200: -71 [ 303.581450][ T5793] uclogic 0003:256C:006E.000E: failed retrieving pen parameters: -71 [ 303.589754][ T5793] uclogic 0003:256C:006E.000E: failed probing pen v2 parameters: -71 [ 303.598127][ T5793] uclogic 0003:256C:006E.000E: failed probing parameters: -71 [ 303.604551][ T6823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.605964][ T5793] uclogic: probe of 0003:256C:006E.000E failed with error -71 [ 303.625892][ T6823] usb 2-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.00 [ 303.633317][ T5793] usb 4-1: USB disconnect, device number 49 [ 303.634933][ T6823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.649469][ T6823] usb 2-1: config 0 descriptor?? [ 303.839590][ T5798] tipc: 32-bit node address hash set to 1000000 [ 303.839599][ T5] usb 6-1: device descriptor read/64, error -71 [ 303.967929][ T5] usb usb6-port1: attempt power cycle [ 304.084014][ T9382] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 304.213196][ T6823] wacom 0003:056A:010D.000F: hidraw0: USB HID v0.04 Device [HID 056a:010d] on usb-dummy_hcd.1-1/input0 [ 304.245267][ T9392] overlayfs: failed to resolve './file0': -2 [ 304.406243][ T9394] syz.6.2406[9394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.406572][ T9394] syz.6.2406[9394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.449281][ T9394] sch_tbf: burst 0 is lower than device veth1_macvtap mtu (1514) ! [ 304.547254][ T5793] usb 2-1: USB disconnect, device number 3 [ 304.823139][ T5] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 305.087091][ T9409] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 305.106079][ T9409] device veth0_vlan left promiscuous mode [ 305.115999][ T9409] device veth0_vlan entered promiscuous mode [ 305.123150][ T9409] tipc: Resetting bearer [ 305.128503][ T9409] device veth1_macvtap left promiscuous mode [ 305.135252][ T9409] device veth1_macvtap entered promiscuous mode [ 305.208068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.231587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.244852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.253290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.261779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.270092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.547263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 305.562282][ T5] usb 6-1: device not accepting address 11, error -71 [ 305.569684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.579731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 305.587852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.645100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.879397][ T9427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9427 comm=syz.0.2416 [ 305.932770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.994521][ T9427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9427 comm=syz.0.2416 [ 306.012976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.075616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.471626][ T9432] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 306.491191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.571909][ T9432] SELinux: failed to load policy [ 306.594430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.602999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.611482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.620538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.628435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.636487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.644452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.652826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.661146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.669882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.678314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.686274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.710307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.717753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.725899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.734053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.741834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 306.749401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 307.026502][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 307.026514][ T24] audit: type=1326 audit(1762084777.708:9762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.6.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 307.093759][ T24] audit: type=1326 audit(1762084777.736:9763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.6.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 307.118374][ T24] audit: type=1326 audit(1762084777.736:9764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.6.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 307.146510][ T24] audit: type=1326 audit(1762084777.736:9765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.6.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 307.173514][ T24] audit: type=1326 audit(1762084777.736:9766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.6.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 307.198341][ T24] audit: type=1326 audit(1762084777.736:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.6.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 307.222002][ T24] audit: type=1326 audit(1762084777.736:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.6.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 307.246560][ T24] audit: type=1326 audit(1762084777.736:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.6.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 307.271675][ T24] audit: type=1326 audit(1762084777.736:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.6.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde9ee6c003 code=0x7ffc0000 [ 307.295076][ T24] audit: type=1326 audit(1762084777.736:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.6.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fde9ee6aa7f code=0x7ffc0000 [ 307.793330][ T9480] SELinux: policydb version -29524287 does not match my version range 15-33 [ 307.802382][ T9480] SELinux: failed to load policy [ 307.995720][ T9490] fuse: Bad value for 'fd' [ 308.145433][ T5791] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 308.767997][ T5791] usb 2-1: Using ep0 maxpacket: 16 [ 308.836393][ T9505] EXT4-fs (loop3): Test dummy encryption mode enabled [ 308.845501][ T9505] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 308.907040][ T5791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.943542][ T5791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.953455][ T5791] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.960521][ T5791] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 308.969958][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.991677][ T5791] usb 2-1: config 0 descriptor?? [ 309.003620][ T9515] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2438'. [ 309.012641][ T9515] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2438'. [ 309.482326][ T7] tipc: Subscription rejected, illegal request [ 309.698888][ T9482] F2FS-fs (loop1): fault_injection options not supported [ 309.707228][ T9482] F2FS-fs (loop1): invalid crc value [ 309.714372][ T9482] F2FS-fs (loop1): Found nat_bits in checkpoint [ 309.752324][ T9482] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 309.864148][ T9482] attempt to access beyond end of device [ 309.864148][ T9482] loop1: rw=2049, want=40432, limit=40427 [ 310.017773][ T9553] tipc: Enabling of bearer rejected, already enabled [ 310.056393][ T9562] 9pnet: Could not find request transport: #Hi;<=0x000000000000000c [ 310.065916][ T5791] hid (null): report_id 0 is invalid [ 310.260349][ T9577] device ip6tnl1 entered promiscuous mode [ 310.281558][ T6823] usb 2-1: USB disconnect, device number 4 [ 310.995818][ T9593] overlayfs: failed to clone upperpath [ 311.025845][ T9593] overlayfs: failed to clone upperpath [ 311.329163][ T9603] tipc: Started in network mode [ 311.343293][ T9603] tipc: Own node identity 8, cluster identity 4711 [ 311.376491][ T9603] tipc: 32-bit node address hash set to 8 [ 311.500984][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2462'. [ 312.178855][ T9619] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue [ 312.336329][ T9619] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.071059][ T9635] bridge: RTM_NEWNEIGH with invalid ether address [ 313.143497][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.150673][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.459327][ T9645] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 313.526789][ T24] kauditd_printk_skb: 138 callbacks suppressed [ 313.526801][ T24] audit: type=1400 audit(1762084783.713:9910): avc: denied { relabelfrom } for pid=9643 comm="syz.6.2473" name="UNIX" dev="sockfs" ino=44000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 313.601870][ T24] audit: type=1400 audit(1762084783.816:9911): avc: denied { relabelto } for pid=9643 comm="syz.6.2473" name="UNIX" dev="sockfs" ino=44000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 314.479901][ T9664] syz.0.2477[9664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.480589][ T9664] syz.0.2477[9664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.509201][ T9664] sch_tbf: burst 0 is lower than device veth1_macvtap mtu (1514) ! [ 315.116701][ T24] audit: type=1400 audit(1762084785.266:9912): avc: denied { sys_module } for pid=9611 comm="syz.3.2463" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 315.219128][ T24] audit: type=1400 audit(1762084785.369:9913): avc: denied { accept } for pid=9670 comm="syz.0.