last executing test programs: 11.174987714s ago: executing program 0 (id=336): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0xc0, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f48}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x2, 0x7f, 0x3, 0x1, 0x4, 0x81, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x4}]}]}, 0xc0}}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x10000000000002bb}, 0x4c2103a0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100e00000010800023fea6d85000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c0002800500010000000000080007400000000020000d8008000100ffffffff0c000380060001004e20000008000200e0000001"], 0x84}}, 0x0) 10.07596451s ago: executing program 0 (id=344): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5") creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xe, 0x4, 0x8, 0x2008, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000000000", @ANYRES32, @ANYBLOB="0000008000000000000000007900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) unshare(0x400) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 7.540948352s ago: executing program 3 (id=353): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0xc0, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f48}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x2, 0x7f, 0x3, 0x1, 0x4, 0x81, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x4}]}]}, 0xc0}}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x10000000000002bb}, 0x4c2103a0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100e00000010800023fea6d85000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c0002800500010000000000080007400000000020000d8008000100ffffffff0c000380060001004e20000008000200e0000001"], 0x84}}, 0x0) 7.342547015s ago: executing program 4 (id=354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in=@empty, 0x0, 0x0, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000340)=[{{&(0x7f0000000600)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000540)=""/143, 0x8f}], 0x4}, 0x2}], 0x1, 0x2003, 0x0) socket(0x10, 0x803, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0x0, 0x2000c850, 0x0, 0x0) 6.960686458s ago: executing program 0 (id=355): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b4c93a9be8e23ca5a38158bd1897eaefd91635b83e0922fe68077e2720342bbbb06a82e8c2e3a660e636ecd480dc19c90177b7e1837f14c689a53b200ebc8f850b613ef4e75f4cdfb2bbd5b4148b1bc6f8429204c2d1c6cfb6196552ff42a4bd6cf6dafea441c73d84bdf2"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x7, {0x7, 0x0, "c827831962"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000005c0)={0x24, &(0x7f0000000340)={0x20, 0x31, 0xc6, {0xc6, 0x2, "74d7eb7de3f517d87b600a380812691dddab325083f2aebe010cd271f0f35aaa416a3bbf244f6ea733312256c8b6d527ce57b784d5b70a8df07ac8999175900238b1fee910256b25c20aba55cbf753ad5cc23a81eca3b53000ab2aad47d889dec5502278a1b5d40f49125ce9fbe17a721ffc918a90fc22636b076f7baa8346e270b645b8f3bb9994ed8a15429a9d6e15e338d091c8a80b795ba400a0056d52d7385d7a63c8ecbc4c647ae96d558a721741d036e5922412c541ae74b45ff2217be1f6f5f6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x7e, @string={0x7e, 0x3, "164f98a6ec9e417e414f654b3cd672a5d92c7e0ef2cac0b9a802f1cc6fc315aa345313f689266aed622432f1637f403c4804e260acb6e00227565ec1fb5e4d5fe64a6a01471a8f95e01df5876edbc9b679775345f877ce19577de0f0aad24b1b838219a3c575f10d067bcd485adf422b40548070155d52d2b8a756ba"}}, &(0x7f00000001c0)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0x12, "56c16b65"}, @main=@item_012={0x1, 0x0, 0xa, "85"}, @local=@item_012={0x1, 0x2, 0x1, "fa"}, @local=@item_4={0x3, 0x2, 0x5, "7d3e0d8d"}, @main=@item_012={0x2, 0x0, 0xc, "321b"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xf3, 0x1, {0x22, 0xddb}}}}, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x20, 0x6, 0x53, "d6c1f3f519ad6f1d87af277a796e8785e893ed9e420459c9336eca4c7936764846ac9142138662d93b47f7e9ea0e28bad2eb6432201461540e15e65b8ef0a598a186c079cb8edc69bef495bb71ebec592cb92a"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x5f}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x1, 0x4f, "e72b116d63bc75fcccd0c2052ac0c1d9ff08d3fb580fc3e58685099b219b7536f9a0bad1ddbb90e537f57fd83b33b16badd05dc4ef45a031acf765dc39143504b7d260be9fb220b50e3eb014705143"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x5}}) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x20, &(0x7f0000000080)) 6.646986645s ago: executing program 3 (id=358): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_l2cap(r6, 0x0, 0x0) 5.608542445s ago: executing program 3 (id=361): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa6, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x0, 0x4995, 0x40}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xb161d8a589a0bb2a}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x4531}}]}}}]}, 0x90}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x20000000, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0xf3406}], 0x1}}], 0xc, 0x206b99) 5.607714874s ago: executing program 4 (id=362): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0xa04254, &(0x7f0000000080)=ANY=[], 0x8, 0x2fd, &(0x7f0000000500)="$eJzs3M9rE1sUwPGTNE2TlCZZPN7jPXj0ohvdDG10LQZpQQxY2kZsBWHaTjRkTEomVCJideVW/CNclC67K6j/QDfudOPGXTeCC4uII5kfbdKmqU5N0x/fD5S5mXPO9F4mLWdCZjZvv3hQKlhaQa9JOKYkJCKyJZKWsPhC3jbsjKPS7KlcHPzy/v+pmdkb2VxubFKp8ez0pYxSKjn8+uHjuJe2PiAb6bubnzOfNv7e+Hfzx/T9oqWKlipXakpXc5WPNX3ONNRC0SppSk2Yhm4Zqli2jKobr7jxgllZXKwrvbwwlFisGpal9HJdlYy6qlVUrVpX+j29WFaapqmhhOAg+ZXJST0bsHj+D08GQX2zbbtDuFrN6n0iEt8Tya90dV4AAOBY2t3/hxstfaD+X5JO/99I3un/V8+9rQ3eWkt6/f96tF3/f/mDe6yW/j8mIl3v//d2RCfe8u8kH6r/x/EwHN2zK9TyqtH/J7y/X8ezO6sjzoD+HwAAAAAAAAAAAAAAAAAAAACAk2DLtlO2baf8rf+zcwuB9xqn0n7nf0BEYo2zb3P+T7OpmVmJOTfuRZIi5vOl/FLe3XpxP3FEUvLdeT94GmP/ziPVkJY35rJXv7yU73Mi2YIUxRRDRiUl6d31tj1+PTc2qlyt9f2SaK7PSEr+al+faVsflQvnm+o1Scm7eamIKQvO+3qn/smoUtdu5nbVx508AAAAAABOA01ta3v9rmn7xd367evrtp8PuNfXI22vzyOp/yK9XTsAAAAAAGeFVX9U0k3TqHYYxOXgnOCDSLDy/k45fU0r/NUDRp3vu4h0b6UdBv4XKVpCMW9nsCP76+/OnMMSpGq4MR912N/uf2y0X45M9OAMOoN/Xr76Gqw85D21tzl0ZS12wEq7Nug/iv89AAAAAI6W3/THLX/P1d5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+goHifW6zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8XPAAAA//+JzwPM") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000e80)=0xe8) getgroups(0x1, &(0x7f0000000ec0)=[0xee01]) r8 = getuid() setresuid(0x0, r8, 0x0) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r9, r10, r11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0}, &(0x7f0000001580)=0xc) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001800)={&(0x7f00000006c0)={0x50, 0xffffffffffffffda, 0x4, {0x7, 0x28, 0x5, 0x6024e, 0xd, 0x0, 0x73, 0x8000}}, &(0x7f0000000140)={0x18, 0x0, 0x80, {0xb213}}, &(0x7f0000000280)={0x18, 0x0, 0x1, {0x3e6}}, &(0x7f00000003c0)={0x18, 0x0, 0x1, {0x4}}, &(0x7f0000000740)={0x18, 0x0, 0x4, {0x3}}, &(0x7f0000000780)={0x28, 0x0, 0xffff, {{0x2, 0x4}}}, &(0x7f00000007c0)={0x60, 0x0, 0x7, {{0x3, 0x3, 0x9, 0x70, 0x10, 0x2, 0x7, 0x8}}}, &(0x7f0000000840)={0x18, 0xfffffffffffffffe, 0x2, {0x4}}, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000feec63f1505293a17546cf4f48ffffff00000000"], &(0x7f00000008c0)={0x20, 0x0, 0x80000001, {0x0, 0x4}}, &(0x7f0000000900)={0x78, 0x3e89584eded01873, 0x6, {0x5, 0xffffffff, 0x0, {0x3, 0x6b9e, 0x4, 0x1, 0x80, 0x5, 0x1, 0x7, 0x2000000, 0x1000, 0x200, 0xee00, 0x0, 0x8000}}}, &(0x7f0000000980)={0x90, 0xffffffffffffffda, 0xffffffffffffffff, {0x1, 0x2, 0x7ff, 0x2, 0x67a5, 0xb2d, {0x1, 0x1, 0x7, 0x0, 0x5, 0xacd, 0x8, 0x7, 0x0, 0x6000, 0x8, 0x0, 0xee00, 0xf223, 0xfffffe00}}}, &(0x7f0000000a40)={0x30, 0xffffffffffffffda, 0x2, [{0x6, 0xa5, 0x8, 0x80000000, 'rootmode'}]}, &(0x7f0000001000)={0x530, 0xffffffffffffffda, 0x8, [{{0x2, 0x0, 0x7a, 0x2, 0x0, 0x2, {0x3, 0x0, 0x7, 0x7fffffff, 0x2, 0x7c, 0x0, 0x3e, 0xbe, 0x6000, 0xfffffffe, 0x0, 0x0, 0x2, 0x9}}, {0x5, 0x2, 0x1, 0x6, '+'}}, {{0x6, 0x1, 0x4, 0xffff, 0x8, 0x0, {0x5, 0xd389, 0x7, 0xa2, 0x7, 0x9, 0x7f, 0x7, 0xf4, 0x4000, 0xefa, 0x0, 0x0, 0x5, 0xd630}}, {0x2, 0x0, 0x5, 0x5, '@[(-:'}}, {{0x0, 0x3, 0xffffffffffff9bbe, 0x5, 0x7, 0x8000, {0x4, 0x8, 0x8, 0x9, 0xfff, 0x82, 0x40, 0x800, 0xfffffff3, 0x1000, 0x5, 0xee01, 0x0, 0xbf5, 0x1}}, {0x2, 0x2, 0x4, 0x2, '^($&'}}, {{0x3, 0x2, 0x6, 0xf8, 0x2ce, 0x6d, {0x0, 0x8, 0x80000001, 0x2, 0x100000001, 0x77b, 0x9, 0x8, 0x9, 0x2000, 0x3, 0x0, 0x0, 0x7fff, 0x3}}, {0x0, 0x6, 0xa, 0x5af, '/dev/fuse\x00'}}, {{0x1, 0x2, 0xf, 0xfffffffffffffffa, 0x18226627, 0x8, {0x2, 0xffffffffffffffff, 0x8, 0x1, 0x9, 0x9, 0x0, 0xd, 0x8, 0x2000, 0x9, 0x0, 0x0, 0x8, 0xea}}, {0x3, 0x1, 0x6, 0x2, 'kfree\x00'}}, {{0x1, 0x0, 0x7ff, 0x8, 0x5, 0x3, {0x6, 0x1, 0x1, 0x1000, 0x8001, 0x4, 0x6, 0xce, 0x80000001, 0x8000, 0x401, r6, r7, 0xf73, 0xfff}}, {0x4, 0x0, 0x2, 0xd66831c4, '*$'}}, {{0x1, 0x2, 0x6, 0x4, 0x5, 0x1, {0x5, 0xfff, 0x8, 0x101, 0x3, 0xffff, 0x0, 0x3, 0x10001, 0x4000, 0x1a3b, r8, 0x0, 0x4}}, {0x4, 0x67c8, 0x19, 0x4, 'trusted.overlay.redirect\x00'}}, {{0x3, 0x2, 0x10001, 0x9, 0x5, 0x0, {0x3, 0x5, 0x1000, 0x3, 0x2, 0x0, 0x6, 0x81, 0x7, 0xa000, 0x4, r10, r12, 0x2, 0x1}}, {0x0, 0xa, 0x1, 0x72, '\x00'}}]}, &(0x7f0000001700)={0xa0, 0x0, 0x6, {{0x0, 0x0, 0x4, 0x4, 0x0, 0x40, {0x7, 0x6, 0x5, 0x7e, 0x8000000000000001, 0x3, 0x8001, 0x9, 0x400, 0x4000, 0x0, r13, r14, 0x7, 0x10}}, {0x0, 0x8}}}, &(0x7f00000017c0)={0x20, 0x0, 0x8, {0x581a, 0x6, 0xc7, 0xffffffff}}}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x0, 0x29, 0x3f, {0x3f, 0x24, "6756a51e732771202374594386fb6bf302a341f4097dee5e4f5adafc9ddbf3fba0ccf2a8e5296d0f1e77d094d72ce3ab711d3090ac23c1a0b61da62e43"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="200882000000c899feaac28af070c7c61cb9da16b4e08963f4d7500ac175560a664e487a1f53ad610ee01d5a66750c13637c157cb44fb7be314a6c3ca14eee3c23af18f930f5b40636289f7390118fa3aef9c2a4867d78c7f0a3998139f35bdefec221f6b8e2d503f6fe8a33b6cf85acf1677b2734a437429032065fe2a4ffab1d215d77ade152e207a5b4d33c3d9300"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x71}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r15}, 0x10) 4.726152716s ago: executing program 1 (id=366): lstat(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f00000000c0)=[{r6}], 0x1, 0x138) close(r6) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006600)=ANY=[], 0x1448}], 0x1, 0x0, 0x0, 0x41}, 0x0) eventfd(0x0) r10 = gettid() r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x4, 0x200, 0x2c001, r0, 0x1, '\x00', 0x0, r5, 0x2, 0x0, 0x4, 0x8, @value, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000014000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000019007b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001980)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000001a40)=[{}], 0x8, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5}}, @var, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0x200f, 0x1}, {0x6, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x2}}]}, {0x0, [0x5f]}}, &(0x7f0000001d40)=""/205, 0x8b, 0xcd, 0x0, 0xfffff800, 0x0, @void, @value}, 0x28) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r12, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) 4.559002105s ago: executing program 2 (id=368): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x3}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 4.52034055s ago: executing program 2 (id=369): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0xc0, r9, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f48}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x2, 0x7f, 0x3, 0x1, 0x4, 0x81, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x4}]}]}, 0xc0}}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x10000000000002bb}, 0x4c2103a0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100e00000010800023fea6d85000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c0002800500010000000000080007400000000020000d8008000100ffffffff0c000380060001004e20000008000200e0000001"], 0x84}}, 0x0) 4.388915395s ago: executing program 1 (id=370): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_l2cap(r6, 0x0, 0x0) 3.466099041s ago: executing program 2 (id=371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private=0xa010102}, {{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x240) 3.257774105s ago: executing program 1 (id=372): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x804c42, &(0x7f0000001a80)={[{@errors_continue}, {}, {@dmask={'dmask', 0x3d, 0x9}}, {@errors_continue}, {@utf8}, {@utf8}, {@fmask={'fmask', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x3}}]}, 0xff, 0x154b, &(0x7f0000005640)="$eJzs3AuYjVXbOPD7Xms9Y0jsJjkMa637YSeHRZLkkEoOSZIkSU4JSZJXEhJDTklDCMk5OQwhOUxMGufz+ZDQJGmSJCSnZP2vKfOqt/q/fV99r+t65/5d176s+1nPvZ619723vfba156vuwyt0ahm1QZEBH8J/vxPAgDEAsBAAMgNAAEAlIsrF5fRn11iwl+7CPt7PZR0pWfAriSuf9bG9c/auP5ZG9c/a+P6Z21c/6yN65+1cf0Zy8q2zixwDd+y7o33/7Myfv//L5Jeatzn60td1xUg5s+mcP2zNq7/f63gz5zE9c/auP5ZVeyVngD7O83936Xx6z8ryPaHPVz/rI3rz1hW9tM+cHa44vvQV+oGkaz9HciVfv4xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMsazvrLFABktq/0vBhjjDHGGGOMMfb38dmu9AwYY4wxxhhjjDH2fw9BgAQFAcRANoiF7JADBABcDbkgN0TgGoiDayEPXAd5IR/khwIQDwWhEGgwYIEghMJQBKJwPRSFG6AYFIcSUBIclILScCOUgZugLNwM5eAWKA+3QgWoCJWg8j+vfidUhbugGlSHGlAT7oZacA8i3At14D6oC/dDPXgA6sOD0AAegobwMDSCR6AxPApNoCk0g+bQ4rf5UPtyfszv578APeBF6Am9IAF6Qx94CfpCP+gPA2AgvAyD4BUYDK9CIgyBofAaDIPhMAJeh5EwCkbDGzAG3oSxMA7GwwSYCJNgMrwFU+BtmArTYDrMgCSYCbPgHZgNc2AuvAvz4D2YDwtgISyCZHgfFsMSSIEPYCl8CKmwDJbDClgJq2A1rIG1sA7Ww4Yf+sIm2AxbYCtsg+2wA3bCLtgNH8Ee+Bj2wr7hCwAgDT79g3xx6dH91/wzmfmwHz6BNOiKgIACBSpUGIMxGIuxmANzBIA5MRfmwghGMA7jMA/mwbyYF/NjfozHeCyEhdCgQULCwlgYoxjFolgUi2ExLIEl0KHD0lgay+BNWBbLYjksh+WxPFbAilgRK2NlrIJV8A68A6tiVayG1bAG1sC78W7sjbWxNtbBOlgX62ZuT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXbALdsVu2C39hWyAL+KL2Aurid7YB/tgX0zM1h8H4AB8GQfhK/gKvoqJOASH4mv4Gg7HEdkBR+IoHI2jsYp4E8fiOCQxASfiRJyMk3EKTsGpOA2n4QxMwpk4C2fhbJyDc/BdnIfvZQNcgAtwESZjMi7GJZiCKbgUz2AqLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAtuw224A3fgLtyFH6ECwI9xH+7DREzDNDyAB/AgHsRDeAjTMR0P42E8gkfwKB7FY3gMj+MJPIkn8BSewtN4Bs/iWTyP5/ECPhf/ZcOPiq9LBJFBCSViRIyIFbEih8ghcoqcIpfIJSIiIuJEnMgj8oi8Iq/IL/KLeBEvColCwggjSIQxACCiIiqKiqKimCgmSogSwgknSovSoowoI8qKsqKcuEWUF7eKCqKiaO0qi8qiimjj7hB3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjMoEYgo3FUGwimgp56VneUozAVqK1aCOeEKNwJLYTLV178bToIMZiR/EPMQ6fFZ3FBOwinhddRTfRXbwgeohWrqfoJaZib9FHzMC+op/oLwaI2VhdvIvzstcQr4pEMUQMFa+JRThcjBCvi5FilBgt3hBjxJtirBgnxosJYqKYJCaLt8QU8baYKqaJ6WKGSBIzxSzxjpgt5oi54l0xT7wn5osFYqFYJJLF+2KxWCJSxAdiqfhQpIplYrlYIVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CF2il1it/hI7BEfi71in9gvPhFp4lNxQHwmDorPxSHxhUgXX4rD4itxRHwtjopvxDHxrTguToiT4jtxSnwvTosz4qw4J86LH8QF8aO4KLwAiVJIKZUMZIzMJmNldplDXiVzyuDSo3uNjJPXyjzyOplX5pP5ZQEZLwvKQlJLI60kGcrCsoiMyutlUXmDLCaLyxKypHSylCwtb5Rl5E2yrLxZlpO3yPLyVllBVpSVZGV5m6wib5cQ+fka1WR1WUPWlHfLBLhH1pb3yjryPllX3i/ryQdkffmgbCAfkg3lw7KRfEQ2lo/KJrKpbCabyxbyMdlSPi5bydayjXxCtpVPynbyKdlePi07SH/pKRILIJ+TXeTzsqvsJrvLH+VF6WVP2UtCb5B95Euyr+wn+8sBcqB8WQ6Sr8jB8lWZKIfIofI1OUwOlyPk63KkHCVHyzfkGPmmHCvHyfFygpwoJ8nJ8i05Rb4tp8ppcrqcIZPkTNn/0khzpfy3+W/9Tv7gn66+RW6V2+R2uUPulLvkbhkLAHvkXrlX7pf7ZZpMkwfkAXlQHpSH5CGZLtPlYXlYHpFH5FF5VB6Tx+RxeUKek9/JU/J7eVqekWfkOXlenpcXLj0GoFAJJZVSgYpR2VSsyq5yqKtUTnW1yqVyq4i6RsWpa1UedZ3Kq/Kp/KqAilcFVSGllVFWkQpVYVVERdX1eOkJo0qoksqpUqq0uvF/kq+KqhtUMVX8V/mZ80v4g/m1UC1US9VStVKtVBvVRrVVbVU71U61V+1VB9VBdVQdVSfVSXVWnVUX1UV1VV1Vd9Vd9VA9VE/VUyWoBNVHvaT6qn6qvxqgBqqX1SA1SA1Wg1WiSlRD1VA1TA1TI9QINVKNVKPVaDVGjVFj1Vg1Xo1XE9VENVlNVlPUFDVVTVXT1XSVpJLULDVLzVaz1Vw1V81T89R8NV8tVAtVskpWi9VilaJS1FK1VKWqZeUzH7dVao1ao9apdWqD2qA2qU0qVW1VW9V2tV3tVDvVbrVb7VF71F61V+1X+1WaSlMH1AF1UB1Uh9Qhla7S1WF1WB1RR9RRdVQdU8fUcXVcnVQn1Sl1Sp1Wp9VZdVadV+fVBXVBXVQXM5Z9gQhEoAIVxAQxQWwQG+QIcgQ5g5xBriBXEAkiQVwQF+QJrgvyBvmC/EGBID4oGBQKdGACG2SuNKLB9UHR4IagWFA8KBGUDFxQKigdc6kzuDkoF9wSlA9uDSoEFYNKQeXgtqBKcHtwR3BnUDW4K6gWVA9qBDWDu4NawT1B7eDeoE5wX1A3uD+oFzwQ1A8eDBoEDwUNg4eDtgDQOHg0aBI0DZoFzYMWwU1B2b9tfO9P53vc9dS9dILurfvol3Rf3U/31wP0QP2yHqRf0YP1qzpRD9FD9Wt6mB6uR+jX9Ug9So/Wb+gx+k09Vo/T4/UEPVFP0pP1W3qKfltP1dP0dD1DJ+mZepZ+R8/Wc/Rc/a6ep9/T8/UCvVAv0sn6fb1YL9Ep+gOdseZJ1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Uu/Ru/ZHeoz/We/U+vV9/otP0p/qA/kwf1J/rQ/oLna6/1If1V/qI/lof1d/oY/pbfVyf0Cf1d/qU/l6f1mf0WX1On9c/6Av6R31R+4zFfcbbu1FGmRgTY2JNrMlhcpicJqfJZXKZiImYOBNn8pg8Jq/Ja/Kb/CbexJtCppDJQIZMYVPYRE3UFDVFTTFTzJQwJYwzzpQ2pU0ZU8aUNWVNOVPOlDflTQVTwVQylcxt5jZzu7nd3GnuNHeZu0x1U93UNDVNLVPL1Da1TR1Tx9Q1dU09U8/UN/VNA9PANDQNTSPTyDQ2jU0T08Q0M81MC9PCtDQtTSvTyrQxbUxb09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDfdTQ/Tw/Q0PU2CSTB9TB/T1/Q1/U1/M9AMNIPMIDPYDDaJJtEMNUPNMDPMjDAjzEgzyozOKJp504w148x4M8FMNBPNZDPZTDFTzFQz1Uw3002SSTKzzCwz28w2c81cM8/MM/PNfLPQLDTJJtksNotNikkxS81Sk2pSzXKz3Kw0K81qs9qsNWvNerPebISNZrPZbLaarWa72W52mp1mt9lt9pg9Zq/Za/ab/SbNpJkD5oA5aA6aQ+aQSTfp5rA5bI6YI+aoOWqOmWPmuDluTpqT5pQ5ZU6b0+asOWvOm3yX3i+9ibXZbQ57lc1pr7a5bG77r3F+W8DG24K2kNU2r833q9hYa4vZ4raELWmdLWVL2xt/E1ewFW0lW9neZqvY2+0dv4lr2XtsbXuvrWPvszXt3b+K69r7bT37iK2PCGCb2oa2uW1kH7GN7aO2iW1qm9nmtq190razT9n29mnbwT7zm3ixXWLX2nV2vd1g99p99qw9Z4/Yr+15+4PtaXvZgfZlO8i+YgfbV22iHfKbeLR9w46xb9qxdpwdbyf8Jp5uZ9gkO9POsu/Y2XbOb+Jk+76dZ1PsfLvALrSLfooz5pRiP7BL7Yc21Qaw3K6wK+0qu9qu+edcV9hNdrPdYvfYj+12u8PutLvs7syFsN1n99tPbJr91B62X9mD9nN7yB616fbLn+KM+3fUfmOP2W/tcXvCnrTf2VP2e5WZnXHfv7M/2ovWWyAkIEmKAoqhbBRL2SkHXUU56WrKRbkpQtdQHF1Leeg6ykv5KD8VoHgqSIVIkyFLRCEVpiIUpespc3olqCQ5KkWl6UYqQzdRWbqZytEtVJ5upQpUkSpRZbqNqtDtdAfdSVXpLqpG1akG1aS7qRbdQ7XpXqpD91Fdup/q0QNUnx6kBvQQNaSHKXfG+wI9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepI/6BO9Cx1pueoCz1PXakbdacXqAe9SOcu/QaiD71EfUlBfxpAA+llGkSv0GB6lRJpCA2l12gYDacR9DqNpFE0mt6gMfQmjaVxNJ4m0ESaRJPpLZpCb9NUmkbTaQYl0UyaRe/QbJpDc+ldmkfv0XxaQAtpESXT+7SYllAKfUBL6UNKpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO2kW76SPaQx/TXtpH++kTSqNP6QB9RgfpczpEX1A6fUmH6Ss6Ql/TUfrG96Jv6TidoJP0HZ2i7+k0naGzdI7O0w90gX6ki+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGuMHcYCa8J48JrwzzhdWHeMF+YPywQxocFw0KhDk1oQwrDsHBYJIyG14dFwxvCYmHxsERYMnRhqbB0eGNYJrwpLBveHJYLbwnLh7eGFcKK4SP3VQ5vC6uEt4d3hHeGVcO7wmph9bBGWDO8O6wV3hMG4b1hnfC+sGx4f1gvfCCsHz4YNggfChuGD4eNwkfCxuGjYZOwadgsbB62CB8LW4aPh63C1mGb8Imwbfhk2C58KmwfPh12CJ/5qf/+JX/cnxD2DvuEL4Uvhd7fKxdGF0WTo+9HF0eXRFOiH0SXRj+MpkaXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHt0S9r5kNHDrhpFMucDEum4t12V0Od5XL6a52uVxuF3HXuDh3rcvjrnN5XT6X3xVw8a6gK+S0M846cqEr7Iq4qLveFXU3uGKuuCvhSjrnSrnSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/cN1cs+6zu4595x73nV13Vx394Lr4Sbl+vk1meD6uD6ur+vr+rv+bqAb6Aa5QW6wG+wSXaIb6oa6YW6YG+FGuJFupBvtRrsxbowb68a68W68m+gmusluspvipripbqqb7qa7JJfkZrlZbrab7arM+fkq8918t9AtdMku2S12GWvGFLfULXWpLtUtd8vdSrfSrXar3Vq31q13691Gt9FtdpvdVrfVbXfb3U630+12u90et8ft9bl/HtSluQPugDvoDrpD7guX7r50h91X7oj72h1137hj7lt33J1wJ9137pT73p12Z9xZd86ddz+4C+5Hd9F5NzEyKTI58lZkSuTtyNTItMj0yIxIUmRmZFbkncjsyJzI3Mi7kXmR9yLzIwsiCyOLIsmR9yOLI0siKZEPIksjH0ZSI8siyyMrIisjqyLeF9we+sK+iI/6631Rf4Mv5ov7Er6kd76UL+1v9GX8Tb6sv9mX87f48v5WX8FX9JX8o76Jb+qb+ea+hX/Mt/SP+1a+tW/jn/Bt/ZO+nX/Kt/dP+w7+Gd/R/8N38s/6zv4538U/77v6br67f8H38C/6nr6XT/C9fR//ku/r+/n+foAf6F/2g/wrfrB/1Sf6IX6of80P88P9CP+6H+lH+dExb/gxmR+RYYKf6Cf5yf4tP8W/7af6aX66n+GT/Ew/y7/jZ/s5fq5/18/z7/n5foFf6Bf5ZP++X+yX+BT/gV/qP/Spflnmtq5f7df4tX6dX+83+I1+k9/st/itfpvf7nf4nX6X3+0/8nv8x36v3+f3+098mv/UH/Cf+RuGf+4P+S98uv/SH/Zf+SP+a3/Uf+OP+W/9cX/Cn/Tf+VP+e3/an/Fn/Tl/3v/gL/gf/cU/+s1a8Kc2wRljjDHGsoxJl5vi1z0/b+f3/p0c8YuT+wDA1TsKpP+yP2NFuTHvz+1+Ir5tBACe7tXlocxbtWoJCQmXzk2VEBRZAJD5TVCGn7aNL8XLoA08Ce2hNZT53fn3E93O078ZP3oLQI5f5MTC5fjy+J8BYMLvjP/YE6MXlw/Pxv1/xl8AUKzI5ZzscDleBm1+2l9pDWX/YP75Wv6b+Wf/fCJAq1/k5ITL8eX5l4bH4Rlo/6szGWOMMcYYY4yxn/UTlTplfv7M/Krk9z6fx6vLOdngn3G1zGN/9PmcMcYYY4wxxhhjV96z3bo/9VjmL/cea9++daefjvyZxh3/k5P/VOPqXx5pDH/jyNz49w3vATKPKAD4iwMCZDTkf/JebPuPXCvx0qvlX7tWnvMBdC966UePf99FY/96Lf43jSv1PxJjjDHGGGPs/8rlRf+vj6srNSHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+k/8ObErfR8ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BQAA///uu+zd") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 