last executing test programs: 18m36.445560342s ago: executing program 2 (id=3500): ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r3, &(0x7f0000000040)=""/34, 0x22, 0x40, &(0x7f00000004c0)={0x11, 0x5, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(r0, 0xe, &(0x7f0000000140)={0x400000000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() 18m35.131127873s ago: executing program 2 (id=3507): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB="1300"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 18m35.099427416s ago: executing program 2 (id=3509): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x8, 0x1, 0x0, r2, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)={0x13b8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x34, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x2f, 0xb, "00aa7e128db56b7b2be7bbfd619a68114dac1855268f77dafc1424415dcac24b37755c757b60934f4416e6"}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x8, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1228, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x11b8, 0x4, 0x0, 0x1, [{0x11b4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xc, 0x1, "d85aa9a04f73bedd"}, @NL80211_PKTPAT_PATTERN={0x6c, 0x2, "0a48ef3d281fe7a5e8ce047364962131b25aebda9b0657c487655b8f0514edee3d90aee5111230f9d22dd75039187ef7acb521d56c8a1bd95dbc6f5d881a6d036722a2ef8f87cf85116efd4017152b5ca2a235f189ac34a0f6a00737c014206189cd0fae471a1d5b"}, @NL80211_PKTPAT_MASK={0xd8, 0x1, "efb8c97f003db7f7863b20e117866ac6d2e82c616821e37d29e59b5cb9f1131e46aa5e4f0a84a96cd21a43f3c9f42e45c195c9b4aaa0a89b623b3171deef585f0d50c197b5c13a23fcf172b43b13e7d766c149112afaa71e4756ccb6e84545594d85379b50259e79ab51c6c72d94aacc2f9dc47c776011509d875bf6dfe45daeda689e6a22f426e2c0586a1e3bba2efc32c815107d13a1d87d890bec669f70bb41dec27494ff33ab849f1cbed932b7637b62d46124b3d80eaa85b6b04b7bcf0cb7757e98f8af2fef9e8b480e03dcfb52a68609a3"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_MASK={0x3b, 0x1, "cea8b3881d1086edad5e86895af01b74cd62684efd5e8c0cadd0580308a5bcb442f2a2787ac0da9a10b4e0476e9742f27e650c76f2b0d7"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x5c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="5066ae79fd45"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xb0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xa0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x8f, 0xb, "541db9ef75e6aac0789d8a41629eaec90f30c75e53e6f8bbf80e74059652ba27633f982257519c76d2ae4af9ce886cb919183e1ec264646f4a83ef63fda98ddc9b0864536fcc80d857fffc1820f83b3e4b1f50e0531d93d07cf0de4f60fb7360e9c383ea567aa37bb7bcf0151339a61315e61eb063a69c8e5e5e752b8cdd28b976404e8ae574a6d7a4bd97"}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x70, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x60, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x1ff}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x81}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0xb5, "ddb905b5f7e2", @long="f8d104a07e1f926ffbe27f0677c7b2b3"}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x5}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0x13b8}, 0x1, 0x0, 0x0, 0xa2}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x4020400) 18m33.891227099s ago: executing program 2 (id=3515): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={{0x14, 0x3ea}, [], {0x14, 0x3f4}}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r3, 0xe00, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="149e3801d824"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x700, {0x4, 0x5, 0x6, 0xc}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0a0) shutdown(r0, 0x0) 18m33.75584994s ago: executing program 2 (id=3517): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) getpid() (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a800008100000008004500002000ffffffff109078000000000000000000004e20000c907801000000"], 0x0) 17m23.23188443s ago: executing program 2 (id=3565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1}, 0x0) close(r7) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 14.301106217s ago: executing program 1 (id=7522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x5, 0x1, 0x0, 0x4, 0x0, 0x80000001, [{0x0, 0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x30, 0x61, 0x61]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000180)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.828215672s ago: executing program 1 (id=7527): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000100000000dbb380c91d8e57e2d006495b03d836e9181e86db487d4ab0c1636f0e09f173bc6ff92fe4f68e6dccf3258b8c2eeca3f573870016d1b8db7b2eed79639e1fdb154d3327b2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES16=r2, @ANYRES16=r4, @ANYRESDEC=r5, @ANYRES32=r4, @ANYRES8, @ANYRES16=r3], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) write$cgroup_pid(r2, &(0x7f0000000300), 0x20000312) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1600000000000000040000000180000000000000", @ANYRES32, @ANYBLOB="00000000000007c6f69163f44b00020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ea00000000000000000000400000000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000a06851abb438bd0000030000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000f1ffffffbfffffcc007ec62676", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 12.61026968s ago: executing program 0 (id=7529): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x78) 12.545059676s ago: executing program 0 (id=7530): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getrlimit(0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x60600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000008c0)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x33) 11.845627645s ago: executing program 1 (id=7531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000740)={0x8000015, 0x0, [{0x2, 0x86, &(0x7f0000000280)=""/134}, {0x4000, 0x80, &(0x7f0000000400)=""/128}, {0xd000, 0xc3, &(0x7f0000000340)=""/191}]}) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x400c84, &(0x7f0000000280), 0x3, 0x786, &(0x7f0000001900)="$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") ptrace$setregs(0x1a, 0x0, 0xc, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11.78110329s ago: executing program 1 (id=7532): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)={0x50, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008001}, 0x40040) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r8}, 0x18) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x202}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x3, 0x5002) splice(r1, &(0x7f0000000040), r0, &(0x7f0000000080), 0xa, 0x4) 11.482574836s ago: executing program 1 (id=7533): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x9}, 0x18) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x7, {0x7, 0x0, "c2817842c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_getattr(r1, &(0x7f00000000c0)={0x38}, 0x38, 0x0) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) write$binfmt_elf32(r6, &(0x7f0000000d40)=ANY=[], 0xa41) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x18) setitimer(0x2, 0x0, 0x0) 9.398666303s ago: executing program 1 (id=7537): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) bind$bt_hci(r5, &(0x7f0000000140), 0x6) 5.956869575s ago: executing program 4 (id=7543): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x12, &(0x7f0000000580)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r4}, @tail_call, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @alu={0x7, 0x0, 0x7, 0x8, 0x9, 0x4, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0x5553, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) write(0xffffffffffffffff, &(0x7f00000000c0)="1800000016005f0214fffffffffffff807000000010000", 0x17) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) 5.028457053s ago: executing program 4 (id=7545): r0 = socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "609c3c88b5ab4dd96445e1850c0c65b7"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x10, 0x4}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x7, 0x0, "87fa3fe7", "ea58c74d"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9e, 0x1, 0x4, 0x9, 0xfb, 0x2, 0xac}}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000880)={0x0, 0x989680}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) 3.607608544s ago: executing program 4 (id=7548): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r0, &(0x7f0000003640)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$selinux_access(r6, &(0x7f0000000180)={'system_u:object_r:apm_bios_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x53) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x77365}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) 2.732055208s ago: executing program 4 (id=7549): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xf5}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000000000000000000000000000034952f3f7dd4290df9722e7a70560806b7019d68b43cd8563102087f2fcd734bd6b2012cab6ce44df4275a596e0bd8c3e2c5d5aaf68d02fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, 0x0, &(0x7f0000001540)=""/155}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r7, @ANYRES8=r0, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="af5f522d5c7c17446d195bd3e90922591bde00830e0fef6d2db85e1f4be70bd1101a6c002cd014b50dd3", @ANYRES32=r2, @ANYRESOCT=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000003c0)='rtc_irq_set_freq\x00', r8, 0x0, 0x2}, 0x18) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 1.801092477s ago: executing program 4 (id=7553): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r0, &(0x7f0000003640)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$selinux_access(r6, &(0x7f0000000180)={'system_u:object_r:apm_bios_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x53) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x77365}]}}}]}, 0x58}}, 0x0) 1.796161367s ago: executing program 3 (id=7554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)={0x50, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008001}, 0x40040) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x202}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 1.717556254s ago: executing program 0 (id=7551): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c0002800500160004000000521b3f5edcafec62517ebc572ed9970d"], 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB="00000000000006fa9a08", @ANYRES32=0x0, @ANYRES32], 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c696f636861727365743d63703933322c636f6465706167653d3835372c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c696f636861727365743d6575632d6a702c757466383d302c646f733178666c6f7070792c726f6469722c726f6469722c003fc604f8ff7d2b25d49c2bd2ac7ab8337b339de1ab71d62b2a6d60505e1d35e457f71de2567bf294092274d5bdbfe577f4189dad762567e7da2ad7b21b2377e7837945228bf549b93ca2c899e28253186632e400252f53db8277d503b621abb159d96790ba64b2938b7c7a712e96753dd7c83feb96a43d03515b03a2085b396541b7241b0e860b"], 0x1, 0x217, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ff0000000000000001f0ff000000068000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c0002800800050020000000080004005e1b000006000300010000000800150076270e00060002003c49"], 0x78}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000b99d45b5cf57f9c6ffffb703000008000000b704000000000000850000008200000095eea51f8300dd7237dc71fc2e12e3080c6661f0ed4a0fe0a020a73160cb64dffd128c07ecb2bb0643ec84ec614a62e961e6fe5838cffb99c5a6eb357be4d1127024b0d344a499"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) epoll_create(0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3b8) 1.067989269s ago: executing program 3 (id=7555): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) chdir(&(0x7f0000000140)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r4, &(0x7f0000000700)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0xfffffffe, 0x8) 1.005526714s ago: executing program 3 (id=7556): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002140)="f1451394a86d56b46c594b8edde95827d106f3b44634180f367dfd567851f1eac1ab2adcc78550c79f2e8c7e200818802cd8e948542a24721449ef80d6fbf935dbd8410af1ff462d56d480f02e85d96062388a90e345ac86040caf4febd7f05beb6db33030e614a1a9aa2738d643d9e9da8cc5f2ded7b01be366970ea3aecc374dee18c094bba66b9728dcc2d384d6e5d9c6511cca40c0e82b9bd3528f1be8ef408c9e32cdc176fd5905e4448a3bee3612356b30dba039a99caafde1ab687a563aceb827ef902e4361bd18754895d8bb4f834c6fb0961448b916fda2d511757988406875a128af807e3b500ad26b57730ea4e73ab3033a185c8b3afe35872cd9ddf92d81272e800e75ae86db4d913e227ef7f140ce2c98006a30ef2e7482f6af3a82824adbe8a1325aeb3a757330afe94f484e788ed70411c00e0846b48d2fc611c21c1240e5d3dbf6e332d1c03329939ab041d0376de8fed2a7783dfff3821949495dc92e15eaca5df4b13960732f16b008ef3698f10585b2bd2d290b108f27e71d4aa5004e8de88518b8124a68585419d9275c83f5f0e969501cf4784af52355cfb4bd067ff73d2fa966db9ba5204541d31f12e418c2b723361fe16e51d1b2a1cb9785121c0caf1bef2d1c746f4adf3e217b4141c82d7d8fbabf1e1d3e967b5643ba6b22acb365991f7e9577c1f889959cadd38ed92bfd7aad31a1a1b13d71ebf78d2af48f9e7717ed49d66ff866465c739905d44ea2997299969cb84b906da266c774d04ba17060f09b0bedb38feb8ae6850428dd59ea1eb0c20697a762e085917a85ac1e15376ce05a504022807a4e6b6fd9c45f0c77276e64f5b492101bd8ad44e93e8e2154581d365627571a531f3cfda4fe472421485a4b298b525ef0c2dae4b6bbe8b8a5b33e3b4e322391bbffd0669fcf25c0a23175988f0e449d342d5be3195bc92246bdea414b7a52aa585bdf5f9803b306fb49def852b38c010bb2f50450f8f9b96b614b6ff525483bab3f66bd755cc337f015b3fdd1cb40a698cd57e20ffce734c5a56b7d92a3f4247042a75f85abe395df016c710db15fb1391634cf7b9505d685025ef2bbdc8fe84fa6562769ca2e383a2115cef43fea4fa114159b8896039203568b0fde329106e0f0eed6770be4935b875d92701d632d182cf25b262cd85dd8266ebb9471ef1a71846dcb2d88e73672c3a6de8fd86dfb5e747ced9707456d8126ae4ab187f3b48f13caee1215d78f8c84474babd91d0755d6a287d98c9f797f0c82cfbe5a3a3bad381152728ec0f979b4bb84f0db61eaa27e1be3a785a301b685644759c338d738e46e2c1b8643c8f4ee3627403efc6bf4a1b9a98eadee7d63f0fb1858c5e2a2b113a22b9c41fe7e6c298f747a06b47022c8890cbec3eaacbd09cec548392495c071f5b36505edd09e15c260f5dd98177a3ff6656604a320c48868470cb2d1a4f20c3646b39358bcf9bb2140600dae42891b3ddb3a86d7dd542a4f32436489ca8ec29056dd50c38121be15aa2c1dc90d5c23ab5af924bf4a2d7b05f30a3216edc3b4d9c6ea0058d5d885570f5d46ae6006681298c0bc275f4d600c7d4e883eb358d20d82c1e5a9dedf1bbc4b02fd176157f6da3fbf5eb747ef7d2053395f6809913b5ca6b0b6e68a972fce886765bc1ac13fb396ff90a4f865590e0cc5125cdc390eedf4a706911b2825ea5afcecd453afe529576aaaa8972012258d4f9859508b319f5ea8d5d20fc5bd3b25a3aa24d3658bf859e684faa331ab65dda79e977070f32f29dce4838ddd32a25dd48cd759c21c550e0e2f27348e88570eda4887f073599e8f69190a9e6aa380bafa98b4dd57e710863fad4dc41e442a1765a9495981f0d8b338fdbec8f3072721fd840b2198e5a5a053c58589278d3ba84d2042394f04833006ddb99e4b99ec13a46ae34f03f783555befd6ddd7367713ecec2efe075c8f7b62eef56180632e01bc38d7dfc86d6e9518c477ad346b2a9b7d9403f85246cd514aa4f113ce4d1090719c8d8135839783d38814bfb105eb63fa56802e9e2e0ae01fe6c716bc0c379ee4320ebb50b5fb84fced731341d76f9ce1efa063667ad43c6d413a351c675ed0666ca0ae272eb879ea474e511c488dfa7fdde6d20b76de6ae7a77e7357ed3055b908883aef8bd6d6ae80e53a13427afc200c630f3e3048719551f71c22c5b0984cd7b37b922d032d3c57976e8e66bcd880dd3b65f1fa13acc73d2cbaedadb9a51d1a196b220bfd977623a97bd1c1cd705b2219cc928d980ba64096239fe9ed3185e638bc784669e935a9fd7e26b4e1f8c5760fd55c393e37e9b4abd098f977d8219a2fb8194438ca013acc498bd0957266450365a259c44be6dc46996b4a1557b946a1601cfda0c67509ee1e8ed4401bc2878a50360f4981832b5dec44091548a9a9b78796b0c7cb9d46451477c889852623e6668e5d37bd6aa6cb532ffd227299f951f75a40b9939a24892ab23cbb9730cf7631ea84d46830d0d2e581ebd1f4603cf8a711bf0ddefb8b9fe4cd66faf56816e4c148dc807edc3f9b0e5ffd9c76e8f46013f56788b31b3de9172e4752ff30a5283fad328bab020f675c2bca8c5f83a4b0a0f1e953f931c2e15e65538b6043b58b895f5134d97bfab087ae741fa2fd327bdbe8e89ca63acd7424acf6f7c7790cd6ab1617d5d30240476821a66edc91795467bd6cc07ee53678c914c310dd826af4b1a9f2f771c7c002bf50b3f193f671669b4a48fa18106b656d26a6f26378fb7ff0649f2ea6a42ea73ab87ae7e585a5d78d47ba64a5715a083523bc1c0235d8a7bee3262c29b993a8c678a6ca46befd03afd4fcf25082e25300bf59999f069df1a33e279104378c375777c3cd2c34bd50abb48107a7f0448f83eb6d4ecb4be16a96d61ba02cc4c3a25bf00404df2876d1347744617d6b5053dce5cf9a7e668858c68ecaa3f5f45673067f8d18b96cd1544f6d65ab75f3506183a5b9c40c3d6976bc17d0543ba1b035384b95a84469cbef7a153527e2596034c4c928703fae6142ba0c305931f832e997e95d8e449e2c8869d91a44122a99aed6cedd7feebaccdf4561d01988bb11f16677ce682ef79bd516bca6896e94713bd4811e244cb50f3df929e354a058a68f045613d77749b0b8f836ce88634fa1accdee9a73ad5c947b33c786f14d5a1c2aa12f9b953d9d6490c1021cf02e6486dc33960d18308bc162a6089848d92cc87bbf4bd4b152e6a7fd0ea0deee070d26aac62cb7de8fb3be0d87bafe038bd34e31d48c01b6f874026801479de73e730ad719247a8a2a020edd5f92af01cb2337a482da08413377b780b307475d3d197e8026433a254888e2023ed341cedb46c636e36e76ad25493511877b24ae50c74194029e468b115a4e8d385696b40422f56f94c2669f58340f74372194e4756fe14918de3c5cbfe9c66c359c64c5462191f6daa15a3d03926a6dd02eb5ca4b4a9c6f56b9022eabe482253568f180056845f8ea48a0c0217f31eb26e2c5898f6dcdcb3cfa4eda5184205ccf0f0ba18ba4970ace745c760527b0fb39a08804d784d2e63f65407817a7921639b3fa8db8ee66462de788a10ea2f25dadee02b158459135a1663d37294e659862adcf849235b5606340139d63358a4c55411fa474e5dc835591a904ebd01cc04b2774c7a0d11bd150bfefc0492706beb15c85ff83ae773863dc74a847d0695abeda994c95c951d6f7e910675a05d98eb7c0dbe9be20d6492251bd42f906b3cce7a31c5173136a9c8507a325b3872c82047db814205576d154635ce405e18dd50201c589d8cbe2e8c9a6f7f5c9903d16d99b48dab99783159c9365677a6d092784a083f16bfb7fd5bbec62479877d3fc3b6a90d3da669c09c213b9e06f82c1ebf7563bf782c15765b5998992797e0d8935e9531dcc25526dd8abf44b30d206f55d09b910c0e875395e0dcd6e6fb37da9d2df3c6821292a3bc74b0bd5561ddfec869042a30affd5968cb53eb581da075dcf313633d434e2834ffdb4c0f9f8b1be14dc336cfe910f7db3f027e7a15061ddc36818a22b27ad4f675ed71f4c0a8aacc64aa45e2b4c293683388dc68eefce77fb9dc9a059bc741702afc7a01b18136048b5c366bd0d52aad62407b6b6fb6eb514858a5ac47deb83c10092cd28c2658c15b47e843757f9f8ac5ca4905cbc6240dd4a5f03a3574b082b03cb3f7eab927cea1a6924207fce678312418ab0b07e90a3a94fd3b8ac908274017773a2e6050c53d11e94f6cfd530cc29b211157ef7f80d8b3bb066640b7044f2f6487c40ea432699ae9a3f5d1c2d0e33e9f7de9b3fd72413d4055a5c57cbf3603c7952f2d9b211c36042d166221483680c2d54880805ce4b1ad211d7cb1191da908f3aa137d66ddbd3c2d76b3eb0f8ac74b9e7aaf4ea5e9ce00af1d1784fe2f3693e8f33669a90bef5d090926dda37f0ffe6c13f68389bc9fcfda3bd81cb9cc170b715f4873025ca225bd50f1dd858154c2bd6a66569a26859384b9991a73c8028f286d3bcbadd884c2b2be04e3b43b0c0dcf52e8017e99ab30232af905cd42005ec61c617211b7696f5cdf42d43f23b6b25455839493cc6042844f6c9f0b841553a90647c6634bffac2e62249158a17262afbcf6909890ce53fea6ca12994280db7f3a254fafad215147c494cd4163be7bfd8ba57c3de6e746832c372b8c0749a6364e7c3c477a7044001da3213b755a8d4f126ef141da1973aa86e70e5273c487bb01573005c0a439c93683d80aa1a6d090d472b6cbfc1f89fe72ad9175cecf7a58bed9f51f418aca0f3660ad65cb062d9f20cdc397acd2716fabacd352643c55603a12ceec8de6d06fd78530d81da77f1921c5257615bfdf68fb8926cd60dd5462487647945d5d558ca5b1744986367ca43e8b07f22f52a7852d82fb6991bd00de67fda47628df8df4e5ce6149462e793db2f3e12bee416f0b1420c2ff2badc863e58b882ff002cc13597a1a014bff70b35ff1990ecbf19be40d2a60b161de54fec605b7ebe08901d96e3654d8638b96a7455e331455ad5b86bc75178d8e27a666a6b3641de489294e7002af6cb01ff4a13e378666dc77bbded915da6142fc94abbf63343e63c368e097d9f3c0eda4e5dfaa80e808b97bba9019ed98172a062e94af78a51066e5b38fd0457e84a45e3d641cbc4c465c81d07fd4a32fd37992ab5cbcbbfeefdda0ff87d1ccf509d32701ade0ca7fb39e3b07edec88ae5e8116ab192c9f3bf32351dd562ce698a194bc6bcf01871c21625e0c62942aafa3701a1f6fda983413e17c6bb0ac0b366a79901924d4fb876115e8b9c9dd02882d5051afc88636063dde03fec00ce1a65443fe5b22ca3c15bea5938785bc73fdd203db27edff1b9f61938ea449e8f0deabcd7f9da7d6d774418710ac2cc27403a6d8c241a308b76fea8dc4fa3ad980b44b34307bfbea4b57307e370d78bb0f1e238203b90af904aad25678962e036a7e8be3b59c5192400bc4fcc7b20fbaaa733651b9241ff4ea20953a1ab37f34d72f0bc5a5f3ba3a1bb69c07ad68dfb70bd185de5a948be048f3c6c6a081fe22f5dea53df6e1bdbbbdfdd909415b766ee01f78de5ae2130510c03057d8043e61b4934ff551b77f8bd36b2802bd405ff3be5c67711f152aa906a66dbc2c6d32d331807ab99db9403dae2fd0f652ec076d7f5d9aa6def0534793d80547e648815f1dea95d4df6ac19dabac2bfdbd7cfa4933bf1721a860a39901d0630c0b102d3720bd7418807f5669071dbec43b13d1dce46a7058de4e05a58b5d9d21151591fb23bd59c551f00496f9e35e2becc01e5bac7fdfe90c946187727b47334a5a66f2d5006a22f2c718fc821366c3e26ca348642bd05a38a462575a2bec4dfe