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 316.924928][ T5791] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 316.944200][ T24] audit: type=1326 audit(1762084786.978:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.0.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 316.968804][ T24] audit: type=1326 audit(1762084786.978:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.0.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 317.017425][ T24] audit: type=1326 audit(1762084787.006:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.0.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 317.087783][ T24] audit: type=1326 audit(1762084787.006:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.0.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 317.115080][ T24] audit: type=1326 audit(1762084787.006:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.0.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 317.224237][ T5791] usb 2-1: Using ep0 maxpacket: 32 [ 317.230440][ T9740] 9pnet_virtio: no channels available for device 127.0.0.1 [ 317.306958][ T9742] sch_tbf: burst 0 is lower than device veth1_macvtap mtu (1514) ! [ 317.322785][ T9740] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777=d̞ YS38`" or missing value [ 317.363585][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.374889][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.386025][ T5791] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 317.395174][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.488601][ T5791] usb 2-1: config 0 descriptor?? [ 317.534819][ T5791] hub 2-1:0.0: USB hub found [ 318.090258][ T5791] hub 2-1:0.0: 1 port detected [ 318.112769][ T5791] hub 2-1:0.0: config failed, can't get hub status (err -5) [ 318.130816][ T9758] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 318.311200][ T5791] usbhid 2-1:0.0: can't add hid device: -71 [ 318.319501][ T5791] usbhid: probe of 2-1:0.0 failed with error -71 [ 318.511603][ T5791] usb 2-1: USB disconnect, device number 5 [ 318.775145][ T9779] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2503'. [ 318.898529][ T9785] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 319.079948][ T9790] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 319.087666][ T9790] EXT4-fs (loop3): Test dummy encryption mode enabled [ 319.095730][ T9790] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 319.102927][ T9790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 319.115837][ T9790] EXT4-fs (loop3): 1 truncate cleaned up [ 319.121566][ T24] audit: type=1400 audit(1762084789.017:9919): avc: denied { getopt } for pid=9794 comm="syz.0.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 319.141702][ T9790] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 319.188272][ T24] audit: type=1400 audit(1762084789.073:9920): avc: denied { map } for pid=9788 comm="syz.3.2509" path="/391/bus/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 319.212771][ T1278] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 319.439007][ T24] audit: type=1400 audit(1762084789.316:9921): avc: denied { getopt } for pid=9804 comm="syz.6.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.577790][ T9803] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 319.600875][ T9803] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 319.606883][ T24] audit: type=1400 audit(1762084789.466:9922): avc: denied { append } for pid=9810 comm="syz.1.2512" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 319.619005][ T1278] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.641805][ T1278] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 319.655264][ T1278] usb 6-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 319.666812][ T9803] F2FS-fs (loop3): Found nat_bits in checkpoint [ 319.683125][ T1278] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.692588][ T1278] usb 6-1: config 0 descriptor?? [ 319.706891][ T9803] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 319.714006][ T9803] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 319.722639][ T9819] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 319.753562][ T9819] EXT4-fs (loop1): mount failed [ 320.402399][ T1278] wacom 0003:056A:032C.0011: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.5-1/input0 [ 320.616302][ T5793] usb 6-1: USB disconnect, device number 13 [ 321.494877][ T9844] netlink: 'syz.0.2520': attribute type 12 has an invalid length. [ 322.685934][ T9864] device syz_tun entered promiscuous mode [ 322.700615][ T9864] device syz_tun left promiscuous mode [ 322.732338][ T24] audit: type=1400 audit(1762084792.394:9923): avc: denied { read write } for pid=9880 comm="syz.5.2529" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 322.756582][ T5801] hid-generic 03FF:D06F:0003.0012: item fetching failed at offset 0/1 [ 322.769620][ T5801] hid-generic: probe of 03FF:D06F:0003.0012 failed with error -22 [ 322.823017][ T24] audit: type=1400 audit(1762084792.394:9924): avc: denied { open } for pid=9880 comm="syz.5.2529" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 322.915527][ T24] audit: type=1326 audit(1762084792.562:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 322.939017][ T24] audit: type=1326 audit(1762084792.562:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 322.962487][ T24] audit: type=1326 audit(1762084792.590:9927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 322.986013][ T24] audit: type=1326 audit(1762084792.590:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 322.986047][ T9899] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 323.018323][ T9899] EXT4-fs (loop1): invalid journal inode [ 323.024109][ T9899] EXT4-fs (loop1): can't get journal size [ 323.038137][ T9899] EXT4-fs (loop1): 1 truncate cleaned up [ 323.043871][ T9899] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,,errors=continue [ 323.082727][ T5794] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 323.649357][ T5794] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.665942][ T5794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 323.675552][ T5794] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.831708][ T9935] xt_bpf: check failed: parse error [ 323.906290][ T5794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.937992][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.974852][ T5794] usb 4-1: Product: syz [ 324.044836][ T5794] usb 4-1: Manufacturer: syz [ 324.049512][ T5794] usb 4-1: SerialNumber: syz [ 324.098801][ T5794] cdc_ncm 4-1:1.0: bind() failure [ 324.579251][ T9950] syz.1.2544[9950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.579321][ T9950] syz.1.2544[9950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.591643][ T9950] syz.1.2544[9950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.602992][ T9950] syz.1.2544[9950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.614634][ T9950] syz.1.2544[9950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.625974][ T9950] syz.1.2544[9950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.637613][ T9950] syz.1.2544[9950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.638944][ T5794] usb 4-1: USB disconnect, device number 51 [ 324.648948][ T9950] syz.1.2544[9950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.850163][ T24] kauditd_printk_skb: 49 callbacks suppressed [ 324.850174][ T24] audit: type=1400 audit(1762084794.377:9978): avc: denied { accept } for pid=9957 comm="syz.1.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.905499][ T9963] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 326.260629][ T9994] bridge: RTM_NEWNEIGH with invalid ether address [ 326.272860][ T9995] bridge: RTM_NEWNEIGH with invalid ether address [ 326.362161][ T24] audit: type=1326 audit(1762084795.789:9979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.6.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 326.411404][ T24] audit: type=1326 audit(1762084795.817:9980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.6.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 326.437114][ T24] audit: type=1326 audit(1762084795.817:9981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.6.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 326.471559][ T24] audit: type=1326 audit(1762084795.817:9982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.6.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 326.713797][ T24] audit: type=1326 audit(1762084795.817:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.6.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 326.740722][T10037] syz.6.2566[10037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.741048][T10037] syz.6.2566[10037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.792696][T10006] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.2559: corrupted in-inode xattr [ 327.002770][T10006] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.2559: couldn't read orphan inode 15 (err -117) [ 327.061403][ T24] audit: type=1326 audit(1762084795.817:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.6.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde9ee6a810 code=0x7ffc0000 [ 327.222069][T10006] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,abort,noload,delalloc,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,init_itable=0x0000000000000fff,,errors=continue [ 327.567255][ T24] audit: type=1326 audit(1762084795.817:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.6.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 327.619921][ T24] audit: type=1326 audit(1762084795.817:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.6.