3.257289855s ago: executing program 0 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="0002001c06ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000002c0), &(0x7f0000000400)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0x5cc, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x76d, &(0x7f0000001180)="$eJzs3d9rW1UcAPDvTZt164atIOh8KghaGEvtrJuCDxMfRHAw0GdnSLMymzajScdaCioi+CKo+CDoy579Md98E388+1/4IBtTu+HEB6nc9KbN1qS/aBtmPh+47Tn3nuTcb869557kHpIAetZI+icXcTwiPkoihrL1SUTkG6n+iLOr5e4uL5XSJYmVldf+SBpl7iwvlaLlMamjWeaxiPjp/YgTuY311hYWp4uVSnkuy4/VZy6P1RYWT16aKU6Vp8qzp8cnJk6defbM6b2L9a9fFo/d/Pjlp77p++e9R69/+HMSZ+NYtq01jr0yEiPZa5JPX8J7vLTXlXVZ0u0dYFfSU7Nv9SyP4zEUfY0UAPB/9nZErAAAPSZx/QeAHtP8HODO8lKpuXT3E4mDdevFiDi8Gn/z/ubqlv7snt3hxn3QwTvJPXdGkogY3oP6RyLii+/e+CpdYp/uQwK08873WWJD/59smLOwU09vo8zIfXn9HxycH9Lxz3Ptxn+5tfFPtBn/DLQ5d3dj6/M/d2MPqukoHf+90DK37W5L/Jnhvpb5TcORTy5eqpTTvu2hiBiN/ECaH9+kjtHb/97utK11/PfnJ299mdaf/l8vkbvRP3DvYyaL9eJu473frXcjHu9vF3+y1v5Jh/Hv+W3W8crzH3zeaVsafxpvc9kY//5auRbxZNv2X5/Rlmw6P3GscTiMNQ+KNr799bPBTvW3tn+6pPU33wschLT9BzePfzhpna9Z22EFafdxbejHTps7xZ9fK9H++D+UvN5IH8rWXS3W63PjEYeSVzeuP7X+Tm01v14+jX/0iUb8R7IiG/q/dsd/un9vbhV7thP9N3//eqfxb/XUeyWNf3JH7b95otlUrZuu353u61T/1vGn7T/RSI1ma7bT/229p7s6mgEAAAAAAAAAAAAAAAAAAAAAAABgV3IRcSySXGEtncsVCqu/4f1IDOYq1Vr9xMXq/OxkNH4rezjyueZXXQ61fB/qePZ9+M38qfvyz0TEwxHx6cCRRr5QqlYmux08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGSOdvj9/9RvA93eOwBg3xzu9g4AAAfO9R8Aes9Or//GCwDw4HM9B4De4/oPAL3H9R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9dv7cuXRZ+Xt5qZTmJ68szE9Xr5ycLNemCzPzpUKpOne5MFWtTlXKhVJ1Zqvnq1Srlydidv7qWL1cq4/VFhYvzFTnZ+sXLs0Up8oXyvkDiQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdqa2sDhdrFTKcxISEhJriW73TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhv8CAAD///5AHws=") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCGETA(r5, 0x5405, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x2000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 3.255199656s ago: executing program 2 (id=374): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000c80)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@nouser_xattr}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000008540)={0x0, 0xb, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x8004587d, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), &(0x7f0000000280)=@udp6, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r11 = socket(0x22, 0x3, 0x7) recvmmsg(r11, &(0x7f00000082c0)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000340)=""/255, 0xff}], 0x2, &(0x7f0000000480)=""/9, 0x9}, 0x9}, {{&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/233, 0xe9}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000840)=""/199, 0xc7}, {&(0x7f0000000640)=""/53, 0x35}], 0x4, &(0x7f0000001c40)=""/4096, 0x1000}, 0xab2}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000000940)=""/239, 0xef}, {&(0x7f0000000780)=""/82, 0x52}], 0x3, &(0x7f0000000a80)=""/239, 0xef}, 0x5}, {{&(0x7f0000000b80)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000007000)=[{&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/28, 0x1c}, {&(0x7f0000004c80)=""/154, 0x9a}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000005d40)=""/132, 0x84}, {&(0x7f0000005e00)=""/221, 0xdd}, {&(0x7f0000005f00)=""/4096, 0x1000}, {&(0x7f0000008480)=""/77, 0x4d}, {&(0x7f0000006f40)=""/131, 0x83}], 0x9, &(0x7f00000070c0)=""/182, 0xb6}, 0xffffffff}, {{&(0x7f0000007180)=@sco={0x1f, @none}, 0x80, &(0x7f0000008240)=[{&(0x7f0000008440)=""/32, 0x20}, {&(0x7f0000007240)=""/4096, 0x1000}], 0x2, &(0x7f0000008280)=""/35, 0x23}, 0x6}], 0x5, 0x40000101, &(0x7f0000008400)) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 3.026377862s ago: executing program 0 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(0x0, 0x4800) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000800)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000001c0)={[], 0x1f}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) 2.060437803s ago: executing program 3 (id=376): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000060000000000c3cab519"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffead, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0065cf000000208f0f00000900000001000000c73edcc24f67c915100be88f4bb3e4184018370b8c1bef13768a54b1dd98c20d1562cc8babf6ca80ed6381211b37e274298dde9138c35e420a5645524a3a2439533ac25d63199ef0d405518343987574773f79a4a7975d7e31ed9116ad416011d4c508f1bb797a85", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000040), &(0x7f0000000300)='%pK \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000100)={'vlan0\x00'}) socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'wg2\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa81"], 0x0) 1.99621949s ago: executing program 1 (id=377): lstat(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f00000000c0)=[{r6}], 0x1, 0x138) close(r6) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006600)=ANY=[], 0x1448}], 0x1, 0x0, 0x0, 0x41}, 0x0) eventfd(0x0) r10 = gettid() r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x4, 0x200, 0x2c001, r0, 0x1, '\x00', 0x0, r5, 0x2, 0x0, 0x4, 0x8, @value, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000014000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000019007b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001980)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000001a40)=[{}], 0x8, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5}}, @var, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0x200f, 0x1}, {0x6, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x2}}]}, {0x0, [0x5f]}}, &(0x7f0000001d40)=""/205, 0x8b, 0xcd, 0x0, 0xfffff800, 0x0, @void, @value}, 0x28) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r12, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) 1.876885504s ago: executing program 3 (id=378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r3, &(0x7f00000007c0)=ANY=[], 0x1b0) write$FUSE_INIT(r3, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x27, 0xc, 0x282005, 0x1, 0x2, 0x2, 0x200009}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f0000000380), 0x20000000}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000063eee71f00f8ffffffb703000008000000c9040000000000008667e35ea76d7fb0369cb86c73d30b85000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) utimes(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.839135868s ago: executing program 0 (id=379): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856b340da0b53813de20102030109021200010000000009040000000206"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000004000000228b155e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.783087155s ago: executing program 4 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r5], 0x3c}}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0xff97, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 1.73428775s ago: executing program 2 (id=381): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0xc0, r9, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f48}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x2, 0x7f, 0x3, 0x1, 0x4, 0x81, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x4}]}]}, 0xc0}}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x10000000000002bb}, 0x4c2103a0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100e00000010800023fea6d85000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c0002800500010000000000080007400000000020000d8008000100ffffffff0c000380060001004e20000008000200e0000001"], 0x84}}, 0x0) 1.733693571s ago: executing program 4 (id=382): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xdff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) unshare(0x2a020400) memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.733189481s ago: executing program 3 (id=383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b4c93a9be8e23ca5a38158bd1897eaefd91635b83e0922fe68077e2720342bbbb06a82e8c2e3a660e636ecd480dc19c90177b7e1837f14c689a53b200ebc8f850b613ef4e75f4cdfb2bbd5b4148b1bc6f8429204c2d1c6cfb6196552ff42a4bd6cf6dafea441c73d84bdf2"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x7, {0x7, 0x0, "c827831962"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000005c0)={0x24, &(0x7f0000000340)={0x20, 0x31, 0xc6, {0xc6, 0x2, "74d7eb7de3f517d87b600a380812691dddab325083f2aebe010cd271f0f35aaa416a3bbf244f6ea733312256c8b6d527ce57b784d5b70a8df07ac8999175900238b1fee910256b25c20aba55cbf753ad5cc23a81eca3b53000ab2aad47d889dec5502278a1b5d40f49125ce9fbe17a721ffc918a90fc22636b076f7baa8346e270b645b8f3bb9994ed8a15429a9d6e15e338d091c8a80b795ba400a0056d52d7385d7a63c8ecbc4c647ae96d558a721741d036e5922412c541ae74b45ff2217be1f6f5f6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x7e, @string={0x7e, 0x3, "164f98a6ec9e417e414f654b3cd672a5d92c7e0ef2cac0b9a802f1cc6fc315aa345313f689266aed622432f1637f403c4804e260acb6e00227565ec1fb5e4d5fe64a6a01471a8f95e01df5876edbc9b679775345f877ce19577de0f0aad24b1b838219a3c575f10d067bcd485adf422b40548070155d52d2b8a756ba"}}, &(0x7f00000001c0)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0x12, "56c16b65"}, @main=@item_012={0x1, 0x0, 0xa, "85"}, @local=@item_012={0x1, 0x2, 0x1, "fa"}, @local=@item_4={0x3, 0x2, 0x5, "7d3e0d8d"}, @main=@item_012={0x2, 0x0, 0xc, "321b"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xf3, 0x1, {0x22, 0xddb}}}}, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x20, 0x6, 0x53, "d6c1f3f519ad6f1d87af277a796e8785e893ed9e420459c9336eca4c7936764846ac9142138662d93b47f7e9ea0e28bad2eb6432201461540e15e65b8ef0a598a186c079cb8edc69bef495bb71ebec592cb92a"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x5f}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x1, 0x4f, "e72b116d63bc75fcccd0c2052ac0c1d9ff08d3fb580fc3e58685099b219b7536f9a0bad1ddbb90e537f57fd83b33b16badd05dc4ef45a031acf765dc39143504b7d260be9fb220b50e3eb014705143"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x5}}) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x20, &(0x7f0000000080)) 1.490743568s ago: executing program 1 (id=384): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_l2cap(r6, 0x0, 0x0) 667.798923ms ago: executing program 2 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0xffffff8c, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 392.738065ms ago: executing program 1 (id=386): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0xa04254, &(0x7f0000000080)=ANY=[], 0x8, 0x2fd, &(0x7f0000000500)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000e80)=0xe8) getgroups(0x1, &(0x7f0000000ec0)=[0xee01]) r8 = getuid() setresuid(0x0, r8, 0x0) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r9, r10, r11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0}, 0x0) statx(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x2000, 0x1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="3c1c5b3d2b7e5034421d4257275b572f39635aacf2b6fa9fa9d1a8a3db42cfb7fbefda2bad655392a623694e45a2220c65f04b5aea65a02709ed2cb863aeb529e7c9c9ce476040bc7273f36f199d85fd56b8e0837892e7140f72245c35ad5cf4187db3cfa18ca2b56fff79bc4267b819332c2fbf662d58488669871125356bc33df5208b7b9d948b828a986064824ee4ff986d5975ecc9d4f4145ee2e7be34e1c02f728c7220c89abddffd00cd0972c7eb918a418ac03e0accb41007cbfe9dc1d296b723ed4961aaa55b0aeb3357d79e2b670bd57de7611e1a03d09a2b8237aa1248e1bfa8e8644c3fb09e8b249916d706539405b1faae1a3d0296eac8c9e001494ff81cf0e3f8021ac8d7677104acf9143f76a2aee17108c9b09285a273b8806c6552a048ea960493926ab6dad891af3b80c15beb910ab6a33b1fb8f1e1c8247b5a0be3ece5f3a7eccc650c77a7c8f849aff1d5d11e152a535b33de891f135f224117fabe277e973c396d1ae4ee54ce46848e83966853fab465b19953f9fb74542f08123088ed2359abdad175b9043e1f1cc04a27592cd786d1a4163a4ff74745833a73371893be19e5c61ce3eabb2175ceb93eb099ba8e6c993ad85835beb28abaaebeb5494f7900f22ba9a29f9f048dd81a64a839a283af28e825f1a8fdfb4075012bb181b814464644baaa7591aeed91e5ae631fd2e1f4b484b229592ab963548c11e5611cc34c15a9e1e64f174cb79578b697f4f7eae929bc101d26d9032850d22bda28828c1cad89975a487cd909a503d6f7104515e96ad6a8ef2cf6a5f98a69b1c32d5e51ffaa7562f22ee05d2bad83ee407b8489ea2feb86e9b46b0515a5ed1c532252584795b25b3ae04f4cc27ded0ab0b9c72768e4dc485cb3a550be20b03be8eafafa1e1eb4f73c760661649f89f277d0aff61185633d802ae2eb08e9eb08ab68159e4b7a41bdb4c04c4e002606b3061f2da2303e42fbca3fded39e299d5bcb524f298ee6567c3f114ef1dfba7914ec0d91d6e2880450df0e63ddf9ad6496023cc4240d48884ca73f8dfd94adce77187a56ad28a4282c79df5652de601e58ce2cba8fc1f2b551bc9b21164bee9516d1236ce8785d1c75e08411e9e26eb965fff99f9d45f315f068f4c5056b34264f123c479c90ed47b51992f28f21ea64abbf5b5d85c588f5fa420503fcf88d8f1aac71479c5396943d2bd22f29ad23ca73d2397d9e52c1975c8b96ae7f448b489cfec42b1b09da1b55cef261bcb2151d36f547bd5abad29bb721ee63e1d0807c9ccdf3a09e353dd6a5d9049b81bb6f8376d86b789bc37691dae548232b9bf9bebd26c19369fa7e58cbddc71f6f8f1720c5db84b66adb9e5826e91f0e24582dac34c31e4d038f4080a9763b85a321e7cdaa9cda31ea81bd597909e34d82fabaf88cef2e144bf6b25ec39c9f87d280ce210690ab397093efc10b163400cb21979ecef288bb2729fbca0e867a4eabd0f9ad4b5f219c6cdba307bf1480899fc2fdd3629ea27c4fc52e18069865f0057a6d5fd7d1cb508de3d4a7f12aab40e0200799c8cb913d5139493a1e546dbf6751849e747cc83594b1fd777b8d421ee6bf25d96268c92366c70fd2b583649ad6d017b722c5815147c89271769d4acc6a61b6eb14473b5ca6c4907b8ae317935c6c393140c92c449f48aaa0c8d4b962c62f3f5ec3f15cf563cbaffc7b8f504e38d1881511df7819daffadd992ac2c13e2ed7d22d17ea2ac1f4eb8e7b4da8f6fcd450868941ebd196c224338bc1f7c9cea43abd9447b4cd14270e4fad9a4ebcf556be5c2a4f505cc60c6376f1383e8ed87f987822825bd4d6aaed5ea8b4bf5079ff4bff3692041b24a0d8077091fd56b2d664a0e9959f1f77ff5dff3e6cd775d824d2793d69f63c68a974d7ac046256384b348e47852277879310c0120d081fd1e403f5f67f48521fe43ee9bf6ba75830a55e69b7098e8b1adf1ce7258009f2c0055798bd95b0766695addff3aa94869050bf666c95f0c1de13410488b0890d9ed55c562aa70a4c0222eba8bbe8fe7148ceafb54ddb111c89836dce8cb9a03e30fe9f9b230fd6ffb4725630b87113ed093c4192414d60a9423b51a02a8850de8c6f70ab418193bfd66f2e96f08a23d713f4dc2a43688bf5c4ea9f8e911c1bbfe5859c621b2b0f3e794b901bfdf22c8176a4e2aa3e865886ec6df1e024cdaa3587d9f194c5dacdc28290806fcd4aa5a1a60cca1f3b6886e45418b8d29ed44a5788d1433f4ab748adc783c4f59fdc91afa573c45b48304b3afbc3cf610165fcdf8e353d54e74238b970b68f3181755d14d1eb6df0d51efb0ac4af90dfc2270082154030332fb9135548d51f88d87d8893eeffe29db2a7bd8572b9772e398a09a4ee3736bcd3795af9901b6dc0273364971faf4ee8d2d3caef5fa6c69d9df2b4e4e65118970d0a6e7a57a95ae58750eb9eaa235c25b1bf920d6c356f7188fecab15a0aa7b3cea9527525db527919ff251784a7ce31ffb5376e2c2f76e745320369add797e026e62cc5ea4f94ac1bdcb23812d97b88a130fa557b343b57d4f307100e8f3643c82617f636d73b9b1ae79ee8645fbc1ebcaff59fb76e1f0bbd6631927606835351274a1da6785c349496ae18fbb38ee786ff745cd4d5d3729fee8996f653dffe9a988d11475f4ac0994ff4d54f16ad5fd743271f545e1537e640c5d7041ddaa492e92a1fab9ca71171cf8dc35889e129d8bed88b44a6c45de5aff360b8c1691ff7a8e4162ef7911332abd031e012c58e3205e0d29cb0db7fdd3f43468b239545682b25dad39e9085f9355ae58a44cacf908b858959748070658143ab93f1cc09cb722608930a05631c1d755b1209711449cf6b309876efeb29930cc3fce0fde8d90a01398117c822c033b34c384d8cd5cb47f2b659581e2155bc1af336a264ae887820aec7c164f3d8e8d0105c4021878128df5a21888766137bc62b47d50afd90406fdc0ed6051f95e13d55974220c6cbed1d0f0845f6ed50a046839e9825aa12863dfd9864f1d174bc60003bd8fe0e74f32f698f394f7f8e33758caf30bb733aa505a9afe4cdd2729be27bd3de2d160d19cd7e38647f45f5cc170694abb93bd1116c901f199c642a874f98e48d1cb15042e3dfe9fe58a2892f7b6e772d77bcc06abf61991bf26cf52a441531f9147a545325fa7a747e52ad09c77035ca87ea78b3e0de5e690d58fdfe15329b869f7eb178f7a8c20a384eed25c2539248b6548da4c90b4c0637071e8e3a1c634bd9d0cc93f960e057a556258528999d40e489e039b25a5fa43d9572315ab52692d8265e2a758ce43732ede2939a2a2b0403e020e3adf53583f1916538835ac316170ab2d7ae8bfb75cd4a41995adb2d2f3257bcf8b3075eace202ca12e8695d1a10c6db0cdba921d3ccc6c47bdc7e8f622cb6348ce95640cad45a672d2bd9dc6b5f68233034cd17cee08b38b43e587257218e4d573763e6949913ec93d502ca2393403b556e3175f28c2c42b42e45fcb48bb749dd642b3f34bee1e28e04ba85247d4efff77a03bfae43d8adcaf158331c9da7538e72d1972195e0222add2ffa16f45099413f257522b6f308e15eddf404968717959f2690632d6aeacd57a27657c6e85a7e7755cc2776044651d4b530088131fbe27eccff70dd9e9b807ab2ee5810751565b30bced0249326c5eceeb6e2ac939884231886e99a5f0b57feac339c184daf8c14366c156f2b34620c803bb0fee004b4112f93c3a88d8df4e58328ba050d9fbfaf0c5f6cce37ced5062f0bc1c8994efbbba37a96c795af949c28cea0e9bdef03e71aeec820e7d62d4863bee758ffa8830c33932cde766c7609c5aaa32ded6b5a663fa9ed71f9c43327739affcda5c6694306a667c3f0e8a2b45a1efac2f0ba7946f3647ea44d25680ab3fb4097a7e405a129e88d80c6648036c5266032aac110fcbb3606778bac393161cbb352c561f5e15e4f1186e18a487a336b10b5f6da0b657924e905b69a563bcecfee14974309d01061be846b2e8a6706be5472d59521ece9316dc38aa852f0a08d76329928f6441174dc3912814c08886546515e0c802cf522cf387784cdbb80f4e9e0a5f26897603c932c7db96e7e6fcc0591bb83fe14f1873919de02b69e72c40d43e5375209fea08d024079199a2cb1e3e816b3c4789fdaad74aa3949ceb73cc2910a918d091c9ee069962069880b89c5e20bc7470ef7b95077201fb74136f4dcfadae61e51b4dc8bf04c0cac9c848dbbc698a2a21274da632e887cb52143cc4ba0f78da3cf87be38d90b6a4141e71f5aa8bad828c2b8e8d908b97a92e8a92c47fe70020874e34fdf1a542f814c0b955ef38e2ad0375740cb3dc995a88e66f7e6d80fc43e26a4bdd3daf8349f10b0e34d3d149ecd1d9fbeb59732362fd2aa234c0bc65407f3741ac75df5a57572eac771c6dbda682bb9342bcf31f3e01a0c8d0bcd78e39bb6cd58402a1344dc7031e8bbc23b1469ce5397b2a762df8e23be784d478dadf2cb146254d7a55e8d698cdad482695afa5dd8cec52039065608410f5e8770aae6dd0f89750c800227f5f24345104096b5b365320e0b9df82ce9b3cc78b5f6cfd876a2bb51edf514f53a79e109da8a8a852ab121aac3cf2112cba856464505946e458d1ba208de2d08edeff4b5f99ffb74bebe5fef20bf38a2b500ce685a514de46c65e5b75f752f7468834c4a3569ca68481ed0c1c8de8756f4e6fb6304c9f77dd6ddcf14cc167c59f2ad51bae782791b219b235210f0603f431c018ae5211a3fe7062d3f7c0bb26cf5090a55f6ccd750c3398a8252fa3ee6e74e9e1a4738d1cbc66acabb1d498a6e13851d430297745914dbb66df6c47970ab302ffd531544f48a20021c2dd5ed4694d202eb22dcbf9aebfc8235df7ff84f2de6f31d7dbb5f9f1bd2a507d7b1751ede7d8750ac8400d7ebffceb1ec815dcdb8eaec33eb02b92e25f0085e8bc50c769ca5c95e3449f4d4d9fddbd52ff0bbb3780e7734ef11ec9473cb4e33eb3ce8bb3f8d8c3e6d08ca1cfe203a905c3217ebb01aa295b09b1cf4914daec9755118b0be3ec6b07421a85cec15c65cd76f2c70bb5d5047251b882c2d249ad