9120460f82e6b1e860697e380e863295917ff45c64ad237c1caa7dae399b1520fbe8e256788195c30bd2c366afc03e827f5b03fd672191d2a29110ffec619c7231e35062b0fd1dc42a8c93ed2989bc02681e2c09cbcd5623f666f830f3c21dc63d2095723300c5ae7321d6f55cf2ef9cac31d60314fa0d54ea65fc2c9dfd81e5dacdd4528920c1b87cd12db74776304fc42519fd6c7bbc8fe88750c9aedf7ddb0399e0e1d543c39d67622ab53332c1086da457e6d43d9e37e059ee9d1aff2b3ffbbfed035ed40071f312f12cec6385eaeee2a473511dab651a763a9d27c1522aacdd0ff1f0c3de442f5e9dad2110eacac006dae0b704354ae0c6349bf3a6f5683c4594270fe94ff7e07b49dbabb2fcfa2b639449a66ba9039b6920ee128c4b3cc07af0a89798ddaf7806f5c4eeb7c222a9a6e7f089fa955eddf4d76e490648d4a072c582794ad73e2444d11cb4d9295e81ec9dc39902b631e42f66c47253947f819cf55b05917359ee3072beccfb6f86a5e42c66f8115b5a3a536adabc13a3718acf37b4a852f0ef02a613fa05974edd6c49adf3db678ba3cb71f1fdf79f4e448e35d9bd4d51cd640f646abbe1a18cbe2b07483d495652d8b81078d122ef6f3e3b40e5d8518ddb47782df81e7e01421747593f3aadf5b2f0c53ab6c9323459ce6c3df08f1935ed0636a821e6b9257edf24f600cf09226c3ee7c8507e103d2bfaf807379854cf84a49149cd424ac7e2094a0939fe9768b79dfd86069778dcd8129c269741a36bbda9082263143c3e791b5b1c17708870a57200ff79611c12021c999c7bf86aaced6c77da86fac50cf8a577f8e6f162d3738b908baf0cf902d7ca7ec7ec10ba5afb16ab6257754ab4e935ef75f959f8290d8ff45bdebc49e22c6b6f884a94f89dd4672cfdca1aaafa9612dc9ebc9ee64a3593802395f05b920970c0ccac5ef0e92bb6306f6f1b77a3a1a652ba3fa57a9385c3caf7a55e8e0f77b9dec0798b3e0ef4d5fa9f05c5d4027c0b6011440ad26ed2c5bd645a961c0ff72cd51bbbb86b7fae2fd1f2f1fe3f72841de3863b5d0ac5c5c59d8761c0b626f0826905e7e602dcbfd3a1128d93b0d14589af4fee0bd5f2f774fe8fe6d84175f7ddb9271c88d2a7dabab0feb2f2fafeb7b6f530a9f86f4ed0c82f42cf8ad59e6925e85b0e183456b4d4c0aeacaa81f6ecc223747d330caff7ce22ac667a91ca7524fb1c1ff6daa2cb53f6ea674abff60d032e1311827c535e868fcc4079f195f1a9a0d02e80f2d5c88586ea10bd741c14c6025788c48f9decb25c046c0310e3df4695a21135d9bd8869d851305ad974e08b6d5e804561a72b1fe5a723e17f1c23234358054536fded63f44da67249fd861dae0b37719c99693f296569c1e9778406caa7d5fc6dc34de56bd16e502d6aed6376731f872ff72379a1c3e0e99d7db71253cd3378bed839c53a0843537232e51b89b133213c65b577e419e3a073100f80da85284f99a14a7f92f6ae64e9938d4f26f861ba7e95a8aff567b7f52754cd23f4f5cfb33e4c550770413978a0446d8e2be91a173aa085ac9d211cbce7ade1d4c96b0cd1f291548917effea13283c3bf3e251ab75f9240c8ea0d71e01788189929c554b4fe29fc66b8e2d08cb87ab14cc5b850a7019857c985005b2cdf7638ae628e4fe3717cfa548ce30f21100999473f8c9374195d3918e5775e396da13f6f53496f4a906ccdd6724d1c7ea6685202a94cb20d6e448de1bfd309f0546658f595e890200f7100962cf38004cc8f8a50958736bc369366ce0901d1b9e236ebae2022d200705bad53d910df689d3f2419cc9362be1c449c04ccdf56c162e9fcc3dc034c7120313ba016f9efb7b2ff1b7f921e900aae7c6707e3ed9cba74d0c0526ae2a0dd2a2cc57a92e765f767ab72a0aa2052ca88f411f29ee211ffafa0c6d68403cf2cf3fa7426bf2ab4cd8e2d379124b776e2d4fa1643190ec840173a518ce64abded5f3a5cf1b7acf07cdedf4f0dd9c3cdc403cef22ba9787db62b119099a7d3d084fdb67d187821badd23cc386c12efb15c93694b2d00e35da0eb853e94634f737e26e4b130035cc21e3f6ab46d7264dbdb9dfef35da2b2b71e149811f2e2c7cda4e336ca14dbd0907e1c693c6b4d2ebd2fcdec236c9a890690f89bc62ff2b6bd1079befd3f2f496cab2ed2c2490cb07843a7ab6b82fb0cf25e74b0627761c1e899abf9a890526341a0cee8f79acf1374e91a9960651570bbd92f3705e627780afdcdfc51d2d9424dca25524436c57a69d0c44d96673e83d0f3752ebdc66deda901a2b2b94bfad245843284bc5087c7250b82a972684092db37ed9dae02265cf700842f69a949b763a1d39479887547f53c7307ea42597f9217c1abf33403a986fc0068d6726ce2f12dfa88afbc82c1fb0b2583630a4984de927b159101c72fc1b3ede7f2630d0f949024bf346cc97e06d31077ad9b4d753ce9a64803de32d729ca059a55bc30834f6f88c5d4d7bb337ecf4d3b004f25270d7fe45507aee99d123eacc840b04fa9ba16aa81e305ac963ac66db2d7e2b68d72ca5c6e3215826bfb08a07571ddd0078ba8b6c6b30bb413cf56ee39eb68635c63a61717ee9d836f33746a1b2f9d5895857858b9979b6d5e34419134ca5ae4aafc2ff101007469a77ada2c61a17f881dec6e32a9388a69d09bb5563ec7762b51a3a86e2f489853c448553cce598952205a8e36f91d4010b657957cfb274d96e671e88293e6d46b26152f5938727d39bf76f9c3344cad5456740ff0225b65547ed290cec15f33b051eeef05a9ba1234fe526ccfb2a6c5c93e02a6adf43b0b61c54fabca863c1aa7775b661d6d6965483de21bb8e555eda1f09b3d9907b60f24be396a81296f8cab8bb87c85ba437860d004213c1cb12a9eaae9a597f7e551939d4aa59bd9264655100461ab1ef2db3f88aba22500dba48a6e479907a3c3249087259030c8c995d381c8a28da84eb738f3ca801f53732bcc409f01608d87ca265f367e042ed99a522a7eadf09e73e99441462b02c34a0d24d1eb228587f49c8c8a6c611e9520aa4c426a47befecf19e97d02629165ca17abc8bd62ee9d236efa1df979c53cef44b82bb42581deddf09fd4a0973ac6dabc4ed4f6d97cffafa0f10ab2ec18810aba8b0d6816c2b97e4647aa0305258b11e6fae55d71887811fab50036300a7db4cd12b03e86c617ad84c2d5771340440eb162aca3de6df7afc2d4da55b3b7bc29598728fcab967f7a22f225dc23f320d5f24e9696edffe8c48d0d3f728f36cd2e784a505ed78d8a5af251283d7f64d045efb45bf314d958ba30507c6241ea38ef0e7ba4285d236d5003a7eff6ae6615a074c9524115ed9df763ee4663aed527026cc8de7f3bc9b14dc763d075d0fff72476208cf0dc60d8812a77170ba29934d8dc792fda9b97f765c4a408232337d1a0d4ce1b9958719a6722765d23297a70035d76ef4d178e0e3a7c047f9652335cd84ca2ec6d455a4c29c29b9c04a1984b3b3463c9bf134b2e6f27ceed78e595510b748b26b2be458a3f99a7fb4271347e1365bb433a9a3fe1f1742b1f8e6d3927bdd5836a55bb81ed55446b44bdf9b7371879d777dc0d16d074e9824bd418f804597daffb28eccde1e4de91c4c6aaf5425496542d759c97aa0af98b6f9c4231ed92e7b64cf70ccbb895bcb790d3f7f590faed571fb2008232bdf27e42882b374016910f16d1c154e97c84b1d14a87c7d5924c0081ced6c031166833e2779fcb86419107a2841723af02e164ae8601ba163d799634eeabfb63b3c0b312b930b364e9533ac0c8e24f5b1c065bc9a853ebf177846696ce2700b051a02630dd327cfdabcfae05e0ada505c850db3afdaa810cf72a67119a6dd3ce35ce03e1b70764e24860065eec34ab4fbafbb22b4e978ab5fb57b6f57e71bd14a41916aa5de3d70e85cf3e68a629275350fb82249953aa186c7601379fe78a6fddf5290bebe8b081f3674ece5158fcc68165f43537fc99f2bee48b1801fba63c382c78a4d9ec2607395f7ba19f0e04a9a4c009b19fa6bff6aaa5a7f4d3bd14793d68822eb4144c04425d9a0afe1ff8320592dcc3f63fe750999db9fbb26840df0c6eaa9e053da8adc7e0e2977fcebf94be1397b661ae6cfa0e8be1567a01a17e916409922deae1f005e1d58959b7f4b594043d2564a37992735507631dec4faf6ec3f652781e799c7640e6a7acabb4f8243fe699efa2598f5a64ae1d31ba5ee2cd3c31511bed91a58327a767fe0b4654f8acd51f94504c3dbec19fe0fa843c11045ef3d54e76693b9ac963505df01c14471a7639c3d863ea5bfcae7b70243751df557b1876ccb072650f626e8cea23b42279812dad7433fbb65730fde1ac776bfe40536d2acd4da5674a0b3dc65775d5d5d017cb160e6a496ce492b63bceeff61dcfdf882ec8ce6dcc2e1ffda0659a79bda8bd40286b5b547e29d5760804f06d1b87eea0ecee3430de4998e2e8805a25adae237138fa800d341c0e68241778ca9e497333f8938bffe1c4c8e85345ca473b58f4ed9a138bdced6cf18799dbfab2b81246b540abe38033727be93472c5bc24109530da4fe41bd876c2a57e7cdcdb5068125e39bb389b1052172234655961c421eab762d603cf2f295c9603e96efa15abbf9e5047b52590f98258c339ef48276028ac393a67e0cff15021875eb06db46d5b437c40d61fb9fa029f29153a0fa2ba9068b307d9a79cdc10fcdc60a86982265b483512667c6bbcb61d329cec2257a07b91f4b57348fd2e4f79bf836c29fefc7a75befd1ce008ab4d48df631230f1afe468ebc8e12ad3cd65afd53ac5786ee6a49938d8fd4ecbcce826cef4db81d30fcd16ad86e0f3155951aade8ebc824226430d6d6f01b95cbfcdad7628b11d8a980b12daa88a36a589b9aca577cf07afcd87b901d617de3a8767ffa7820e004584d64cf5280c8d2ded6e2e517541d21adeaeaa7e72edbbfccb1e42743e019afef81e840ca6a5471701b89133d5e3fac5ddb408a244c619b104b2b65df8af030e52c12441c9ea388a985ca04502d94e1c1db290baa2c6ee21a6a8fcdd3c46d4ad9b073af5c5c020845817444987f7f73be40bbc5654bd6cdf34341f0812c5a1065745ff988140154dfb9da0a16eade0814b75ca086df10e12508e9d69cb97a33465364e5e12d768ecb716bd7d06c4f1966cb86b259c3b462a463be29a08fee7e1e004520d6cd4a3a5fccad9c33660c9d2267cf7e3eb2c584d209727f25454925269f1591bc7a87e9dff66097c562edeed6a2029eb99165664c5876a023fe17ca05d0da0245d3a95f80ffd6ff4a7ff29883435c33b2968eac6c6d046aeab9aff704e4fe7a4fe7021c7fb233259ed089fe4623c172798a6870befea1be6fe1d1f53cabb4e1c3e21b376b28c4c8258bb5715550811c0355a1daaf68181131acf0d5eb15e8cd09ebeaf64f45c2779aa17a73ccff930f63e50d0729b7a5ba9a2e9cc1916ab6e826a13dc863bda3808671ceb5cc5f596375da6e10ec05450ea80b6d550a9f7af04704eb10f628205ec1a294c109fa8a29f24228162ef464fc2a70677ac36c57b630f43c8224b4308534272711e4d28497473e930505c19fd66bf68b86a5db871ad573419869caa46ab6e7e539edcdfb04628b7b119e", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 941.06618ms ago: executing program 3 (id=7557): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) chdir(&(0x7f0000000140)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r4, &(0x7f0000000700)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000340)=""/163, 0xa3}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0xfffffffe, 0x8) 924.846201ms ago: executing program 4 (id=7558): r0 = socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "609c3c88b5ab4dd96445e1850c0c65b7"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x10, 0x4}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x7, 0x0, "87fa3fe7", "ea58c74d"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9e, 0x1, 0x4, 0x9, 0xfb, 0x2, 0xac}}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000880)={0x0, 0x989680}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) 884.978495ms ago: executing program 3 (id=7559): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = dup2(r6, r6) write$tun(r7, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, &(0x7f000000b5c0)}}], 0x2, 0x40002042, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r7, 0x20, &(0x7f00000004c0)={&(0x7f00000008c0)=""/243, 0xf3, 0x0, &(0x7f00000003c0)=""/8, 0x8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x12, &(0x7f0000000540)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx}, @jmp={0x5, 0x0, 0x4, 0x8, 0x5, 0xfffffffffffffff8, 0xffffffffffffffff}], &(0x7f0000000280)='syzkaller\x00', 0x1, 0xd8, &(0x7f0000000600)=""/216, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2f, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x7e80, 0x6}, 0x10, r8, r5, 0x3, &(0x7f0000000780)=[r7], &(0x7f00000007c0)=[{0x5, 0x4, 0x10, 0x7}, {0x5, 0x3, 0x5, 0x5}, {0x2, 0x4, 0x3}], 0x10, 0x1ff, @void, @value}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) unshare(0x42040080) 813.356761ms ago: executing program 0 (id=7560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x4000010, 0xffffffffffffffff, 0xe9e41000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f00000000c0)={[{@init_itable}]}, 0xfc, 0x47e, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) open(&(0x7f0000000000)='./bus\x00', 0x401c2, 0xb) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40c000}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r6, &(0x7f0000000240)={0x2, 0x2c, 0x0, 0x2c, 0x40000a, 0x2c}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000180)={0x1, 0x0, [{0x2, 0xcb, &(0x7f0000000300)=""/203}]}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) 435.724283ms ago: executing program 0 (id=7561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x100, 0x14) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r2, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006ec0)="3c1ee6acc83eade3358a11f0e5057286413d15aa49c1675b049a58fedf3ba389161f94951ce4458a6a487c8008c64af1682984808405c1349592b99d593e2eeb54ecdddcbab5e170d467d7d24b15c277ce14fee77698ebd2401e31c736b9edb9d5fa790c3ffc63cf52f974b0ebcf9c270a0bbc0ce74a93c9fcb1ad175c16251219556e593ec19a27b3d91b96c4ea7292c2b2e6d866d03a9b77fdbc51a14615db88b3c5441d3ab4e812cd6199ca905435ac483e05928672eb7b1245b43c5f69bc8d20e64eda2e13bebdb27256aee0d863a992b508fcf3bece2e10f7ed489d521b24b5f7fb236573679c13a250c24bd9c55812373004aa9bb5863ff5146ccfd0541e0b922593a1629fdbd1d5f787287b6b8ba108898ee1c93b0f064ac8bf636aea6adfbda520021c39e7e903f5ef13ea2e40848a1cde4971704f5a4ce910b4ed1d12a6d366d1642a0657fd7ff591823b305b84f11bfca9012c97757a95fb1e80bbeb0f7f96d60302d76b9be8913c27e443ab7d6e042b5e7cc57bfa8e3fa36cb214435a0ada024ae9bf141b6e53915639bbc344833860516e408cc3263d61e5e016ae5285c0eb98753b7d0abc79d96d6bc77e35810b25b34040474f6fdd011f45fd7bac85d1620f56e21831ea07a1dd416ed8aeb80684619141f5435383cd2cbc9d24e005ed04528355e61e1f74d0a1f2d7fcb2f05c5a294b4a57b27e2bbe9641e6210cf5b5524def91cba7419e2283210ace174b1002f69b0aaf7f93b585198f526323dba7c5dd573bb4b00d764e34c12b4d53fead619c66ebbf95e11ec406b699af2fe7be2feee3f9380dda3f328f7c81669f3134c08317b61e8352af847ca9784f4230b95aaa8d37b6a965609b6ea5c2f901b9c8573d5f0772c39ac7cce0b0fa623f128ae871e9e60ef87a9605ee5d1a3dc7db8ee0c37f7e51ceb8c891c0418da7a0203eed42c242a764967253235cae2aac3afb59d66ab65aafd2f233c62640c2f841c1088883923abc005bad9d474f0837b96d1bf5d85294c648471dc6ef5bc44708f6c81f88451a10d9186e3fbf7e4f0ab96bbd3eeefb53a26fc1bbe67d7a8bc1f60e960e125d17b84b48bc12cbee2f6011873bc5386aa4105c7efd8b3faf2bb466263e15b558bd22d642965d7c38e5182bd79b84ac864cab9d5614a04fe6e1454e2113d40402ff62e6a46a9ecc0fabe760eb69cba469382d21460f03e49b8cf8c5c4d62322f288f47bdad8ffe7341958ccbf9b23e69d3d017124c305580fa1b7a6dacb737746f075b989dab70ff17fed5cf1d459e138415ae18b4bf30b70c1102eacf30ac9d77cd0c34a4acdf09d1298bc1de8ef6e59b821f99290d3de48bda94310ff5caed65242410e1a1709d2bd30fc6d20844eff8dc8fba4c75fb18aaa1211bbb704b4ed6e031ada9d5781b2a0477f6847365f1409414e3bfd4e556ed1d5cba404337a6c060f1c482e26adfcaf0dcd1cc2d74f5aad86964c68010f469ab531749792a7519b8e17fe5b3ffa185de3bbea87d057ab9c11a5a36f52fba018ea06302a1fd992a46b206df806784c98d1a1a94a5e1e5bb47d8da43bac85ee1ba09cb339585d6f117acb43c9300eb2b3d809c7bb712ed1721caa01f367524a58f500919df35f9a4d4b78c0598531a6629f640776315f37dbd2937e909150be2167ac8bdfb75219451b9a141bc874720ff245ef300ac1e85acf8048c6f34540df435216c7752625021d8295003595d84977729a4e5e63209aed0a0defcb126c12d0bae4de096a5df7075f0192257aef5186a1f17f378306bb27cbab9adfe52853c0866dab09790679a0b3a15e5afc801a0bd1247a6eead51bd8024f0f54666ff4f1cfd5a546698916ade144e9af51187e53224c6970e43c18e4d535c54b9abe5f65d983090f1671bc762913e32ed14babd156c36f191a2d35142ddb537580040d8fe038b85dbc3514ffc649b6079ab44e2d28d87872c2017f6ef8c8cf08e0396719fe47dd71caecf3485e405f6f9f376383cd9b164979ab46eba28c60a96b12ebb1c177dc7b345e99c176fe1c5ca0fca58153155783218b476762a918ff63016bd5b71b1252fd49ddd6a95847ae275f98ac03ee3aad1364277442459b5945378ff0513d0ec5a553955476e5c4febc92596ec18f3ec042abb8d993abf59d953b007f3394fc480effd77f7115798b7cf7c110de6e5c19633128723243743da3ba295e1cd08029453c185ce71c671827249ff15fef59f345f6521251a9a39b3afc2b8f0fda511e5d533f32bf738c47fe3a06dece21ba68241fb20ab12761399ca32076765af7ea85203c515d5c0201713011dbaca30f07b769bcab4c2e4bc64e34697fa1bf6a20c35e90976c5407c9203d1c23038518341c67fe98eccd935a0fb82269b4f8bbf0dc1e1766599a93d9f504e48c5a0cd6fad7e8dc2665b2aaa14bbc9d42348c6eb4f2320512aa2bda26b216d9749c738d4124706587d79cbf9af97f54983da0e1994861b09f349bcaccffa8d7f3f8c86f6dfd812629d2077615bcdef905faa14691da88c752eeae73690fa52e456e639fbe3068cf58c73809bfcc5c3a1326a5e4833f664faa0833790a16ed329cf96a2fe349e029226ad6e7798439f55ad63df9c4513dfeb214e4ce1e8a8b82cc818e11d525197b0bde5a52726f52fb8c4c792b346f9dbf66ac10815eb9b7aff19af1c9e1bfa1f93ea16cb168706621e1b051e97991cd169eef35de9ddecc888ccc0b2f4f5cdc4366cd319fa2877fa3f6a70d952ea6d8dd27accffc65a5ba8a782d2411d51d11324542ac0f13dd0394c4c512699230ebe8a2701cb9445699e9c51aadfe31b672a0fddb7934ba5f1a2fd7bc7ae4572d18b9c4c8360b5fd15d03223454ea5b458e4c522c954436deea59986bd443a3cc96429c27ef641611625f4d1b5125671c21ef29fb06aed76b7b7ae66181b69d080e3e78b00fe7301e65083d016053f7e866db91f0a38dbe41a5dd83da0730d437df34a0072fd4a40cdea7b6e914fe3b700916925d098164598b0bb5617ed61fd5fd99ed2057e6ce693162d9faa8938e669810f2a9214e2419e316cbc21a1a0f1dd8fee05a0885d88d105880d10a452e70e3df684893d0189a0a5c97661e298da39b0e03d95a789edd8d5e71176276ba4e59e38f4e0e099908c53000d3250e96f6596390a145ae8143efde4067d41a20fbed9735d1bce30879bf198b8585cdc290460a0c51e34355f77c3d335dd4af00be2bb1a5925c901b18f3c6b81aef44c6795df5a5ecbf6e3a3ac277b3a442cf1a8ca8bda84fd291afd2aea494d98905189a22339955d52c61ed44ef1759eec2da0d6d96161570a9e0b073fd46dee3fa9b5898060f2cbb6f8c661899d54b49752d565d0907a87e44918206e3a15830a6d8c3375c0441d173910988d17a19003c0788a45560252917b22aa444887fde2cd2f5b5431826232b64124b7f0f35f1fe64ef47fa68b642820a11826b2ebecace966b6f96f34c16b15ba41dd6de2677f44fa71ea6ed5d2bcce8f0d81aaaeb4396e5570ebf8f9fd06cc251b7b7cbf29d06ce38ef9804fc52ad1ee865d08e91504eabee128b866ab059c1d4024be696b5d5299ed4acd83ef185cbd59a72e440f20355d99c535d758ec136d6a36cf4dc2bc561d8aca23852fcd34b3dce863cc60dd5ff06754b2dc50917e749bc74bf41d8babb8b3a200f1389908c7b1d1bab923e46f0f3c6325e4c20d07a3db496319ac93e3f29a4eb33a571f14d77c0b005aa8fec41c399fa30f70c9456f3e253fff37d98c3f9b361570af0a8de0c846e32fccf9d4416c71d05700d5a351733e246e9d2d51439d04633bcb3e16c09efcf591666c6364424e802978be78ee8b8395442bd053e9f8201f4fdce7b0ae7b0d3375cfd96c94c400cc74544fa361953b214537ed2fc7d680069b0eef586a5678279e50cac24a736d0f30d822a3b2f40e6a199d77fbe8fce7bd3193bc8f4cc319ab205c04378c5add78632b78f6359330c8a46b6ac51aebc2ba26b7e28c9fc07a43f19ebc2bcbb3c3c437d007e173b1c0fee11e02ed1ed9daa1de9a81190a76347fa450e9b4b02954772f257de8708b950787f413e051ba46cc4bbdd3ce86e046cb021de8fb89d1f49d7f313ab2c10ee74554779aa78ea80424a0388bc670598762d88f99632e52d4db62d37519622fc9bc821beaaabb2acdd327519ed0ba91579c129e36e2eac40e073ee2b3f4885a2c51ba38c931c934d2b9080dc1c6a94cc5a9185e995c976fb8643c570608493b82bec3899051e6ea1a132f15cf725da5edb31f38051c7b2c081268cdc5207d12577b86be4719c6ba29e86358f8c3bbd9a6ea56c676deb2e25c1c8eaca976d11a20fc029f90fea976c9b35b2fe9f803c73def8cddd9c04606e4cca72d8407a81b3d296dd20bafaac534139952b1e667d0caba13f608c1ce3792415cd436ae693f34adeb01a373a1fae6d85647822b3227b9d906b839718a16e02e2537c13138bdaf949dbe64068643f579bd4c65fe9fb972b3a631c79b1ed36ae07531a7005237958b70543b5216c063d613fbdc4ccb33ea72e0668af9d71e50b295245942bbf3f47138a682398d2977385e5e079b60936a76faa8fce57b58e7e229c1532104ce7cb4e0f1dac8f7dd75391336e4e6d0901eb27bcd6de1be58ba7113f4b910e58bda5c504c9948b97f9f43dda6e485cf7a07f8d1f311ab5c053a436121d1d74f4f6eeb16272a60d6d2f19bf9765d57e1de4da6cbdc0c35c2ba433e079ac35b9d3ee8832769fda1a6c60d7fdb8685ee6e1032db8a2894461307c464ebbc0664ea663ad4478bf1e1bea5f4c3e51963736172da54f9ef393fde7f635a03cf4dc7be72f05e44717d546d5cc116e607c45101a2f1a12359ea2fba5a182d49c52de9b050a853d1b91ed664f985398b064ab17696b739dc6a18eb7b6b3782fb81e45cd8604b7276f456dca42dea9c6078f2e03302cf068f21a20c1b71c6f6799900c89a57d8befe95508b8d8f7d881ab587c37a9c3145447a54f92bdca8d81c984047169a5c90de6668191c7c3bd1d2b2c563b24d27ecfa972f741cb786ce36819b7cefebcbb221ab24ead02ece325132f87b1414f88749af83b1d09f372df2ff7ea683748d11306c2df31fdccd6243c70d20f17af207bb3c8668cdbed8764d90b6f300b58bc989c1426af03cf037cdd48fc23e8150819ace5aa4c40ac273709e80348d927eecf49aede2b69822be79fdc7418eec627d2c2e31b35b421978346a1f6c6c3edc6f733f0984f4ee7db18ffbbb85ba7b0abc59da7aed1df73ad20db1b4a3e0bb34923b8fedbad662439dda8dad26848239522aa065d0e3944c0fd421ba2bade2976cb4f328385000eb8432ef87a0720d1b8ef0c6206f6ef86ff2b9b1b5ea0b1017a1a98fdc6bb98fa2bcd3f8d51b8b010d3cf759504f376d2ed1062bf58167b6be50837cd0bcad93ffd51c3e2d0c004a62c66b1e80a033c810f803a453fd4990d9e98914787b8f45c85a64d7e64f46a226f8de9e4dec5bca5dd1570ce7f2acdbd7425454753fe85cf2b61d3226766d18ae6dbc9b7c9e603a8051599fbbdf01ad7c76b8b53f2177c5a6bbf9dde67202db493ac900c0a09cf9d62a493d495480677f99e719cfd87958c1e50eca587d8caf1a669817751c8cb943597d965095fbe55f52484bcc299312cb1feb61352626cb103e7174cfbc2a49bc576d18456ba984d08dc397f4c32db4ab32079882bbdeaf93cac6af22d282783e254950c938011a60fd381fac8558e421eb0904733c80b259f41bb27b47d6f112ae3eb855ad7bc67374215e35f46d12098f49f91c288436bd4d822578ec2e749a696e2d06b763e909615bbbaa1e2fb1402bad9b77de997ae61e53de0d9448382de4e2a52efce99333056f36a75a5887ac20842c709a3fc4b8c1e983c891f76f2b2937b8af066238dad018e1764ccd3e7ce184421acfe40a24b6263c770fc0bef399bb688479f69fec7996f6f3e08d5a5c29f1465e4adf727f2ac67d829d9751df0f85b5cd593318789437da7275597ce1013dfd588f174c76ea10a2e0903465964bbe7ba5b2b895b814d96f5776545cf836453459c4481c01fcac055b4015472cef9c26f4fefabb0f16f9c02417b0f029ce1104e673b30bd6bac7b2fcca8c93b63facbdb853f7b5549573f96d41ba2a9eed2bebeeea2fb5189e14972f2998b921dda0f424ba1b2b937240aa5dd8fd0a08cd58f5dd78c48f67fa277c2b09069fb409ed638582fea12c8fae3049c713fae501edc7c0a9fde6c03a5ebf75eec77758a25c89add840fe254c3eba307625e734376764c4bf50d4ff35ee9991ba14de268095e84f6460bde3adca9eb806558909587191b7cb1c1d98bb17e4d34fbadb3bb326d9490b16a6c4c38f4bad6aea8a07fc41ac3c2a71e176353fa478e2afe9de4aa0e9dc5a3c83c33faf4fc45865eb11801994eda89e01c07115aa0ff4702a8741638e98da3bc7a5f9066bedd4a8d72c3ba9f4a481ae0511972e6eeca0d10459a754719ad269025e2ef693dc9fdd47b3a1a0d1d3df2f07f3d60a43a5979b76720bf57147887ef042ec36195a5cde33eb397633aff369aef65a11738ce0412b3f522e123dde93257ca009d40183ed388abd0e5090063548a54842197820c8369913ca33654c70716af18894b3e300c0f692ab68b2320f0e4ba771b7a65efab050a2646e1c38a85a364af188a7b17b6509c41c0dc6d8ef46dc478