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde9ee6bbcb code=0x7ffc0000 [ 327.686850][ T24] audit: type=1326 audit(1762084795.817:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.6.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 327.916192][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2569'. [ 328.746541][T10078] 8021q: VLANs not supported on ip6gre0 [ 329.682614][T10065] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 329.710904][T10065] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 329.734366][T10065] F2FS-fs (loop3): invalid crc value [ 329.751952][T10065] F2FS-fs (loop3): Found nat_bits in checkpoint [ 329.787847][T10065] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 329.795068][T10065] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 329.906095][T10065] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 329.919755][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2571'. [ 330.002070][T10065] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix. [ 330.364291][T10126] tipc: Enabling of bearer rejected, failed to enable media [ 330.397608][ T5799] kernel read not supported for file [userfaultfd] (pid: 5799 comm: kworker/1:20) [ 330.406989][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 330.407000][ T24] audit: type=1400 audit(1762084799.568:10019): avc: denied { read } for pid=5799 comm="kworker/1:20" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=46346 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 330.563261][T10130] syz.6.2592[10130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.563308][T10130] syz.6.2592[10130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.601507][T10132] netlink: 'syz.3.2586': attribute type 1 has an invalid length. [ 330.870708][T10142] syz.6.2595[10142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.871251][T10142] syz.6.2595[10142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.893622][T10142] syz.6.2595[10142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.342278][T10142] syz.6.2595[10142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.663201][T10146] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2595'. [ 331.857610][T10148] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2596'. [ 332.197639][T10148] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2596'. [ 332.295818][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2596'. [ 332.691931][T10193] overlayfs: './file1' not a directory [ 332.766800][T10200] x_tables: duplicate underflow at hook 1 [ 332.833930][T10200] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,inlinecrypt,,errors=continue [ 332.848148][ T24] audit: type=1400 audit(1762084801.860:10020): avc: denied { mounton } for pid=10197 comm="syz.3.2608" path="/407/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.589218][T10221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10221 comm=syz.1.2616 [ 333.606019][ T24] audit: type=1326 audit(1762084802.571:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 333.768510][ T24] audit: type=1326 audit(1762084802.571:10022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 333.815521][ T24] audit: type=1326 audit(1762084802.590:10023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 333.870384][ T24] audit: type=1326 audit(1762084802.590:10024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 333.895088][ T24] audit: type=1326 audit(1762084802.590:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 333.918831][ T24] audit: type=1326 audit(1762084802.590:10026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 333.942383][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.942539][ T24] audit: type=1326 audit(1762084802.590:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 333.978556][T10219] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.989502][T10219] device bridge_slave_0 entered promiscuous mode [ 333.996648][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.003886][T10219] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.011064][ T24] audit: type=1326 audit(1762084802.590:10028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 334.036813][T10219] device bridge_slave_1 entered promiscuous mode [ 334.195263][T10245] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2620'. [ 334.365743][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.378797][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.398277][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.407712][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.418307][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.425350][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.439333][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.448119][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.456336][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.463396][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.474381][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.493814][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.501917][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.517376][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.536082][T10219] device veth0_vlan entered promiscuous mode [ 334.544397][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.553147][T10260] 9pnet: Insufficient options for proto=fd [ 334.558259][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.566639][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.580899][T10219] device veth1_macvtap entered promiscuous mode [ 334.588055][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.600297][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.619741][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.690629][T10265] FAT-fs (loop4): Unrecognized mount option "dmask=00000000000000D]gxe!+000000003" or missing value [ 335.016207][T10264] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=276 sclass=netlink_xfrm_socket pid=10264 comm=syz.4.2613 [ 335.125920][T10275] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 335.152100][T10275] SELinux: failed to load policy [ 335.237691][T10282] input: syz0 as /devices/virtual/input/input18 [ 335.444917][T10288] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2628'. [ 335.472252][T10288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10288 comm=syz.4.2628 [ 337.062218][T10313] overlayfs: failed to clone upperpath [ 337.130160][ T5797] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 337.215673][ T1278] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 337.284054][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2639'. [ 337.577092][ T5797] usb 6-1: Using ep0 maxpacket: 32 [ 337.586389][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 337.643382][ T1278] usb 5-1: device descriptor read/64, error -71 [ 337.707600][ T5797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.718567][ T5797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.728316][ T5797] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 337.737612][ T5797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.746592][ T5797] usb 6-1: config 0 descriptor?? [ 337.816357][ T5797] hub 6-1:0.0: USB hub found [ 338.049604][ T5797] hub 6-1:0.0: 1 port detected [ 338.070943][ T1278] usb 5-1: device descriptor read/64, error -71 [ 338.540965][ T1278] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 338.904807][ T1278] usb 5-1: device descriptor read/64, error -71 [ 339.011812][ T5797] hub 6-1:0.0: activate --> -90 [ 339.226257][ T5] usb 6-1: USB disconnect, device number 14 [ 339.295686][ T5797] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 339.356256][ T1278] usb 5-1: device descriptor read/64, error -71 [ 339.435260][ T24] kauditd_printk_skb: 74 callbacks suppressed [ 339.435273][ T24] audit: type=1400 audit(1762084807.996:10103): avc: denied { ioctl } for pid=10343 comm="syz.6.2647" path="socket:[46691]" dev="sockfs" ino=46691 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 339.484634][ T1278] usb usb5-port1: attempt power cycle [ 340.594457][ T24] audit: type=1326 audit(1762084809.109:10104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 340.689896][ T24] audit: type=1326 audit(1762084809.138:10105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 340.718670][ T24] audit: type=1326 audit(1762084809.138:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 340.743375][ T24] audit: type=1326 audit(1762084809.138:10107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 340.767340][ T24] audit: type=1326 audit(1762084809.138:10108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 340.873549][ T24] audit: type=1326 audit(1762084809.138:10109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 340.903872][ T24] audit: type=1326 audit(1762084809.138:10110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 340.927534][ T24] audit: type=1326 audit(1762084809.138:10111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 340.928472][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2651'. [ 340.951597][ T24] audit: type=1326 audit(1762084809.138:10112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 341.016729][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2658'. [ 341.054833][T10389] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 341.068613][T10389] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 341.078663][T10389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 341.087175][T10389] EXT4-fs (loop4): orphan cleanup on readonly fs [ 341.093642][T10389] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.2659: invalid indirect mapped block 1023 (level 0) [ 341.107351][T10389] EXT4-fs (loop4): Remounting