10dd58b23db7292c1fba77c19f2a140ed9d48db9d9dcef902a2652648a2efd3fc6d8b41b2166276aa35cd59ecf8cfdf25f8e6ae9b161150f8c5f8d55c44030894d6727b7ae27cad91986209092317360884a2e218d50b6bf552c6d5aafdd2af91663b539a319e7d6d01e1e2529448e5994e53f5cfe0b82e0ea186e4a30ef6c3d02b84e57b39e558c9f948238b58400e6439cb919f1b6b8954c9902fb795344ff8c5216dce0f91a6be6f0f6c7771bda2bfb15b43203504f300ebe24cbff93c52b37a7e7e254042e3099e4a0c3a6d42807e6cf192f0fc3edc03bf07ffa71c779547106e6a0dee035fb2d65750d069c35baa577d7df2747ab78ca7340a2eff9767a451fc6466eaac573ad1bfa0a2ed5ecf5ea03ee856cc21c8e7c79015b1970e5349bbba41b97d8274e292ade9e506f2def4ab962e06b2e4cad10b83a1b642de873eab286b072e625b865290611d6b24c4d1736dd96061eddfa26b9fdfefe6e22bf21ef0fce4b626b65387dbe1f7361124c081c66aa6b63319628e2c11c958b17851a500b0eac8fb1e14db88e7a7ec898926ca5a6bdcb9d7ffa002cb13e9e6230b1badb439b51438be8bec3de944935ba246bd4ea208fe3f9ef9c3b403f6a783d9d085aea1e80237e015ed9b7d28bc7b62223372cd9c0c336050b4fdd9181d124a682fe200616e739f8897bfdfdba6eb2981c86e3c12f8ca374ab59f7576c07211d77f53e41aa83dd8ebc69c18d41cdb7c97a50dbfdc7561d1464cbe44146e2b92aa9b88ea27d4486025e091ad03e1d19eaf8bd3a601d41018358dbfa27b32a5cc5445c456dc3589954ef2a3d08ddc092b6e9dc7a926647ea980a1dabc8e320605d2b6fe81a4e304afdb59d7a9c29127dfc93aea9e9aa3bf3968c8be1484e71a1d924bd37881193ced5f3fd8091a9937e7714843abc70c19e3d40da0d52bbaf52e6f9945d55e49576998020bc446f11c2b8fce9fcd0ec0803e0152c1e8e71742ed087210d8d3977b9ca0dbb606983f9d2d18248b7e92a02046919cc24e7c2f704b9da728ee0781650d59a8d87931681b868433c1712bdcf7c86918c777750fe6e3feb3262c3bb49f78a65a2206f7247321c332c284191f9b4eb4de034c02007f8ef7161322f02f586b6f9058f8b166fe9a0f9c2e79d656b05c1f2dd038c98b7718bf0df5e1841533d2fe8cde800c3e8e5013c1c3b6cb56fd063c72fcd2c02543bd8d6b023e93c2cbb97b30427d99ecf164a601af455dd6abec776b6f9940d0e4719b838ca41c1d18a1dc06a2932b87b61ec92879da3b65e40de8d2e19e4bf910668299b34aca2957a046646ece40508fd691cd62b6373c28f9c527e1ebab292d1e3a80bb74833586d3b5ed34b91ef84c037eceecc79f06a0ee2accfd7f6f59b7fec228e576378dbe35222a747a2b05a89715e812f597df71050024bcb26f54632724486d8685648b73b4a7021c0ac0a22da14d553f2a7b53894c5a5e18be8afe43b771d4aa86510fa13c404b3bf88d7291b279d3bf3f339fb9206d797105c3b166c9e1ac9fe859f638e3df0dabdfa4b508e12d4a18da4e4c7e888e0255507e5055cf77b5de6f092fe8dcd89bd0ff9ba1db628b1adea3f59411f6297466ebc57fabf02efbc7299636c1cd0918737b126f840d7f299e782c254e2f8ba91dc5c1440a548d7f461fc4fb22f09ca37f7a55248f045a32d9bf48d2e8521120fcf05656529d905f17993bec0443acd1a47cd308e659252f5618426eef9c6401c9903915de5f42476dd0cbe4002e02d618189731293705c4bc7251619242d30fa025203418305bcd613eff4909171be903b38b7ff2e5c4057c4715929cd6768fe9334dadbaafb22638d6a607f464f260f6484ba8167832e0675aa6a7a14dfe8ec75b78c90048db57db30a430e951f8d6aae9114a359a9b52d86cd0225f51bb4672bbc698a3bc175975cd69c6f2c8aa94f979d3a0239881fbdefdfa57d4b6e0249dd16f2a98e185be0b0e0c6103a25f1235cdea6f7f382e98c22dd9e255ffad41d1fef23b2e91f350bda3abff23db0e1bb55c541157dc28444a9d1ccb37a5fd6f7394be12a1ea0688d6ac7af24e18a49ecae9f1bafc643ce5acfe4528536fa33622756144a469e5d93b6330e43af63f072d415647ef06c92c82c3b4c9dcd30f911201290dc3c2fa509ee5da01b7f6b1914000a4f6d5e5a31204ad67e91e30f8f7943cd099ba83a13898a1cde9587a0b3f9ee17f511c798c89b53f879422c15261c04ff03a7a4f5db927e508ebc9cbc278b9cd041feef85bc0ffbab1b9410e1ebb35ff4c487e7e0811e83ce853d6f653c751336df439f1114673e120f3035d26c34374782757956d2c723ffdab8414f21c2d1b53f0ed02c534ed4e9db581711bd018097f412960e4be812c1412d624fd592186a3fb1c4bdc0c2b0bf02a87a1dd536c33aca9d0df9206a343bcf5a80031ce5f1f4699752cf4e53ccc408cf8779d0b8a80699dbb2b50040f433516f56c8816a134e4f5421393744167988f03b6af5cccee8560ac6c861f4c47bed7ca69867f1b7725a8021e05d40fd7b8b263d927ae91965707846634cabb30896c3cbb12ad746735b6f2efa2f750eb00bd85cc7bc4dfd7f75da06ec0ea6a712387b225976a7a5781297180140a3b89569b2eacdb629dd9f12c504ab5cd0ffef3cac05cf7126eb17f4f3e42837468fddf852a5d764cfaaee11893fc174a1d29f92557f5be1d1b9f2c8e9f9a75d47728e79ef982a3b97795e45449b86aa075918f87178a47c6b93953b4dbb4b3bd1b514e7364817b6004e81f57b7239551d994c2e2f33236c6dd4fd3c03252cb70f4ad9b91ac8834cfafbe39df8afadb0fe3493d542f4789c2d964efe8d5d9c42231e9358b0692ae5a15a360038745645117fd56bc5a11d254a910ffed4cc4b0c0bc5912f68db7d8fa13c989c78208a6dc708ac9f6db0867e2988351537bc15be1b8f068ecdbefe13522d5bbda20d8b8de6a81cf4ba3c4c39916261fd654799b43be1f4af05ac1c6b97ba36544ec7be0a2e0158b0e91d04e1b7342d0d701f35cba7a77d8120bc9549b4f4f5b29c2df7b2c1636d727ff358d152e79f00d921075cc79a4be2bf6aa677e5d0bd996ddfd439dc98004b16abbfb5d868bb5c35ca5896a5b274ac08536358dc60571c222d3d69bea03b52569c858dca372dc4948c87a19430a87c63019f58a4b45673b55af8f4da0f2492fa69ea451eaf3bf16e2503fc84e810ecec54b27a1cc58a61949ba98455e55fc0bb003ebdfe0c99e8c4f63519f5d0817ee5e27653e9855cac0bcdecb6414795ebb06bf8628095a530ef486fde3a8c107c27e6813f262f2211c7edbd56b24ee075e495406927a07dafdfdb45cfa35f300c30243118077ab96bc42da98e79b7cf70569d140d230915b6762e25fe07aa8c7eed7c98edfb1ca4a653d36ce07faf3d404cd1e66c8f285065e0975d6cc0726f45cf47b0a6ced15c7a06c630ad04dad2c70419e14d1d5de255b26e2078f17102b235e362e893787a8060e027299595ee21b1d8c58a44f3544a014a6584f99c998df72d005437b849b7045500297333c2fdfcbfe27012967d406c5db740666888132a25a581bf7cf5808df5cf0a569de0816490d01d0eb100d81de0d77a3a69cc9609d2b73f0c7f01155afe4c53b242ffb0b1094fe428e6c160d23885fc001a00afb433b7f25e64339edf9df86d12cd6153719f82aed5752daf6e632fe07446a791de0f7be1c35ea1b5233520564f79cbf6ae4d4a7caa17788d38103ab4530ae6374bd32db54abca68ed7019cec07b44afa2f74fac1763132dc636992886f853e0afe4be4389aebe6f2726c254415dc6629811b8141092fcfc2c2a07b6c8ff889d8732185780853b2311d70784e794a22eccf39c5191dc085eaa095abced013160ede47217a7e39a6f178f8fd26e7660f188150ff533cd6b822d90bb2c8c3bf168168a236c841cf30ea1f419793d866b39fbfe9da7eea7ad92a4ae68b75bdca49e8d5c7e9ac7d65ce23065a49961b75bc22338f5f81763a4496a1e19fe0835abf63b25162f3997e5a77bbca2c600b25adfb199e78d6a29a56a2c3e29a7d5523ba4da8231a9f7460d6c24b17e885c5d40662911dcd79ed5d4665ac594e1627d0f8b0d825a1330107c3845b24c67bfbe9f696a24436ae4bf0ec96d646dfd679183171e0b0b421f19842f9c920bf45d650fa239f3eb40cd9179ac5ceb73bc8a346e9974eb33488bbc29a94ef6b2ef4235f68df76872fa8821d0a2960426f80f806c910686827c136c267d9be0c762b7e0d5363e0c4b4b1a2ce9e8789d665bd9956acde6031f6cd249851bfe909b9b6a295861a9a4af054262425e2593fb98805db18e98321d26ef665fa390b720f210babecfbc19a522da0d2b0cf6e6bdf4232b403b35034e4963ac0f148eca20a12144658bb2294c2748a17bfc7d5730b93c99438d720be203752981be49793edf01a35a51ede794028517539f3a2239222ef926b1034485cd9f9ef72a063f8ac01582681a9ba2809c91ac36796bde021c696fb98aac95a3695127f8ecc34cfb4f2a4da6ca211635f8a961e48b15df801348b7de1d9321b20786a7acdbefbef0e8b426e3c97e49930dea03450d2a42a1f82fe0996b4b3a33d796428ace12afc2f76354300f88562299df3689eca425194e5b0bc1852aec5fd4e9c89c111f3ae1a7a9900802ef9e173fffdf45b135f647648ae2c6dfa3c1fc2f8a8d8554253d18e32d328c7e822493bef2e7c4f9acfb740e03422baca42e214d06646c429c86b92c6a941cd84045087206df3e2ca549e6bced12ac7c05d585d0344bb01de086c07e4f97d34f8c0fa3c0bb12bc366ca2208aabb641e7ae6c726be8e1f993f4eecb9ae97abb59f9f94cad3133d86148202d92f5b178933fb1c1ba247753b2360ea402ceb43f6b1494230d930692151afce4c09165e2814c52b03d4ea6ce194c9457ec70992e072f6ff940ed5b0e07a184a06355c3a1f15bc85cd31e663b9abf76aa51b6bf4a039f8e952896951bf82280ad3a88e66b4e1a939841a36366267ea02966b35abdfb89163d1d666374f90c92f77bec08397cfe22d6a2fc298884a7e8d5899a7170ce3826bc84416b202b584c25287399c383050490a71b196550ea745e2beed88859b8ff694b79f05cd4d002d292b1d561f2db6fa1eacb9beb3ccd40e550e635845620a4dad83286a9e5a1ec2f50cbf1166b71992693370ac65ced8d9431456a860e01538f5c6913fef07ab2d2feb629b5f06d3832b0593058672b68d15ee75b4d3abc8bd91a6b9063c10966b7d09c1241a16706a7983714b4db8e59cbf673fbb7d068e06535449246083b75b676d5975a315bb53d98dfd48514473c44c5f5cdde4da3dc64ee7f54ef9768c19313c16039f69932f7f6508f81df351dcfc7782fa08c54408c31a397ee7bf60eb3721e9178412d3b2db3b5134f64b80d7bab92dfd1a7b69120c0a64126b2c749d1056a23eccbf87bfe42d6dc2932cb2b33887ca3995bd937ae7fed94f6098603c2b937b05da34608d4531416117c1fc1aa8c32b9e85190e2afa1ba014d212304a56033ad1528182cd46555c7dacf12cadf5c83487fa8900558298afc047348518ba78361173a2c329095c0d5668b7733df4d82d2f2063565ba499f976cfdb11225be7183d74300425c1d661bbe5447d9d4f7686f51ddb11ad752bae34b217dbed477acc5e3564ceb4c5e273e264ae6f7009ff180e1442a98626edcb845cd4474cf3a776e611e0f75968965c31715a61cc451d7f0db5e8acc408afce2a49ccc29ee612d6aa0fcdf048ddae871b13b005deb240b4c98a7a1267c0b1ec31af0e96860d16f44c12d7013644f26d1dbe63961ab97b4a4278c5a9d9494e7e2d45bc36855bc7ed7f1a3ef717951d343cb64a9af6a8613e5abd6c983264ac6891f2e0f073d96946c36e6747785abdb4285f50a088e4fe1b46b5d4ed4a125d075e3331b37e342e656db74ad30bc6332e05cfee7a68d7a700bcac029957e1a961dba468e49c69112f4c5dd65e74075d58ac42a4e96630bf3f5ea07f7eb2a8e940ff16040772aa0f88ecac376e7be0e6d714038af11f029e222d3e4a9dc37a572163ea0fdb9e5c6c9a7714e7c6d58bbaf252f613615c3a695b4992d99e88ff229d994107c6ded607429a24255326477afb1be32f69810626ce54b19dd4449c26d3e79ecb0c6c4b0bb557de45cdebf5bef93e7522d2e2e66af4d9274f9d4f1e394067944a7cc856d07fe9ac0cf4283e52469b21979833fddec2f5445f47bb32cf9c1bfb1636d1189178c36d901e736eb5e15fdc72b7aa2d0666613ed77a5382bed01f54d4eeb1de863de8063c94d1787f1f9b8ae5e4ec05ff68fa2b4bc4ba09a0838e9d2f2ba5fb52addbf00d90df88230a789ca0838d5f95b0b4666c01598fa7712abf72ef406a6a9092e0224cc4", 0x2000, &(0x7f0000001800)={&(0x7f00000006c0)={0x50, 0xffffffffffffffda, 0x4, {0x7, 0x28, 0x5, 0x6024e, 0xd, 0x0, 0x73, 0x8000}}, &(0x7f0000000140)={0x18, 0x0, 0x80, {0xb213}}, &(0x7f0000000280)={0x18, 0x0, 0x1, {0x3e6}}, &(0x7f00000003c0)={0x18, 0x0, 0x1, {0x4}}, &(0x7f0000000740)={0x18, 0x0, 0x4, {0x3}}, &(0x7f0000000780)={0x28, 0x0, 0xffff, {{0x2, 0x4}}}, &(0x7f00000007c0)={0x60, 0x0, 0x7, {{0x3, 0x3, 0x9, 0x70, 0x10, 0x2, 0x7, 0x8}}}, &(0x7f0000000840)={0x18, 0xfffffffffffffffe, 0x2, {0x4}}, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000feec63f1505293a17546cf4f48ffffff00000000"], &(0x7f00000008c0)={0x20, 0x0, 0x80000001, {0x0, 0x4}}, &(0x7f0000000900)={0x78, 0x3e89584eded01873, 0x6, {0x5, 0xffffffff, 0x0, {0x3, 0x6b9e, 0x4, 0x1, 0x80, 0x5, 0x1, 0x7, 0x2000000, 0x1000, 0x200, 0xee00, 0x0, 0x8000}}}, &(0x7f0000000980)={0x90, 0xffffffffffffffda, 0xffffffffffffffff, {0x1, 0x2, 0x7ff, 0x2, 0x67a5, 0xb2d, {0x1, 0x1, 0x7, 0x0, 0x5, 0xacd, 0x8, 0x7, 0x0, 0x6000, 0x8, 0x0, 0xee00, 0xf223, 0xfffffe00}}}, &(0x7f0000000a40)={0x30, 0xffffffffffffffda, 0x2, [{0x6, 0xa5, 0x8, 0x80000000, 'rootmode'}]}, &(0x7f0000001000)={0x530, 0xffffffffffffffda, 0x8, [{{0x2, 0x0, 0x7a, 0x2, 0x0, 0x2, {0x3, 0x0, 0x7, 0x7fffffff, 0x2, 0x7c, 0x0, 0x3e, 0xbe, 0x6000, 0xfffffffe, 0x0, 0x0, 0x2, 0x9}}, {0x5, 0x2, 0x1, 0x6, '+'}}, {{0x6, 0x1, 0x4, 0xffff, 0x8, 0x0, {0x5, 0xd389, 0x7, 0xa2, 0x7, 0x9, 0x7f, 0x7, 0xf4, 0x4000, 0xefa, 0x0, 0x0, 0x5, 0xd630}}, {0x2, 0x0, 0x5, 0x5, '@[(-:'}}, {{0x0, 0x3, 0xffffffffffff9bbe, 0x5, 0x7, 0x8000, {0x4, 0x8, 0x8, 0x9, 0xfff, 0x82, 0x40, 0x800, 0xfffffff3, 0x1000, 0x5, 0xee01, 0x0, 0xbf5, 0x1}}, {0x2, 0x2, 0x4, 0x2, '^($&'}}, {{0x3, 0x2, 0x6, 0xf8, 0x2ce, 0x6d, {0x0, 0x8, 0x80000001, 0x2, 0x100000001, 0x77b, 0x9, 0x8, 0x9, 0x2000, 0x3, 0x0, 0x0, 0x7fff, 0x3}}, {0x0, 0x6, 0xa, 0x5af, '/dev/fuse\x00'}}, {{0x1, 0x2, 0xf, 0xfffffffffffffffa, 0x18226627, 0x8, {0x2, 0xffffffffffffffff, 0x8, 0x1, 0x9, 0x9, 0x0, 0xd, 0x8, 0x2000, 0x9, 0x0, 0x0, 0x8, 0xea}}, {0x3, 0x1, 0x6, 0x2, 'kfree\x00'}}, {{0x1, 0x0, 0x7ff, 0x8, 0x5, 0x3, {0x6, 0x1, 0x1, 0x1000, 0x8001, 0x4, 0x6, 0xce, 0x80000001, 0x8000, 0x401, r6, r7, 0xf73, 0xfff}}, {0x4, 0x0, 0x2, 0xd66831c4, '*$'}}, {{0x1, 0x2, 0x6, 0x4, 0x5, 0x1, {0x5, 0xfff, 0x8, 0x101, 0x3, 0xffff, 0x0, 0x3, 0x10001, 0x4000, 0x1a3b, r8, 0x0, 0x4}}, {0x4, 0x67c8, 0x19, 0x4, 'trusted.overlay.redirect\x00'}}, {{0x3, 0x2, 0x10001, 0x9, 0x5, 0x0, {0x3, 0x5, 0x1000, 0x3, 0x2, 0x0, 0x6, 0x81, 0x7, 0xa000, 0x4, r10, r12, 0x2, 0x1}}, {0x0, 0xa, 0x1, 0x72, '\x00'}}]}, &(0x7f0000001700)={0xa0, 0x0, 0x6, {{0x0, 0x0, 0x4, 0x4, 0x0, 0x40, {0x7, 0x6, 0x5, 0x7e, 0x8000000000000001, 0x3, 0x8001, 0x9, 0x400, 0x4000, 0x0, r13, r14, 0x7, 0x10}}, {0x0, 0x8}}}, &(0x7f00000017c0)={0x20, 0x0, 0x8, {0x581a, 0x6, 0xc7, 0xffffffff}}}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x0, 0x29, 0x3f, {0x3f, 0x24, "6756a51e732771202374594386fb6bf302a341f4097dee5e4f5adafc9ddbf3fba0ccf2a8e5296d0f1e77d094d72ce3ab711d3090ac23c1a0b61da62e43"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="200882000000c899feaac28af070c7c61cb9da16b4e08963f4d7500ac175560a664e487a1f53ad610ee01d5a66750c13637c157cb44fb7be314a6c3ca14eee3c23af18f930f5b40636289f7390118fa3aef9c2a4867d78c7f0a3998139f35bdefec221f6b8e2d503f6fe8a33b6cf85acf1677b2734a437429032065fe2a4ffab1d215d77ade152e207a5b4d33c3d9300"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x71}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r15}, 0x10) 142.618894ms ago: executing program 4 (id=387): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x3}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 0s ago: executing program 4 (id=388): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000800000e2f8fc79ed110000c1c56d6523fb4ccad66c180d2f09e7b98c01a36f2f8c8a516f788bd448d066dbda24995c26cfa2f3152a6a3cad52ffbb357a12f702104ae0632b940cd5e9d0b32155c86b58f21fe93ea50d0e9a39976f33e1c637fdf5e03355b1e32b7a2c6243c5185a94208f986614382f270748eb2d47425e01440e6a3ad2687c1aa282361847201ebd5b2b1b494fdf600ff9bef87bd579b87996cec57cc946c2679cdc1d856c7f276fda389ef98f6db992cf9a4c4993f0c13ba9a9e6b565f546a7e292020022c2ee", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./bus\x00') r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) linkat(r0, &(0x7f0000000280)='./bus\x00', r0, &(0x7f0000000240)='./file1\x00', 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000d2ef03ef109145fb0000000000000000a1e1000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) unshare(0x2040400) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r5, 0x0, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="022100830a0000000019030006000000000002000000ac1414bb00000000010000ea2f00430005000000000802"], 0x50}, 0x1, 0x7}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000007b25485bbd04e65c2b89a059ba7d8ea06716482bcf44d5a18eeb67500d96d4910bc50011402827749c5371fd1b888d8f388e0a523041420cde71a4f1a52551c01eee68737fb9dc46dd0931dc3c1bee9eb8d0ae77fad0d480357cf2bd9f638bfe85ac676d475147bbd4b75d46bd01d97bc4494263f6ef1672d540fb62efb7ec6bd52c5586d6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e0100001524"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000100000001000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): t promiscuous mode [ 33.216112][ T111] device veth0_vlan left promiscuous mode [ 33.285819][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.293940][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.302682][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.310773][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.322605][ T527] device veth0_vlan entered promiscuous mode [ 33.329517][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.337475][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.352940][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.360370][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.372055][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.381054][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.389557][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.398069][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.407619][ T527] device veth1_macvtap entered promiscuous mode [ 33.417651][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.425358][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.433097][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.443186][ T532] device veth0_vlan entered promiscuous mode [ 33.453228][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.460539][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.463037][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.468213][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.478765][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.486525][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.496049][ T371] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.504367][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.516975][ T371] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 33.525045][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.533963][ T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.545990][ T532] device veth1_macvtap entered promiscuous mode [ 33.550686][ T371] usb 5-1: config 0 descriptor?? [ 33.561362][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.569761][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.578155][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.592802][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.605109][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.616088][ T5] wacom 0003:056A:00C5.0004: hidraw0: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.2-1/input0 [ 33.625070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.638315][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.666598][ T24] audit: type=1400 audit(1729549303.780:174): avc: denied { read } for pid=540 comm="syz.0.51" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 33.689683][ T24] audit: type=1400 audit(1729549303.780:175): avc: denied { open } for pid=540 comm="syz.0.51" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 33.747060][ T24] audit: type=1400 audit(1729549303.860:176): avc: denied { create } for pid=540 comm="syz.0.51" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.750816][ T545] input: syz0 as /devices/virtual/input/input10 [ 33.768303][ T24] audit: type=1400 audit(1729549303.860:177): avc: denied { read write } for pid=540 comm="syz.0.51" name="uinput" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.191424][ T371] wacom 0003:056A:00C5.0005: hidraw1: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.4-1/input0 [ 35.030014][ T111] device bridge_slave_1 left promiscuous mode [ 35.125100][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 35.125121][ T24] audit: type=1400 audit(1729549305.240:181): avc: denied { connect } for pid=556 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.143760][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.178318][ T111] device bridge_slave_0 left promiscuous mode [ 35.185446][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.200500][ T111] device veth1_macvtap left promiscuous mode [ 35.208903][ T111] device veth0_vlan left promiscuous mode [ 35.314390][ T564] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.530554][ T564] EXT4-fs (loop0): 1 truncate cleaned up [ 35.540914][ T564] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 35.572835][ T24] audit: type=1326 audit(1729549305.670:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 35.761828][ T24] audit: type=1326 audit(1729549305.680:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 35.904259][ T24] audit: type=1326 audit(1729549305.680:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 36.088202][ T486] usb 5-1: USB