bd823003e837dec0d909ea16e5f22f7f1cf4f2bd756fbcfdfa76378dfdf68ae4747dd94da15b34fb4e0b29e634cb18f26b5f136112ccb629ccbb9b0645149e97c265f95175974dcf8ae1ed4487a8b6778098a9d4edc547897c1d9685cbaf27c6688f9752677e6a1e1675dd79a26a94971a0e4362dc20587a4ad00b22eeffc7ec1e72410f57393621d46949c64d71ccd3561ba09f493acc7304f459f9470fceee181596f940b2387507b229aae68b5f01a359b3de07ae940571495e0ea79e04453069e9e17a368277ab6b487bb99ee2931bf6b325b5713c50fa92d9501890f8f88b7be4c9c22aea796c022cd6da2708c51df809368f38da99831e6e0b810546dc71c91ae512f6ee7279180b58a1bc68a77d59f46fb23855ba3de4a9c983e9981a767ae06a32ff948598d7fb476f52ba76877ce038c1e4d2aa489a003735272a028b870061437ad514adc201a7e480f0478243ca51e10b1f67eb0793af1d135934c4b5935688a8f7b41d0dce01f117e71b803f3e40f3e74285e1d91cfc9105bd8edea83841ffc0cb67171073d35e22fabbe964f89fc16f3ad06faff22ae3558226735563a247bd51055d92971574a6a035adf55f246c036dd7bf4fcd0afc00fd46ef6e66c423a124db1f1f70ee34898e6d83f967be5cb4518f95e95d39faf6fe86ce756f6a8dd63093647219c9544753598e3048c80875c24eb46c38c6c53fc820fdecfd1be9855bbbbc6007a1634b06e41c8907ed6dbec7d47c797c60e3f541893f006577d84474f9f191abb0df32012166b4aaed7a9c294b10bbf8eb2b2ac9d6f0ed6c8b3dcb0b188c0b2485da99d7438c079eb6b1e0bc95f11b50f615a9f9aecab246b289c0ccf970d51d79a14c927628b77208c645a5f22b549accf87cfb5b985a8cdf9c28e291900bbf50c7aaf729edf10a4b0eb5e99723b316b9e8fdb9bc21e2b56e370e3fc5b15df37ad299cc03be1c2a50678f46ce22f41762c49b6c09c54448c7a2d621834c9dc86f749197185433d042e47c1b6eac2a415fedfb75acdfc408bef792d525f9dfb0ababc7c955a26e14b8a4594a3587bd6c60d823366c6f252a887b40ebc900de171f5224416c79b1ca04ca7e8bcc051b6fae3f6791364d056b8224ef36733fc5f535fec5885c7ff2261be915946e8bcbe1c441d72b8d9c4a7e6c186415964d3d92d21334efe7cff923fcc417658f36fb17a58b2175480ca7ecb1ad9f5336aefd74f2b37d507707bf22f9ebde7b0ade1a9ea062396709f00921a5085bca3dc9269c0a1fb3f283d879924dc46ed32b2c9042f578f1ac83b1ee524dc6e3ca9759255afb3ad9443bffeb34967a56752acc450d108e2bce90b95273b2f95f4363dbf1f5097aabb6ed4804853cafe55b035d69995974321f75c18d75d003afe4337f1ffea081e8b75e10d863c92e316345d4eb0993002eed3daa05105b75f55fa7c81fd2e0077859e361cf4a968be818aa19cde8131f4f6a31dae075eea5ef5aaaeb750aa338cdd41430b5c3c836757fcb5d9dfff02bfd4b56d1ee5cb3f11aa8f8e1a495360b9531babee51386e2dab2ca0286035711db54edd3cc150d811fd322ef3e9c7af1910592d2149459707573cfaf2b5d57e7f40690786d36fa3d5fd86c9c89ca7dd3645bcdbe9bf69b4232a6daf9c112c735e989e3704404cf19d087603651161d8f4f35388a50a5042e8279bcb3aa1b70a534870fee469ebd564750e5ffe9beaf5c21a1f6482c5b39f79e516fb876beee8576074f47d5e421649277ec0f1db961036c5c0d67cbd88386ed4708e696d8e69e3aa4d840c6479ad86df614a2c766db2dcc32ac5ad45678ebbcc3819be082967b74811f28aa96ed6dad6c6548e13c5da4b668be64ab235a6ac15e06d42dd5f89ead7ab4d93873ba5a0c9a78aa0d48aab7f452edc5e6a7010d3c4f30b54d056d594101a0e0e86d8ec7cda4b3a819a5557c5348ce9e9ed0e08b0cecd83d5feddce183c753983e96b949a6e9b395a5605c1d705186829e882010d1ce63387d4e0c55fef1f7183d080e0058c8f4178b9425fb25d058dd9440c9e67e5fbe5b4df7a13f059841df760153a381b827b9289cceeef5ab8ece10408a9cd2512e009d8920e8c32a92006ad16394c2dc1b965481dda178f9e0c8d923a98f37bda37c52133153afef0dfcba199e665185a02d419212bfe276a4c4755dc1f14d98c35ab0d8f407fc5debfecd874fd82e209f7391e9fd413161ca23ade646d2c8b1c9cee23bb190c42c294bd97b260a4ff4dd25d2ce56e0560c8b8d3d02a2ecbe516f64b4a148d8a432fdf3d5411df76ce31850872e0ce6b225636f2a7ef976df78bd81912dc4a5e78422ae138c76cfe5b6d74e470225a9b697f7085c06cd2ec972465094968c5968c62375df517a3ab9c9b007cdb459a187b9afdc2bc3eae9b322cb7a1be3a6015012a424f3a1c2e9baa04ffcf7c8e83245986a5674d072c817516853178084c3f48623fc050b7dea743eedb7ca1b5c854491e92df60513963b9cd6dda81cb6c62a5c6a24cda93c791797f3f49270a28088e8795da1be4721df0d384b49b1374647f164eb6332b409413397ac185f3415a9f3a51759077fee2a9dd916317f6f734980a9a008cf4ad849b4c1e787433f1decd293f5245d02145157db73feb86c91842e4d51d4d7da10e3d2f437ca8fcf150a518cd1494e2cd9bbee7ff8d31ea98068d14d0d0617eba7e344c09ebeeed27b0ea6e9ced16df7372dec8a05233fa0d3246b71307c1661d9c9421d54983f4d81ac568b091ce05eb68aea7ffe0d3b0d9ba22799984aba8ab88d67cae51f715ff9491eb042f4d32dced592ddaeead3aa6bfa9830a9ed2d1918b2cbe60db3739df4147b08c184251b4eb8d8766b05d7715b763ba9263605066b5e2fb46171ce17db968239fe659690bbd9d5f241eb34afa718cac8f05ff462c9d907c760e8189f2df2d5c0742bedcf865a6f3335363948f8403cf30fe9bd9b41ca45342d970e20e86d294982c3b15e8296ed3113fab996ef0df9ce4d0ec2c35399f1851c0511784f0729f3c2af96c927a8a62da40fbf97cb72f64f595998275bfa5a6110e2d160dbe233f5fbf44deab458ad12a2da6f7e96a837f2c24af777462c0b115cd37a1ff7e0aff8ae331e031f2b38a6d1f5e117f2b3a949614b3ad7cb99a23a072c1922c0c00697c41643316a304ae85c12e417467d6cccc4ce6aa31385ace125b0107d6103f2a08cafba5ce38af81b7ba340cd06bb38f0e713ff5fd41868e0441f5f78f8142618d4ea20efba8e29aad04517cf68ee3aa62da0287f4a5c28d2ea0ad466f43f83203cc0d1bd7a1a415adfe06cdb94b315d2c57fa8d744c54827fe5092bf8c89296aea15fd53d6dea022dc494ed44a44d74e162c002b751989e1c4839d3a1ed78657700c56e4a361d13dcece3d57bf416b1456f5639f0b5b3f52460344d540be180da960d88651f9d371938f5144a95c8bd3feca3f25346919949ae6198d6b693b2d161f4c0bc99e077e10153f0ba4252e01cd860d2ee7f21f707161c4f622433f7b93b0781393b9189b0e25d69a8a920e149edb02eb14aef1e9a64ae46026ec673a9d32c5a2d0ff0fb1046451e3a1cc74221ca310932525a74cb4baf1c1795c46410cc872b5eabe9767ed7f2dfb1b20aebe628e75d87c21580fca42a41019869f7c9b00cdf654dd39d7bcbeb440618d702d0d6adae96f45014f0e527d60f00fbbd756eb9bf7901c3cb32dd5c1ee36c83250a0ef1c68b206930294ab612a6bcd7ed6b3acbcbb044b0ccbcdf8334553e99f76b6656e1fbdab283225e66e6a4a9501e04043c4e9fa7b8e7589804c3c157db227f767fc1a51972d0008a1af39b1d3a50e97af29c1bb219b2d8f537c089a6537893bd9e3a0a4ba232484218d8f12cd19f0b0634f35d78d1fc47f31f89068189399d42bd7d40eee1b297ddf86b17cbe880908ebc6b644c1c193c316c97b085ede2a8495aa0bcfdb116c857e8448c451c422553ba62fbf5ecb794296d2e47523a6a88d46a03d4f8cf99f9307a1eebb21b772d5a6c0df09c70ab521ae5aeb8e8552634b06a3e07b01be5f87cc3c1543532dfcdcc7c6bd7468617df34f20841b2800a3ea564a6f10f9fc80d38d4dba035ce0073ac1dfd7f7dcb06347ab7ac918a674ab76db2c06172d1df7d6a25f2784d709dc378822e83aff05071291c1031d6067c75fe91b08ae42a38dc51b3fd8c63fe79c3df4bad3f8f2ba0a4a5776fa7e8821bb3a97db9edb45035fb12c8d9be020bca89591bd860176f7f1f3c1794cd07de26fe613035a9016e065c8c306394e81263cfaadb229cee15faeb8ce24300e089286d34711fa205e565b7adda335e4448bf549d1a173a9d75a2181c489286ef25292a8636a8e21dfce3dda068cf427b59e3959055a33f7682808c469a12c80c936564ed891d48dfab0b100060f80d8f6c0f09610a974e08bb3c3c4d9b0dee2b8764aa0ed5bece21cb51537e5119ae0626a0c6c5c0b352ea860e9ff008869dab11b4396af995bf84feb7aa6ecbc9450b7230fac44d281e35104d9b68ae2c1b4f50417461172922d3b4f145a90f1b213d837beb2fbe0ab24eaf5d062870a75a0f990878c5a5d6dd98cf44eb5ac81e1c7fd5fd568f753e0eae811d158e471e0848097730d04b17a312aa81dd8622cc3e1d15d23b3abfdfdd61f8b69e514001cb600a91da3f7c803c0fbe267506808d603b3162936fc08cc1cbb8be5aef6e53d9a1ccec6ce2d71462ecdfbdf420e539cf687e302f5f899411b41a34e6ed296f50dba4e736531da69211391a5e84b1b1eea09d23e41148fd5954e8e74c7c98117deb7", 0x2000, &(0x7f0000000e00)={&(0x7f00000002c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[], 0x4, 0x0) 321.109142ms ago: executing program 0 (id=7562): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getrlimit(0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) unshare(0x60600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000008c0)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbmon(&(0x7f0000000300), 0xfff, 0x20180) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r6, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x33) 0s ago: executing program 3 (id=7563): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x55af, &(0x7f0000006a40)="$eJzs3M2PE/UbAPBnuizvP37EePDGJMRkN6ENXV6iJ1EhKhFCfDl40m5bmkLb2WxLWTlx8Gg8+J8YTTx59G/woEc9mBgPGhMPJpjOzBIKCALtriyfTzJ9Zp759pnvdyCbPDNJA3hmHU7/+C2JQ7EvIhYi4mAS+X5SbhE3I84UY1+IiCMRUbljS8r87cTuiNgfEYcmxYuaSXnq82Pjo6d+Pf/7N9/t2XXgi6+/39aFA9vqxYjorxX71/tFzDp5uLVQ5hvjbh77J8dlXJuq0c+K/PX2al7hemNzXCOPJzrF+Gzt2nASL/cazUnsdC/n+bVBccHhuLNZZ/KF9EpjPT9utVfz2B1meezcKK67caP423ZjOCrqtMp6H+flYzTajEW+vdEu1rN2NY/NwajMF3WzVntjEsdlLC8XzazXyuex+rh3+b/v7e7g2kY6bq8Pu9kgPVWrv1Srn67W17NWe9Q+WW30W6dPpkud3mRYddRu9M90sqzTa9eaWX85Xeo0m9V6PV06217tNgZpvV47UTtePbVc7h1L37j4ftprpUuT+Fp3cG3U7VXicraeFt9YTldqJ15eTo/W03cvXEovvXPu3IVL73149oOLr1546/Vy0D3TSpdWjq+sVOvHqyv15adu/cP0UdYfd6z/k3LSj7D+pIznp9M//vBktw0KyXZPAODpc0//H3f3/6H/B2buAf1/XHlI/9+/Wh7Pp/+P+/b/len+P2bZ/09aKv3/w/vfyjb0v4vxbPf/c37+AU/k8fr/3TOfBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW+6nxS/fzHcOF8cHyvz/ytRz5XESEZWIuHUfC7F7quZCWWfxH8Yv3jWHb5PIK0yusafc9kfEmXL76//zvgsAAACwc31188hnRbdefJSPAO7q5tmhin/mysGPZlQviYjFw7/MqFpl8vH8jIrl/793xcaMquUPsPbOqFjxyG3XrKr9KwtTYe8dISlCZUunAwAAbInpTuBBXcjNLZkPAAAA8/LpA8++smXzYI7+/PneXBKbrzJvv/LfU4TyheC+qXMAAADAUyjZ7gkAAAAAc5f3/37/DwAAAHa24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/2bmb3MRhKADAL4HAMD8aNJoDzQ6OMUeY5WzhKhyBG1TqBTgDlbroEdpSkbhIaUFCwoEWfZ8Ugx14tiGbZ0sGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7dVcvp6PQwN0+b0+SYCwAAALDfulpO6zfjpv4ttf9ITb9SvYiIMiL25e69GLRi9lKc6sDnqzdjuI2oI2zbh+n6GhF/0vX4s+tfAQAAAK7Xar6YNNl6U6QlgPtjvjvsdGScQbNoU37/myleERHV+CFTtHJb/M4UrH6++/E/U7R6AetLpmDNklt//71Brk7aeq2X15nM6j+xrpXd9AsAAFxSOxM4kIUAAABwBf5degCcw/vUvtgVu33GtKufNgRHrRoAAADwCRWXHgAAAADQuTr//0jn/xXO/wMAAIDsmvP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK6Wk5X88Xk0P3ZkXGeN6fJNyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBf25x0FQiAMwmDv+s5k7n9YadDQ2KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5f982yjcA4I99sZv0+0WEgCIRQEXqAAtN3dLSFSGqiIE/ASlKnRJwKaQZaBVRZYANZe6CYEQICRS2/g+dG6lL2TpkCBITQ9Cd79xzEkhUyJ1LPh/p9fv4fHl/2Yry3HsOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDYejtebuZxkj5M9uPi2P3t1YW03txVp+6uP5hJSxo3Kh73U+CV8pNT0/UNBAAAgOMjKfL7iHjY2phL6+Zklv+3inPSnP/bZ/pxkc/vzvs3t1fH85dmivz/l58fvTDoaDLJ+kkbXVzqdc/uHcrYEU1x5D174Blj2cpn116S7A1pvrf2/FYrW8/G1/fuvdvOwhNVjBYAeBJnijoPir+H0rpT58AAODbGSol3kf8nk/WOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAKW2vxvyJuRMTM2OM4tbm9urBfPREPZu6u98vFO3fWy22mTbQiYnGp1z1b4VxGV7Gatz6e7/W6yzduVh2cioh9Xrp9uB9P8uH/5TntiBg6cvrFfdr54BB97WpnT5B/PKPaNZxI53fgyY2hI409C/7OTl8dH4Bed7ldxdI1807qmOBRB8Vn719q8PKXg/eiwl9FAAAcC628pJnow9bGXHqsMRWx891w/v9aKY6hvH/ndv9I/3mR+6fl0YcX75f7Kuf/nYrm9zSYXbn26eyNm7feWLo2f7V7tfvJm+c6b3XOX7pw4dJsdq1kdjGarpgAAADwD7TzUs7/m1N79/9PluL4m/3/cv7/2TedL8p9JQfn/+NHM8vR9nj3r+6RAAAAHEftQfTcq7//1tjnjEa7HZ/Pr6wsd/qPg+fn+o+VDvcJnchLOf9PpuoeFQAAAFCFrbXG0P7/lVIch9z////3L/1YbjPJ/j9AXI+I7pmF670r1U1npFXxReWso3bdMwUAAKAuE3kp7/+3svv/m4NbHpoR8frpiD/y7/DHIfP/5PJXP5T7Kt//f77SWY6e5nR/PbJ6OmJsuu4RAQAA8F82npc02f+1tTH30U8n32+7/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgan8GAAD//0ZZLTI=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_thresh={0x8}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x140}}, 0x0) kernel console output (not intermixed with test programs): dge_slave_0 entered promiscuous mode [ 1824.214269][T24051] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1824.221081][T28038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.233290][T24051] usb 4-1: config 2 interface 212 has no altsetting 0 [ 1824.239893][T28038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.253639][T28038] device bridge_slave_1 entered promiscuous mode [ 1824.290168][T28038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.296990][T28038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.304101][T28038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.310889][T28038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.330439][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1824.337813][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.345130][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.353782][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1824.362046][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.368916][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.376321][T18480] hid (null): bogus close delimiter [ 1824.383938][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1824.391946][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.398107][T24051] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1824.398796][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.407628][T24051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.423148][T24051] usb 4-1: Product: syz [ 1824.427130][T24051] usb 4-1: Manufacturer: syz [ 1824.431592][T24051] usb 4-1: SerialNumber: syz [ 1824.436437][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1824.444242][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1824.456642][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1824.468291][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1824.476342][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1824.484102][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1824.512607][T28038] device veth0_vlan entered promiscuous mode [ 1824.534062][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1824.543986][T28038] device veth1_macvtap entered promiscuous mode [ 1824.554801][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1824.569048][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1824.598189][T18480] usb 5-1: language id specifier not provided by device, defaulting to English [ 1824.852748][T28056] FAULT_INJECTION: forcing a failure. [ 1824.852748][T28056] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.865390][T28056] CPU: 1 PID: 28056 Comm: syz.1.7053 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1824.875134][T28056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1824.885019][T28056] Call Trace: [ 1824.888153][T28056] dump_stack_lvl+0x1e2/0x24b [ 1824.892658][T28056] ? panic+0x812/0x812 [ 1824.896562][T28056] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1824.901863][T28056] ? finish_task_switch+0x130/0x5a0 [ 1824.906904][T28056] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 1824.911929][T28056] dump_stack+0x15/0x17 [ 1824.915919][T28056] should_fail+0x3c6/0x510 [ 1824.920174][T28056] ? cgroup_mkdir+0x2c9/0x15a0 [ 1824.924778][T28056] __should_failslab+0xa4/0xe0 [ 1824.929378][T28056] should_failslab+0x9/0x20 [ 1824.933714][T28056] __kmalloc+0x60/0x330 [ 1824.937709][T28056] ? cgroup_kn_lock_live+0x1b6/0x310 [ 1824.942828][T28056] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1824.948291][T28056] cgroup_mkdir+0x2c9/0x15a0 [ 1824.952723][T28056] ? css_task_iter_end+0x2c0/0x2c0 [ 1824.957678][T28056] ? irqentry_exit+0x4f/0x60 [ 1824.962105][T28056] ? sysvec_reschedule_ipi+0x83/0x160 [ 1824.967304][T28056] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1824.972774][T28056] ? css_task_iter_end+0x2c0/0x2c0 [ 1824.977716][T28056] kernfs_iop_mkdir+0x1c4/0x2d0 [ 1824.982403][T28056] vfs_mkdir+0x4cf/0x6c0 [ 1824.986478][T28056] do_mkdirat+0x1a6/0x2c0 [ 1824.990658][T28056] ? do_mknodat+0x450/0x450 [ 1824.994982][T28056] ? fpu__clear_all+0x20/0x20 [ 1824.999496][T28056] ? __kasan_check_read+0x11/0x20 [ 1825.004357][T28056] __x64_sys_mkdirat+0x7b/0x90 [ 1825.008956][T28056] do_syscall_64+0x34/0x70 [ 1825.013213][T28056] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1825.018934][T28056] RIP: 0033:0x7f3dbb490ff9 [ 1825.023194][T28056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1825.042631][T28056] RSP: 002b:00007f3dba0c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1825.050873][T28056] RAX: ffffffffffffffda RBX: 00007f3dbb649130 RCX: 00007f3dbb490ff9 [ 1825.058682][T28056] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 1825.066493][T28056] RBP: 00007f3dba0c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.074308][T28056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1825.082120][T28056] R13: 0000000000000000 R14: 00007f3dbb649130 R15: 00007fff460729d8 [ 1825.328313][T18480] uclogic 0003:256C:006D.00D7: failed retrieving string descriptor #200: -71 [ 1825.337119][T18480] uclogic 0003:256C:006D.00D7: failed retrieving pen parameters: -71 [ 1825.345316][T18480] uclogic 0003:256C:006D.00D7: failed probing pen v2 parameters: -71 [ 1825.353409][T18480] uclogic 0003:256C:006D.00D7: failed probing parameters: -71 [ 1825.360957][T18480] uclogic: probe of 0003:256C:006D.00D7 failed with error -71 [ 1825.369689][T18480] usb 5-1: USB disconnect, device number 72 [ 1826.919142][T24051] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input47 [ 1826.940960][T28083] syz.1.7064[28083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1826.941033][T28083] syz.1.7064[28083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1826.973156][T24051] usb 4-1: USB disconnect, device number 40 [ 1826.984397][ C0] xpad 4-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 1828.450172][ T314] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1828.457596][T10683] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1828.498683][ T8211] device bridge_slave_1 left promiscuous mode [ 1828.505159][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.515354][ T8211] device bridge_slave_0 left promiscuous mode [ 1828.521791][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.541622][ T8211] device veth1_macvtap left promiscuous mode [ 1828.548358][ T8211] device veth0_vlan left promiscuous mode [ 1829.118379][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1829.133357][T10683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.144110][T10683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1829.154893][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1829.165949][T10683] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1829.174833][ T314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1829.187506][T10683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.195313][ T314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1829.204853][T10683] usb 1-1: config 0 descriptor?? [ 1829.209702][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.218007][ T314] usb 5-1: config 0 descriptor?? [ 1829.238049][T28102] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1829.418044][T20924] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1829.983167][T10683] hid (null): bogus close delimiter [ 1830.078045][T20924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1830.088027][T10683] usb 1-1: language id specifier not provided by device, defaulting to English [ 1830.118031][T20924] usb 4-1: not running at top speed; connect to a high speed hub [ 1830.198038][T20924] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 1830.206041][T20924] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 1830.214082][T20924] usb 4-1: config 2 has no interface number 0 [ 1830.219935][T20924] usb 4-1: config 2 has no interface number 1 [ 1830.225862][T20924] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1830.236535][T20924] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1830.247037][T20924] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1830.258326][T20924] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1830.269144][T20924] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1830.278793][T20924] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1830.291703][T20924] usb 4-1: config 2 interface 212 has no altsetting 0 [ 1830.458048][T20924] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1830.466948][T20924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.474875][T20924] usb 4-1: Product: syz [ 1830.478850][T20924] usb 4-1: Manufacturer: syz [ 1830.483237][T20924] usb 4-1: SerialNumber: syz [ 1830.588051][T10683] uclogic 0003:256C:006D.00D8: failed retrieving string descriptor #200: -71 [ 1830.596703][T10683] uclogic 0003:256C:006D.00D8: failed retrieving pen parameters: -71 [ 1830.604962][T10683] uclogic 0003:256C:006D.00D8: failed probing pen v2 parameters: -71 [ 1830.612921][T10683] uclogic 0003:256C:006D.00D8: failed probing parameters: -71 [ 1830.620198][T10683] uclogic: probe of 0003:256C:006D.00D8 failed with error -71 [ 1830.631312][T10683] usb 1-1: USB disconnect, device number 64 [ 1830.899364][T20924] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input48 [ 1830.913845][T20924] usb 4-1: USB disconnect, device number 41 [ 1831.274407][T28133] syz.0.7077[28133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1831.274472][T28133] syz.0.7077[28133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1831.528079][ T314] usbhid 5-1:0.0: can't add hid device: -71 [ 1831.545181][ T314] usbhid: probe of 5-1:0.0 failed with error -71 [ 1831.552140][ T314] usb 5-1: USB disconnect, device number 73 [ 1831.658010][T17235] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1832.110612][T17235] usb 