filesystem read-only [ 341.114014][T10389] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.2659: invalid indirect mapped block 2185560079 (level 1) [ 341.128155][T10389] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2659: bg 0: block 361: padding at end of block bitmap is not set [ 341.143296][T10389] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 341.153183][T10389] EXT4-fs (loop4): 1 truncate cleaned up [ 341.159023][T10389] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,noblock_validity,discard,errors=remount-ro,mblk_io_submit [ 342.138217][T10442] xt_l2tp: missing protocol rule (udp|l2tpip) [ 343.496431][T10465] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 343.505427][T10465] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.827830][T10471] udc-core: couldn't find an available UDC or it's busy [ 343.835083][T10471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 344.741882][ T373] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 344.998455][ T373] usb 6-1: Using ep0 maxpacket: 8 [ 345.042420][T10493] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.050431][T10493] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.126772][ T373] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 345.142805][ T373] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.169571][ T24] kauditd_printk_skb: 107 callbacks suppressed [ 345.169583][ T24] audit: type=1326 audit(1762084813.375:10220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 345.201515][ T373] usb 6-1: config 0 has no interface number 0 [ 345.210967][ T24] audit: type=1326 audit(1762084813.375:10221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 345.639961][ T373] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 345.649021][ T373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.657032][ T373] usb 6-1: Product: syz [ 345.661307][ T373] usb 6-1: Manufacturer: syz [ 345.665908][ T373] usb 6-1: SerialNumber: syz [ 345.671338][ T373] usb 6-1: config 0 descriptor?? [ 346.021914][ T373] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 346.031302][ T373] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 346.048582][ T373] uvcvideo: Failed to create links for entity 6 [ 346.058242][ T373] uvcvideo: Failed to register entities (-22). [ 346.069698][ T373] usb 6-1: USB disconnect, device number 15 [ 346.110771][T10520] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 346.260853][T10520] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 346.271585][T10520] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 346.280186][T10520] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x110dabd0, checksum : 0x1119abd0) [ 346.290504][T10520] exFAT-fs (loop4): invalid boot region [ 346.296149][T10520] exFAT-fs (loop4): failed to recognize exfat type [ 346.512767][T10526] device wireguard0 entered promiscuous mode [ 346.822624][ T24] audit: type=1400 audit(1762084814.928:10222): avc: denied { setopt } for pid=10541 comm="syz.0.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 347.816232][T10551] binfmt_misc: register: failed to install interpreter file ./file2 [ 347.978284][T10559] netlink: 'syz.4.2708': attribute type 30 has an invalid length. [ 348.558451][ T5794] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 348.672557][ T24] audit: type=1400 audit(1762084816.658:10223): avc: denied { relabelfrom } for pid=10586 comm="syz.1.2716" name="" dev="pipefs" ino=47947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 348.672610][T10587] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 348.705087][ T24] audit: type=1400 audit(1762084816.696:10224): avc: denied { relabelto } for pid=10586 comm="syz.1.2716" name="" dev="pipefs" ino=47947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 348.740208][ T24] audit: type=1326 audit(1762084816.724:10225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.6.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 348.764130][ T24] audit: type=1326 audit(1762084816.724:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.6.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 348.788207][ T24] audit: type=1326 audit(1762084816.724:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.6.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 348.811955][ T24] audit: type=1326 audit(1762084816.724:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.6.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde9ee6a810 code=0x7ffc0000 [ 348.835849][ T24] audit: type=1326 audit(1762084816.724:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.6.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 349.028845][ T5794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 349.046641][ T5794] usb 6-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 349.071561][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.080469][ T5794] usb 6-1: config 0 descriptor?? [ 349.114400][T10575] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 349.610156][ T5797] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 349.634246][ T5794] hid-generic 0003:0543:E621.0013: unknown main item tag 0x0 [ 349.642158][ T5794] hid-generic 0003:0543:E621.0013: item fetching failed at offset 3/5 [ 349.650554][ T5794] hid-generic: probe of 0003:0543:E621.0013 failed with error -22 [ 349.873358][ T5797] usb 5-1: Using ep0 maxpacket: 16 [ 349.913863][T10610] v: renamed from ip6_vti0 [ 350.001711][ T5797] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 350.010017][ T5797] usb 5-1: config 0 has no interface number 0 [ 350.016210][ T5797] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 350.026170][ T5797] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 350.036136][ T5797] usb 5-1: config 0 interface 41 has no altsetting 0 [ 350.091388][ T52] usb 6-1: USB disconnect, device number 16 [ 350.236953][ T5797] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 350.246022][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.254036][ T5797] usb 5-1: Product: syz [ 350.258365][ T5797] usb 5-1: Manufacturer: syz [ 350.262966][ T5797] usb 5-1: SerialNumber: syz [ 350.270564][ T5797] usb 5-1: config 0 descriptor?? [ 350.290331][T10604] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 350.297477][T10604] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 350.533429][T10598] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 350.540707][T10598] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 350.669522][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 350.669538][ T24] audit: type=1400 audit(1762084818.529:10248): avc: denied { relabelto } for pid=10656 comm="syz.6.2739" name="455" dev="tmpfs" ino=2557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 350.713203][ T24] audit: type=1400 audit(1762084818.566:10249): avc: denied { associate } for pid=10656 comm="syz.6.2739" name="455" dev="tmpfs" ino=2557 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 350.740826][ T24] audit: type=1400 audit(1762084818.566:10250): avc: denied { write } for pid=10656 comm="syz.6.2739" name="455" dev="tmpfs" ino=2557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 350.771780][ T24] audit: type=1400 audit(1762084818.566:10251): avc: denied { add_name } for pid=10656 comm="syz.6.2739" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 350.798113][ T24] audit: type=1400 audit(1762084818.566:10252): avc: denied { associate } for pid=10656 comm="syz.6.2739" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 350.844017][ T24] audit: type=1400 audit(1762084818.679:10253): avc: denied { remove_name } for pid=2296 comm="syz-executor" name="file0" dev="tmpfs" ino=2562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 350.982766][ T24] audit: type=1400 audit(1762084818.688:10254): avc: denied { rmdir } for pid=2296 comm="syz-executor" name="455" dev="tmpfs" ino=2557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 351.029165][ T24] audit: type=1400 audit(1762084818.866:10255): avc: denied { watch_reads } for pid=10676 comm="syz.1.2744" path="/104/file0" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 351.080183][ T24] audit: type=1326 audit(1762084818.903:10256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 351.090845][ T5797] Error reading MAC address [ 351.108767][ T24] audit: type=1326 audit(1762084818.941:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9ee6bfc9 code=0x7ffc0000 [ 352.248059][ T5797] sr9700: probe of 5-1:0.41 failed with error -71 [ 352.259885][ T5797] usb 5-1: USB disconnect, device number 16 [ 352.751427][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 352.762169][T10754] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 352.789653][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2767'. [ 352.804723][T10765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10765 comm=syz.5.2768 [ 352.818025][T10765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10765 comm=syz.5.2768 [ 353.027123][ T5797] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 353.497815][ T5797] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.542156][ T5797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 353.796994][ T5797] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.806282][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.814573][ T5797] usb 5-1: Product: syz [ 353.818948][ T5797] usb 5-1: Manufacturer: syz [ 353.823578][ T5797] usb 5-1: SerialNumber: syz [ 353.872243][ T5797] usb 5-1: bad CDC descriptors [ 355.460291][ T1278] usb 5-1: USB disconnect, device number 17 [ 355.606739][T10828] EXT4-fs (loop4): Test dummy encryption mode enabled [ 355.613643][T10828] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 