disconnect, device number 3 [ 36.122682][ T24] audit: type=1326 audit(1729549305.680:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 36.197885][ T432] usb 3-1: USB disconnect, device number 4 [ 36.314584][ T24] audit: type=1326 audit(1729549305.680:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 36.338386][ T24] audit: type=1326 audit(1729549305.680:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 36.442496][ T24] audit: type=1326 audit(1729549305.680:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 36.662907][ T24] audit: type=1326 audit(1729549305.710:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 37.707385][ T432] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 37.723080][ T24] audit: type=1326 audit(1729549305.710:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 38.432833][ T432] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 38.451872][ T432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.481565][ T432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.492138][ T527] EXT4-fs error (device loop0): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 38.512801][ T432] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 38.526133][ T432] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 38.535225][ T432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.550875][ T432] usb 3-1: config 0 descriptor?? [ 38.702880][ T602] F2FS-fs (loop4): invalid crc value [ 38.723359][ T602] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.816511][ T610] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.822781][ T602] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 38.832737][ T610] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.843165][ T610] device bridge_slave_0 entered promiscuous mode [ 38.870638][ T610] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.880198][ T610] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.887664][ T610] device bridge_slave_1 entered promiscuous mode [ 38.942766][ T288] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.026133][ T610] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.033030][ T610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.040119][ T610] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.047103][ T610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.149880][ T610] device veth0_vlan entered promiscuous mode [ 39.164398][ T610] device veth1_macvtap entered promiscuous mode [ 39.180839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.189483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.197931][ T595] F2FS-fs (loop3): Unrecognized mount option "m0{{[vkU [ 39.197931][ T595] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 39.215916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.224550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.232636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.242216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.251553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.261998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.271533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.280074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.289344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.316163][ T619] attempt to access beyond end of device [ 39.316163][ T619] loop4: rw=2049, want=53952, limit=40427 [ 39.366958][ T432] hid-rmi 0003:17EF:6085.0006: unknown main item tag 0x0 [ 39.419435][ T432] hid-rmi 0003:17EF:6085.0006: unknown main item tag 0x0 [ 39.462900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.473089][ T432] hid-rmi 0003:17EF:6085.0006: unknown main item tag 0x0 [ 39.490729][ T432] hid-rmi 0003:17EF:6085.0006: unknown main item tag 0x0 [ 39.502903][ T432] hid-rmi 0003:17EF:6085.0006: unknown main item tag 0x0 [ 39.505910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.520258][ T432] hid-rmi 0003:17EF:6085.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.2-1/input0 [ 39.539712][ T284] attempt to access beyond end of device [ 39.539712][ T284] loop4: rw=2049, want=45104, limit=40427 [ 39.542871][ T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 39.572919][ T288] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 39.583951][ T486] usb 3-1: USB disconnect, device number 5 [ 39.595545][ T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 39.605515][ T288] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 39.658252][ T7] device bridge_slave_1 left promiscuous mode [ 39.664792][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.679269][ T7] device bridge_slave_0 left promiscuous mode [ 39.691458][ T621] serio: Serial port ptm0 [ 39.700897][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.721940][ T7] device veth1_macvtap left promiscuous mode [ 39.729962][ T7] device veth0_vlan left promiscuous mode [ 39.772882][ T288] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 39.785583][ T626] serio: Serial port ptm1 [ 39.786779][ T288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.799051][ T288] usb 2-1: Product: syz [ 39.803233][ T288] usb 2-1: Manufacturer: syz [ 39.807731][ T288] usb 2-1: SerialNumber: syz [ 39.813703][ T288] usb 2-1: config 0 descriptor?? [ 39.853685][ T288] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 40.022828][ T53] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.093152][ T288] scsi host1: usb-storage 2-1:0.0 [ 40.101288][ T288] usb 2-1: USB disconnect, device number 4 [ 40.107326][ T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 41.242863][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.253844][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.264699][ T53] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.278485][ T53] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 41.288311][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.468561][ T53] usb 1-1: config 0 descriptor?? [ 41.484675][ T645] device syzkaller0 entered promiscuous mode [ 41.601005][ T654] overlayfs: './file0' not a directory [ 42.117692][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 42.117713][ T24] audit: type=1326 audit(1729549311.730:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 42.293803][ T24] audit: type=1326 audit(1729549311.730:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 42.322758][ T24] audit: type=1326 audit(1729549311.730:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 42.352365][ T24] audit: type=1326 audit(1729549311.730:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 42.430873][ T53] wacom 0003:056A:00C5.0007: hidraw0: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0 [ 42.450825][ T24] audit: type=1326 audit(1729549311.740:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 42.474500][ T24] audit: type=1326 audit(1729549311.740:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 42.505448][ T24] audit: type=1326 audit(1729549311.750:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 42.529541][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.540941][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.550821][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.564332][ T24] audit: type=1326 audit(1729549311.750:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 42.588154][ T5] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 42.602885][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.612968][ T24] audit: type=1326 audit(1729549311.750:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 42.645784][ T5] usb 5-1: config 0 descriptor?? [ 42.651164][ T24] audit: type=1326 audit(1729549311.760:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1edb6fff9 code=0x7ffc0000 [ 42.731453][ T661] F2FS-fs (loop1): invalid crc value [ 42.798810][ T661] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.850520][ T661] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 42.879421][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 42.885494][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 42.905247][ T5] usb 5-1: USB disconnect, device number 4 [ 43.887013][ T665] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 43.908127][ T665] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 43.940163][ T665] F2FS-fs (loop2): invalid crc value [ 43.968100][ T665] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.079847][ T665] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 44.097901][ T665] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 44.221605][ T288] usb 1-1: USB disconnect, device number 2 [ 45.123050][ T693] attempt to access beyond end of device [ 45.123050][ T693] loop1: rw=2049, want=53952, limit=40427 [ 45.347057][ T664] F2FS-fs (loop3): Unrecognized mount option "m0{{[vkU [ 45.347057][ T664] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 45.379384][ T283] attempt to access beyond end of device [ 45.379384][ T283] loop1: rw=2049, want=45104, limit=40427 [ 45.547459][ T701] device syzkaller0 entered promiscuous mode [ 46.423443][ T705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 46.632771][ T53] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 46.692776][ T288] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.823046][ T695] F2FS-fs (loop4): Unrecognized mount option "m0{{[vkU [ 46.823046][ T695] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 47.202856][ T15] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 47.222882][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 47.234578][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 47.272918][ T53] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 47.336136][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.407252][ T53] usb 2-1: Product: syz [ 47.580961][ T53] usb 2-1: Manufacturer: syz [ 47.585932][ T53] usb 2-1: SerialNumber: syz [ 47.597210][ T288] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.609070][ T53] usb 2-1: config 0 descriptor?? [ 47.611744][ T288] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.624767][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.742233][ T727] device syzkaller0 entered promiscuous mode [ 47.799733][ T288] usb 1-1: config 0 descriptor?? [ 47.951836][ T15] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 48.026084][ T288] usb 1-1: can't set config #0, error -71 [ 48.032573][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.044323][ T288] usb 1-1: USB disconnect, device number 3 [ 48.051745][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.064594][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 48.077674][ T15] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 48.087237][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.096391][ T15] usb 3-1: config 0 descriptor?? [ 48.096561][ T692] usb 2-1: USB disconnect, device number 5 [ 48.194512][ T24] kauditd_printk_skb: 44 callbacks suppressed [ 48.194524][ T24] audit: type=1400 audit(1729549318.310:253): avc: denied { create } for pid=733 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.197418][ T732] F2FS-fs (loop4): invalid crc value [ 48.205937][ T24] audit: type=1400 audit(1729549318.320:254): avc: denied { read } for pid=733 comm="syz.3.98" path="socket:[17117]" dev="sockfs" ino=17117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.244060][ T732] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.257494][ T24] audit: type=1400 audit(1729549318.370:255): avc: denied { write } for pid=733 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.281520][ T732] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 48.392752][ T288] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 48.586790][ T746] attempt to access beyond end of device [ 48.586790][ T746] loop4: rw=2049, want=53952, limit=40427 [ 48.789129][ T15] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x0 [ 48.796229][ T15] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x0 [ 48.803581][ T15] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x0 [ 48.810377][ T15] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x0 [ 48.817459][ T15] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x0 [ 48.825040][ T15] hid-rmi 0003:17EF:6085.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.2-1/input0 [ 48.907530][ T284] attempt to access beyond end of device [ 48.907530][ T284] loop4: rw=2049, want=45104, limit=40427 [ 48.908774][ T53] usb 3-1: USB disconnect, device number 6 [ 49.032867][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.052757][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.072773][ T288] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 49.075971][ T753] device syzkaller0 entered promiscuous mode [ 49.092609][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.101469][ T288] usb 1-1: config 0 descriptor?? [ 49.273460][ T748] F2FS-fs (loop1): Unrecognized mount option "m0{{[vkU [ 49.273460][ T748] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 49.716125][ T288] logitech-hidpp-device 0003:046D:C086.0009: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 49.907392][ T767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.914526][ T767] IPv6: NLM_F_CREATE should be set when creating new route [ 51.529843][ T692] usb 1-1: USB disconnect, device number 4 [ 51.677571][ T24] audit: type=1400 audit(1729549321.790:256): avc: denied { mounton } for pid=782 comm="syz.0.109" path="/3/file0" dev="9p" ino=9764954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.681248][ T783] incfs_lookup_dentry err:-5 [ 51.727535][ T783] incfs: Can't find or create .index dir in ./file0 [ 51.753852][ T783] incfs: mount failed -5 [ 51.783684][ T781] ====================================================== [ 51.783684][ T781] WARNING: the mand mount option is being deprecated and [ 51.783684][ T781] will be removed in v5.15! [ 51.783684][ T781] ====================================================== [ 52.245187][ T789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 52.386266][ T787] F2FS-fs (loop0): invalid crc value [ 52.416297][ T787] F2FS-fs (loop0): Found nat_bits in checkpoint [ 52.535308][ T787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 52.645687][ T24] audit: type=1400 audit(1729549322.750:257): avc: denied { setopt } for pid=800 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.683176][ T53] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 52.776272][ T763] F2FS-fs (loop1): Unrecognized mount option "m0{{[vkU [ 52.776272][ T763] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 52.942771][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 53.030784][ T812] overlayfs: missing 'lowerdir' [ 53.072972][ T53] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 53.131119][ T53] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 53.277482][ T53] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 53.322532][ T53] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 53.346671][ T24] audit: type=1400 audit(1729549323.460:258): avc: denied { mount } for pid=813 comm="syz.4.117" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.442768][ T53] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 53.462762][ T53] usb 3-1: config 1 interface 0 has no altsetting 0 [ 53.469628][ T53] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 53.489195][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.543264][ T53] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 53.855753][ T824] attempt to access beyond end of device [ 53.855753][ T824] loop0: rw=2049, want=53952, limit=40427 [ 54.198371][ T692] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 54.285416][ T53] scsi host1: usb-storage 3-1:1.0 [ 54.315434][ T610] attempt to access beyond end of device [ 54.315434][ T610] loop0: rw=2049, want=45104, limit=40427 [ 54.394482][ T808] F2FS-fs (loop3): Unrecognized mount option "m0{{[vkU [ 54.394482][ T808] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 54.420193][ T53] usb 3-1: USB disconnect, device number 7 [ 54.533612][ T830] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.549708][ T830] EXT4-fs (loop3): 1 truncate cleaned up [ 54.555859][ T830] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 54.572816][ T692] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 54.591027][ T692] usb 5-1: config 0 has no interface number 0 [ 54.635259][ T692] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 54.651371][ T24] audit: type=1400 audit(1729549324.760:259): avc: denied { listen } for pid=836 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.441262][ T692] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 55.454177][ T692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.462206][ T692] usb 5-1: Product: syz [ 55.468171][ T692] usb 5-1: Manufacturer: syz [ 55.473317][ T692] usb 5-1: SerialNumber: syz [ 55.483212][ T24] audit: type=1400 audit(1729549325.550:260): avc: denied { connect } for pid=836 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.717433][ T846] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 55.773044][ T9] attempt to access beyond end of device [ 55.773044][ T9] loop2: rw=1, want=153, limit=128 [ 55.775359][ T692] usb 5-1: config 0 descriptor?? [ 55.812878][ T818] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 55.833194][ T692] usb-storage 5-1:0.20: USB Mass Storage device detected [ 55.841810][ T692] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 56.175226][ T859] F2FS-fs (loop2): invalid crc value [ 56.180751][ T853] F2FS-fs (loop1): invalid crc value [ 56.216244][ T859] F2FS-fs (loop2): Found nat_bits in checkpoint [ 56.223407][ T853] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.263538][ T532] EXT4-fs error (device loop3): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 56.292972][ T853] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 56.323654][ T859] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 56.607276][ T871] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.622544][ T871] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.637382][ T871] device bridge_slave_0 entered promiscuous mode [ 56.644950][ T871] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.652032][ T871] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.666850][ T871] device bridge_slave_1 entered promiscuous mode [ 56.777666][ T871] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.784664][ T871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.791834][ T871] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.798715][ T871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.824470][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.834123][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.849655][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.936068][ T877] attempt to access beyond end of device [ 56.936068][ T877] loop1: rw=2049, want=53952, limit=40427 [ 57.123563][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.131744][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.138812][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.176829][ T692] scsi host1: usb-storage 5-1:0.20 [ 57.199726][ T692] usb 5-1: USB disconnect, device number 5 [ 57.223810][ T881] attempt to access beyond end of device [ 57.223810][ T881] loop2: rw=2049, want=53952, limit=40427 [ 57.388849][ T858] F2FS-fs (loop0): Unrecognized mount option "m0{{[vkU [ 57.388849][ T858] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 57.452889][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.461267][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.468290][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.514705][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.523283][ T286] attempt to access beyond end of device [ 57.523283][ T286] loop2: rw=2049, want=45104, limit=40427 [ 57.523291][ T283] attempt to access beyond end of device [ 57.523291][ T283] loop1: rw=2049, want=45104, limit=40427 [ 57.523551][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.555273][ T24] audit: type=1400 audit(1729549327.670:261): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.595638][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.624927][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.644559][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.653672][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.680355][ T885] device syzkaller0 entered promiscuous mode [ 57.692127][ T871] device veth0_vlan entered promiscuous mode [ 57.713265][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.731535][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.765305][ T871] device veth1_macvtap entered promiscuous mode [ 57.774714][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.782438][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.794136][ T24] audit: type=1326 audit(1729549327.910:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e7c4ff9 code=0x7ffc0000 [ 57.820968][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.830007][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.838243][ T24] audit: type=1326 audit(1729549327.910:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e7c4ff9 code=0x7ffc0000 [ 57.863793][ T888] FAULT_INJECTION: forcing a failure. [ 57.863793][ T888] name failslab, interval 1, probability 0, space 0, times 1 [ 57.877112][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.904108][ T888] CPU: 0 PID: 888 Comm: syz.0.134 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 57.913850][ T888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.924265][ T888] Call Trace: [ 57.927414][ T888] dump_stack_lvl+0x1e2/0x24b [ 57.932168][ T888] ? bfq_pos_tree_add_move+0x43b/0x43b [ 57.937750][ T888] dump_stack+0x15/0x17 [ 57.941974][ T888] should_fail+0x3c6/0x510 [ 57.946223][ T888] ? security_prepare_creds+0x4d/0x140 [ 57.951601][ T888] __should_failslab+0xa4/0xe0 [ 57.956214][ T888] should_failslab+0x9/0x20 [ 57.960639][ T888] __kmalloc+0x60/0x330 [ 57.964728][ T888] security_prepare_creds+0x4d/0x140 [ 57.969936][ T888] prepare_creds+0x3f8/0x5f0 [ 57.974594][ T888] __sys_setregid+0x109/0x680 [ 57.979177][ T888] __x64_sys_setregid+0x5a/0x70 [ 57.983952][ T888] do_syscall_64+0x34/0x70 [ 57.988307][ T888] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 57.994016][ T888] RIP: 0033:0x7fcb9e7c4ff9 [ 57.998706][ T888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.018492][ T888] RSP: 002b:00007fcb9d43e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 58.027080][ T888] RAX: ffffffffffffffda RBX: 00007fcb9e97cf80 RCX: 00007fcb9e7c4ff9 [ 58.035051][ T888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.043002][ T888] RBP: 00007fcb9d43e090 R08: 0000000000000000 R09: 0000000000000000 [ 58.050944][ T888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.059608][ T888] R13: 0000000000000000 R14: 00007fcb9e97cf80 R15: 00007ffefadac998 [ 58.090744][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.107018][ T24] audit: type=1326 audit(1729549327.910:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb9e7c4ff9 code=0x7ffc0000 [ 58.141267][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.150990][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.161135][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.170356][ T24] audit: type=1326 audit(1729549327.950:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e7c4ff9 code=0x7ffc0000 [ 58.415127][ T901] exfat: Deprecated parameter 'utf8' [ 58.420552][ T901] exfat: Deprecated parameter 'utf8' [ 58.434882][ T24] audit: type=1326 audit(1729549327.950:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e7c4ff9 code=0x7ffc0000 [ 58.459622][ T24] audit: type=1326 audit(1729549327.980:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb9e7c4ff9 code=0x7ffc0000 [ 58.496395][ T24] audit: type=1326 audit(1729549327.980:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e7c4ff9 code=0x7ffc0000 [ 58.504087][ T901] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207e, chksum : 0x9e35a9ea, utbl_chksum : 0xe619d30d) [ 58.534719][ T24] audit: type=1326 audit(1729549327.980:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb9e7c3990 code=0x7ffc0000 [ 58.558688][ T24] audit: type=1326 audit(1729549327.980:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb9e7c3adf code=0x7ffc0000 [ 58.582878][ T24] audit: type=1326 audit(1729549327.980:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fcb9e7c4ff9 code=0x7ffc0000 [ 58.607161][ T24] audit: type=1400 audit(1729549328.190:272): avc: denied { remove_name } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.662147][ T24] audit: type=1400 audit(1729549328.190:273): avc: denied { rename } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.724870][ T902] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,data_err=ignore,grpquota,barrier=0x0000000000000006,grpjquota=,jqfmt=vfsold, [ 58.843124][ T914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.138'. [ 58.917440][ T914] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 59.092459][ T917] FAULT_INJECTION: forcing a failure. [ 59.092459][ T917] name failslab, interval 1, probability 0, space 0, times 0 [ 59.122920][ T24] audit: type=1400 audit(1729549328.190:274): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.184995][ T917] CPU: 0 PID: 917 Comm: syz.4.139 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 59.194647][ T917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.197625][ T24] audit: type=1326 audit(1729549328.240:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=887 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcb9e7c3a3c code=0x7ffc0000 [ 59.204790][ T917] Call Trace: [ 59.204810][ T917] dump_stack_lvl+0x1e2/0x24b [ 59.204820][ T917] ? panic+0x812/0x812 [ 59.204830][ T917] ? bfq_pos_tree_add_move+0x43b/0x43b [ 59.204842][ T917] ? __kasan_check_write+0x14/0x20 [ 59.204852][ T917] ? mutex_unlock+0x1c/0x40 [ 59.204862][ T917] dump_stack+0x15/0x17 [ 59.204872][ T917] should_fail+0x3c6/0x510 [ 59.204883][ T917] ? __alloc_skb+0x80/0x510 [ 59.204893][ T917] __should_failslab+0xa4/0xe0 [ 59.204915][ T917] should_failslab+0x9/0x20 [ 59.277596][ T917] kmem_cache_alloc+0x3d/0x2e0 [ 59.282347][ T917] ? nfnetlink_bind+0x100/0x100 [ 59.287410][ T917] __alloc_skb+0x80/0x510 [ 59.291567][ T917] netlink_ack+0x33c/0xb30 [ 59.296045][ T917] ? netlink_dump+0xd30/0xd30 [ 59.300628][ T917] netlink_rcv_skb+0x24c/0x410 [ 59.305795][ T917] ? nfnetlink_bind+0x100/0x100 [ 59.310667][ T917] ? netlink_ack+0xb30/0xb30 [ 59.315335][ T917] ? ns_capable+0x89/0xe0 [ 59.319685][ T917] ? netlink_net_capable+0x125/0x160 [ 59.324806][ T917] nfnetlink_rcv+0x277/0x2240 [ 59.329496][ T917] ? stack_trace_save+0x113/0x1c0 [ 59.334531][ T917] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 59.340801][ T917] ? stack_trace_snprint+0xf0/0xf0 [ 59.346098][ T917] ? __kasan_slab_alloc+0x63/0xe0 [ 59.351121][ T917] ? __kasan_slab_alloc+0xc3/0xe0 [ 59.356091][ T917] ? nfnetlink_net_exit_batch+0x110/0x110 [ 59.362026][ T917] ? __alloc_skb+0x80/0x510 [ 59.366369][ T917] ? netlink_sendmsg+0x7a4/0xd00 [ 59.371148][ T917] ? ____sys_sendmsg+0x59e/0x8f0 [ 59.376075][ T917] ? ___sys_sendmsg+0x252/0x2e0 [ 59.381256][ T917] ? __se_sys_sendmsg+0x1b1/0x280 [ 59.386059][ T917] ? __x64_sys_sendmsg+0x7b/0x90 [ 59.390822][ T917] ? do_syscall_64+0x34/0x70 [ 59.395264][ T917] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 59.401157][ T917] ? iov_iter_advance+0x258/0xb20 [ 59.406130][ T917] ? selinux_nlmsg_lookup+0x1f3/0x3f0 [ 59.411446][ T917] ? selinux_netlink_send+0x793/0x870 [ 59.416716][ T917] ? _copy_from_iter_full+0xa20/0xa20 [ 59.421914][ T917] ? __netlink_lookup+0x37b/0x3a0 [ 59.426877][ T917] netlink_unicast+0x8df/0xac0 [ 59.431598][ T917] ? netlink_detachskb+0x90/0x90 [ 59.436368][ T917] ? security_netlink_send+0x7b/0xa0 [ 59.441510][ T917] netlink_sendmsg+0xa46/0xd00 [ 59.446111][ T917] ? netlink_getsockopt+0x5c0/0x5c0 [ 59.451246][ T917] ? kmem_cache_free+0xa9/0x1e0 [ 59.456002][ T917] ? security_socket_sendmsg+0x82/0xb0 [ 59.461301][ T917] ? netlink_getsockopt+0x5c0/0x5c0 [ 59.466503][ T917] ____sys_sendmsg+0x59e/0x8f0 [ 59.471136][ T917] ? __sys_sendmsg_sock+0x40/0x40 [ 59.476057][ T917] ? import_iovec+0xe5/0x120 [ 59.480570][ T917] ___sys_sendmsg+0x252/0x2e0 [ 59.485168][ T917] ? __sys_sendmsg+0x280/0x280 [ 59.490205][ T917] ? rw_verify_area+0x1c3/0x360 [ 59.494991][ T917] ? __fdget+0x1bc/0x240 [ 59.499164][ T917] __se_sys_sendmsg+0x1b1/0x280 [ 59.503923][ T917] ? __x64_sys_sendmsg+0x90/0x90 [ 59.508697][ T917] ? ksys_write+0x260/0x2c0 [ 59.513039][ T917] ? debug_smp_processor_id+0x17/0x20 [ 59.518271][ T917] __x64_sys_sendmsg+0x7b/0x90 [ 59.522948][ T917] do_syscall_64+0x34/0x70 [ 59.527267][ T917] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 59.532996][ T917] RIP: 0033:0x7fc3c1041ff9 [ 59.537542][ T917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.557889][ T917] RSP: 002b:00007fc3bfcbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.566208][ T917] RAX: ffffffffffffffda RBX: 00007fc3c11f9f80 RCX: 00007fc3c1041ff9 [ 59.574130][ T917] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 59.582330][ T917] RBP: 00007fc3bfcbb090 R08: 0000000000000000 R09: 0000000000000000 [ 59.590212][ T917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.598041][ T917] R13: 0000000000000000 R14: 00007fc3c11f9f80 R15: 00007ffcaa938948 [ 59.734229][ T909] F2FS-fs (loop3): invalid crc value [ 59.993777][ T909] F2FS-fs (loop3): Found nat_bits in checkpoint [ 60.232970][ T909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 60.356909][ T923] F2FS-fs (loop4): invalid crc value [ 60.411830][ T923] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.491459][ T923] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 61.432387][ T53] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 61.768276][ T952] attempt to access beyond end of device [ 61.768276][ T952] loop3: rw=2049, want=53952, limit=40427 [ 61.991201][ T871] attempt to access beyond end of device [ 61.991201][ T871] loop3: rw=2049, want=45104, limit=40427 [ 62.203021][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.234231][ T53] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 62.282750][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.374302][ T53] usb 1-1: config 0 descriptor?? [ 62.539731][ T965] attempt to access beyond end of device [ 62.539731][ T965] loop4: rw=2049, want=53952, limit=40427 [ 63.048343][ T284] attempt to access beyond end of device [ 63.048343][ T284] loop4: rw=2049, want=45104, limit=40427 [ 63.363115][ T53] usbhid 1-1:0.0: can't add hid device: -71 [ 63.369765][ T53] usbhid: probe of 1-1:0.0 failed with error -71 [ 63.438899][ T53] usb 1-1: USB disconnect, device number 5 [ 63.611991][ T989] EXT4-fs (loop1): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 63.730458][ T996] netlink: 'syz.4.154': attribute type 3 has an invalid length. [ 63.743293][ T994] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.768396][ T994] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.986912][ T1002] tun0: tun_chr_ioctl cmd 1074025677 [ 63.992240][ T1002] tun0: linktype set to 512 [ 64.540292][ T1016] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 64.689004][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 64.689016][ T24] audit: type=1400 audit(1729549334.800:286): avc: denied { create } for pid=1015 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.745676][ T1007] F2FS-fs (loop1): invalid crc value [ 64.745697][ T24] audit: type=1400 audit(1729549334.830:287): avc: denied { setopt } for pid=1015 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.751116][ T24] audit: type=1400 audit(1729549334.830:288): avc: denied { bind } for pid=1015 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.792287][ T1026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.799712][ T1026] IPv6: NLM_F_CREATE should be set when creating new route [ 64.858081][ T1007] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.978242][ T1007] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 65.579962][ T1039] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.592500][ T1039] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #4: comm syz.3.165: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 65.611369][ T1039] EXT4-fs error (device loop3): ext4_quota_enable:6426: comm syz.3.165: Bad quota inode: 4, type: 1 [ 65.622847][ T1039] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.638402][ T1039] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 65.645354][ T1039] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 65.722742][ T288] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 65.888667][ T1049] attempt to access beyond end of device [ 65.888667][ T1049] loop1: rw=2049, want=53952, limit=40427 [ 65.938482][ T1025] F2FS-fs (loop2): Unrecognized mount option "m0{{[vkU [ 65.938482][ T1025] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 66.101243][ T283] attempt to access beyond end of device [ 66.101243][ T283] loop1: rw=2049, want=45104, limit=40427 [ 66.189371][ T1051] EXT4-fs (loop0): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 66.342820][ T288] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 67.888684][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.904021][ T1071] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 67.904362][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.944135][ T24] audit: type=1400 audit(1729549338.060:289): avc: denied { ioctl } for pid=1070 comm="syz.1.172" path="/35/file1/bus" dev="loop1" ino=18 ioctlcmd=0x4805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.954506][ T288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 67.981599][ T288] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 68.100353][ T24] audit: type=1400 audit(1729549338.210:290): avc: denied { validate_trans } for pid=1070 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.244594][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.280757][ T288] usb 5-1: config 0 descriptor?? [ 68.413517][ T1083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.424286][ T1083] EXT4-fs (loop1): 1 truncate cleaned up [ 68.429726][ T1083] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 68.509468][ T1089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.552830][ T53] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 68.842804][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 68.842988][ T288] usbhid 5-1:0.0: can't add hid device: -71 [ 69.142983][ T53] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 69.148248][ T288] usbhid: probe of 5-1:0.0 failed with error -71 [ 69.160420][ T288] usb 5-1: USB disconnect, device number 6 [ 69.163097][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.177938][ T53] usb 3-1: Product: syz [ 69.182028][ T53] usb 3-1: Manufacturer: syz [ 69.187054][ T53] usb 3-1: SerialNumber: syz [ 69.196688][ T53] usb 3-1: config 0 descriptor?? [ 69.243384][ T1102] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 69.243384][ T1102] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 69.243384][ T1102] [ 69.272808][ T1102] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.304438][ T1102] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.332770][ T1102] EXT4-fs (loop0): 1 truncate cleaned up [ 69.338377][ T1102] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,auto_da_alloc,debug_want_extra_isize=0x0000000000000068,nodelalloc,noacl,abort,,errors=continue [ 69.379788][ T24] audit: type=1400 audit(1729549339.490:291): avc: denied { mounton } for pid=1100 comm="syz.0.179" path="/19/bus" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.404277][ T283] EXT4-fs error (device loop1): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 69.444269][ T24] audit: type=1400 audit(1729549339.560:292): avc: denied { ioctl } for pid=1078 comm="syz.2.174" path="socket:[17912]" dev="sockfs" ino=17912 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.470619][ T1081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 69.483059][ T53] r8152 3-1:0.0: Unknown version 0x0000 [ 69.489919][ T53] usb 3-1: USB disconnect, device number 8 [ 69.514285][ T1105] F2FS-fs (loop3): invalid crc value [ 69.521014][ T1105] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.542064][ T1105] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 70.907606][ T24] audit: type=1400 audit(1729549341.010:293): avc: denied { read } for pid=1120 comm="syz.2.185" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.073918][ T1123] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 71.120865][ T24] audit: type=1400 audit(1729549341.010:294): avc: denied { open } for pid=1120 comm="syz.2.185" path="/dev/rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.181319][ T24] audit: type=1400 audit(1729549341.010:295): avc: denied { ioctl } for pid=1120 comm="syz.2.185" path="/dev/rtc0" dev="devtmpfs" ino=166 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.224822][ T111] device bridge_slave_1 left promiscuous mode [ 71.232810][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.373837][ T111] device bridge_slave_0 left promiscuous mode [ 71.391910][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.403847][ T111] device veth1_macvtap left promiscuous mode [ 71.422189][ T111] device veth0_vlan left promiscuous mode [ 71.497403][ T1137] attempt to access beyond end of device [ 71.497403][ T1137] loop3: rw=2049, want=53952, limit=40427 [ 71.912105][ T871] attempt to access beyond end of device [ 71.912105][ T871] loop3: rw=2049, want=45104, limit=40427 [ 72.138011][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.152770][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.160168][ T1117] device bridge_slave_0 entered promiscuous mode [ 72.173501][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.180537][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.213152][ T1117] device bridge_slave_1 entered promiscuous mode [ 