last executing test programs: 9.257494282s ago: executing program 4 (id=78): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400040042, 0x129) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000008c0)=0x401) read$FUSE(r0, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setxattr$security_capability(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800), &(0x7f0000000840)=@v3={0x3000000, [{0x9, 0xf}, {0x6, 0x10001}], r5}, 0x18, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private2, @in6=@local}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000880)=0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@nodioread_nolock}, {@grpjquota}, {@grpjquota}, {@noquota}, {@usrjquota}, {@noload}, {@nodiscard}]}, 0x64, 0x50c, &(0x7f0000000200)="$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") 8.81597958s ago: executing program 4 (id=81): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r1, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/238, 0xee}}, 0x10) 8.81537327s ago: executing program 0 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x103) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ptrace$setregset(0x4205, r5, 0x200, &(0x7f0000000100)={0x0}) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.813485691s ago: executing program 4 (id=83): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000380)={0x0, "7674181cdc10c201d34364d8a3e44dac9e73b52a575c4e728c27236084aa8a2e12b209a493863f7ae78176e2838c258432f2bcd1e84c60ccfb3fac5de4550ce5", 0x2a}, 0x48, 0xfffffffffffffff9) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x10400, &(0x7f0000000280)={[{@noinline_data}, {@memory_low}, {@alloc_mode_def}, {@checkpoint_diasble}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4f1}}, {@noinline_dentry}, {@noacl}, {@six_active_logs}, {@alloc_mode_def}, {@noextent_cache}, {@compress_chksum}, {@checkpoint_diasble}]}, 0x1, 0x550c, &(0x7f00000089c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDhKaN3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/Nl5Xy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetcZ7sAw9ru9m40dzKYrufZrF1mNd1cJj/33bYH+R5GkW+D7P0MRiMYz7fPGjm+9l5lMV6b1DM53nTRvNgFIdFLC4X9bTTyOrYOs43/f/2Vru3d5AMm7v9dtpL1irVFyvVO+XqbtpoDpqr5Vq3cWc1WWh1RsvKg2atu95K01anWamn3cVkoVWvl6vVZOFuc6td6yXVamWlslReWyzObiev3X836TSShVF8pd3bG7Q7/WQ73U3yTywmy5WVlxaTW9Xk7Y3NZPPBvXsbm++8f/e9+y9vvPFqsehvZb0Qy0vLy+XqUnm5uniO9v9xUXSyMLH9w7GUpl0AwNmj/wem4eT6/90HESff/4f+fyLOVP87LmuC/e953z8ci/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+n7ui9ezk/l8fK2Yf6qYeqYYlyJiJiJ++wezcfFIztkiz9y/rJ/7Sw3flCLLMLrGpeK4GhHrxfHr0yf9LQAAAMCT68uPbn6ad+v5y/y0C+I05TdtZq5/MKF8pYiYm/9hQtlmRi/PTihZ9u/7QhxMKFt2A+vyhJLlt9wuTCrbfzJ7JFx+LJTyMHOq5QAAAKfiaCdwul0IAAAAp+mTaRfAdJRi/Chz/Cw4+8v7Px8IXjkyAgAAAM6g0rQLAAAAAE5c1v/7/T8AAAB4suW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3cJg5EcQB+Nnhh/2nRau/byt6gjC1hj3uMKCBNUEAOpIU0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALt1X68Xt1e/rtjm7fTt5RgMAAABcsq3Wi/qfWep/be5/b279bPpFRJQRcWnuPopPZ5mjJqd6ef7m9PnqVQ13EXXC4T0mzfUlIv401+OPrj8FAAAA+Lg2y9U8zdbTn9nQBdGntGhTfvubKa+IiGr2kCmtPOT9yhRWf7/H8T9TWr2ANc0UlpbcxrnS3qT+uR9X7aYnTZGa8uLLjkVmGzsAANCj0VnT7ywEAACAPv0bugCGUcTzVuZxK3CSmmZ77/NZDwAAAHiHiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zc7OxlbFNcoeIqLgQS92u62tvYkHJXjwTxBCuq2xW3+0OdhSxFy8Sc69iB5FBCXe+j/0nEAu8ZbDHiJ4jszszO7kB7j+6Mwm+XzgzfvuMMz7vlkI+c57CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBh+O4kjtNDexQ38nObew+W037rUJ96tL69kLY0jqpM+mR4ufwh6ozDvTqSAQAA4GyIi/o+hLCTbCymfaOd1f9JcU1a83//7Cgu6vnDdX/RF7V/2n77dffF8UDt0TjpTW+sDPoXj6bSfHKznG3P/e0VzezJZ+9e4uwLaXyw9sIwyZ5n9O3jx++1snCuimwBgH/jQtHnQfH7UNr36kwMgDOjWSq8i/o/btebEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAVhmvh6SKOQggLzUmc2tp7sHxc/2h9e6FoVx8+XA9fT+6Z3iIJIdxYGfQvVjqb2Xb33v1bS4NB/071wSshhLpGfyef/q2Pprg4hFqej+D/Cfbn8i97RvI5IUGNP5QAADiVkryldf1OsrGYnovmQ9j/4WD9/3opDlPW/7sfX90sj1Wu/3uVzXD2dVdvf969e+/+myu3l272b/Y/fetS7+3e5WtXrlzrZu9Kut6YAAAA8N+08lau/xvzR9f/z5fiMGX9/8V3va/KY8Xq/2NNFv3qzgQAAOBse/7VP/+IjjkftVrhy6XV1Tu90XH8+dLoWEOq/9hc3sr1fzxfd1YAAABAFYZr0YH1/+ulOEy5/v/Mjy/9XL5nHEI4l6//X1j+bHC9uunMtCr+nLjuOQIAAFCvc3krr/8n2f7/xnjLQyOE8MZrozj/N4BT1f/x+9/8VB6rvP//cnVTnEmNzuh5ZH0nhGan7owAAAA4zZ7KW1rs/55sLH7yy/kPW/b/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//RAE/8A==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r7}, 0x18) ioctl$BLKRRPART(r1, 0x125f, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="011b27bd700003dcdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='scsi_dispatch_cmd_start\x00', r8}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.677937121s ago: executing program 0 (id=87): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x42, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r1, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f0000001609005a000794a69b328394"], 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x11, 0x98, 0xffffffff, 0x1d0, 0x1d0, 0x90, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x518, 0xd0, 0x178, 0xffffffff, 0x0, 0xd0, 0x480, 0x480, 0xffffffff, 0x480, 0x480, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x0, {0x22e}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0x3}], 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000300000000e9ff1308000000002e302e00"], &(0x7f0000001540)=""/4091, 0x29, 0xffb, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x42, 0x42}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r1, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f0000001609005a000794a69b328394"], 0x0}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x11, 0x98, 0xffffffff, 0x1d0, 0x1d0, 0x90, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x518, 0xd0, 0x178, 0xffffffff, 0x0, 0xd0, 0x480, 0x480, 0xffffffff, 0x480, 0x480, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x0, {0x22e}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0x3}], 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000300000000e9ff1308000000002e302e00"], &(0x7f0000001540)=""/4091, 0x29, 0xffb, 0x1}, 0x28) (async) 7.295383315s ago: executing program 4 (id=90): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x40009, 0x5, 0x86f, 0xffff, 0x3, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000180)=r3}, 0x20) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, '\x00\x00M'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0}) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.172945246s ago: executing program 1 (id=92): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x73, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x6e, &(0x7f0000000180)=""/110, 0xf25ff83d80d80707, 0x70, '\x00', 0x0, @fallback=0x2f, r1, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0x1, 0xff7a}, 0x10, r2, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0x5, 0x1, 0x10, 0x4}, {0x4, 0x3, 0x3, 0x6}], 0x10, 0xfffffffb}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000440)={0x6, 0x8, '\x00', 0x0, &(0x7f0000000400)=[0x0]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000480)={0x0, 0x1, 0x6, @remote}, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x14) close(r0) rmdir(&(0x7f0000000540)='./file0\x00') r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580), 0xc0000, 0x0) r6 = fsmount(r5, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x0, 0x1, 0xb, 0x8, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xd, 0xa, 0x7, 0x6, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x53}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000640)='GPL\x00', 0x7, 0x94, &(0x7f0000000680)=""/148, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x8, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[r0, r0, r5], &(0x7f0000000800)=[{0x0, 0x4, 0xd, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x2, 0x1, 0xf, 0x7}], 0x10, 0xfffffffe}, 0x94) r7 = accept$packet(r5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x0, 0x8001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x40, 0x700, 0x7, 0x6}}) bind$packet(r7, &(0x7f0000000a40)={0x11, 0x8a72d19821d2e62b, r8, 0x1, 0x2, 0x6, @local}, 0x14) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, &(0x7f0000000a80)={0x5, r4, 'id1\x00'}) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000b00)={{0x2, 0x4e21, @loopback}, {0x6}, 0x24, {0x2, 0x4e22, @loopback}, 'vlan1\x00'}) ioctl$KVM_X86_SET_MSR_FILTER(r9, 0x4188aec6, &(0x7f00000033c0)={0x1, [{0x2, 0x690, 0x2, &(0x7f0000000b80)="743baadaaf8b7e6825d1a0d1f7518f163013a1d2b3c10633278de481d0bd1b12c0eaba586ecdf5bf957f416072fe336de0b9d3c2e509a28b73d717e41bf96ac887a194e7834c2a41e1f341169cee397d49b93ddea2d979d33f5ab4281c96ab16f77ec211893b11cdf2d3637420615311c81bc7e0e16a26b1fe6a73936aaa3d55007d0dcc2c127a9f75f567aeb863f1cca369d8fdcf085eae0ad1b84d860e2a8d689e02bfeb5c0a868becdfebc7c9273f4d9b8d81a1b1e84c5b3ee7311c23fee17284a74ebd98de59e8a95b76168c77ab87a6"}, {0x1, 0x3c0, 0xfa, &(0x7f0000000c80)="311f408416e2f5605f9f167587dc8ae4da5566efec6070532d108f1adf5a139c34c348f4d6a38607e44d8c47c67c1619d96723b05180f92c5d3864dfc710abb831555dbc1132fbe41cc1777f1f8fd9ddaa1bcc529061526888664d953bc59549953018e429eb08fda43d5f6a03e9c368f9dbc225631adcd2"}, {0x2, 0x8000, 