4-1: Using ep0 maxpacket: 16 [ 1832.238052][T17235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.248906][T17235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.258474][T17235] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1832.267294][T17235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.276062][T17235] usb 4-1: config 0 descriptor?? [ 1833.293799][T28135] overlayfs: missing 'lowerdir' [ 1833.358913][T17235] savu 0003:1E7D:2D5A.00D9: item fetching failed at offset 2/5 [ 1833.368475][T17235] savu 0003:1E7D:2D5A.00D9: parse failed [ 1833.379093][T17235] savu: probe of 0003:1E7D:2D5A.00D9 failed with error -22 [ 1833.560822][T17235] usb 4-1: USB disconnect, device number 42 [ 1834.120250][T28180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7092'. [ 1834.598077][T20924] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1834.687978][ T640] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1834.887984][ T314] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1835.002128][T20924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.012066][T20924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1835.078220][ T640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1835.089496][ T640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1835.101342][T20924] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1835.112067][ T640] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1835.135458][T20924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1835.143756][T20924] usb 5-1: SerialNumber: syz [ 1835.148677][ T640] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1835.180545][ T640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.212300][ T640] usb 4-1: config 0 descriptor?? [ 1835.228222][T28187] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1835.468037][ T314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1835.518037][ T314] usb 2-1: not running at top speed; connect to a high speed hub [ 1835.598037][ T314] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 1835.606232][ T314] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 1835.614442][ T314] usb 2-1: config 2 has no interface number 0 [ 1835.620287][ T314] usb 2-1: config 2 has no interface number 1 [ 1835.626356][ T314] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1835.637055][ T314] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1835.647530][ T314] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1835.658576][ T314] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1835.669458][ T314] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1835.679198][ T314] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1835.692069][ T314] usb 2-1: config 2 interface 212 has no altsetting 0 [ 1835.888171][ T314] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1835.897088][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.904870][ T314] usb 2-1: Product: syz [ 1835.908887][ T314] usb 2-1: Manufacturer: syz [ 1835.913258][ T314] usb 2-1: SerialNumber: syz [ 1836.309091][ T314] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input49 [ 1836.320905][ T314] usb 2-1: USB disconnect, device number 41 [ 1837.158591][T20924] usb 5-1: 0:2 : does not exist [ 1837.163295][T20924] usb 5-1: unit 5: unexpected type 0x09 [ 1837.171438][T20924] usb 5-1: USB disconnect, device number 74 [ 1837.698250][ T640] usbhid 4-1:0.0: can't add hid device: -71 [ 1837.708196][ T640] usbhid: probe of 4-1:0.0 failed with error -71 [ 1837.727437][ T640] usb 4-1: USB disconnect, device number 43 [ 1837.792533][T20924] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1838.059610][T20924] usb 5-1: Using ep0 maxpacket: 16 [ 1838.258048][T20924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.268877][T20924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1838.278624][T20924] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1838.287498][T20924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.300319][T20924] usb 5-1: config 0 descriptor?? [ 1838.833012][T28208] overlayfs: missing 'lowerdir' [ 1838.855292][T20924] savu 0003:1E7D:2D5A.00DA: item fetching failed at offset 2/5 [ 1838.864009][T20924] savu 0003:1E7D:2D5A.00DA: parse failed [ 1838.871040][T20924] savu: probe of 0003:1E7D:2D5A.00DA failed with error -22 [ 1839.331065][T20924] usb 5-1: USB disconnect, device number 75 [ 1839.339534][T28246] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1840.351198][ T314] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1840.708476][ T8211] device bridge_slave_1 left promiscuous mode [ 1840.714446][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.721769][ T8211] device bridge_slave_0 left promiscuous mode [ 1840.727725][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.734780][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1840.745787][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1840.756687][ T314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1840.769383][ T314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1840.770078][ T8211] device veth1_macvtap left promiscuous mode [ 1840.778562][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.792485][ T8211] device veth0_vlan left promiscuous mode [ 1840.798847][ T314] usb 5-1: config 0 descriptor?? [ 1840.818122][T28257] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1841.408064][T10683] Bluetooth: hci0: command 0x1003 tx timeout [ 1841.413990][ T846] Bluetooth: hci0: sending frame failed (-49) [ 1842.251513][T28272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.258687][T28272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.265971][T28272] device bridge_slave_0 entered promiscuous mode [ 1842.272976][T28272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.279911][T28272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.287309][T28272] device bridge_slave_1 entered promiscuous mode [ 1842.626842][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1842.634196][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1842.641470][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1842.649542][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1842.657523][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.664371][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.671775][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1842.680575][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1842.688661][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1842.696625][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.703470][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.717128][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1842.726124][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1842.741089][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1842.748094][T18480] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1842.760004][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1842.768225][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1842.775437][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1842.783663][T28272] device veth0_vlan entered promiscuous mode [ 1842.793890][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1842.802923][T28272] device veth1_macvtap entered promiscuous mode [ 1842.812525][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1842.822292][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1843.088099][ T314] usbhid 5-1:0.0: can't add hid device: -71 [ 1843.094015][ T314] usbhid: probe of 5-1:0.0 failed with error -71 [ 1843.101468][ T314] usb 5-1: USB disconnect, device number 76 [ 1843.108223][T18480] usb 4-1: config index 0 descriptor too short (expected 65535, got 36) [ 1843.116512][T18480] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1843.126164][T18480] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.136247][T18480] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1843.150121][T18480] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1843.159311][T18480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.552524][ T314] Bluetooth: hci0: command 0x1001 tx timeout [ 1843.558518][ T846] Bluetooth: hci0: sending frame failed (-49) [ 1844.023187][T28303] syz.4.7123[28303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1844.023228][T28303] syz.4.7123[28303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1844.867122][T28311] binder: 28309:28311 ioctl 4018620d 0 returned -22 [ 1845.569466][ T314] Bluetooth: hci0: command 0x1009 tx timeout [ 1845.738126][ T8506] Bluetooth: hci1: command 0x1003 tx timeout [ 1845.744034][ T466] Bluetooth: hci1: sending frame failed (-49) [ 1847.438022][ T314] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1847.498581][ T8211] device bridge_slave_1 left promiscuous mode [ 1847.504499][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.511827][ T8211] device bridge_slave_0 left promiscuous mode [ 1847.517739][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.524780][T23935] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1847.532766][ T8211] device veth1_macvtap left promiscuous mode [ 1847.538647][ T8211] device veth0_vlan left promiscuous mode [ 1847.808227][T20924] Bluetooth: hci1: command 0x1001 tx timeout [ 1847.814102][ T466] Bluetooth: hci1: sending frame failed (-49) [ 1847.828082][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1847.839162][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1847.850130][ T314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1847.862802][ T314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1847.871613][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.880023][ T314] usb 5-1: config 0 descriptor?? [ 1847.888074][T23935] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1847.898086][T28332] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1847.898920][T23935] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1847.916617][T23935] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1847.927635][T23935] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1847.936474][T23935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.968171][T28334] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1848.263727][T23935] usb 1-1: USB disconnect, device number 65 [ 1849.649614][T28344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.656461][T28344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.664035][T28344] device bridge_slave_0 entered promiscuous mode [ 1849.670932][T28344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.677766][T28344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.685084][T28344] device bridge_slave_1 entered promiscuous mode [ 1849.732849][T28344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.739809][T28344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1849.746900][T28344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.753708][T28344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1849.781617][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1849.789820][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.797222][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.810386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1849.818508][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.825322][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1849.832554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1849.840864][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.847839][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1849.877687][T28344] device veth0_vlan entered promiscuous mode [ 1849.891199][T28344] device veth1_macvtap entered promiscuous mode [ 1849.916333][ T640] Bluetooth: hci1: command 0x1009 tx timeout [ 1849.926979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1849.938278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1849.946674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1849.954973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1849.962819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1849.970178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1849.977495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1849.985651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1849.993595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1850.003796][T28359] device pim6reg1 entered promiscuous mode [ 1850.278073][ T314] usbhid 5-1:0.0: can't add hid device: -71 [ 1850.300772][ T314] usbhid: probe of 5-1:0.0 failed with error -71 [ 1850.311693][ T314] usb 5-1: USB disconnect, device number 77 [ 1851.678135][T20924] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1852.068178][T20924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.088483][T28383] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1852.105172][T20924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.115140][T20924] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1852.125334][T20924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.182111][T20924] usb 5-1: config 0 descriptor?? [ 1852.658261][T20924] hid (null): bogus close delimiter [ 1852.723774][T28387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.730678][T28387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.738014][T28387] device bridge_slave_0 entered promiscuous mode [ 1852.745365][T28387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.752462][T28387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.759775][T28387] device bridge_slave_1 entered promiscuous mode [ 1852.810638][T28387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.817468][T28387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.824584][T28387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.831489][T28387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1853.108267][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1853.115592][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1853.123821][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1853.139938][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1853.147719][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1853.160363][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1853.172693][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1853.180616][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1853.187817][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1853.197719][T28387] device veth0_vlan entered promiscuous mode [ 1853.208543][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1853.218313][T28387] device veth1_macvtap entered promiscuous mode [ 1853.228578][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1853.240773][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1853.338321][T20924] usb 5-1: string descriptor 0 read error: -71 [ 1853.357993][T20924] uclogic 0003:256C:006D.00DB: failed retrieving string descriptor #200: -71 [ 1853.366600][T20924] uclogic 0003:256C:006D.00DB: failed retrieving pen parameters: -71 [ 1853.374579][T20924] uclogic 0003:256C:006D.00DB: failed probing pen v2 parameters: -71 [ 1853.382514][T20924] uclogic 0003:256C:006D.00DB: failed probing parameters: -71 [ 1853.390178][T20924] uclogic: probe of 0003:256C:006D.00DB failed with error -71 [ 1853.456240][T20924] usb 5-1: USB disconnect, device number 78 [ 1853.758428][ T8211] device bridge_slave_1 left promiscuous mode [ 1853.764393][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.771711][ T8211] device bridge_slave_0 left promiscuous mode [ 1853.777648][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.785411][ T8211] device veth1_macvtap left promiscuous mode [ 1853.791294][ T8211] device veth0_vlan left promiscuous mode [ 1854.058257][ T640] usb 4-1: USB disconnect, device number 44 [ 1854.145217][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 1854.151274][ T846] Bluetooth: hci0: sending frame failed (-49) [ 1854.829928][T28422] input: syz1 as /devices/virtual/input/input50 [ 1854.878061][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 1854.878101][ T24] audit: type=1400 audit(2000000714.100:6446): avc: denied { mount } for pid=28411 comm="syz.4.7149" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1855.145883][ T466] Bluetooth: hci1: sending frame failed (-49) [ 1855.152313][T28431] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1855.871058][T28436] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7155'. [ 1856.952265][ T640] Bluetooth: hci0: command 0x1001 tx timeout [ 1856.958189][ T466] Bluetooth: hci0: sending frame failed (-49) [ 1857.077589][ T24] audit: type=1400 audit(2000000716.370:6447): avc: denied { write } for pid=28449 comm="syz.0.7159" path="socket:[185929]" dev="sockfs" ino=185929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1857.177259][ T640] Bluetooth: hci1: command 0x1003 tx timeout [ 1857.192733][ T466] Bluetooth: hci1: sending frame failed (-49) [ 1858.041808][ T24] audit: type=1326 audit(2000000717.340:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28460 comm="syz.4.7161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34fecb9ff9 code=0x0 [ 1858.347982][ T314] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1858.708027][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1858.718731][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1858.728299][ T314] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1858.737081][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.745622][ T314] usb 1-1: config 0 descriptor?? [ 1859.007975][ T640] Bluetooth: hci0: command 0x1009 tx timeout [ 1859.228220][ T314] hid (null): bogus close delimiter [ 1859.257958][ T8506] Bluetooth: hci1: command 0x1001 tx timeout [ 1859.263819][ T466] Bluetooth: hci1: sending frame failed (-49) [ 1859.448042][ T314] usb 1-1: language id specifier not provided by device, defaulting to English [ 1859.928016][ T314] uclogic 0003:256C:006D.00DC: failed retrieving string descriptor #200: -71 [ 1859.936852][ T314] uclogic 0003:256C:006D.00DC: failed retrieving pen parameters: -71 [ 1859.944840][ T314] uclogic 0003:256C:006D.00DC: failed probing pen v2 parameters: -71 [ 1859.952780][ T314] uclogic 0003:256C:006D.00DC: failed probing parameters: -71 [ 1859.960119][ T314] uclogic: probe of 0003:256C:006D.00DC failed with error -71 [ 1859.968852][ T314] usb 1-1: USB disconnect, device number 66 [ 1861.338678][ T640] Bluetooth: hci1: command 0x1009 tx timeout [ 1862.214011][T28503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.221567][T28503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.229125][T28503] device bridge_slave_0 entered promiscuous mode [ 1862.236261][T28503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.262706][T28503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.282818][T28503] device bridge_slave_1 entered promiscuous mode [ 1862.333368][T28503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.340318][T28503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1862.347423][T28503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.354215][T28503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1862.454387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1862.491369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1862.526144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1862.561681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1862.628486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1862.638772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1862.721738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1862.761857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1862.769876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1862.777200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1862.789063][T28503] device veth0_vlan entered promiscuous mode [ 1862.834412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1862.856041][T28503] device veth1_macvtap entered promiscuous mode [ 1862.887303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1862.913175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1863.048460][T22463] device bridge_slave_1 left promiscuous mode [ 1863.054530][T22463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.061782][T22463] device bridge_slave_0 left promiscuous mode [ 1863.068108][T22463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.076062][T22463] device