72.301165][ T1148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.308408][ T1148] IPv6: NLM_F_CREATE should be set when creating new route [ 72.603726][ T24] audit: type=1400 audit(1729549342.720:296): avc: denied { mounton } for pid=1149 comm="syz.2.191" path="/28/file0" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.626695][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.637936][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.646280][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.654214][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.661828][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.670800][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.679379][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.686435][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.694035][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.702167][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.710374][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.717408][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.721438][ T1128] F2FS-fs (loop4): Unrecognized mount option "m0{{[vkU [ 72.721438][ T1128] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 72.735037][ T1117] device veth0_vlan entered promiscuous mode [ 72.747766][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.768244][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.778162][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.786492][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.794273][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.810463][ T1117] device veth1_macvtap entered promiscuous mode [ 72.860948][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.870204][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.878959][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.906182][ T24] audit: type=1400 audit(1729549343.020:297): avc: denied { name_bind } for pid=1165 comm="syz.1.194" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 73.509722][ T1174] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 73.524207][ T1174] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.194: invalid indirect mapped block 1 (level 1) [ 73.539609][ T1174] EXT4-fs (loop1): 1 truncate cleaned up [ 73.545140][ T1174] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 73.712785][ T731] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.415770][ T1183] F2FS-fs (loop4): invalid crc value [ 74.925289][ T1180] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 75.162277][ T1180] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 75.241349][ T1183] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.248729][ T1180] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 75.569887][ T1183] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 75.614359][ T731] usb 4-1: Using ep0 maxpacket: 16 [ 75.625913][ T1180] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 75.633013][ T1180] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.906652][ T24] audit: type=1400 audit(1729549345.990:298): avc: denied { append } for pid=1179 comm="syz.2.197" path="/29/file1/cgroup.controllers" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.102828][ T731] usb 4-1: unable to read config index 0 descriptor/all [ 76.109759][ T731] usb 4-1: can't read configurations, error -71 [ 76.139076][ T1212] FAULT_INJECTION: forcing a failure. [ 76.139076][ T1212] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.156208][ T286] attempt to access beyond end of device [ 76.156208][ T286] loop2: rw=2049, want=45104, limit=40427 [ 76.168426][ T1212] CPU: 0 PID: 1212 Comm: syz.3.203 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 76.178423][ T1212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.188559][ T1212] Call Trace: [ 76.191794][ T1212] dump_stack_lvl+0x1e2/0x24b [ 76.196512][ T1212] ? bfq_pos_tree_add_move+0x43b/0x43b [ 76.201880][ T1212] ? kmem_cache_free+0xa9/0x1e0 [ 76.206555][ T1212] dump_stack+0x15/0x17 [ 76.210543][ T1212] should_fail+0x3c6/0x510 [ 76.214920][ T1212] should_fail_usercopy+0x1a/0x20 [ 76.219777][ T1212] _copy_from_user+0x20/0xd0 [ 76.224377][ T1212] __copy_msghdr_from_user+0xaf/0x7c0 [ 76.229674][ T1212] ? __ia32_sys_shutdown+0x70/0x70 [ 76.234621][ T1212] ___sys_sendmsg+0x166/0x2e0 [ 76.239156][ T1212] ? __sys_sendmsg+0x280/0x280 [ 76.243736][ T1212] ? rw_verify_area+0x1c3/0x360 [ 76.248418][ T1212] ? __fdget+0x1bc/0x240 [ 76.252502][ T1212] __se_sys_sendmsg+0x1b1/0x280 [ 76.257191][ T1212] ? __x64_sys_sendmsg+0x90/0x90 [ 76.262042][ T1212] ? ksys_write+0x260/0x2c0 [ 76.266473][ T1212] ? debug_smp_processor_id+0x17/0x20 [ 76.271683][ T1212] __x64_sys_sendmsg+0x7b/0x90 [ 76.276294][ T1212] do_syscall_64+0x34/0x70 [ 76.280747][ T1212] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 76.286529][ T1212] RIP: 0033:0x7f70855e5ff9 [ 76.290979][ T1212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.310580][ T1212] RSP: 002b:00007f708425f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.319010][ T1212] RAX: ffffffffffffffda RBX: 00007f708579df80 RCX: 00007f70855e5ff9 [ 76.326992][ T1212] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000005 [ 76.335145][ T1212] RBP: 00007f708425f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.343216][ T1212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.351327][ T1212] R13: 0000000000000000 R14: 00007f708579df80 R15: 00007ffffee4b938 [ 77.104506][ T1221] attempt to access beyond end of device [ 77.104506][ T1221] loop4: rw=2049, want=53952, limit=40427 [ 77.391676][ T1220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.399078][ T1220] IPv6: NLM_F_CREATE should be set when creating new route [ 77.459099][ T284] attempt to access beyond end of device [ 77.459099][ T284] loop4: rw=2049, want=45104, limit=40427 [ 78.204018][ T1209] F2FS-fs (loop1): Unrecognized mount option "m0{{[vkU [ 78.204018][ T1209] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 78.291101][ T1239] overlayfs: './file0' not a directory [ 78.543319][ T24] audit: type=1326 audit(1729549348.420:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 78.572057][ T24] audit: type=1326 audit(1729549348.420:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 78.601631][ T1229] F2FS-fs (loop2): invalid crc value [ 78.626490][ T24] audit: type=1326 audit(1729549348.430:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 78.652013][ T24] audit: type=1326 audit(1729549348.430:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 78.669733][ T1229] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.682637][ T24] audit: type=1326 audit(1729549348.430:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 78.706558][ T24] audit: type=1326 audit(1729549348.440:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 78.730065][ T24] audit: type=1326 audit(1729549348.440:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 78.753514][ T24] audit: type=1326 audit(1729549348.440:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 78.763041][ T1229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.784782][ T24] audit: type=1326 audit(1729549348.440:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 78.809947][ T1249] binder: 1241:1249 ioctl 4018620d 0 returned -22 [ 78.817404][ T24] audit: type=1326 audit(1729549348.440:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 78.847930][ T1244] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.039086][ T1258] attempt to access beyond end of device [ 82.039086][ T1258] loop2: rw=34817, want=77952, limit=40427 [ 82.196976][ T1244] EXT4-fs (loop0): 1 truncate cleaned up [ 82.217880][ T1244] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 82.278594][ T286] attempt to access beyond end of device [ 82.278594][ T286] loop2: rw=2049, want=45104, limit=40427 [ 82.293277][ T1265] EXT4-fs (loop4): Test dummy encryption mode enabled [ 82.313949][ T1265] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.216: casefold flag without casefold feature [ 82.343039][ T1265] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 82.353272][ T1265] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue [ 82.474113][ T1270] EXT4-fs (loop1): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 82.483047][ T399] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.525901][ T1265] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 82.746257][ T399] usb 4-1: Using ep0 maxpacket: 16 [ 82.863079][ T399] usb 4-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 82.937580][ T399] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.068205][ T399] usb 4-1: New USB device found, idVendor=0fd2, idProduct=6007, bcdDevice= 0.00 [ 83.077529][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.086870][ T399] usb 4-1: config 0 descriptor?? [ 83.130845][ T399] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 83.173982][ T1287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.181044][ T1287] IPv6: NLM_F_CREATE should be set when creating new route [ 83.305914][ T1272] F2FS-fs (loop0): invalid crc value [ 83.409168][ T1272] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.452803][ T1272] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 84.763634][ T1304] attempt to access beyond end of device [ 84.763634][ T1304] loop0: rw=2049, want=53952, limit=40427 [ 85.003822][ T610] attempt to access beyond end of device [ 85.003822][ T610] loop0: rw=2049, want=45104, limit=40427 [ 85.033988][ T1306] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,inode_readahead_blks=0x0000000000400000,minixdf,,errors=continue [ 85.066070][ T1306] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 85.144684][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 85.144697][ T24] audit: type=1400 audit(1729549355.260:319): avc: denied { setattr } for pid=1305 comm="syz.1.223" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.215743][ T399] usb 4-1: USB disconnect, device number 4 [ 85.266949][ T1301] F2FS-fs (loop2): Unrecognized mount option "m0{{[vkU [ 85.266949][ T1301] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 85.337405][ T1313] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.348812][ T1313] EXT4-fs (loop0): 1 truncate cleaned up [ 85.354579][ T1313] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue [ 85.467619][ T24] audit: type=1400 audit(1729549355.530:320): avc: denied { ioctl } for pid=1314 comm="syz.3.226" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18324 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.637530][ T1313] capability: warning: `syz.0.224' uses deprecated v2 capabilities in a way that may be insecure [ 85.659157][ T1321] EXT4-fs error (device loop3): ext4_fill_super:4955: inode #2: comm syz.3.226: casefold flag without casefold feature [ 85.672512][ T1321] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 85.685144][ T1321] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 85.685144][ T1321] [ 85.695759][ T1321] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 85.713418][ T1318] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 85.726480][ T1324] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.738853][ T24] audit: type=1400 audit(1729549355.850:321): avc: denied { write } for pid=1316 comm="syz.1.225" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.754750][ T1324] EXT4-fs (loop2): 1 truncate cleaned up [ 85.775118][ T24] audit: type=1400 audit(1729549355.850:322): avc: denied { add_name } for pid=1316 comm="syz.1.225" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.796111][ T24] audit: type=1400 audit(1729549355.850:323): avc: denied { associate } for pid=1316 comm="syz.1.225" name="cpu.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.817964][ T24] audit: type=1400 audit(1729549355.870:324): avc: denied { read append open } for pid=1316 comm="syz.1.225" path="/9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop1" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.827209][ T1324] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 85.942764][ T414] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.299321][ T1334] sit: Src spoofed 0.0.0.0/2002:0:400:: -> 0.0.0.0/2042::fb:ffff:ff00:0 [ 86.323003][ T395] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.353003][ T414] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 86.361908][ T414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.422728][ T414] usb 1-1: config 0 descriptor?? [ 86.466492][ T24] audit: type=1400 audit(1729549356.580:325): avc: denied { relabelfrom } for pid=1338 comm="syz.3.230" name="" dev="pipefs" ino=19129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 86.619567][ T1348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.811816][ T1350] EXT4-fs (loop3): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 86.820257][ T395] usb 2-1: Using ep0 maxpacket: 16 [ 86.942807][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.953924][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.964702][ T395] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.977378][ T600] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 86.984699][ T395] usb 2-1: New USB device found, idVendor=fff9, idProduct=ffff, bcdDevice= 0.00 [ 86.993881][ T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.002323][ T395] usb 2-1: config 0 descriptor?? [ 87.092800][ T414] usb 1-1: Cannot read MAC address [ 87.097843][ T414] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -61 [ 87.232744][ T600] usb 5-1: Using ep0 maxpacket: 32 [ 87.362873][ T600] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 87.381997][ T600] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 87.392078][ T600] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 87.410290][ T600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.419957][ T1354] F2FS-fs (loop3): invalid crc value [ 87.426932][ T1354] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.444986][ T600] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.454697][ T600] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 87.461160][ T1354] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 87.475419][ T600] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 87.475433][ T600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.476069][ T600] usb 5-1: config 0 descriptor?? [ 88.093423][ T1370] attempt to access beyond end of device [ 88.093423][ T1370] loop3: rw=2049, want=53952, limit=40427 [ 88.269714][ T600] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 88.344135][ T871] attempt to access beyond end of device [ 88.344135][ T871] loop3: rw=2049, want=45104, limit=40427 [ 88.351862][ T399] usb 1-1: USB disconnect, device number 6 [ 88.367433][ T24] audit: type=1400 audit(1729549358.480:326): avc: denied { read write } for pid=1343 comm="syz.4.233" name="lp0" dev="devtmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 88.368431][ T731] usb 5-1: USB disconnect, device number 7 [ 88.391210][ C0] usblp0: nonzero read bulk status received: -71 [ 88.391338][ T24] audit: type=1400 audit(1729549358.480:327): avc: denied { open } for pid=1343 comm="syz.4.233" path="/dev/usb/lp0" dev="devtmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 88.725765][ T24] audit: type=1400 audit(1729549358.840:328): avc: denied { ioctl } for pid=1343 comm="syz.4.233" path=2F6465762F7573622F6C7030202864656C6574656429 dev="devtmpfs" ino=509 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 88.755822][ T1343] usblp0: removed [ 88.942763][ T395] usbhid 2-1:0.0: can't add hid device: -71 [ 88.948669][ T395] usbhid: probe of 2-1:0.0 failed with error -71 [ 88.958249][ T395] usb 2-1: USB disconnect, device number 6 [ 89.137918][ T1373] F2FS-fs (loop2): Unrecognized mount option "m0{{[vkU [ 89.137918][ T1373] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 89.182802][ T20] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.602779][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.733657][ T20] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.853495][ T1394] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 89.864423][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.923979][ T1392] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.949354][ T1392] EXT4-fs (loop2): 1 truncate cleaned up [ 89.964914][ T1392] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 89.993219][ T20] usb 4-1: config 0 descriptor?? [ 90.439661][ T24] audit: type=1400 audit(1729549360.550:329): avc: denied { bind } for pid=1399 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.530793][ T1408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.642881][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 91.745843][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 91.752953][ T20] usb 4-1: USB disconnect, device number 5 [ 92.082136][ T24] audit: type=1400 audit(1729549362.190:330): avc: denied { create } for pid=1415 comm="syz.2.247" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.196810][ T1420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 92.359194][ T1426] input: syz0 as /devices/virtual/input/input18 [ 93.664497][ T24] audit: type=1400 audit(1729549363.770:331): avc: denied { bind } for pid=1422 comm="syz.3.249" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.745266][ T24] audit: type=1400 audit(1729549363.770:332): avc: denied { name_bind } for pid=1422 comm="syz.3.249" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 93.841664][ T24] audit: type=1400 audit(1729549363.770:333): avc: denied { node_bind } for pid=1422 comm="syz.3.249" saddr=fc01:: src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 93.955273][ T24] audit: type=1400 audit(1729549363.770:334): avc: denied { write } for pid=1422 comm="syz.3.249" laddr=fe80::16 lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.429489][ T1445] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.446790][ T24] audit: type=1400 audit(1729549363.860:335): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.546805][ T1445] EXT4-fs (loop4): 1 truncate cleaned up [ 94.593928][ T1445] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 95.276622][ T1458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.283854][ T1458] IPv6: NLM_F_CREATE should be set when creating new route [ 95.379600][ T371] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.522862][ T53] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.892744][ T53] usb 4-1: Using ep0 maxpacket: 16 [ 97.318478][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.466067][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.484838][ T53] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.497853][ T53] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 97.506948][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.519501][ T53] usb 4-1: config 0 descriptor?? [ 97.581926][ T1490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 97.692753][ T371] usb 2-1: device not accepting