355.633189][T10828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803e01c, mo2=0002] [ 355.641207][T10828] System zones: 1-12 [ 355.645576][T10828] EXT4-fs (loop4): orphan cleanup on readonly fs [ 355.652347][T10828] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2785: bg 0: block 361: padding at end of block bitmap is not set [ 355.666926][T10828] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 355.675821][T10828] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #11: comm syz.4.2785: attempt to clear invalid blocks 33619980 len 1 [ 355.690492][T10828] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.2785: invalid indirect mapped block 1811939328 (level 0) [ 355.704947][T10828] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.2785: invalid indirect mapped block 2 (level 2) [ 355.718339][T10828] EXT4-fs (loop4): 1 truncate cleaned up [ 355.724111][T10828] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,noauto_da_alloc,dioread_lock,test_dummy_encryption=v1,jqfmt=vfsv0,errors=continue [ 356.057941][ T24] kauditd_printk_skb: 65 callbacks suppressed [ 356.057964][ T24] audit: type=1326 audit(1762084823.571:10323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 356.088864][ T24] audit: type=1326 audit(1762084823.571:10324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 356.114006][ T24] audit: type=1326 audit(1762084823.571:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 356.138451][ T24] audit: type=1326 audit(1762084823.571:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 356.163077][ T24] audit: type=1326 audit(1762084823.571:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 356.187614][ T24] audit: type=1326 audit(1762084823.571:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 356.212107][ T24] audit: type=1326 audit(1762084823.571:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 356.236778][ T24] audit: type=1326 audit(1762084823.571:10330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 356.261336][ T24] audit: type=1326 audit(1762084823.571:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 356.285940][ T24] audit: type=1326 audit(1762084823.571:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03589afc9 code=0x7ffc0000 [ 356.743230][T10850] overlayfs: failed to clone upperpath [ 357.329538][T10857] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.635364][T10857] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock, [ 357.660834][T10857] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.312880][T10929] xt_CONNSECMARK: invalid mode: 66 [ 360.304989][T10937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.489355][T10936] exfat: Unknown parameter 'pcr' [ 361.457297][T10970] loop4: p2 p3 p7 [ 362.053046][ T2041] udevd[2041]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 362.053081][ T328] udevd[328]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 362.073257][ T331] udevd[331]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 362.089996][ T2041] udevd[2041]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 362.469247][ T24] kauditd_printk_skb: 431 callbacks suppressed [ 362.469260][ T24] audit: type=1400 audit(1762084829.567:10764): avc: denied { read } for pid=11003 comm="syz.0.2832" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=48611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 362.973166][T11011] tipc: Bearer : already 2 bearers with priority 10 [ 362.980816][T11011] tipc: Bearer : trying with adjusted priority [ 362.987831][T11011] tipc: New replicast peer: 255.255.255.255 [ 362.993877][T11011] tipc: Enabled bearer , priority 9 [ 363.330318][T11034] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2836'. [ 363.519250][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2842'. [ 363.678687][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 363.782498][T11042] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2843'. [ 365.094419][T11070] syz.1.2850[11070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.095109][T11070] syz.1.2850[11070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.139030][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2849'. [ 365.172009][ T24] audit: type=1326 audit(1762084832.092:10765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 365.196311][ T24] audit: type=1326 audit(1762084832.092:10766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 365.220081][ T24] audit: type=1326 audit(1762084832.092:10767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 365.243594][ T24] audit: type=1326 audit(1762084832.092:10768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 365.267308][ T24] audit: type=1326 audit(1762084832.092:10769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 365.291663][ T24] audit: type=1326 audit(1762084832.092:10770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 365.331351][ T24] audit: type=1326 audit(1762084832.092:10771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 365.376311][ T24] audit: type=1326 audit(1762084832.092:10772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 365.400708][ T24] audit: type=1326 audit(1762084832.092:10773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.5.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb4cec4fc9 code=0x7ffc0000 [ 365.700179][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2853'. [ 365.766272][T11097] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2857'. [ 365.889651][T11104] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 365.907067][T11104] EXT4-fs (loop4): orphan cleanup on readonly fs [ 365.914218][T11104] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2858: bg 0: block 248: padding at end of block bitmap is not set [ 365.990703][T11114] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2859'. [ 366.193370][T11104] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.2858: Failed to acquire dquot type 1 [ 366.205396][T11104] EXT4-fs (loop4): 1 truncate cleaned up [ 366.211366][T11104] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue [ 366.548984][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2866'. [ 367.063896][ T52] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 367.331112][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 367.466925][T11180] device ip6gretap0 entered promiscuous mode [ 367.473244][ T52] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 367.491481][T11180] device macsec1 entered promiscuous mode [ 367.497234][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.506868][T11180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11180 comm=syz.6.2880 [ 367.524134][ T52] usb 6-1: config 0 descriptor?? [ 367.545380][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2880'. [ 367.855042][ T52] uvcvideo: Found UVC 0.00 device (2833:0201) [ 367.862174][ T52] uvcvideo: No valid video chain found. [ 367.868090][T11188] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 367.886485][T11188] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 367.905256][T11188] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 367.934710][T11188] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 367.952979][T11188] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 368.034297][ T52] usb 6-1: USB disconnect, device number 17 [ 368.039355][T11188] EXT4-fs (loop4): orphan cleanup on readonly fs [ 368.071282][T11188] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2882: bg 0: block 34: padding at end of block bitmap is not set [ 368.090385][T11188] __quota_error: 55 callbacks suppressed [ 368.090393][T11188] Quota error (device loop4): write_blk: dquota write failed [ 368.111565][T11188] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 368.130947][T11188] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.2882: Failed to acquire dquot type 1 [ 368.157597][T11188] EXT4-fs (loop4): 1 truncate cleaned up [ 368.172248][T11188] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue [ 368.732244][T11221] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 368.732244][T11221] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 368.732244][T11221] [ 368.763731][T11221] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 368.786152][T11221] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,nouser_xattr,nojournal_checksum,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,nombcache,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 368.814279][ T24] audit: type=1400 audit(1762084835.497:10827): avc: denied { ioctl } for pid=11220 comm="syz.4.2889" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 368.904919][ T24] audit: type=1326 audit(1762084835.591:10828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11220 comm="syz.4.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 368.934371][T11221] netlink: 'syz.4.2889': attribute type 16 has an invalid length. [ 368.942211][T11221] __nla_validate_parse: 2 callbacks suppressed [ 368.942218][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2889'. [ 368.957493][ T24] audit: type=1326 audit(1762084835.591:10829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11220 comm="syz.4.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 368.998805][ T24] audit: type=1326 audit(1762084835.591:10830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11220 comm="syz.4.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 369.191437][ T24] audit: type=1326 audit(1762084835.609:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11220 comm="syz.4.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 369.240311][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.270933][T11231] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.479351][T11231] device bridge_slave_0 entered promiscuous mode [ 369.494799][ T24] audit: type=1326 audit(1762084835.609:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11220 comm="syz.4.