veth1_macvtap left promiscuous mode [ 1863.081999][T22463] device veth0_vlan left promiscuous mode [ 1865.781487][T28551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.788987][T28551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.796480][T28551] device bridge_slave_0 entered promiscuous mode [ 1865.808915][T28551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.816295][T28551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.823180][T20924] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1865.833388][T28551] device bridge_slave_1 entered promiscuous mode [ 1865.882607][T28551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.889552][T28551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1865.896648][T28551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.903448][T28551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1865.938406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1865.947202][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.954981][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.973064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1865.981473][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.988351][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1866.009716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1866.018439][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1866.025291][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1866.063394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1866.071217][T20924] usb 5-1: Using ep0 maxpacket: 16 [ 1866.074585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1866.122889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1866.155209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1866.164572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1866.172468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1866.192489][T28551] device veth0_vlan entered promiscuous mode [ 1866.198051][T20924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1866.210352][T20924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1866.217294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1866.228374][T20924] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1866.230805][T28551] device veth1_macvtap entered promiscuous mode [ 1866.244046][T20924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.249865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1866.262791][T20924] usb 5-1: config 0 descriptor?? [ 1866.291184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1866.410488][T22463] device bridge_slave_1 left promiscuous mode [ 1866.418356][T22463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.426894][T22463] device bridge_slave_0 left promiscuous mode [ 1866.506986][T22463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.519718][T22463] device veth1_macvtap left promiscuous mode [ 1866.525667][T22463] device veth0_vlan left promiscuous mode [ 1867.038799][T28553] overlayfs: missing 'lowerdir' [ 1867.059804][T20924] savu 0003:1E7D:2D5A.00DD: item fetching failed at offset 2/5 [ 1867.068887][T20924] savu 0003:1E7D:2D5A.00DD: parse failed [ 1867.074404][T20924] savu: probe of 0003:1E7D:2D5A.00DD failed with error -22 [ 1867.348463][T18480] usb 5-1: USB disconnect, device number 79 [ 1867.417999][ T554] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1867.818022][ T554] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1867.935959][ T554] usb 1-1: not running at top speed; connect to a high speed hub [ 1868.030358][T22463] device bridge_slave_1 left promiscuous mode [ 1868.044981][T22463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.055632][T22463] device bridge_slave_0 left promiscuous mode [ 1868.062185][T22463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.075494][T22463] device veth1_macvtap left promiscuous mode [ 1868.082013][ T554] usb 1-1: config 2 has an invalid interface number: 212 but max is 1 [ 1868.091039][ T554] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 1868.127631][T22463] device veth0_vlan left promiscuous mode [ 1868.134087][ T554] usb 1-1: config 2 has no interface number 0 [ 1868.140238][ T554] usb 1-1: config 2 has no interface number 1 [ 1868.146162][ T554] usb 1-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1868.158310][ T554] usb 1-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1868.169585][ T554] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1868.182286][ T554] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1868.193537][ T554] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1868.224385][ T554] usb 1-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1868.289188][ T554] usb 1-1: config 2 interface 212 has no altsetting 0 [ 1868.449408][ T554] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1868.459465][ T554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.477937][ T554] usb 1-1: Product: syz [ 1868.481996][ T554] usb 1-1: Manufacturer: syz [ 1868.486386][ T554] usb 1-1: SerialNumber: syz [ 1868.930229][ T554] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.226/input/input51 [ 1868.945902][ T554] usb 1-1: USB disconnect, device number 67 [ 1869.165703][T28602] tipc: Started in network mode [ 1869.170650][T28602] tipc: Own node identity 3225c6a2219d, cluster identity 4711 [ 1869.178040][T28602] tipc: Enabled bearer , priority 0 [ 1869.189251][T28602] tipc: Disabling bearer [ 1870.098183][ T640] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1870.239614][T28631] FAULT_INJECTION: forcing a failure. [ 1870.239614][T28631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1870.252794][T28631] CPU: 0 PID: 28631 Comm: syz.3.7202 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1870.262575][T28631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1870.272458][T28631] Call Trace: [ 1870.275587][T28631] dump_stack_lvl+0x1e2/0x24b [ 1870.280101][T28631] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1870.285482][T28631] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1870.290946][T28631] ? do_syscall_64+0x34/0x70 [ 1870.295371][T28631] dump_stack+0x15/0x17 [ 1870.299363][T28631] should_fail+0x3c6/0x510 [ 1870.303615][T28631] should_fail_usercopy+0x1a/0x20 [ 1870.308476][T28631] _copy_from_user+0x20/0xd0 [ 1870.312906][T28631] iovec_from_user+0xc7/0x330 [ 1870.317418][T28631] ? memset+0x35/0x40 [ 1870.321247][T28631] __import_iovec+0x6d/0x3b0 [ 1870.325675][T28631] import_iovec+0xe5/0x120 [ 1870.329925][T28631] vfs_writev+0x114/0x510 [ 1870.334087][T28631] ? do_writev+0x340/0x340 [ 1870.337950][ T640] usb 5-1: Using ep0 maxpacket: 32 [ 1870.338345][T28631] ? kmem_cache_free+0x1c0/0x1e0 [ 1870.348083][T28631] ? __fget_files+0x31e/0x380 [ 1870.352579][T28631] ? __fdget_pos+0x209/0x3a0 [ 1870.357015][T28631] ? do_writev+0x7b/0x340 [ 1870.361168][T28631] do_writev+0x1aa/0x340 [ 1870.365245][T28631] ? do_readv+0x460/0x460 [ 1870.369419][T28631] ? debug_smp_processor_id+0x17/0x20 [ 1870.374622][T28631] __x64_sys_writev+0x7d/0x90 [ 1870.379139][T28631] do_syscall_64+0x34/0x70 [ 1870.383386][T28631] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1870.389201][T28631] RIP: 0033:0x7fd185076ff9 [ 1870.393453][T28631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1870.413013][T28631] RSP: 002b:00007fd183cf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1870.421251][T28631] RAX: ffffffffffffffda RBX: 00007fd18522ef80 RCX: 00007fd185076ff9 [ 1870.429062][T28631] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000006 [ 1870.436874][T28631] RBP: 00007fd183cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 1870.444685][T28631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1870.452492][T28631] R13: 0000000000000000 R14: 00007fd18522ef80 R15: 00007ffc1c7c9858 [ 1870.521835][ T640] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.532037][ T640] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1870.698044][ T640] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1870.716436][ T640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.812308][ T640] usb 5-1: Product: syz [ 1870.846582][ T640] usb 5-1: Manufacturer: syz [ 1870.861224][ T640] usb 5-1: SerialNumber: syz [ 1872.232249][T28661] FAULT_INJECTION: forcing a failure. [ 1872.232249][T28661] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.244675][T28661] CPU: 0 PID: 28661 Comm: syz.0.7209 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1872.254452][T28661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1872.264438][T28661] Call Trace: [ 1872.267579][T28661] dump_stack_lvl+0x1e2/0x24b [ 1872.272082][T28661] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1872.277380][T28661] dump_stack+0x15/0x17 [ 1872.281369][T28661] should_fail+0x3c6/0x510 [ 1872.285618][T28661] ? security_file_alloc+0x29/0x120 [ 1872.290665][T28661] __should_failslab+0xa4/0xe0 [ 1872.295258][T28661] should_failslab+0x9/0x20 [ 1872.299601][T28661] kmem_cache_alloc+0x3d/0x2e0 [ 1872.304196][T28661] ? __alloc_file+0x29/0x330 [ 1872.308623][T28661] security_file_alloc+0x29/0x120 [ 1872.313480][T28661] __alloc_file+0xbf/0x330 [ 1872.317734][T28661] alloc_empty_file+0x95/0x180 [ 1872.322329][T28661] path_openat+0x105/0x3000 [ 1872.326707][T28661] ? __kasan_slab_alloc+0xc3/0xe0 [ 1872.331528][T28661] ? __kasan_slab_alloc+0xb1/0xe0 [ 1872.336387][T28661] ? slab_post_alloc_hook+0x61/0x2f0 [ 1872.341509][T28661] ? kmem_cache_alloc+0x168/0x2e0 [ 1872.346368][T28661] ? getname_flags+0xba/0x520 [ 1872.350883][T28661] ? getname+0x19/0x20 [ 1872.354787][T28661] ? __x64_sys_openat+0x243/0x290 [ 1872.359648][T28661] ? do_syscall_64+0x34/0x70 [ 1872.364092][T28661] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1872.369979][T28661] ? do_filp_open+0x460/0x460 [ 1872.374495][T28661] do_filp_open+0x21c/0x460 [ 1872.378841][T28661] ? vfs_tmpfile+0x2b0/0x2b0 [ 1872.383263][T28661] ? get_unused_fd_flags+0x94/0xa0 [ 1872.388203][T28661] do_sys_openat2+0x13f/0x710 [ 1872.392717][T28661] ? mutex_trylock+0xa0/0xa0 [ 1872.397146][T28661] ? do_sys_open+0x220/0x220 [ 1872.401579][T28661] ? __kasan_check_write+0x14/0x20 [ 1872.406516][T28661] ? ksys_write+0x260/0x2c0 [ 1872.410876][T28661] __x64_sys_openat+0x243/0x290 [ 1872.415543][T28661] ? __ia32_sys_open+0x270/0x270 [ 1872.420315][T28661] ? debug_smp_processor_id+0x17/0x20 [ 1872.425523][T28661] do_syscall_64+0x34/0x70 [ 1872.429778][T28661] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1872.435502][T28661] RIP: 0033:0x7ff9786deff9 [ 1872.439757][T28661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1872.459196][T28661] RSP: 002b:00007ff977316038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1872.467447][T28661] RAX: ffffffffffffffda RBX: 00007ff978897130 RCX: 00007ff9786deff9 [ 1872.475256][T28661] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1872.483061][T28661] RBP: 00007ff977316090 R08: 0000000000000000 R09: 0000000000000000 [ 1872.490977][T28661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1872.498775][T28661] R13: 0000000000000000 R14: 00007ff978897130 R15: 00007ffdfed1f328 [ 1872.958031][ T640] cdc_ncm 5-1:1.0: bind() failure [ 1872.968327][ T640] usb 5-1: USB disconnect, device number 80 [ 1874.540105][T28696] 9pnet: Insufficient options for proto=fd [ 1875.128007][ T640] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1875.458084][ T8506] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1875.733532][ T640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.746129][ T640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.758336][ T640] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1875.767520][ T640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.780933][ T640] usb 5-1: config 0 descriptor?? [ 1876.080522][ T8506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.091723][ T8506] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1876.100777][ T8506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.118914][ T8506] usb 4-1: config 0 descriptor?? [ 1876.378031][ T640] usbhid 5-1:0.0: can't add hid device: -71 [ 1876.392710][ T640] usbhid: probe of 5-1:0.0 failed with error -71 [ 1876.399668][ T640] usb 5-1: USB disconnect, device number 81 [ 1876.588226][ T8506] hid (null): bogus close delimiter [ 1876.810478][ T8506] usb 4-1: string descriptor 0 read error: -22 [ 1877.068245][ T8506] uclogic 0003:256C:006D.00DE: interface is invalid, ignoring [ 1877.302398][ T24] audit: type=1326 audit(2000000736.600:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.1.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fc677ff9 code=0x7ffc0000 [ 1877.345047][T28709] device syzkaller0 entered promiscuous mode [ 1877.357180][ T24] audit: type=1326 audit(2000000736.630:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.1.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb7fc677ff9 code=0x7ffc0000 [ 1877.385786][ T24] audit: type=1326 audit(2000000736.630:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.1.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fc677ff9 code=0x7ffc0000 [ 1877.418575][ T24] audit: type=1326 audit(2000000736.630:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.1.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb7fc677ff9 code=0x7ffc0000 [ 1877.442012][ T24] audit: type=1326 audit(2000000736.630:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.1.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fc677ff9 code=0x7ffc0000 [ 1877.465770][ T24] audit: type=1326 audit(2000000736.630:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.1.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb7fc677ff9 code=0x7ffc0000 [ 1877.488975][ T24] audit: type=1326 audit(2000000736.630:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.1.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fc677ff9 code=0x7ffc0000 [ 1877.512326][ T24] audit: type=1326 audit(2000000736.640:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.1.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fc677ff9 code=0x7ffc0000 [ 1877.537981][ T24] audit: type=1326 audit(2000000736.640:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.1.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fb7fc677ff9 code=0x7ffc0000 [ 1877.563022][ T24] audit: type=1326 audit(2000000736.640:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.1.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fc677ff9 code=0x7ffc0000 [ 1877.591346][T18480] usb 4-1: USB disconnect, device number 45 [ 1878.548079][ T8506] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1878.918031][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1878.928824][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1878.938414][ T8506] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1878.947361][ T8506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.956054][ T8506] usb 2-1: config 0 descriptor?? [ 1879.483353][T23935] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1879.766069][ T8506] pyra 0003:1E7D:2CF6.00DF: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 1879.858008][T23935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.868309][T23935] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1879.938158][ T8506] pyra 0003:1E7D:2CF6.00DF: couldn't init struct pyra_device [ 1879.945413][ T8506] pyra 0003:1E7D:2CF6.00DF: couldn't install mouse [ 1879.951813][T23935] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1879.961486][ T8506] pyra: probe of 0003:1E7D:2CF6.00DF failed with error -71 [ 1879.968532][T23935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1879.976319][T23935] usb 1-1: SerialNumber: syz [ 1879.981882][ T8506] usb 2-1: USB disconnect, device number 42 [ 1880.248873][T23935] usb 1-1: 0:2 : does not exist [ 1882.093974][T28815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7252'. [ 1882.134982][ T640] usb 1-1: USB disconnect, device number 68 [ 1882.149039][T28817] FAULT_INJECTION: forcing a failure. [ 1882.149039][T28817] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.161864][T28817] CPU: 1 PID: 28817 Comm: syz.0.7253 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1882.171646][T28817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1882.181534][T28817] Call Trace: [ 1882.184669][T28817] dump_stack_lvl+0x1e2/0x24b [ 1882.189177][T28817] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1882.194487][T28817] ? 0xffffffffa002c000 [ 1882.198469][T28817] ? stack_trace_save+0x1c0/0x1c0 [ 1882.203325][T28817] dump_stack+0x15/0x17 [ 1882.207319][T28817] should_fail+0x3c6/0x510 [ 1882.211572][T28817] ? audit_log_start+0x48c/0x9b0 [ 1882.216346][T28817] __should_failslab+0xa4/0xe0 [ 1882.220947][T28817] should_failslab+0x9/0x20 [ 1882.225287][T28817] kmem_cache_alloc+0x3d/0x2e0 [ 1882.229898][T28817] audit_log_start+0x48c/0x9b0 [ 1882.234491][T28817] ? audit_serial+0x30/0x30 [ 1882.238829][T28817] ? kmem_cache_free+0xa9/0x1e0 [ 1882.243512][T28817] ? kasan_set_track+0x5d/0x70 [ 1882.248116][T28817] ? kasan_set_free_info+0x23/0x40 [ 1882.253069][T28817] ? ____kasan_slab_free+0x121/0x160 [ 1882.257993][T10683] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1882.258180][T28817] ? __kasan_slab_free+0x11/0x20 [ 1882.270328][T28817] ? slab_free_freelist_hook+0xc0/0x190 [ 1882.275719][T28817] ? kmem_cache_free+0xa9/0x1e0 [ 1882.280402][T28817] ? do_symlinkat+0x370/0x400 [ 1882.284912][T28817] ? __x64_sys_symlink+0x60/0x70 [ 1882.289693][T28817] ? do_syscall_64+0x34/0x70 [ 1882.294110][T28817] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1882.300019][T28817] audit_seccomp+0x61/0x1e0 [ 1882.304365][T28817] __seccomp_filter+0xd03/0x1e10 [ 1882.309126][T28817] ? __secure_computing+0x300/0x300 [ 1882.314157][T28817] ? debug_smp_processor_id+0x17/0x20 [ 1882.319364][T28817] ? kmem_cache_free+0xa9/0x1e0 [ 1882.324047][T28817] ? ____kasan_slab_free+0x12c/0x160 [ 1882.329202][T28817] ? __kasan_slab_free+0x11/0x20 [ 1882.333940][T28817] ? slab_free_freelist_hook+0xc0/0x190 [ 1882.339325][T28817] ? do_symlinkat+0x370/0x400 [ 1882.343836][T28817] __secure_computing+0xf0/0x300 [ 1882.348610][T28817] syscall_enter_from_user_mode+0xbf/0x1a0 [ 1882.354260][T28817] do_syscall_64+0x13/0x70 [ 1882.358517][T28817] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1882.364239][T28817] RIP: 0033:0x7ff9786dda3c [ 1882.368495][T28817] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1882.387945][T28817] RSP: 002b:00007ff977358030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1882.396181][T28817] RAX: ffffffffffffffda RBX: 00007ff978896f80 RCX: 00007ff9786dda3c [ 1882.403985][T28817] RDX: 000000000000000f RSI: 00007ff9773580a0 RDI: 0000000000000003 [ 1882.411801][T28817] RBP: 00007ff977358090 R08: 0000000000000000 R09: 0000000000000000 [ 1882.419611][T28817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1882.427424][T28817] R13: 0000000000000000 R14: 00007ff978896f80 R15: 00007ffdfed1f328 [ 1882.437698][T28817] audit_log_lost: 49 callbacks suppressed [ 1882.437708][T28817] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 1882.451497][T28817] audit: out of memory in audit_log_start [ 1882.457652][ T24] audit: type=1326 audit(2000000741.750:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28816 comm="syz.0.7253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9786ddadf code=0x7ffc0000 [ 1882.490857][ T24] audit: type=1326 audit(2000000741.750:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28816 comm="syz.0.7253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff9786ddc8a code=0x7ffc0000 [ 1882.497977][T20924] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1882.514217][ T24] audit: type=1326 audit(2000000741.750:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28816 comm="syz.0.7253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9786deff9 code=0x7ffc0000 [ 1882.596455][ T24] audit: type=1326 audit(2000000741.750:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28816 comm="syz.0.7253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9786deff9 code=0x7ffc0000 [ 1882.787955][T20924] usb 2-1: Using ep0 maxpacket: 16 [ 1882.797981][T10683] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1882.838046][T10683] usb 4-1: not running at top speed; connect to a high speed hub [ 1882.908210][T20924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.919375][T20924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.930244][T20924] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1882.938019][T10683] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 