address 7, error -71 [ 97.721545][ T1478] F2FS-fs (loop1): invalid crc value [ 97.911346][ T20] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 97.969759][ T1478] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.717060][ T1505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.738838][ T1478] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 98.779110][ T1505] EXT4-fs (loop4): 1 truncate cleaned up [ 98.798652][ T1505] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 98.938242][ T1450] udc-core: couldn't find an available UDC or it's busy [ 98.945358][ T1450] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 99.142850][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.194477][ T1450] syz.3.256[1450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.194548][ T1450] syz.3.256[1450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.311778][ T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.331987][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 99.341393][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.349538][ T53] usbhid 4-1:0.0: can't add hid device: -71 [ 99.355797][ T53] usbhid: probe of 4-1:0.0 failed with error -71 [ 99.365889][ T20] usb 3-1: config 0 descriptor?? [ 99.438676][ T53] usb 4-1: USB disconnect, device number 6 [ 99.917529][ T1117] attempt to access beyond end of device [ 99.917529][ T1117] loop1: rw=2049, want=45104, limit=40427 [ 100.178925][ T1526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.488300][ T5] usb 3-1: USB disconnect, device number 9 [ 100.632242][ T1535] serio: Serial port ptm0 [ 101.652721][ T371] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.440265][ T1546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 102.924816][ T1554] overlayfs: './file0' not a directory [ 103.019541][ T1548] F2FS-fs (loop1): invalid crc value [ 103.030826][ T1548] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.069402][ T1548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 103.081798][ T15] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 103.098624][ T1557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.130178][ T1557] EXT4-fs (loop2): 1 truncate cleaned up [ 103.135780][ T1557] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 103.332611][ T1567] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 103.341770][ T1567] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 103.451009][ T53] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.577148][ T1569] attempt to access beyond end of device [ 103.577148][ T1569] loop1: rw=2049, want=53952, limit=40427 [ 103.882806][ T371] usb 5-1: string descriptor 0 read error: -71 [ 103.884519][ T1117] attempt to access beyond end of device [ 103.884519][ T1117] loop1: rw=2049, want=45104, limit=40427 [ 103.888856][ T371] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 103.922790][ T15] usb 1-1: device descriptor read/all, error -71 [ 103.952802][ T371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.975050][ T371] usb 5-1: config 0 descriptor?? [ 103.992799][ T371] usb 5-1: can't set config #0, error -71 [ 104.002889][ T371] usb 5-1: USB disconnect, device number 8 [ 104.144692][ T1572] F2FS-fs (loop4): invalid crc value [ 104.207100][ T1586] overlayfs: './file0' not a directory [ 104.227989][ T24] audit: type=1326 audit(1729549374.330:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625dcd5ff9 code=0x7ffc0000 [ 104.259591][ T1572] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.343282][ T53] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 104.388201][ T24] audit: type=1326 audit(1729549374.330:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625dcd5ff9 code=0x7ffc0000 [ 104.395054][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.419465][ T53] usb 4-1: Product: syz [ 104.419621][ T24] audit: type=1326 audit(1729549374.330:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f625dcd5ff9 code=0x7ffc0000 [ 104.423651][ T53] usb 4-1: Manufacturer: syz [ 104.451164][ T53] usb 4-1: SerialNumber: syz [ 104.452757][ T1572] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 104.455614][ T20] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 104.470872][ T53] usb 4-1: config 0 descriptor?? [ 104.475954][ T24] audit: type=1326 audit(1729549374.330:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625dcd5ff9 code=0x7ffc0000 [ 104.499505][ T24] audit: type=1326 audit(1729549374.330:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625dcd5ff9 code=0x7ffc0000 [ 104.523599][ T24] audit: type=1326 audit(1729549374.330:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f625dcd5ff9 code=0x7ffc0000 [ 104.547290][ T24] audit: type=1326 audit(1729549374.330:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625dcd5ff9 code=0x7ffc0000 [ 104.571028][ T24] audit: type=1326 audit(1729549374.330:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625dcd5ff9 code=0x7ffc0000 [ 104.594649][ T24] audit: type=1326 audit(1729549374.330:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f625dcd5ff9 code=0x7ffc0000 [ 104.618355][ T24] audit: type=1326 audit(1729549374.330:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625dcd5ff9 code=0x7ffc0000 [ 104.922996][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.951969][ T1590] attempt to access beyond end of device [ 104.951969][ T1590] loop4: rw=2049, want=53952, limit=40427 [ 105.165867][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 105.275994][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 105.314394][ T1574] F2FS-fs (loop0): Unrecognized mount option "m0{{[vkU [ 105.314394][ T1574] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 105.400930][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.440948][ T20] usb 2-1: config 0 descriptor?? [ 105.455153][ T486] usb 4-1: USB disconnect, device number 7 [ 105.472948][ T1582] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.917936][ T1598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 106.185321][ T1604] netlink: 'syz.2.291': attribute type 4 has an invalid length. [ 106.194588][ T284] attempt to access beyond end of device [ 106.194588][ T284] loop4: rw=2049, want=45104, limit=40427 [ 106.267867][ T1582] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.867372][ T20] logitech-djreceiver 0003:046D:C513.000A: item fetching failed at offset 5/7 [ 106.977061][ T20] logitech-djreceiver 0003:046D:C513.000A: logi_dj_probe: parse failed [ 107.007466][ T20] logitech-djreceiver: probe of 0003:046D:C513.000A failed with error -22 [ 107.280816][ T1624] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.300985][ T1624] EXT4-fs (loop0): 1 truncate cleaned up [ 107.306666][ T1624] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 107.307380][ T486] usb 2-1: USB disconnect, device number 9 [ 107.334180][ T1612] F2FS-fs (loop2): invalid crc value [ 107.356854][ T1612] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.403522][ T1612] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 107.836074][ T1639] attempt to access beyond end of device [ 107.836074][ T1639] loop2: rw=2049, want=53952, limit=40427 [ 108.106961][ T1620] overlayfs: statfs failed on './file0' [ 108.113515][ T286] attempt to access beyond end of device [ 108.113515][ T286] loop2: rw=2049, want=45104, limit=40427 [ 108.220233][ T1646] overlayfs: './file0' not a directory [ 108.323978][ T1644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 108.593952][ T610] EXT4-fs error (device loop0): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 108.772973][ T1652] serio: Serial port ptm0 [ 108.925732][ T1655] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.932770][ T1655] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.940184][ T1655] device bridge_slave_0 entered promiscuous mode [ 108.947887][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.954976][ T1655] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.962430][ T1655] device bridge_slave_1 entered promiscuous mode [ 108.976922][ T1650] F2FS-fs (loop3): invalid crc value [ 109.102733][ T15] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 109.114881][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.121760][ T1655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.129238][ T1655] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.136387][ T1655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.148851][ T1667] incfs_lookup_dentry err:-14 [ 109.154402][ T1667] incfs: Can't find or create .incomplete dir in ./file0 [ 109.161929][ T1650] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.162009][ T1667] incfs: mount failed -14 [ 109.195093][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.213509][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.230974][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.295242][ T1648] F2FS-fs (loop4): Unrecognized mount option "m0{{[vkU [ 109.295242][ T1648] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 109.319131][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.327896][ T1650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 109.328074][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.342481][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.353974][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.363633][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.370572][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.380285][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.389083][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.530260][ T1655] device veth0_vlan entered promiscuous mode [ 109.663936][ T1655] device veth1_macvtap entered promiscuous mode [ 110.247426][ T1677] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 110.262820][ T1677] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.314240][ T1677] EXT4-fs (loop0): 1 truncate cleaned up [ 110.319868][ T1677] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,mblk_io_submit,noload,,errors=continue [ 110.403101][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 110.403114][ T24] audit: type=1400 audit(1729549380.520:372): avc: denied { bind } for pid=1676 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.517948][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.528653][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.538620][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.547613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.555963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.566457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.575056][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.622975][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.634175][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.717109][ T1691] attempt to access beyond end of device [ 110.717109][ T1691] loop3: rw=2049, want=53952, limit=40427 [ 110.752755][ T486] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 110.840904][ T1687] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 110.924903][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.938319][ T15] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 110.938853][ T871] attempt to access beyond end of device [ 110.938853][ T871] loop3: rw=2049, want=45104, limit=40427 [ 110.947872][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.968300][ T15] usb 3-1: config 0 descriptor?? [ 111.162760][ T486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.179128][ T486] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 111.200503][ T486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.224147][ T486] usb 1-1: config 0 descriptor?? [ 111.456635][ T15] wacom 0003:056A:00C5.000B: hidraw0: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.2-1/input0 [ 111.563150][ T486] usb 1-1: string descriptor 0 read error: -71 [ 111.660382][ T1699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 111.672875][ T486] usbhid 1-1:0.0: can't add hid device: -71 [ 111.681459][ T24] audit: type=1400 audit(1729549381.790:373): avc: denied { write } for pid=1700 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.701333][ T486] usbhid: probe of 1-1:0.0 failed with error -71 [ 111.711012][ T486] usb 1-1: USB disconnect, device number 9 [ 111.988451][ T1704] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.008379][ T1704] EXT4-fs (loop4): 1 truncate cleaned up [ 112.014022][ T1704] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 112.463009][ T1713] overlayfs: './file0' not a directory [ 112.492766][ T24] audit: type=1326 audit(1729549382.590:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 112.791916][ T24] audit: type=1326 audit(1729549382.590:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 113.028572][ T1719] incfs_lookup_dentry err:-14 [ 113.040404][ T24] audit: type=1326 audit(1729549382.590:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 113.041495][ T1719] incfs: Can't find or create .incomplete dir in ./file0 [ 113.072555][ T24] audit: type=1326 audit(1729549382.590:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 113.076069][ T432] usb 3-1: USB disconnect, device number 10 [ 113.103311][ T1719] incfs: mount failed -14 [ 113.142746][ T24] audit: type=1326 audit(1729549382.590:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 113.273044][ T1726] exfat: Deprecated parameter 'utf8' [ 113.278362][ T1726] exfat: Deprecated parameter 'utf8' [ 113.292930][ T24] audit: type=1326 audit(1729549382.590:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 113.456409][ T1726] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207e, chksum : 0x9e35a9ea, utbl_chksum : 0xe619d30d) [ 113.977181][ T24] audit: type=1326 audit(1729549382.590:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 114.231778][ T24] audit: type=1326 audit(1729549382.590:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70855e5ff9 code=0x7ffc0000 [ 114.356182][ T1736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.320'. [ 114.371520][ T1736] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 114.684712][ T284] EXT4-fs error (device loop4): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 114.773160][ T1738] exfat: Deprecated parameter 'utf8' [ 114.778378][ T1738] exfat: Deprecated parameter 'utf8' [ 114.912614][ T1738] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207e, chksum : 0x9e35a9ea, utbl_chksum : 0xe619d30d) [ 115.251368][ T1750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.322'. [ 115.263464][ T1750] sch_tbf: burst 88 is lower than device bridge0 mtu (1514) ! [ 115.559707][ T1748] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.582403][ T1748] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.583151][ T1731] F2FS-fs (loop3): Unrecognized mount option "m0{{[vkU [ 115.583151][ T1731] 2q%ۯ{|tBfxJ9 Ev_'BTNp" or missing value [ 115.603506][ T1748] device bridge_slave_0 entered promiscuous mode [ 115.617088][ T1748] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.624248][ T1748] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.636761][ T1748] device bridge_slave_1 entered promiscuous mode [ 115.700290][ T1748] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.707215][ T1748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.714508][ T1748] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.721354][ T1748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.731248][ T1756] device sit0 entered promiscuous mode [ 115.736913][ T1756] device vlan2 entered promiscuous mode [ 115.761381][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.769312][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.777210][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.785020][ T1759] FAULT_INJECTION: forcing a failure. [ 115.785020][ T1759] name failslab, interval 1, probability 0, space 0, times 0 [ 115.793443][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.798227][ T1759] CPU: 0 PID: 1759 Comm: syz.1.328 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 115.814515][ T1759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.824511][ T1759] Call Trace: [ 115.827630][ T1759] dump_stack_lvl+0x1e2/0x24b [ 115.832130][ T1759] ? bfq_pos_tree_add_move+0x43b/0x43b [ 115.837552][ T1759] dump_stack+0x15/0x17 [ 115.841540][ T1759] should_fail+0x3c6/0x510 [ 115.845794][ T1759] ? mm_init+0x378/0x8e0 [ 115.849966][ T1759] __should_failslab+0xa4/0xe0 [ 115.854744][ T1759] should_failslab+0x9/0x20 [ 115.858709][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.859088][ T1759] kmem_cache_alloc_trace+0x3a/0x2e0 [ 115.872197][ T1759] mm_init+0x378/0x8e0 [ 115.876115][ T1759] mm_alloc+0x9b/0xb0 [ 115.877463][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.879911][ T1759] alloc_bprm+0x1d3/0x680 [ 115.879931][ T1759] ? __check_object_size+0x2e6/0x3c0 [ 115.886929][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.891163][ T1759] do_execveat_common+0x1a1/0xac0 [ 115.891173][ T1759] ? getname_flags+0x1fd/0x520 [ 115.891189][ T1759] __x64_sys_execveat+0xdb/0xf0 [ 115.917826][ T1759] do_syscall_64+0x34/0x70 [ 115.922080][ T1759] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 115.927885][ T1759] RIP: 0033:0x7f09bb1ecff9 [ 115.932151][ T1759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.951588][ T1759] RSP: 002b:00007f09b9e45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 115.959919][ T1759] RAX: ffffffffffffffda RBX: 00007f09bb3a5058 RCX: 00007f09bb1ecff9 [ 115.967816][ T1759] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 115.975800][ T1759] RBP: 00007f09b9e45090 R08: 0000000000000000 R09: 0000000000000000 [ 115.983734][ T1759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.991531][ T1759] R13: 0000000000000000 R14: 00007f09bb3a5058 R15: 00007ffe64de8158 [ 116.001458][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.010708][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.017598][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.036650][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.044932][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.060985][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.072084][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.080225][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.091106][ T1756] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.097168][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.114013][ T1756] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.125859][ T1748] device veth0_vlan entered promiscuous mode [ 116.160469][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.198687][ T1748] device veth1_macvtap entered promiscuous mode [ 116.217096][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.234411][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.236319][ T1768] incfs_lookup_dentry err:-14 [ 116.247444][ T1768] incfs: Can't find or create .incomplete dir in ./file0 [ 116.256435][ T1768] incfs: mount failed -14 [ 116.663455][ T1772] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.679432][ T1772] EXT4-fs (loop1): 1 truncate cleaned up [ 116.685922][ T1772] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 116.730839][ T1785] overlayfs: './file0' not a directory [ 116.980381][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 116.993291][ T24] audit: type=1326 audit(1729549386.910:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838aaacff9 code=0x7ffc0000 [ 117.017376][ T24] audit: type=1326 audit(1729549386.910:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838aaacff9 code=0x7ffc0000 [ 117.096720][ T24] audit: type=1326 audit(1729549386.920:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f838aaacff9 code=0x7ffc0000 [ 117.141862][ T24] audit: type=1326 audit(1729549386.920:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838aaacff9 code=0x7ffc0000 [ 117.348541][ T1778] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 117.362230][ T24] audit: type=1326 audit(1729549386.920:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838aaacff9 code=0x7ffc0000 [ 117.369265][ T1778] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff) [ 117.519670][ T24] audit: type=1326 audit(1729549386.920:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f838aaacff9 code=0x7ffc0000 [ 117.564852][ T24] audit: type=1326 audit(1729549386.920:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838aaacff9 code=0x7ffc0000 [ 117.594563][ T24] audit: type=1326 audit(1729549386.920:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838aaacff9 code=0x7ffc0000 [ 117.652400][ T24] audit: type=1326 audit(1729549386.920:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f838aaacff9 code=0x7ffc0000 [ 117.707757][ T1793] FAT-fs (loop4): Directory bread(block 64) failed [ 117.726842][ T1793] FAT-fs (loop4): Directory bread(block 65) failed [ 117.747765][ T1793] FAT-fs (loop4): Directory bread(block 66) failed [ 117.764969][ T24] audit: type=1326 audit(1729549386.920:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838aaacff9 code=0x7ffc0000 [ 117.791787][ T1793] FAT-fs (loop4): Directory bread(block 67) failed [ 117.812743][ T1793] FAT-fs (loop4): Directory bread(block 68) failed [ 117.832746][ T1793] FAT-fs (loop4): Directory bread(block 69) failed [ 117.852766][ T1793] FAT-fs (loop4): Directory bread(block 70) failed [ 117.872756][ T1793] FAT-fs (loop4): Directory bread(block 71) failed [ 117.879220][ T1793] FAT-fs (loop4): Directory bread(block 72) failed [ 117.916337][ T1793] FAT-fs (loop4): Directory bread(block 73) failed [ 118.117215][ T1117] EXT4-fs error (device loop1): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 118.143322][ T1802] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 118.366450][ T1807] incfs_lookup_dentry err:-5 [ 118.371230][ T1807] incfs: Can't find or create .index dir in ./file0 [ 118.395508][ T1807] incfs: mount failed -5 [ 118.402776][ T395] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 118.448031][ T1805] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.471921][ T1805] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.479375][ T1805] device bridge_slave_0 entered promiscuous mode [ 118.488647][ T1805] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.495764][ T1805] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.503615][ T1805] device bridge_slave_1 entered promiscuous mode [ 118.545333][ T1812] incfs_lookup_dentry err:-14 [ 118.562893][ T1812] incfs: Can't find or create .incomplete dir in ./file0 [ 118.570884][ T1812] incfs: mount failed -14 [ 118.623072][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.631041][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.646568][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.655094][ T395] usb 3-1: Using ep0 maxpacket: 8 [ 118.660205][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.668611][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.675913][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.684278][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.704735][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.712954][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.719820][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.737445][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.749779][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.761241][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.781811][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.790227][ T395] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 118.798958][ T395] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 118.810612][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.818396][ T395] usb 3-1: config 135 has no interface number 0 [ 118.833263][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.840803][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.849450][ T1805] device veth0_vlan entered promiscuous mode [ 118.862292][ T1805] device veth1_macvtap entered promiscuous mode [ 118.869372][ T395] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.883855][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.017385][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.026900][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.037746][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.167665][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.226066][ T7] device bridge_slave_1 left promiscuous mode [ 119.232136][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.246872][ T7] device bridge_slave_0 left promiscuous mode [ 119.253251][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.261358][ T7] device veth1_macvtap left promiscuous mode [ 119.267724][ T7] device veth0_vlan left promiscuous mode [ 119.343416][ T395] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 119.355221][ T1824] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 119.368754][ T395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.379622][ T1824] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 119.397275][ T395] usb 3-1: Product: syz [ 119.507680][ T395] usb 3-1: Manufacturer: syz [ 119.519104][ T395] usb 3-1: SerialNumber: syz [ 119.574130][ T395] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 119.583259][ T395] uvcvideo: No valid video chain found. [ 119.591099][ T1820] F2FS-fs (loop0): invalid crc value [ 119.659649][ T432] usb 3-1: USB disconnect, device number 11 [ 119.705942][ T1820] F2FS-fs (loop0): Found nat_bits in checkpoint [ 119.731937][ T1836] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:341: inode #15: comm syz.1.339: verity file corrupted; can't find descriptor [ 119.767389][ T1836] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 120.690318][ T1850] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.700542][ T1820] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 120.753820][ T1850] EXT4-fs (loop2): 1 truncate cleaned up [ 120.769608][ T1850] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 120.902627][ T1855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.944368][ T1855] EXT4-fs (loop4): 1 truncate cleaned up [ 120.949846][ T1855] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 121.254735][ T1866] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 121.263667][ T1866] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 121.811410][ T1879] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 121.868689][ T1880] attempt to access beyond end of device [ 121.868689][ T1880] loop0: rw=2049, want=53952, limit=40427 [ 122.152746][ T1655] attempt to access beyond end of device [ 122.152746][ T1655] loop0: rw=2049, want=45104, limit=40427 [ 122.153593][ T286] EXT4-fs error (device loop2): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 122.318356][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 122.318370][ T24] audit: type=1326 audit(1729549392.430:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69750b8ff9 code=0x7ffc0000 [ 122.356112][ T24] audit: type=1326 audit(1729549392.470:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69750b8ff9 code=0x7ffc0000 [ 122.380732][ T24] audit: type=1326 audit(1729549392.470:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69750b8ff9 code=0x7ffc0000 [ 122.405479][ T24] audit: type=1326 audit(1729549392.470:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69750b8ff9 code=0x7ffc0000 [ 122.429386][ T24] audit: type=1326 audit(1729549392.470:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69750b8ff9 code=0x7ffc0000 [ 122.453609][ T24] audit: type=1326 audit(1729549392.470:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69750b8ff9 code=0x7ffc0000 [ 122.503119][ T24] audit: type=1326 audit(1729549392.470:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69750b8ff9 code=0x7ffc0000 [ 122.527495][ T24] audit: type=1326 audit(1729549392.470:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69750b8ff9 code=0x7ffc0000 [ 122.555940][ T24] audit: type=1326 audit(1729549392.470:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f69750b8ff9 code=0x7ffc0000 [ 122.580352][ T24] audit: type=1326 audit(1729549392.470:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69750b8ff9 code=0x7ffc0000 [ 122.614303][ T1886] FAT-fs (loop1): Unrecognized mount option "rhortnaYe=mixed" or missing value [ 122.630916][ T1889] serio: Serial port ptm0 [ 123.652749][ T1499] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.687696][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.695117][ T1893] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.702367][ T1893] device bridge_slave_0 entered promiscuous mode [ 123.719176][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.726869][ T1893] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.734705][ T1893] device bridge_slave_1 entered promiscuous mode [ 123.829601][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.837081][ T1893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.844366][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.851302][ T1893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.883056][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.890893][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.899984][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.923278][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.931480][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.949391][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.962359][ T1893] device veth0_vlan entered promiscuous mode [ 123.969872][ T305] device bridge_slave_1 left promiscuous mode [ 123.976496][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.984667][ T305] device bridge_slave_0 left promiscuous mode [ 123.991049][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.999124][ T305] device veth1_macvtap left promiscuous mode [ 124.005195][ T305] device veth0_vlan left promiscuous mode [ 124.043081][ T5] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.072228][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.094925][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.103158][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.110541][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.121968][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.132337][ T1893] device veth1_macvtap entered promiscuous mode [ 124.141653][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.164067][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.192773][ T1499] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.328350][ T1499] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.338723][ T1499] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.353123][ T1499] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 124.362066][ T1499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.381599][ T1499] usb 1-1: config 0 descriptor?? [ 124.452778][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 124.512868][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 124.585707][ T1931] incfs_lookup_dentry err:-14 [ 124.590434][ T1931] incfs: Can't find or create .incomplete dir in ./file0 [ 124.597885][ T1931] incfs: mount failed -14 [ 124.612880][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 124.632851][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 124.641826][ T5] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 124.652282][ T5] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 124.662293][ T5] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 124.672175][ T5] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 124.682398][ T5] usb 5-1: config 1 interface 0 has no altsetting 0 [ 124.689267][ T5] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 124.698519][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.744649][ T5] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 124.812371][ T1940] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 125.668448][ T1499] wacom 0003:056A:00C5.000C: hidraw0: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0 [ 125.692989][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 125.702405][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.711037][ T25] usb 4-1: Product: syz [ 125.716374][ T25] usb 4-1: Manufacturer: syz [ 125.719179][ T5] scsi host1: usb-storage 5-1:1.0 [ 125.730465][ T25] usb 4-1: SerialNumber: syz [ 125.764158][ T1901] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 125.799317][ T1946] device syzkaller0 entered promiscuous mode [ 125.849497][ T399] usb 1-1: USB disconnect, device number 10 [ 125.883442][ T1950] exfat: Deprecated parameter 'utf8' [ 125.888781][ T1950] exfat: Deprecated parameter 'utf8' [ 125.918422][ T1499] usb 5-1: USB disconnect, device number 9 [ 125.974093][ T1952] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 125.993547][ T25] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 126.007342][ T1955] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 126.007342][ T1955] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 126.007342][ T1955] [ 126.007859][ T1950] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207e, chksum : 0x9e35a9ea, utbl_chksum : 0xe619d30d) [ 126.113934][ T1955] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,nouser_xattr,noauto_da_alloc,,errors=continue [ 126.269987][ T1968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.372'. [ 126.289302][ T1968] sch_tbf: burst 88 is lower than device batadv_slave_0 mtu (1514) ! [ 127.051092][ T414] usb 4-1: USB disconnect, device number 8 [ 127.066700][ T414] usblp0: removed [ 127.149867][ T1955] EXT4-fs (sda1): shut down requested (1) [ 127.159790][ T1955] Aborting journal on device sda1-8. [ 127.255001][ T1981] EXT4-fs (loop3): 1 orphan inode deleted [ 127.261071][ T1981] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 127.270139][ T1981] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038 (0x7fffffff) [ 127.331807][ T7] attempt to access beyond end of device [ 127.331807][ T7] loop4: rw=1, want=153, limit=128 [ 127.467846][ T1994] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.481843][ T1994] EXT4-fs (loop4): 1 truncate cleaned up [ 127.487693][ T1994] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 127.550537][ T2000] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 127.562818][ T414] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.605984][ T1998] serio: Serial port ptm0 [ 128.522762][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.709259][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 128.709273][ T24] audit: type=1400 audit(1729549398.820:473): avc: denied { unlink } for pid=1993 comm="syz.4.382" name="#17" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.783307][ T2009] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 128.789791][ T2009] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 128.812772][ T414] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 128.825829][ T414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.835053][ T2009] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 128.847479][ T414] usb 1-1: Product: syz [ 128.851472][ T414] usb 1-1: Manufacturer: syz [ 128.856611][ T414] usb 1-1: SerialNumber: syz [ 128.862093][ T414] usb 1-1: config 0 descriptor?? [ 128.883431][ T2009] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 128.890341][ T2009] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.981186][ T1748] EXT4-fs error (device loop4): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 129.062887][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.076846][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.087313][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.100686][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 129.111799][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.121288][ T25] usb 4-1: config 0 descriptor?? [ 129.142849][ T432] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.325379][ T414] usb 1-1: USB disconnect, device number 11 [ 129.362830][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 129.368735][ T25] usbhid: probe of 4-1:0.0 failed with error -71 [ 129.384297][ T25] usb 4-1: USB disconnect, device number 9 [ 129.402723][ T432] usb 2-1: Using ep0 maxpacket: 16 [ 129.408376][ T2020] attempt to access beyond end of device [ 129.408376][ T2020] loop2: rw=2049, want=45120, limit=40427 [ 129.462813][ T432] usb 2-1: device descriptor read/all, error -71 [ 129.743233][ T305] device bridge_slave_1 left promiscuous mode [ 129.749259][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.756809][ T305] device bridge_slave_0 left promiscuous mode [ 129.763243][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.770695][ T305] device veth1_macvtap left promiscuous mode [ 129.776787][ T305] device veth0_vlan left promiscuous mode [ 131.283296][ T305] device bridge_slave_1 left promiscuous mode [ 131.289296][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.296801][ T305] device bridge_slave_0 left promiscuous mode [ 131.302763][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.310212][ T305] device bridge_slave_1 left promiscuous mode [ 131.316387][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.323668][ T305] device bridge_slave_0 left promiscuous mode [ 131.330015][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.337761][ T305] device bridge_slave_1 left promiscuous mode [ 131.344040][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.351451][ T305] device bridge_slave_0 left promiscuous mode [ 131.357480][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.365415][ T305] device veth1_macvtap left promiscuous mode [ 131.371307][ T305] device veth0_vlan left promiscuous mode [ 131.377300][ T305] device veth1_macvtap left promiscuous mode [ 131.383364][ T305] device veth0_vlan left promiscuous mode [ 131.388984][ T305] device veth1_macvtap left promiscuous mode [ 131.394784][ T305] device veth0_vlan left promiscuous mode