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 370.141073][ T24] audit: type=1326 audit(1762084835.609:10833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11220 comm="syz.4.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 370.232888][T11247] netlink: 'syz.1.2897': attribute type 12 has an invalid length. [ 370.254208][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.291337][T11231] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.477587][ T24] audit: type=1326 audit(1762084835.609:10834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11220 comm="syz.4.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec3442fc9 code=0x7ffc0000 [ 370.494279][T11231] device bridge_slave_1 entered promiscuous mode [ 370.520425][T11276] FAT-fs (loop4): Directory bread(block 64) failed [ 370.526963][T11276] FAT-fs (loop4): Directory bread(block 65) failed [ 370.533635][T11276] FAT-fs (loop4): Directory bread(block 66) failed [ 370.540177][T11276] FAT-fs (loop4): Directory bread(block 67) failed [ 370.546702][T11276] FAT-fs (loop4): Directory bread(block 68) failed [ 370.553217][T11276] FAT-fs (loop4): Directory bread(block 69) failed [ 370.559757][T11276] FAT-fs (loop4): Directory bread(block 70) failed [ 370.566268][T11276] FAT-fs (loop4): Directory bread(block 71) failed [ 370.572813][T11276] FAT-fs (loop4): Directory bread(block 72) failed [ 370.579321][T11276] FAT-fs (loop4): Directory bread(block 73) failed [ 370.591009][T11281] 9pnet: Insufficient options for proto=fd [ 370.775953][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.784044][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.792973][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 370.802903][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.810613][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 370.819115][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.907707][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.914772][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.922928][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.931951][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.940309][ T5796] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 370.948853][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.955907][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.969497][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.008370][T11231] device veth0_vlan entered promiscuous mode [ 371.020039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.028143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.035775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.043618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.054377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.063262][T11231] device veth1_macvtap entered promiscuous mode [ 371.072667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.090932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.222525][ T5796] usb 5-1: Using ep0 maxpacket: 32 [ 371.228661][T11306] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.2911: casefold flag without casefold feature [ 371.241659][T11306] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.2911: couldn't read orphan inode 15 (err -117) [ 371.253897][T11306] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 371.372449][ T5796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.383976][ T5796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.393864][ T5796] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 371.403404][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.415252][ T5796] usb 5-1: config 0 descriptor?? [ 371.460897][ T5796] hub 5-1:0.0: USB hub found [ 371.649463][T11317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11317 comm=syz.1.2914 [ 371.674037][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2912'. [ 371.685262][T11291] udc-core: couldn't find an available UDC or it's busy [ 371.692423][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2912'. [ 371.703533][T11291] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 371.717933][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2915'. [ 371.731031][T11321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11321 comm=syz.1.2915 [ 371.751826][T11321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=11321 comm=syz.1.2915 [ 371.808605][T11332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=11332 comm=syz.1.2918 [ 371.821666][ T5796] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 371.829533][T11333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=11333 comm=syz.1.2918 [ 371.971054][ T5796] usbhid 5-1:0.0: can't add hid device: -71 [ 371.977592][ T5796] usbhid: probe of 5-1:0.0 failed with error -71 [ 372.014466][ T5796] usb 5-1: USB disconnect, device number 18 [ 372.309069][T11345] attempt to access beyond end of device [ 372.309069][T11345] loop0: rw=2049, want=250, limit=128 [ 372.321956][T11345] attempt to access beyond end of device [ 372.321956][T11345] loop0: rw=524288, want=250, limit=128 [ 372.333574][T11345] attempt to access beyond end of device [ 372.333574][T11345] loop0: rw=0, want=146, limit=128 [ 372.344442][T11345] attempt to access beyond end of device [ 372.344442][T11345] loop0: rw=0, want=146, limit=128 [ 372.355850][T11344] attempt to access beyond end of device [ 372.355850][T11344] loop0: rw=0, want=146, limit=128 [ 372.366633][T11344] attempt to access beyond end of device [ 372.366633][T11344] loop0: rw=0, want=146, limit=128 [ 372.377500][T11344] attempt to access beyond end of device [ 372.377500][T11344] loop0: rw=0, want=146, limit=128 [ 372.388200][T11344] attempt to access beyond end of device [ 372.388200][T11344] loop0: rw=0, want=146, limit=128 [ 372.398971][T11345] attempt to access beyond end of device [ 372.398971][T11345] loop0: rw=0, want=146, limit=128 [ 372.409919][T11345] attempt to access beyond end of device [ 372.409919][T11345] loop0: rw=0, want=146, limit=128 [ 372.545190][T11348] F2FS-fs (loop4): invalid crc value [ 372.591661][T11348] F2FS-fs (loop4): Found nat_bits in checkpoint [ 372.640715][T11348] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 372.647596][T11348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 372.803922][T11362] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 372.945005][T11377] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2926'. [ 372.957907][T11377] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2926'. [ 373.020617][T11381] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2930'. [ 373.647289][T11385] EXT4-fs (loop0): Test dummy encryption mode enabled [ 373.654221][T11385] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 373.669461][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2934'. [ 373.679553][T11385] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 373.704240][T11391] 9pnet: Insufficient options for proto=fd [ 373.715541][T11385] EXT4-fs (loop0): bad geometry: first data block 256 is beyond end of filesystem (256) [ 374.237132][T11407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2940'. [ 374.930958][T11414] overlayfs: failed to clone upperpath [ 375.331393][ T24] kauditd_printk_skb: 92 callbacks suppressed [ 375.331405][ T24] audit: type=1326 audit(1762084841.596:10927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 375.381190][ T52] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 375.413494][ T24] audit: type=1326 audit(1762084841.596:10928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 375.469441][ T24] audit: type=1326 audit(1762084841.624:10929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 375.521592][ T24] audit: type=1326 audit(1762084841.624:10930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 375.574837][ T24] audit: type=1326 audit(1762084841.624:10931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 375.598595][ T24] audit: type=1326 audit(1762084841.624:10932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 375.627573][ T24] audit: type=1326 audit(1762084841.624:10933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 375.653207][ T24] audit: type=1326 audit(1762084841.624:10934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 375.678929][ T24] audit: type=1326 audit(1762084841.624:10935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 375.702667][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 375.707932][ T24] audit: type=1326 audit(1762084841.624:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 375.772138][T11427] overlayfs: failed to clone upperpath [ 375.854291][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.866455][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 375.879531][ T52] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 375.880219][T11425] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 375.888774][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.904675][ T52] usb 5-1: config 0 descriptor?? [ 375.942727][T11425] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 375.952583][T11425] F2FS-fs (loop0): invalid crc value [ 375.980675][T11425] F2FS-fs (loop0): Found nat_bits in checkpoint [ 376.041220][T11425] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 376.048929][T11425] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 376.072961][T11451] netlink: 'syz.6.2953': attribute type 12 has an invalid length. [ 376.646719][ T52] microsoft 0003:045E:07DA.0014: item fetching failed at offset 10/34 [ 376.649289][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 