1882.947164][T10683] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.947643][T20924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.971132][T10683] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1882.974914][T20924] usb 2-1: config 0 descriptor?? [ 1882.994552][T10683] usb 4-1: config 2 has no interface number 0 [ 1883.006950][T10683] usb 4-1: config 2 interface 212 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1883.020049][T10683] usb 4-1: config 2 interface 212 has no altsetting 0 [ 1883.178164][T10683] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1883.187219][T10683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.195929][T10683] usb 4-1: Product: syz [ 1883.200400][T10683] usb 4-1: Manufacturer: syz [ 1883.204888][T10683] usb 4-1: SerialNumber: syz [ 1883.443637][T28811] overlayfs: missing 'lowerdir' [ 1883.484575][T20924] savu 0003:1E7D:2D5A.00E0: item fetching failed at offset 2/5 [ 1883.492953][T20924] savu 0003:1E7D:2D5A.00E0: parse failed [ 1883.498550][T20924] savu: probe of 0003:1E7D:2D5A.00E0 failed with error -22 [ 1883.649389][T10683] usb 4-1: USB disconnect, device number 46 [ 1883.702910][T18480] usb 2-1: USB disconnect, device number 43 [ 1885.666298][T28879] FAULT_INJECTION: forcing a failure. [ 1885.666298][T28879] name failslab, interval 1, probability 0, space 0, times 0 [ 1885.678771][T28879] CPU: 1 PID: 28879 Comm: syz.1.7267 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1885.688514][T28879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1885.698417][T28879] Call Trace: [ 1885.701636][T28879] dump_stack_lvl+0x1e2/0x24b [ 1885.706140][T28879] ? panic+0x812/0x812 [ 1885.710045][T28879] ? pcpu_memcg_post_alloc_hook+0x1c8/0x360 [ 1885.715775][T28879] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1885.721073][T28879] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 1885.727593][T28879] ? find_next_bit+0xc7/0x100 [ 1885.732090][T28879] ? cpumask_next+0x11/0x30 [ 1885.736431][T28879] dump_stack+0x15/0x17 [ 1885.740419][T28879] should_fail+0x3c6/0x510 [ 1885.744671][T28879] ? prealloc_shrinker+0x53/0x220 [ 1885.749533][T28879] __should_failslab+0xa4/0xe0 [ 1885.754134][T28879] should_failslab+0x9/0x20 [ 1885.758472][T28879] kmem_cache_alloc_trace+0x3a/0x2e0 [ 1885.763601][T28879] prealloc_shrinker+0x53/0x220 [ 1885.768277][T28879] alloc_super+0x609/0x780 [ 1885.772525][T28879] sget+0x1e5/0x4c0 [ 1885.776176][T28879] ? free_anon_bdev+0x30/0x30 [ 1885.780685][T28879] incfs_mount_fs+0xd2/0xa10 [ 1885.785113][T28879] ? selinux_capset+0xf0/0xf0 [ 1885.789626][T28879] ? security_fs_context_parse_param+0xbe/0xf0 [ 1885.795616][T28879] ? incfs_unlink+0x80/0x80 [ 1885.799959][T28879] ? vfs_parse_fs_string+0x18c/0x220 [ 1885.805073][T28879] ? cap_capable+0x1ce/0x270 [ 1885.809503][T28879] legacy_get_tree+0xf1/0x190 [ 1885.814012][T28879] ? incfs_unlink+0x80/0x80 [ 1885.818357][T28879] vfs_get_tree+0x88/0x290 [ 1885.822607][T28879] do_new_mount+0x2ba/0xb30 [ 1885.826951][T28879] ? do_move_mount_old+0x160/0x160 [ 1885.831896][T28879] ? security_capable+0x87/0xb0 [ 1885.836582][T28879] ? ns_capable+0x89/0xe0 [ 1885.840746][T28879] path_mount+0x56f/0xcb0 [ 1885.844911][T28879] __se_sys_mount+0x2c4/0x3b0 [ 1885.849435][T28879] ? __x64_sys_mount+0xd0/0xd0 [ 1885.854028][T28879] __x64_sys_mount+0xbf/0xd0 [ 1885.858457][T28879] do_syscall_64+0x34/0x70 [ 1885.862713][T28879] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1885.868431][T28879] RIP: 0033:0x7fb7fc677ff9 [ 1885.872707][T28879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1885.892126][T28879] RSP: 002b:00007fb7fb2af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1885.900369][T28879] RAX: ffffffffffffffda RBX: 00007fb7fc830130 RCX: 00007fb7fc677ff9 [ 1885.908179][T28879] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000020000140 [ 1885.915991][T28879] RBP: 00007fb7fb2af090 R08: 0000000000000000 R09: 0000000000000000 [ 1885.923802][T28879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1885.931611][T28879] R13: 0000000000000000 R14: 00007fb7fc830130 R15: 00007fff8e4c2cd8 [ 1886.507969][T20924] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1886.688316][T24051] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1886.987990][T20924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1887.028020][T20924] usb 2-1: not running at top speed; connect to a high speed hub [ 1887.132935][T20924] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 1887.140974][T20924] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1887.151019][T20924] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1887.159735][T20924] usb 2-1: config 2 has no interface number 0 [ 1887.165673][T20924] usb 2-1: config 2 interface 212 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1887.178514][T20924] usb 2-1: config 2 interface 212 has no altsetting 0 [ 1887.508272][T24051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.519123][T24051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1887.528912][T24051] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1887.538170][T24051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.551217][T24051] usb 5-1: config 0 descriptor?? [ 1887.598040][T20924] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1887.607033][T20924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.614842][T20924] usb 2-1: Product: syz [ 1887.618814][T20924] usb 2-1: Manufacturer: syz [ 1887.623199][T20924] usb 2-1: SerialNumber: syz [ 1888.029319][T24051] hid-led 0003:1D34:000A.00E1: unknown main item tag 0x0 [ 1888.059362][T20924] usb 2-1: USB disconnect, device number 44 [ 1888.168422][ T24] audit: type=1400 audit(2000000747.470:6512): avc: denied { write } for pid=28910 comm="syz.3.7278" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1888.193112][ T24] audit: type=1400 audit(2000000747.470:6513): avc: denied { open } for pid=28910 comm="syz.3.7278" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1888.372656][T24051] hid-led: probe of 0003:1D34:000A.00E1 failed with error -71 [ 1888.389228][T24051] usb 5-1: USB disconnect, device number 82 [ 1891.798095][T24051] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1892.018075][ T2644] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1892.047963][T24051] usb 5-1: Using ep0 maxpacket: 8 [ 1892.438022][T24051] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1892.446194][T24051] usb 5-1: config 179 has no interface number 0 [ 1892.452511][T24051] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1892.463384][T24051] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1892.474440][T24051] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1892.485544][T24051] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1892.496736][T24051] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1892.509867][T24051] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1892.518770][T24051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.538055][T28962] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1892.658033][ T2644] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1892.718038][ T2644] usb 4-1: not running at top speed; connect to a high speed hub [ 1892.843435][ T2644] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 1892.855475][ T2644] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.865441][ T2644] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1892.881225][ T2644] usb 4-1: config 2 has no interface number 0 [ 1892.895108][ T2644] usb 4-1: config 2 interface 212 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1892.921126][ T2644] usb 4-1: config 2 interface 212 has no altsetting 0 [ 1893.218138][ T2644] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1893.227007][ T2644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.235154][ T2644] usb 4-1: Product: syz [ 1893.239209][ T2644] usb 4-1: Manufacturer: syz [ 1893.243590][ T2644] usb 4-1: SerialNumber: syz [ 1893.569166][ T2644] usb 4-1: USB disconnect, device number 47 [ 1893.658938][T12844] device bridge_slave_1 left promiscuous mode [ 1893.665003][T12844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.672963][T12844] device bridge_slave_0 left promiscuous mode [ 1893.679013][T12844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.686995][T12844] device veth1_macvtap left promiscuous mode [ 1893.693161][T12844] device veth0_vlan left promiscuous mode [ 1894.527108][T29006] syz.3.7302[29006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1894.527180][T29006] syz.3.7302[29006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1894.813743][T24051] usb 5-1: USB disconnect, device number 83 [ 1894.830705][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1894.830728][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1895.340891][T29025] binder: 29017:29025 ioctl 4018620d 0 returned -22 [ 1896.008021][T24051] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1896.352405][T20924] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1896.833955][T24051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.845144][T24051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.855005][T24051] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1896.864487][T24051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.873093][T24051] usb 5-1: config 0 descriptor?? [ 1896.888063][T20924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1896.928008][T20924] usb 4-1: not running at top speed; connect to a high speed hub [ 1896.964540][T29047] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1897.008044][T20924] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 1897.016077][T20924] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 1897.024387][T20924] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1897.034701][T20924] usb 4-1: config 2 has no interface number 0 [ 1897.040810][T20924] usb 4-1: config 2 has no interface number 1 [ 1897.046924][T20924] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1897.057990][T20924] usb 4-1: config 2 interface 226 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1897.068647][T20924] usb 4-1: config 2 interface 226 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1897.081628][T20924] usb 4-1: config 2 interface 212 has no altsetting 0 [ 1897.248034][T20924] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1897.256913][T20924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.264953][T20924] usb 4-1: Product: syz [ 1897.313808][T20924] usb 4-1: Manufacturer: syz [ 1897.318270][T20924] usb 4-1: SerialNumber: syz [ 1897.348175][T24051] hid (null): bogus close delimiter [ 1897.719040][T20924] usb 4-1: USB disconnect, device number 48 [ 1897.918037][T24051] usb 5-1: string descriptor 0 read error: -71 [ 1897.937997][T24051] uclogic 0003:256C:006D.00E2: failed retrieving string descriptor #200: -71 [ 1897.946632][T24051] uclogic 0003:256C:006D.00E2: failed retrieving pen parameters: -71 [ 1897.954615][T24051] uclogic 0003:256C:006D.00E2: failed probing pen v2 parameters: -71 [ 1897.962765][T24051] uclogic 0003:256C:006D.00E2: failed probing parameters: -71 [ 1897.970320][T24051] uclogic: probe of 0003:256C:006D.00E2 failed with error -71 [ 1897.978676][T24051] usb 5-1: USB disconnect, device number 84 [ 1899.008098][T24051] Bluetooth: hci0: command 0x1003 tx timeout [ 1899.014583][T16772] Bluetooth: hci0: sending frame failed (-49) [ 1899.070531][T29075] 9pnet: Insufficient options for proto=fd [ 1899.384616][ T24] audit: type=1400 audit(2000000758.640:6514): avc: denied { ioctl } for pid=29078 comm="syz.0.7325" path="socket:[188425]" dev="sockfs" ino=188425 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1901.087969][T17235] Bluetooth: hci0: command 0x1001 tx timeout [ 1901.093838][T16772] Bluetooth: hci0: sending frame failed (-49) [ 1902.526215][T29132] FAULT_INJECTION: forcing a failure. [ 1902.526215][T29132] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.538844][T29132] CPU: 1 PID: 29132 Comm: syz.0.7338 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1902.548540][T29132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1902.558437][T29132] Call Trace: [ 1902.561561][T29132] dump_stack_lvl+0x1e2/0x24b [ 1902.566076][T29132] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1902.571362][T29132] ? __schedule+0xcc9/0x1330 [ 1902.575790][T29132] dump_stack+0x15/0x17 [ 1902.579781][T29132] should_fail+0x3c6/0x510 [ 1902.584057][T29132] ? sidtab_sid2str_get+0x12b/0x2a0 [ 1902.589064][T29132] __should_failslab+0xa4/0xe0 [ 1902.593672][T29132] should_failslab+0x9/0x20 [ 1902.598007][T29132] __kmalloc_track_caller+0x5f/0x320 [ 1902.603139][T29132] ? preempt_schedule_notrace+0x140/0x140 [ 1902.608682][T29132] kmemdup+0x24/0x50 [ 1902.612427][T29132] sidtab_sid2str_get+0x12b/0x2a0 [ 1902.617301][T29132] security_sid_to_context_core+0x2b5/0x490 [ 1902.623013][T29132] security_sid_to_context_force+0x36/0x40 [ 1902.628703][T29132] selinux_inode_init_security+0x6df/0xad0 [ 1902.634288][T29132] ? selinux_inode_free_security+0x200/0x200 [ 1902.640092][T29132] ? irqentry_exit+0x4f/0x60 [ 1902.644531][T29132] ? sysvec_reschedule_ipi+0x83/0x160 [ 1902.649736][T29132] security_inode_init_security+0x15b/0x390 [ 1902.655461][T29132] ? shmem_tmpfile+0x100/0x100 [ 1902.660057][T29132] ? security_dentry_create_files_as+0xc0/0xc0 [ 1902.666042][T29132] ? simple_acl_create+0x29e/0x2c0 [ 1902.670990][T29132] ? shmem_get_inode+0x720/0x9e0 [ 1902.676030][T29132] shmem_mknod+0xb8/0x1c0 [ 1902.680188][T29132] ? selinux_inode_mkdir+0x22/0x30 [ 1902.685132][T29132] shmem_mkdir+0x2b/0x60 [ 1902.689214][T29132] vfs_mkdir+0x4cf/0x6c0 [ 1902.693292][T29132] do_mkdirat+0x1a6/0x2c0 [ 1902.697458][T29132] ? do_mknodat+0x450/0x450 [ 1902.701808][T29132] ? fpu__clear_all+0x20/0x20 [ 1902.706323][T29132] ? __kasan_check_read+0x11/0x20 [ 1902.711173][T29132] __x64_sys_mkdirat+0x7b/0x90 [ 1902.715769][T29132] do_syscall_64+0x34/0x70 [ 1902.720023][T29132] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1902.725748][T29132] RIP: 0033:0x7ff9786dd897 [ 1902.730006][T29132] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1902.749442][T29132] RSP: 002b:00007ff977315e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1902.757691][T29132] RAX: ffffffffffffffda RBX: 00007ff977315ef0 RCX: 00007ff9786dd897 [ 1902.765496][T29132] RDX: 00000000000001ff RSI: 0000000020000140 RDI: 00000000ffffff9c [ 1902.773307][T29132] RBP: 0000000000000000 R08: 0000000020000000 R09: 0000000000000000 [ 1902.781117][T29132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000140 [ 1902.789063][T29132] R13: 00007ff977315eb0 R14: 0000000000000000 R15: 0000000000000000 [ 1903.168040][T23935] Bluetooth: hci0: command 0x1009 tx timeout [ 1903.808634][ T8211] device bridge_slave_1 left promiscuous mode [ 1903.814571][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.821895][ T8211] device bridge_slave_0 left promiscuous mode [ 1903.827807][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.835427][ T8211] device veth1_macvtap left promiscuous mode [ 1903.841268][ T8211] device veth0_vlan left promiscuous mode [ 1904.375102][T29139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.387982][T29139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1904.395278][T29139] device bridge_slave_0 entered promiscuous mode [ 1904.403020][T29139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.410096][T29139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1904.422108][T29139] device bridge_slave_1 entered promiscuous mode [ 1904.692509][T29136] device pim6reg1 entered promiscuous mode [ 1904.725002][T29139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.731864][T29139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1904.738967][T29139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.745722][T29139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1904.764786][T12844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1904.771880][T12844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1904.779791][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1904.787102][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1904.796716][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1904.804717][T12844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.811569][T12844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1904.820024][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1904.828094][T12844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.834915][T12844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1904.848098][T17235] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1904.856040][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1904.864895][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1904.880143][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1904.891410][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1904.899348][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1904.906588][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1904.915580][T29139] device veth0_vlan entered promiscuous mode [ 1904.926047][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1904.934951][T29139] device veth1_macvtap entered promiscuous mode [ 1904.945424][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1904.955239][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1905.087984][T17235] usb 5-1: Using ep0 maxpacket: 16 [ 1905.208064][T17235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1905.221511][T17235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1905.231663][T17235] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1905.240787][T17235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.249625][T17235] usb 5-1: config 0 descriptor?? [ 1905.939023][T29141] overlayfs: missing 'lowerdir' [ 1905.959084][T17235] savu 0003:1E7D:2D5A.00E3: item fetching failed at offset 2/5 [ 1905.966925][T17235] savu 0003:1E7D:2D5A.00E3: parse failed [ 1905.972677][T17235] savu: probe of 0003:1E7D:2D5A.00E3 failed with error -22 [ 1906.182793][T20924] usb 5-1: USB disconnect, device number 85 [ 1906.437992][T17235] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1906.798033][T17235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1906.809024][T17235] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1907.078603][T17235] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1907.098228][T17235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.108801][T17235] usb 1-1: config 0 descriptor?? [ 1907.200714][T29175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.207585][T29175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.214820][T29175] device bridge_slave_0 entered promiscuous mode [ 1907.221774][T29175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.228647][T29175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.235876][T29175] device bridge_slave_1 entered promiscuous mode [ 1907.359107][T29162] udc-core: couldn't find an available UDC or it's busy [ 1907.367984][T29162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1907.370306][T29175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.382286][T29175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.389392][T29175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.396158][T29175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.467177][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1907.474747][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.482112][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.492027][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1907.500505][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.507348][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.523116][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1907.531313][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.538167][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.559516][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1907.567589][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1907.582570][T29175] device veth0_vlan entered promiscuous mode [ 