376.663457][ T52] microsoft 0003:045E:07DA.0014: parse failed [ 376.676410][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.684440][ T52] microsoft: probe of 0003:045E:07DA.0014 failed with error -22 [ 376.693598][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 376.711448][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.724001][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.732148][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.740319][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.748428][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.867140][ T52] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 376.896963][T11469] xt_SECMARK: invalid security context 'unconfined' [ 377.380615][ T52] usb 6-1: device descriptor read/64, error -71 [ 378.011059][ T52] usb 6-1: device descriptor read/64, error -71 [ 378.023310][T11492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.313506][ T52] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 378.425704][T11498] kvm [11497]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc1 data 0xfa01 [ 378.434917][T11498] kvm [11497]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc2 data 0xf9ff [ 378.445708][T11498] kvm [11497]: vcpu0, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0xf801 [ 378.456308][T11498] kvm [11497]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0x186 data 0xf301 [ 378.465642][T11498] kvm [11497]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0x187 data 0xf2ff [ 378.641960][ T52] usb 6-1: device descriptor read/64, error -71 [ 378.869863][T11506] EXT4-fs (loop0): Unrecognized mount option "subj_type=Y]-" or missing value [ 379.080370][ T52] usb 6-1: device descriptor read/64, error -71 [ 379.167665][ T373] usb 5-1: USB disconnect, device number 19 [ 379.219283][ T52] usb usb6-port1: attempt power cycle [ 380.576871][T11536] 9pnet: p9_errstr2errno: server reported unknown error [ 381.206048][T11569] syz.1.2985[11569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.206100][T11569] syz.1.2985[11569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.245310][T11576] fuse: Bad value for 'rootmode' [ 381.318824][ T24] kauditd_printk_skb: 88 callbacks suppressed [ 381.318836][ T24] audit: type=1326 audit(1762084847.199:11025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.1.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 381.357032][ T24] audit: type=1326 audit(1762084847.199:11026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.1.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 381.412994][ T24] audit: type=1326 audit(1762084847.199:11027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.1.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 381.443829][ T24] audit: type=1326 audit(1762084847.199:11028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.1.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 381.467628][ T24] audit: type=1326 audit(1762084847.208:11029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.1.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 381.491279][ T24] audit: type=1326 audit(1762084847.208:11030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.1.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 381.536198][ T24] audit: type=1326 audit(1762084847.208:11031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.1.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 381.560160][ T24] audit: type=1326 audit(1762084847.208:11032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.1.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 382.479718][ T24] audit: type=1326 audit(1762084847.208:11033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.1.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 382.522533][ T24] audit: type=1326 audit(1762084847.208:11034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.1.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0674704fc9 code=0x7ffc0000 [ 382.818171][T11598] FAT-fs (loop0): Unrecognized mount option "shrtname=winnRt" or missing value [ 383.071319][T11618] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 383.113567][T11618] EXT4-fs (loop0): Test dummy encryption mode enabled [ 383.121697][T11618] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 383.135062][T11618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 383.162218][T11618] EXT4-fs (loop0): 1 truncate cleaned up [ 383.167956][ T5801] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 383.199639][T11618] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,auto_da_alloc=0x000000000000000b,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 383.317855][T11635] fuse: blksize only supported for fuseblk [ 383.387855][T11644] 9pnet: Insufficient options for proto=fd [ 383.705723][T11656] netlink: 'syz.6.3008': attribute type 12 has an invalid length. [ 384.293863][ T6823] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 384.829660][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 384.899781][ T5801] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.928372][T11669] incfs: Options parsing error. -22 [ 384.934067][T11669] incfs: mount failed -22 [ 384.973409][ T5801] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 384.983432][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.093132][ T6823] usb 6-1: Using ep0 maxpacket: 8 [ 385.099462][ T5801] usb 5-1: config 0 descriptor?? [ 386.381711][ T5801] usb 5-1: can't set config #0, error -71 [ 386.389282][ T5801] usb 5-1: USB disconnect, device number 20 [ 386.713267][ T6823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 386.788168][ T6823] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 386.795881][ T6823] usb 6-1: can't read configurations, error -71 [ 387.281276][T11708] EXT4-fs (loop4): Ignoring removed nobh option [ 387.287657][T11708] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 387.302304][T11708] EXT4-fs (loop4): 1 truncate cleaned up [ 387.308046][T11708] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue [ 387.334239][T11713] netlink: 'syz.6.3025': attribute type 12 has an invalid length. [ 387.435295][T11716] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3024'. [ 388.087515][T11723] bridge: RTM_NEWNEIGH with invalid ether address [ 388.105405][T11726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3028'. [ 388.179553][ T24] kauditd_printk_skb: 144 callbacks suppressed [ 388.179566][ T24] audit: type=1400 audit(1762084853.616:11179): avc: denied { ioctl } for pid=11728 comm="syz.0.3029" path="socket:[51895]" dev="sockfs" ino=51895 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 388.222960][ T24] audit: type=1400 audit(1762084853.644:11180): avc: denied { lock } for pid=11728 comm="syz.0.3029" path="socket:[51895]" dev="sockfs" ino=51895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 388.274198][T11736] netlink: 'syz.0.3032': attribute type 29 has an invalid length. [ 388.281195][T11737] netlink: 'syz.0.3032': attribute type 29 has an invalid length. [ 388.283908][T11736] netlink: 'syz.0.3032': attribute type 3 has an invalid length. [ 388.297179][T11737] netlink: 'syz.0.3032': attribute type 3 has an invalid length. [ 388.311213][T11736] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3032'. [ 388.311262][T11737] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3032'. [ 388.337756][ T24] audit: type=1326 audit(1762084853.756:11181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 388.375389][T11752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11752 comm=syz.0.3037 [ 388.388416][T11752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11752 comm=syz.0.3037 [ 388.400980][ T24] audit: type=1326 audit(1762084853.756:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 388.401000][ T24] audit: type=1326 audit(1762084853.756:11183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 388.401019][ T24] audit: type=1326 audit(1762084853.756:11184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222476fc9 code=0x7ffc0000 [ 388.541315][ T373] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 388.801677][ T373] usb 5-1: Using ep0 maxpacket: 16 [ 388.830061][ T52] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 388.947611][ T373] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 388.972460][ T373] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 388.995092][ T373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.018355][ T373] usb 5-1: config 0 descriptor?? [ 389.076552][ T373] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 389.257744][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.279790][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.311425][ T52] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 389.340202][ T52] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 389.360710][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.379672][ T373] usb 5-1: USB disconnect, device number 21 [ 389.386916][ T52] usb 1-1: config 0 descriptor?? [ 389.662683][ T24] audit: type=1326 audit(1762084855.000:11185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11788 comm="syz.1.3048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0674704fc9 code=0x0 [ 389.771908][ T24] audit: type=1107 audit(1762084855.103:11186): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 389.893138][T11793] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 389.903065][T11793] EXT4-fs (loop4): group descriptors corrupted! [ 389.910817][ T52] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xe [ 389.918657][ T52] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 389.927709][ T52] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 389.937092][ T52] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 390.172097][T11822] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 390.209773][ T52] usb 1-1: USB disconnect, device number 17 [ 390.303280][T11849] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 390.670563][ T24] audit: type=1400 audit(1762084855.945:11187): avc: denied { create } for pid=11888 comm="syz.1.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 390.827601][T11931] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 390.856207][T11939] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 390.872174][T11941] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3118'. [ 391.004414][T11972] netlink: 'syz.1.3133': attribute type 3 has an invalid length. [ 391.013138][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3133'. [ 391.042934][ T24] audit: type=1400 audit(1762084856.291:11188): avc: denied { create } for pid=11975 comm="syz.5.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 391.395812][T12046] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3169'. [ 391.434346][T12057] tipc: Started in network mode [ 391.439342][T12057] tipc: Own node identity 0000000000000000005885d6a76549cc, cluster identity 4711 [ 391.448594][T12057] tipc: Enabling of bearer rejected, failed to enable media [ 391.458499][T12060] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3175'. [ 391.460326][T12058] device gretap1 entered promiscuous mode [ 391.480392][T12060] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3175'. [ 391.508887][T12065] device syzkaller0 entered promiscuous mode [ 391.544138][T12072] device bridge6 entered promiscuous mode [ 391.562953][T12078] device syzkaller0 entered promiscuous mode [ 391.608926][T12090] ================================================================== [ 391.617014][T12090] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 391.626201][T12090] Read of size 1 at addr ffff888129a58bd8 by task syz.5.3191/12090 [ 391.634099][T12090] [ 391.636437][T12090] CPU: 0 PID: 12090 Comm: syz.5.3191 Tainted: G W syzkaller #0 [ 391.645276][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.655340][T12090] Call Trace: [ 391.658636][T12090] __dump_stack+0x21/0x24 [ 391.662978][T12090] dump_stack_lvl+0x169/0x1d8 [ 391.667686][T12090] ? show_regs_print_info+0x18/0x18 [ 391.672951][T12090] ? thaw_kernel_threads+0x220/0x220 [ 391.678257][T12090] ? unwind_get_return_address+0x4d/0x90 [ 391.683893][T12090] print_address_description+0x7f/0x2c0 [ 391.689445][T12090] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 391.696119][T12090] kasan_report+0xe2/0x130 [ 391.700577][T12090] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 391.707102][T12090] __asan_report_load1_noabort+0x14/0x20 [ 391.712731][T12090] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 391.719047][T12090] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 391.725183][T12090] ? xfrm_netlink_rcv+0x72/0x90 [ 391.730020][T12090] ? netlink_unicast+0x876/0xa40 [ 391.734953][T12090] ? netlink_sendmsg+0x88d/0xb30 [ 391.739876][T12090] ? ____sys_sendmsg+0x5a2/0x8c0 [ 391.744798][T12090] ? ___sys_sendmsg+0x1f0/0x260 [ 391.749652][T12090] ? do_syscall_64+0x31/0x40 [ 391.754241][T12090] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 391.760382][T12090] xfrm_policy_inexact_insert+0x70/0x1130 [ 391.766085][T12090] ? __get_hash_thresh+0x10c/0x420 [ 391.771187][T12090] ? policy_hash_bysel+0x110/0x4f0 [ 391.776287][T12090] xfrm_policy_insert+0x126/0x9a0 [ 391.781297][T12090] ? xfrm_policy_construct+0x54f/0x1f00 [ 391.786914][T12090] xfrm_add_policy+0x4d1/0x830 [ 391.791663][T12090] ? xfrm_dump_sa_done+0xc0/0xc0 [ 391.796592][T12090] xfrm_user_rcv_msg+0x450/0x6d0 [ 391.801514][T12090] ? xfrm_netlink_rcv+0x90/0x90 [ 391.806361][T12090] ? selinux_nlmsg_lookup+0x219/0x4a0 [ 391.811721][T12090] netlink_rcv_skb+0x1e0/0x430 [ 391.816480][T12090] ? xfrm_netlink_rcv+0x90/0x90 [ 391.821315][T12090] ? netlink_ack+0xb80/0xb80 [ 391.825894][T12090] ? mutex_trylock+0xa0/0xa0 [ 391.830484][T12090] ? __netlink_lookup+0x387/0x3b0 [ 391.835535][T12090] xfrm_netlink_rcv+0x72/0x90 [ 391.840201][T12090] netlink_unicast+0x876/0xa40 [ 391.844962][T12090] netlink_sendmsg+0x88d/0xb30 [ 391.849712][T12090] ? schedule_preempt_disabled+0x20/0x20 [ 391.855335][T12090] ? netlink_getsockopt+0x530/0x530 [ 391.860528][T12090] ? security_socket_sendmsg+0x82/0xa0 [ 391.865977][T12090] ? netlink_getsockopt+0x530/0x530 [ 391.871198][T12090] ____sys_sendmsg+0x5a2/0x8c0 [ 391.875961][T12090] ? __sys_sendmsg_sock+0x40/0x40 [ 391.880980][T12090] ? import_iovec+0x7c/0xb0 [ 391.885470][T12090] ___sys_sendmsg+0x1f0/0x260 [ 391.890131][T12090] ? __sys_sendmsg+0x250/0x250 [ 391.894970][T12090] ? __fdget+0x1a1/0x230 [ 391.899197][T12090] __x64_sys_sendmsg+0x1e2/0x2a0 [ 391.904120][T12090] ? __kasan_check_write+0x14/0x20 [ 391.909216][T12090] ? ___sys_sendmsg+0x260/0x260 [ 391.914158][T12090] ? __kasan_check_read+0x11/0x20 [ 391.919166][T12090] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 391.924782][T12090] do_syscall_64+0x31/0x40 [ 391.929182][T12090] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 391.935056][T12090] RIP: 0033:0x7fbb4cec4fc9 [ 391.939458][T12090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.959046][T12090] RSP: 002b:00007fbb4b92d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.967444][T12090] RAX: ffffffffffffffda RBX: 00007fbb4d11bfa0 RCX: 00007fbb4cec4fc9 [ 391.975491][T12090] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 391.983446][T12090] RBP: 00007fbb4cf47f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.991402][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.999404][T12090] R13: 00007fbb4d11c038 R14: 00007fbb4d11bfa0 R15: 00007ffc3eba6288 [ 392.007372][T12090] [ 392.009696][T12090] Allocated by task 12090: [ 392.014099][T12090] __kasan_kmalloc+0xda/0x110 [ 392.018771][T12090] __kmalloc+0x1a7/0x330 [ 392.023029][T12090] sk_prot_alloc+0xb2/0x340 [ 392.027514][T12090] sk_alloc+0x38/0x4e0 [ 392.031594][T12090] pfkey_create+0x12a/0x660 [ 392.036084][T12090] __sock_create+0x38d/0x770 [ 392.040659][T12090] __sys_socket+0xec/0x190 [ 392.045069][T12090] __x64_sys_socket+0x7a/0x90 [ 392.049753][T12090] do_syscall_64+0x31/0x40 [ 392.054180][T12090] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 392.060052][T12090] [ 392.062427][T12090] The buggy address belongs to the object at ffff888129a58800 [ 392.062427][T12090] which belongs to the cache kmalloc-1k of size 1024 [ 392.076474][T12090] The buggy address is located 984 bytes inside of [ 392.076474][T12090] 1024-byte region [ffff888129a58800, ffff888129a58c00) [ 392.089817][T12090] The buggy address belongs to the page: [ 392.095442][T12090] page:ffffea0004a69600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129a58 [ 392.105749][T12090] head:ffffea0004a69600 order:3 compound_mapcount:0 compound_pincount:0 [ 392.114091][T12090] flags: 0x4000000000010200(slab|head) [ 392.119547][T12090] raw: 4000000000010200 ffffea0004414200 0000000200000002 ffff888100042f00 [ 392.128124][T12090] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 392.136692][T12090] page dumped because: kasan: bad access detected [ 392.143089][T12090] page_owner tracks the page as allocated [ 392.148802][T12090] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11224, ts 368779095748, free_ts 368759502525 [ 392.169004][T12090] prep_new_page+0x179/0x180 [ 392.173579][T12090] get_page_from_freelist+0x2235/0x23d0 [ 392.179106][T12090] __alloc_pages_nodemask+0x268/0x5f0 [ 392.184468][T12090] new_slab+0x84/0x3f0 [ 392.188530][T12090] ___slab_alloc+0x2a6/0x450 [ 392.193106][T12090] __slab_alloc+0x63/0xa0 [ 392.197430][T12090] __kmalloc_track_caller+0x1ef/0x320 [ 392.202794][T12090] __alloc_skb+0xdc/0x520 [ 392.207107][T12090] __pskb_copy_fclone+0xa6/0xf70 [ 392.212031][T12090] tipc_clone_to_loopback+0xfd/0x480 [ 392.217299][T12090] tipc_mcast_xmit+0x1302/0x1710 [ 392.222307][T12090] tipc_send_group_bcast+0x759/0xa40 [ 392.227582][T12090] __tipc_sendmsg+0xd51/0x2be0 [ 392.232344][T12090] tipc_sendmsg+0x55/0x70 [ 392.236661][T12090] ____sys_sendmsg+0x5a2/0x8c0 [ 392.241423][T12090] ___sys_sendmsg+0x1f0/0x260 [ 392.246105][T12090] page last free stack trace: [ 392.250767][T12090] __free_pages_ok+0x7fc/0x820 [ 392.255519][T12090] __free_pages+0xdd/0x380 [ 392.259916][T12090] __free_slab+0xcf/0x190 [ 392.264227][T12090] unfreeze_partials+0x15f/0x190 [ 392.269146][T12090] put_cpu_partial+0xc1/0x180 [ 392.273804][T12090] __slab_free+0x2c9/0x3a0 [ 392.278206][T12090] ___cache_free+0x111/0x130 [ 392.282778][T12090] qlink_free+0x50/0x90 [ 392.286940][T12090] qlist_free_all+0x5f/0xb0 [ 392.291430][T12090] kasan_quarantine_reduce+0x14a/0x160 [ 392.296875][T12090] __kasan_slab_alloc+0x2f/0xf0 [ 392.301714][T12090] slab_post_alloc_hook+0x5d/0x2f0 [ 392.306819][T12090] __kmalloc+0x183/0x330 [ 392.311047][T12090] kvmalloc_node+0x88/0x130 [ 392.315533][T12090] seq_read_iter+0x1fc/0xd30 [ 392.320123][T12090] kernfs_fop_read_iter+0x147/0x470 [ 392.325321][T12090] [ 392.327635][T12090] Memory state around the buggy address: [ 392.333249][T12090] ffff888129a58a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.341304][T12090] ffff888129a58b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.349351][T12090] >ffff888129a58b80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 392.357395][T12090] ^ [ 392.364313][T12090] ffff888129a58c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 392.372356][T12090] ffff888129a58c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 392.380397][T12090] ================================================================== [ 392.388507][T12090] Disabling lock debugging due to kernel taint