1907.589119][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1907.597226][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1907.606455][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1907.621859][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1907.639658][T17235] plantronics 0003:047F:FFFF.00E4: No inputs registered, leaving [ 1907.649203][T29175] device veth1_macvtap entered promiscuous mode [ 1907.662916][T17235] plantronics 0003:047F:FFFF.00E4: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1907.675766][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1907.690434][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1907.705571][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1909.464364][T29207] overlayfs: unrecognized mount option "obj_role=" or missing value [ 1909.802573][ T8506] usb 1-1: USB disconnect, device number 69 [ 1909.898322][T18480] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1910.030184][T29214] syz.1.7358[29214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1910.030245][T29214] syz.1.7358[29214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1910.418481][T29230] binder: 29226:29230 ioctl 4018620d 0 returned -22 [ 1910.488037][T18480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.498899][T18480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1910.508773][T18480] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1910.517874][T18480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.528717][T18480] usb 5-1: config 0 descriptor?? [ 1911.108220][T18480] hid (null): bogus close delimiter [ 1911.168151][T24051] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1911.548044][T24051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1911.559134][T24051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1911.570041][T24051] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1911.582916][T24051] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1911.591794][T24051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.603500][T24051] usb 1-1: config 0 descriptor?? [ 1911.628047][T29238] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1911.644291][T18480] usb 5-1: string descriptor 0 read error: -71 [ 1911.669793][T18480] uclogic 0003:256C:006D.00E5: failed retrieving string descriptor #200: -71 [ 1911.679180][T18480] uclogic 0003:256C:006D.00E5: failed retrieving pen parameters: -71 [ 1911.687113][T18480] uclogic 0003:256C:006D.00E5: failed probing pen v2 parameters: -71 [ 1911.696567][T18480] uclogic 0003:256C:006D.00E5: failed probing parameters: -71 [ 1911.704304][T18480] uclogic: probe of 0003:256C:006D.00E5 failed with error -71 [ 1911.713407][T18480] usb 5-1: USB disconnect, device number 86 [ 1912.825878][T29264] syz.4.7371[29264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1912.825944][T29264] syz.4.7371[29264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1913.951730][T29288] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1915.183311][T24051] usbhid 1-1:0.0: can't add hid device: -71 [ 1915.189280][T24051] usbhid: probe of 1-1:0.0 failed with error -71 [ 1915.196306][T24051] usb 1-1: USB disconnect, device number 70 [ 1916.383270][T29313] FAULT_INJECTION: forcing a failure. [ 1916.383270][T29313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1916.416587][T29313] CPU: 1 PID: 29313 Comm: syz.0.7384 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1916.426371][T29313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1916.436263][T29313] Call Trace: [ 1916.439422][T29313] dump_stack_lvl+0x1e2/0x24b [ 1916.443907][T29313] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1916.449207][T29313] dump_stack+0x15/0x17 [ 1916.453193][T29313] should_fail+0x3c6/0x510 [ 1916.457453][T29313] should_fail_alloc_page+0x52/0x60 [ 1916.462491][T29313] __alloc_pages_nodemask+0x1b3/0xaf0 [ 1916.467694][T29313] ? __kasan_check_write+0x14/0x20 [ 1916.472637][T29313] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1916.478019][T29313] ? __kasan_check_read+0x11/0x20 [ 1916.482881][T29313] ? pagevec_add_and_need_flush+0x1fe/0x430 [ 1916.488612][T29313] ? __pte_map_lock_speculative+0x3f6/0x840 [ 1916.494341][T29313] pte_alloc_one+0x1f/0xc0 [ 1916.498590][T29313] __pte_alloc+0x75/0x2c0 [ 1916.502753][T29313] ? free_pgtables+0x3c0/0x3c0 [ 1916.507351][T29313] ? _raw_spin_unlock+0x4d/0x70 [ 1916.512058][T29313] ? handle_pte_fault+0x1472/0x3e30 [ 1916.517080][T29313] handle_pte_fault+0x3451/0x3e30 [ 1916.521937][T29313] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 1916.527413][T29313] ? __handle_speculative_fault+0xb41/0x1e90 [ 1916.533235][T29313] ? vmf_allows_speculation+0x6f0/0x6f0 [ 1916.538601][T29313] ? __this_cpu_preempt_check+0x13/0x20 [ 1916.543978][T29313] handle_mm_fault+0x11d6/0x1a10 [ 1916.548752][T29313] ? can_reuse_spf_vma+0xe0/0xe0 [ 1916.553525][T29313] ? down_read_trylock+0x179/0x1d0 [ 1916.558464][T29313] ? __kasan_check_write+0x14/0x20 [ 1916.563412][T29313] ? __kasan_check_write+0x14/0x20 [ 1916.568360][T29313] ? put_vma+0x8f/0xb0 [ 1916.572263][T29313] ? can_reuse_spf_vma+0xc5/0xe0 [ 1916.577162][T29313] exc_page_fault+0x2a6/0x5b0 [ 1916.581669][T29313] ? asm_exc_page_fault+0x8/0x30 [ 1916.586449][T29313] asm_exc_page_fault+0x1e/0x30 [ 1916.591128][T29313] RIP: 0033:0x7ff9785a28b6 [ 1916.595381][T29313] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 1916.614824][T29313] RSP: 002b:00007ff9773574a0 EFLAGS: 00010206 [ 1916.620723][T29313] RAX: 00000000002c8001 RBX: 00007ff977357540 RCX: 0000000000000010 [ 1916.628533][T29313] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007ff9773575e0 [ 1916.636343][T29313] RBP: 0000000000000102 R08: 00007ff96ef38000 R09: 00000000002c8000 [ 1916.644161][T29313] R10: 0000000000000000 R11: 00007ff977357550 R12: 0000000000000001 [ 1916.651982][T29313] R13: 00007ff978765a40 R14: 0000000000000000 R15: 00007ff9773575e0 [ 1916.697973][ T554] Bluetooth: hci0: command 0x1003 tx timeout [ 1916.704227][T16772] Bluetooth: hci0: sending frame failed (-49) [ 1916.715464][T29313] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1918.777132][ T640] Bluetooth: hci0: command 0x1001 tx timeout [ 1918.783112][T16772] Bluetooth: hci0: sending frame failed (-49) [ 1919.969736][T29364] syz.0.7398[29364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1919.969787][T29364] syz.0.7398[29364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1920.847948][ T640] Bluetooth: hci0: command 0x1009 tx timeout [ 1923.118998][T29403] udc-core: couldn't find an available UDC or it's busy [ 1923.125869][T29403] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1923.387942][ T554] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1923.668059][ T554] usb 5-1: Using ep0 maxpacket: 32 [ 1923.912850][ T554] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.922943][ T554] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1923.945717][ T554] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1923.955115][ T554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.978157][ T554] usb 5-1: config 0 descriptor?? [ 1924.039483][T29420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.046684][T29420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.054218][T29420] device bridge_slave_0 entered promiscuous mode [ 1924.061173][T29420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.068197][T29420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.075312][T29420] device bridge_slave_1 entered promiscuous mode [ 1924.082081][ T554] hub 5-1:0.0: bad descriptor, ignoring hub [ 1924.087838][ T554] hub: probe of 5-1:0.0 failed with error -5 [ 1924.093889][ T554] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1924.241786][T29420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.248665][T29420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1924.255768][T29420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.262543][T29420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1924.380269][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1924.387678][T12844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.395414][T12844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.426964][T29420] device veth0_vlan entered promiscuous mode [ 1924.449369][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1924.458131][ T554] usb 5-1: USB disconnect, device number 87 [ 1924.459131][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1924.472266][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1924.479700][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1924.487067][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1924.495153][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1924.503514][T12844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.510381][T12844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1924.517963][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1924.526503][T12844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.533356][T12844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1924.541555][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1924.550131][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1924.594185][T29420] device veth1_macvtap entered promiscuous mode [ 1924.852351][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1924.871996][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1925.317657][T29456] syz.0.7418[29456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1925.318738][T29456] syz.0.7418[29456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1926.661867][T29482] xt_hashlimit: size too large, truncated to 1048576 [ 1926.673921][T29484] FAULT_INJECTION: forcing a failure. [ 1926.673921][T29484] name failslab, interval 1, probability 0, space 0, times 0 [ 1926.793290][T29484] CPU: 0 PID: 29484 Comm: syz.4.7427 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1926.803087][T29484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1926.812976][T29484] Call Trace: [ 1926.816120][T29484] dump_stack_lvl+0x1e2/0x24b [ 1926.820621][T29484] ? panic+0x812/0x812 [ 1926.824523][T29484] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1926.829824][T29484] dump_stack+0x15/0x17 [ 1926.833813][T29484] should_fail+0x3c6/0x510 [ 1926.838064][T29484] ? security_inode_alloc+0x29/0x120 [ 1926.843183][T29484] __should_failslab+0xa4/0xe0 [ 1926.847788][T29484] should_failslab+0x9/0x20 [ 1926.852135][T29484] kmem_cache_alloc+0x3d/0x2e0 [ 1926.856733][T29484] security_inode_alloc+0x29/0x120 [ 1926.861675][T29484] inode_init_always+0x767/0x9f0 [ 1926.866462][T29484] ? shmem_match+0x180/0x180 [ 1926.870894][T29484] new_inode_pseudo+0x93/0x220 [ 1926.875476][T29484] new_inode+0x28/0x1c0 [ 1926.879467][T29484] shmem_get_inode+0x328/0x9e0 [ 1926.884068][T29484] __shmem_file_setup+0x111/0x2a0 [ 1926.888931][T29484] shmem_file_setup+0x2f/0x40 [ 1926.893447][T29484] __se_sys_memfd_create+0x1e1/0x3c0 [ 1926.898562][T29484] __x64_sys_memfd_create+0x5b/0x70 [ 1926.903592][T29484] do_syscall_64+0x34/0x70 [ 1926.907849][T29484] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1926.913579][T29484] RIP: 0033:0x7f34fecb9ff9 [ 1926.917835][T29484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1926.937274][T29484] RSP: 002b:00007f34fd932e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1926.945512][T29484] RAX: ffffffffffffffda RBX: 000000000000553b RCX: 00007f34fecb9ff9 [ 1926.953321][T29484] RDX: 00007f34fd932ef0 RSI: 0000000000000000 RDI: 00007f34fed2cb02 [ 1926.961132][T29484] RBP: 000000002000ac00 R08: 00007f34fd932bb7 R09: 00007f34fd932e40 [ 1926.968939][T29484] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000040 [ 1926.976747][T29484] R13: 00007f34fd932ef0 R14: 00007f34fd932eb0 R15: 0000000020000500 [ 1927.239042][T29492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7427'. [ 1927.481039][T12844] device bridge_slave_1 left promiscuous mode [ 1927.488590][T12844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.498021][T12844] device bridge_slave_0 left promiscuous mode [ 1927.548006][T17235] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1927.552973][T12844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.592001][T12844] device veth1_macvtap left promiscuous mode [ 1927.597850][T12844] device veth0_vlan left promiscuous mode [ 1928.048115][ T640] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1928.539088][ T640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1928.600562][ T640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1928.648020][T17235] usb 1-1: config 1 has an invalid interface number: 64 but max is 0 [ 1928.656066][T17235] usb 1-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 1928.666636][T17235] usb 1-1: config 1 has no interface number 0 [ 1928.672712][T17235] usb 1-1: config 1 interface 64 altsetting 3 has an invalid endpoint with address 0xF5, skipping [ 1928.683385][T17235] usb 1-1: config 1 interface 64 has no altsetting 0 [ 1928.735004][ T640] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1928.743919][ T640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.752403][ T640] usb 5-1: config 0 descriptor?? [ 1929.058312][T17235] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.40 [ 1929.067215][T17235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.075001][T17235] usb 1-1: Product: syz [ 1929.078987][T17235] usb 1-1: Manufacturer: syz [ 1929.083379][T17235] usb 1-1: SerialNumber: syz [ 1929.108042][T29490] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1929.228230][ T640] hid (null): bogus close delimiter [ 1929.495878][ T640] usb 5-1: language id specifier not provided by device, defaulting to English [ 1930.188570][T17235] usbhid 1-1:1.64: couldn't find an input interrupt endpoint [ 1930.197192][T17235] usb 1-1: USB disconnect, device number 71 [ 1930.367992][ T640] uclogic 0003:256C:006D.00E6: failed retrieving Huion firmware version: -71 [ 1930.386830][ T640] uclogic 0003:256C:006D.00E6: failed probing parameters: -71 [ 1930.397002][ T640] uclogic: probe of 0003:256C:006D.00E6 failed with error -71 [ 1930.423493][ T640] usb 5-1: USB disconnect, device number 88 [ 1930.857394][T29540] syz.0.7440[29540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1930.857464][T29540] syz.0.7440[29540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1934.495801][T29605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7458'. [ 1934.516315][T29605] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7458'. [ 1934.525634][T29605] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1935.830924][ T24] audit: type=1107 audit(2000000795.130:6515): pid=29623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='>=T D.ʠ(Yt8yVcI"OH[rS^al1p-[X`>m]78v禫Mvd*Y :4JpDο]Ꝅ;௃?:/տ咓]ʕEMVvҷ9v l/{O4V4#DJű9pW@FٿC b:/-t9zu.6Qp3Z p' [ 1937.298168][T19234] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1937.677993][T19234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.695660][T19234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1937.706289][T19234] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1937.715222][T19234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.726836][T19234] usb 1-1: config 0 descriptor?? [ 1938.248186][T19234] hid (null): bogus close delimiter [ 1938.253245][ T554] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1938.458349][T19234] usb 1-1: language id specifier not provided by device, defaulting to English [ 1938.618006][ T554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1938.675584][ T554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1938.685458][ T554] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1938.694368][ T554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.702840][ T554] usb 2-1: config 0 descriptor?? [ 1939.148046][T19234] uclogic 0003:256C:006D.00E7: failed retrieving Huion firmware version: -71 [ 1939.156709][T19234] uclogic 0003:256C:006D.00E7: failed probing parameters: -71 [ 1939.164040][T19234] uclogic: probe of 0003:256C:006D.00E7 failed with error -71 [ 1939.173646][T19234] usb 1-1: USB disconnect, device number 72 [ 1939.199268][ T554] hid-led 0003:1D34:000A.00E8: unknown main item tag 0x0 [ 1939.327974][T18479] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1939.478117][ T554] hid-led: probe of 0003:1D34:000A.00E8 failed with error -71 [ 1939.486707][ T554] usb 2-1: USB disconnect, device number 45 [ 1939.788199][T18479] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1939.838216][T18479] usb 5-1: not running at top speed; connect to a high speed hub [ 1939.928019][T18479] usb 5-1: config 2 has an invalid interface number: 212 but max is 1 [ 1939.936156][T18479] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 1939.944667][T18479] usb 5-1: config 2 has no interface number 0 [ 1939.951062][T18479] usb 5-1: config 2 has no interface number 1 [ 1939.957199][T18479] usb 5-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1939.993695][T18479] usb 5-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1940.021567][T18479] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1940.038144][T18479] usb 5-1: config 2 interface 226 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1940.048924][T18479] usb 5-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1940.067926][T18479] usb 5-1: config 2 interface 212 has no altsetting 0 [ 1940.086187][ T24] audit: type=1400 audit(2000000799.382:6516): avc: denied { ioctl } for pid=29676 comm="syz.1.7478" path="socket:[190675]" dev="sockfs" ino=190675 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1940.228010][T18479] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1940.236910][T18479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.244905][T18479] usb 5-1: Product: syz [ 1940.249053][T18479] usb 5-1: Manufacturer: syz [ 1940.253513][T18479] usb 5-1: SerialNumber: syz [ 1940.419425][T19234] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1940.658079][T19234] usb 2-1: Using ep0 maxpacket: 8 [ 1940.749224][T18479] usb 5-1: USB disconnect, device number 89 [ 1940.808365][T19234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1940.819017][T19234] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1940.827751][T19234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1940.838763][T19234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1940.851929][T19234] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1940.862118][T19234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.929206][T19234] hub 2-1:1.0: bad descriptor, ignoring hub [ 1940.941740][T19234] hub: probe of 2-1:1.0 failed with error -5 [ 1940.948857][T19234] cdc_wdm 2-1:1.0: skipping garbage [ 1940.954088][T19234] cdc_wdm 2-1:1.0: skipping garbage [ 1940.982682][T19234] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1941.219238][T29689] FAULT_INJECTION: forcing a failure. [ 1941.219238][T29689] name failslab, interval 1, probability 0, space 0, times 0 [ 1941.231805][T29689] CPU: 0 PID: 29689 Comm: syz.4.7481 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1941.241575][T29689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1941.247309][T18479] usb 2-1: USB disconnect, device number 46 [ 1941.251466][T29689] Call Trace: [ 1941.251485][T29689] dump_stack_lvl+0x1e2/0x24b [ 1941.251495][T29689] ? panic+0x812/0x812 [ 1941.251505][T29689] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1941.251523][T29689] dump_stack+0x15/0x17 [ 1941.251533][T29689] should_fail+0x3c6/0x510 [ 1941.251545][T29689] ? kobject_uevent_env+0x269/0x700 [ 1941.251565][T29689] __should_failslab+0xa4/0xe0 [ 1941.275429][T29691] syz.3.7482[29691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1941.278124][T29689] should_failslab+0x9/0x20 [ 1941.278137][T29689] kmem_cache_alloc_trace+0x3a/0x2e0 [ 1941.278155][T29689] ? mutex_lock+0xa5/0x110 [ 1941.282432][T29691] syz.3.7482[29691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1941.287405][T29689] ? dev_uevent_filter+0xb0/0xb0 [ 1941.287418][T29689] kobject_uevent_env+0x269/0x700 [ 1941.287438][T29689] ? mutex_unlock+0x1c/0x40 [ 1941.342091][T29689] kobject_uevent+0x1f/0x30 [ 1941.346418][T29689] device_del+0xd2f/0xf00 [ 1941.350582][T29689] ? kill_device+0xd0/0xd0 [ 1941.354835][T29689] ? mntput+0x5d/0xc0 [ 1941.358655][T29689] ? simple_release_fs+0xaf/0xe0 [ 1941.363430][T29689] device_unregister+0x15/0x40 [ 1941.368029][T29689] bdi_unregister+0x4bf/0x5b0 [ 1941.372541][T29689] ? bdi_set_owner+0x80/0x80 [ 1941.376973][T29689] ? __kasan_check_write+0x14/0x20 [ 1941.381916][T29689] ? _raw_spin_lock+0xa4/0x1b0 [ 1941.386519][T29689] ? _raw_spin_trylock_bh+0x190/0x190 [ 1941.391723][T29689] bdi_put+0xab/0x110 [ 1941.395542][T29689] generic_shutdown_super+0x285/0x2d0 [ 1941.400749][T29689] kill_anon_super+0x3d/0x70 [ 1941.405175][T29689] fuse_kill_sb_anon+0x1e8/0x200 [ 1941.409955][T29689] deactivate_locked_super+0xad/0x110 [ 1941.415155][T29689] deactivate_super+0xbe/0xf0 [ 1941.419667][T29689] cleanup_mnt+0x45c/0x510 [ 1941.423918][T29689] ? fsnotify_link_count+0x90/0x90 [ 1941.428869][T29689] __cleanup_mnt+0x19/0x20 [ 1941.433120][T29689] task_work_run+0x129/0x190 [ 1941.437550][T29689] exit_to_user_mode_loop+0xbf/0xd0 [ 1941.442582][T29689] syscall_exit_to_user_mode+0xa2/0x1a0 [ 1941.447963][T29689] do_syscall_64+0x40/0x70 [ 1941.452217][T29689] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1941.457952][T29689] RIP: 0033:0x7f34fecb9ff9 [ 1941.462286][T29689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1941.481724][T29689] RSP: 002b:00007f34fd912038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1941.489967][T29689] RAX: 0000000000000000 RBX: 00007f34fee72058 RCX: 00007f34fecb9ff9 [ 1941.497780][T29689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0 [ 1941.505587][T29689] RBP: 00007f34fd912090 R08: 0000000000000000 R09: 0000000000000000 [ 1941.513744][T29689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1941.521557][T29689] R13: 0000000000000001 R14: 00007f34fee72058 R15: 00007fffb8dfc7f8 [ 1941.592410][T29697] FAULT_INJECTION: forcing a failure. [ 1941.592410][T29697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1941.605354][T29697] CPU: 1 PID: 29697 Comm: syz.3.7484 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1941.615048][T29697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1941.624939][T29697] Call Trace: [ 1941.628073][T29697] dump_stack_lvl+0x1e2/0x24b [ 1941.632579][T29697] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1941.637878][T29697] ? kasan_set_track+0x5d/0x70 [ 1941.642585][T29697] dump_stack+0x15/0x17 [ 1941.646574][T29697] should_fail+0x3c6/0x510 [ 1941.650839][T29697] should_fail_usercopy+0x1a/0x20 [ 1941.655693][T29697] _copy_to_user+0x20/0x90 [ 1941.659946][T29697] simple_read_from_buffer+0xc7/0x150 [ 1941.665149][T29697] proc_fail_nth_read+0x1a3/0x210 [ 1941.670011][T29697] ? proc_fault_inject_write+0x390/0x390 [ 1941.675474][T29697] ? security_file_permission+0x86/0xb0 [ 1941.680859][T29697] ? rw_verify_area+0x1c3/0x360 [ 1941.685544][T29697] ? proc_fault_inject_write+0x390/0x390 [ 1941.691013][T29697] vfs_read+0x200/0xba0 [ 1941.695004][T29697] ? kernel_read+0x70/0x70 [ 1941.699260][T29697] ? __kasan_check_write+0x14/0x20 [ 1941.704206][T29697] ? mutex_lock+0xa5/0x110 [ 1941.708453][T29697] ? mutex_trylock+0xa0/0xa0 [ 1941.712910][T29697] ? __fdget_pos+0x2e7/0x3a0 [ 1941.717316][T29697] ? ksys_read+0x77/0x2c0 [ 1941.721485][T29697] ksys_read+0x199/0x2c0 [ 1941.725565][T29697] ? bpf_trace_run1+0x210/0x210 [ 1941.730245][T29697] ? vfs_write+0xe70/0xe70 [ 1941.734500][T29697] ? __bpf_trace_sys_enter+0x62/0x70 [ 1941.739738][T29697] __x64_sys_read+0x7b/0x90 [ 1941.744069][T29697] do_syscall_64+0x34/0x70 [ 1941.748321][T29697] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1941.754042][T29697] RIP: 0033:0x7fd185075a3c [ 1941.758294][T29697] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1941.777736][T29697] RSP: 002b:00007fd183cf0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1941.785980][T29697] RAX: ffffffffffffffda RBX: 00007fd18522ef80 RCX: 00007fd185075a3c [ 1941.793787][T29697] RDX: 000000000000000f RSI: 00007fd183cf00a0 RDI: 0000000000000006 [ 1941.801598][T29697] RBP: 00007fd183cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 1941.809410][T29697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1941.817238][T29697] R13: 0000000000000000 R14: 00007fd18522ef80 R15: 00007ffc1c7c9858 [ 1942.158660][ T2644] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1942.671563][ T24] audit: type=1326 audit(2000000801.972:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f608ff9 code=0x7ffc0000 [ 1942.700863][ T24] audit: type=1326 audit(2000000801.992:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f608ff9 code=0x7ffc0000 [ 1942.724610][ T24] audit: type=1326 audit(2000000801.992:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f975f608ff9 code=0x7ffc0000 [ 1942.748922][ T24] audit: type=1326 audit(2000000801.992:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f608ff9 code=0x7ffc0000 [ 1942.780191][ T24] audit: type=1326 audit(2000000801.992:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f608ff9 code=0x7ffc0000 [ 1942.803698][ T24] audit: type=1326 audit(2000000801.992:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f975f608ff9 code=0x7ffc0000 [ 1942.827491][ T24] audit: type=1326 audit(2000000802.002:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f608ff9 code=0x7ffc0000 [ 1942.851475][ T24] audit: type=1326 audit(2000000802.002:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f975f608ff9 code=0x7ffc0000 [ 1942.878929][ T24] audit: type=1326 audit(2000000802.002:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f608ff9 code=0x7ffc0000 [ 1942.902315][ T24] audit: type=1326 audit(2000000802.002:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29711 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975f608ff9 code=0x7ffc0000 [ 1943.158089][ T2644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1943.168817][ T2644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1943.178358][ T2644] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1943.187155][ T2644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.195737][ T2644] usb 4-1: config 0 descriptor?? [ 1943.669216][T29735] syz.4.7496[29735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1943.669265][T29735] syz.4.7496[29735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1943.678292][ T2644] hid (null): bogus close delimiter [ 1943.747571][T29737] fuse: Bad value for 'fd' [ 1943.775866][T29735] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1943.987970][ T2644] usb 4-1: language id specifier not provided by device, defaulting to English [ 1944.797989][ T2644] uclogic 0003:256C:006D.00E9: failed retrieving Huion firmware version: -71 [ 1944.806653][ T2644] uclogic 0003:256C:006D.00E9: failed probing parameters: -71 [ 1944.813959][ T2644] uclogic: probe of 0003:256C:006D.00E9 failed with error -71 [ 1944.822333][ T2644] usb 4-1: USB disconnect, device number 49 [ 1945.289195][T29750] syz.4.7500[29750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1945.289264][T29750] syz.4.7500[29750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1945.806476][T29768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7505'. [ 1947.943089][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 1947.943105][ T24] audit: type=1326 audit(2000000807.242:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.4.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fecb9ff9 code=0x7ffc0000 [ 1947.973070][ T24] audit: type=1326 audit(2000000807.242:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.4.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f34fecb9ff9 code=0x7ffc0000 [ 1947.997835][ T24] audit: type=1326 audit(2000000807.242:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.4.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fecb9ff9 code=0x7ffc0000 [ 1948.026485][ T24] audit: type=1326 audit(2000000807.242:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.4.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f34fecb9ff9 code=0x7ffc0000 [ 1948.051413][ T24] audit: type=1326 audit(2000000807.242:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.4.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fecb9ff9 code=0x7ffc0000 [ 1948.075208][ T24] audit: type=1326 audit(2000000807.242:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.4.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f34fecb9ff9 code=0x7ffc0000 [ 1948.098825][ T24] audit: type=1326 audit(2000000807.242:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.4.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fecb9ff9 code=0x7ffc0000 [ 1948.122412][ T24] audit: type=1326 audit(2000000807.242:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.4.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34fecb9ff9 code=0x7ffc0000 [ 1948.146354][ T24] audit: type=1326 audit(2000000807.242:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.4.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fecb9ff9 code=0x7ffc0000 [ 1948.172172][ T24] audit: type=1326 audit(2000000807.242:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.4.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34fecb9ff9 code=0x7ffc0000 [ 1948.677939][T18479] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1948.917927][T18479] usb 1-1: Using ep0 maxpacket: 16 [ 1949.128189][T18479] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1949.156114][T18479] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1949.203310][T18479] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1949.220549][T18479] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1949.232800][T18479] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1949.242668][T18479] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1949.249446][T18479] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1949.258630][T18479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.308401][T18479] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1949.442523][T29823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7521'. [ 1949.452595][T29823] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7521'. [ 1949.461850][T29823] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1949.578745][T18479] scsi host1: usb-storage 1-1:1.0 [ 1949.862046][T24051] usb 1-1: USB disconnect, device number 73 [ 1951.491386][T29861] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1952.057955][T24051] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1952.219539][T29867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7532'. [ 1952.228381][T29867] device bridge_slave_1 left promiscuous mode [ 1952.234349][T29867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.243760][T29867] device bridge_slave_0 left promiscuous mode [ 1952.250031][T29867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.317904][T24051] usb 5-1: Using ep0 maxpacket: 16 [ 1952.608493][T24051] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1952.617399][T24051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.625322][T24051] usb 5-1: Product: syz [ 1952.629328][T24051] usb 5-1: Manufacturer: syz [ 1952.633689][T24051] usb 5-1: SerialNumber: syz [ 1952.639095][T24051] usb 5-1: config 0 descriptor?? [ 1952.787936][ T554] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1952.897999][T24051] r8152 5-1:0.0: Unknown version 0x0000 [ 1952.904341][T24051] usb 5-1: USB disconnect, device number 90 [ 1953.037953][ T554] usb 2-1: Using ep0 maxpacket: 8 [ 1953.158050][ T554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1953.168907][ T554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1953.178480][ T554] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1953.191035][ T554] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1953.199910][ T554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.209363][ T554] usb 2-1: config 0 descriptor?? [ 1953.567968][T18479] Bluetooth: hci0: command 0x1003 tx timeout [ 1953.573932][T16772] Bluetooth: hci0: sending frame failed (-49) [ 1953.700801][ T554] pyra 0003:1E7D:2C24.00EA: item fetching failed at offset 5/7 [ 1953.713289][ T554] pyra 0003:1E7D:2C24.00EA: parse failed [ 1953.719249][ T554] pyra: probe of 0003:1E7D:2C24.00EA failed with error -22 [ 1953.923453][T18479] usb 2-1: USB disconnect, device number 47 [ 1954.461595][T29882] device pim6reg1 entered promiscuous mode [ 1954.778445][ T8211] Bluetooth: hci1: Frame reassembly failed (-84) [ 1955.674951][T17235] Bluetooth: hci0: command 0x1001 tx timeout [ 1955.680938][ T466] Bluetooth: hci0: sending frame failed (-49) [ 1956.298268][T29896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1956.305121][T29896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1956.312466][T29896] device bridge_slave_0 entered promiscuous mode [ 1956.320447][T29896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.327295][T29896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1956.334635][T29896] device bridge_slave_1 entered promiscuous mode [ 1956.391480][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1956.398929][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1956.407705][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1956.416164][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1956.424113][T12844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1956.430948][T12844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1956.438761][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1956.447041][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1956.455392][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1956.463624][T12844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.470460][T12844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1956.483092][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1956.492143][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1956.505929][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1956.516871][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1956.525114][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1956.532539][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1956.541025][T29896] device veth0_vlan entered promiscuous mode [ 1956.551567][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1956.560708][T29896] device veth1_macvtap entered promiscuous mode [ 1956.570801][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1956.580727][T12844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1956.847955][ T554] Bluetooth: hci1: command 0x1003 tx timeout [ 1956.853866][ T466] Bluetooth: hci1: sending frame failed (-49) [ 1957.739124][ T2644] Bluetooth: hci0: command 0x1009 tx timeout [ 1958.928107][ T2644] Bluetooth: hci1: command 0x1001 tx timeout [ 1958.934320][ T466] Bluetooth: hci1: sending frame failed (-49) [ 1959.440675][T29931] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1959.450262][T29931] SELinux: failed to load policy [ 1959.461917][ T24] kauditd_printk_skb: 44 callbacks suppressed [ 1959.461969][ T24] audit: type=1400 audit(2000000818.742:6622): avc: denied { load_policy } for pid=29926 comm="syz.3.7546" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1960.397946][T20924] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1960.757940][T20924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1960.877944][T20924] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1960.885325][T20924] usb 4-1: can't read configurations, error -71 [ 1961.008024][ T2644] Bluetooth: hci1: command 0x1009 tx timeout [ 1961.661781][T29946] binder: 29941:29946 ioctl 4018620d 0 returned -22 [ 1961.672808][ T24] audit: type=1400 audit(2000000820.972:6623): avc: denied { ioctl } for pid=29941 comm="syz.3.7550" path="/syzcgroup/cpu/syz3/cpuset.cpus" dev="cgroup" ino=217 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 1961.790006][T29950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.796933][T29950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1961.804407][T29950] device bridge_slave_0 entered promiscuous mode [ 1961.811914][T29950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.819090][T29950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1961.826426][T29950] device bridge_slave_1 entered promiscuous mode [ 1961.881173][T29950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.888066][T29950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1961.895128][T29950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.901938][T29950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.926220][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1961.933764][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1961.941104][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1961.959111][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1961.967222][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.974078][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.981546][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1961.989911][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.996743][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1962.004004][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1962.098826][T29950] device veth0_vlan entered promiscuous mode [ 1962.111223][T29950] device veth1_macvtap entered promiscuous mode [ 1962.129896][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1962.138312][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1962.146992][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1962.155546][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1962.163477][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1962.171043][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1962.178926][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1962.186998][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1962.221635][T29958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7554'. [ 1962.230414][T29958] device bridge_slave_1 left promiscuous mode [ 1962.492792][T29958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.502782][T29958] device bridge_slave_0 left promiscuous mode [ 1962.509523][T29958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.700050][T29967] xt_CT: No such helper "syz1" [ 1962.837267][T29965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7551'. [ 1962.846002][T29965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7551'. [ 1962.864850][T29969] syz.3.7555[29969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1962.864896][T29969] syz.3.7555[29969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1963.006030][T29974] syz.3.7557[29974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1963.018139][T29974] syz.3.7557[29974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1963.234253][T29983] binder: 29981:29983 ioctl 4018620d 0 returned -22 SYZFAIL: netlink_send_ext: short netlink write wrote=-1, want=40 (errno 13: Permission denied) loop exited with status 67 SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x20000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=2 req=3565 state=1 status=9 (errno 11: Resource temporarily unavailable) [ 1964.479044][ T24] audit: type=1400 audit(2000000823.782:6624): avc: denied { write } for pid=272 comm="syz-executor" path="pipe:[13147]" dev="pipefs" ino=13147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1965.278611][T12844] device bridge_slave_1 left promiscuous mode [ 1965.284531][T12844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.291882][T12844] device bridge_slave_0 left promiscuous mode [ 1965.297790][T12844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.305514][T12844] device veth1_macvtap left promiscuous mode [ 1965.311630][T12844] device veth0_vlan left promiscuous mode [ 1966.649129][T12844] device bridge_slave_1 left promiscuous mode [ 1966.655049][T12844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.662365][T12844] device bridge_slave_0 left promiscuous mode [ 1966.668348][T12844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.675836][T12844] device bridge_slave_1 left promiscuous mode [ 1966.681839][T12844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.689174][T12844] device bridge_slave_0 left promiscuous mode [ 1966.695078][T12844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.703962][T12844] device veth1_macvtap left promiscuous mode [ 1966.709807][T12844] device veth0_vlan left promiscuous mode [ 1966.715410][T12844] device veth1_macvtap left promiscuous mode [ 1966.721184][T12844] device veth0_vlan left promiscuous mode [ 1966.726772][T12844] device veth1_macvtap left promiscuous mode [ 1966.732552][T12844] device veth0_vlan left promiscuous mode [ 1966.738235][T12844] device veth1_macvtap left promiscuous mode [ 1966.744024][T12844] device veth0_vlan left promiscuous mode