0x9, &(0x7f0000000d00)="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"}, {0x0, 0x460, 0x0, &(0x7f0000001d00)="21e95e3ed92e8e50adf9d358041eebccf097be92a4d35bae495ae62e09b6ea032388af8533581739b5a81fb6580e096a702eaf821c9b62d66d7910e21a5f1d3dffa1e7bda3be0087e52b0caa3b1e34374e2077c5d45b2060e73e8e415c1297afb35e13793f91b2cd593c3b1c5cf19b21a67e2eaf041e326fbf029aada5b40578433a678b701b701c45c1d59c"}, {0x1, 0x3b8, 0x4, &(0x7f0000001dc0)="7f0e02d4ebc78d344d8e6d7e7e0e89a9b18d36a8af7cab7c487395d2a1c47b66d32c516b5491ed6855823d0a327e4656c713d4e1ac098343cbe1b67d60910ed08a8cd5edfb0c0742e75b204ea942104fa317b9c6755d1151027ce0c1d632abcf4dca5ba0233c15c8b75426c8cfbc44cd17324494ae2063"}, {0x1, 0x208, 0x5, &(0x7f0000001e40)="8c9f0f763c9a1272d2b87593d8a1a1dc89e38d906d2034d0b9e7c632aed7acf220d2f734caaf8af57a0c7d622bc7b7f6669a4e7f9ee8355ad5ef711748dfe84d3c"}, {0x3, 0x8000, 0x619, &(0x7f0000001ec0)="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"}, {0x2, 0x328, 0x80000001, &(0x7f0000002ec0)="b0435a4d4f92506a631b81d558081752a765405a6012fe2c49f5eed337d56412f60c5fd2d9dfeedee047eb953ba494b46c49917e88f3c17b306ed40fc9ff5db5359e0008da9260dc57839ab3a96219393a3b513e788f2195dc121149e0551d1ccd5b612d1d"}, {0x3, 0x688, 0x5, &(0x7f0000002f40)="a6bcaa1ba7b88b18a9974f748d6b39b4460fbd1b8a5cad61ccb0184837da89a22c16f3c0c371b33db1ca5cf02af79448620974be8d4707015e3a0a71a1a069a241cf812e2563acaab46dc660c4328c82fce609c3873401b09f06978972c492ef89f2202b41a424ee46a323f8e462259448cdd23315035ccecc907abb9bf1bcf3413bdd5cbaa702388386457eaccd0f79ecd0b93cb2e7b0495deac1b4ff19e2e8b8219891a510fa85b1bca2004bf4a07dadb660128c47306277f945b3740dae2a2ccf3a8c61b949ab0c81b621fe6b8a56b2"}, {0x2, 0x0, 0xcdce, &(0x7f0000003040)}, {0x3, 0x500, 0x3ff, &(0x7f0000003080)="c9467e63949d7ac2f28a85a97c6793a44f193ba33481224e54472b4cc5fe46fc2cf32e26c8b7df086387224ce57b812f87ddccec22968af7d7369d75e83019e2f361df67702757161d1c13520c51b25c9d957526f182cfe9d686cc6366b897ad94d1e2b22ee2c818b13524b892cea92201dc689e56476d8d08375580b4c66f9c06168a5ce90813dccfc6fec6f3f26f9b25ff2702160d2eac5523de73dced7f7a"}, {0x1, 0x2e0, 0xb, &(0x7f0000003140)="6fc36ebc88eaa632745939470578d7d15c9b01e14b166b02dfd0a2c33e799d4a287f002768a340792d3abc7dcdd8cf110709f110328e5ed98bf1778163bd099559ab6b23798641d9d841d4f4b040eb8267bf8840a0db46535ba98f74"}, {0x3, 0x500, 0x6, &(0x7f00000031c0)="cbb3cddd3aedc7f66c1a0cf5f28cdcfe56e0113e1a82293cff1ce2303fe6265cd2db3650c5be0bc4422b2bd3b7fc833e83b9433b9e33a1aa63b45632996ad0b0673063a82d880e815f5039ac7b7a02a3703351657b3476ae5905cf63a818b79e7e4816aa636b73748ae05043c754b8da330a711729073ab17fb6a3275d610d88afcf15f865adf40b13e227c7e74bef2d0d66429c55105600eed50b2a368dcae5"}, {0x0, 0x1b0, 0xd, &(0x7f0000003280)="4b1bfbca41fe277594e33d36f5d3ff910a0a1705c471bc1baade1dd5e8e1bfb6505f1490b4d7018a1f5f17153dd927cbc1a8cb4958c4"}, {0x1, 0x268, 0x0, &(0x7f00000032c0)="91a766e8f0bfd678152929ffb788bff83aaf13bd68c9e5974086799f363e248f068810d1f862b9259bf4edd480d401ae8fa97b5b5753b561ff406e4212a37d77d873ab640c71a9374c99fe0176"}, {0x0, 0x300, 0x8, &(0x7f0000003340)="b0f7dde1e39c50caaf4196567eb4204b9c8d577d422faa387c10f1512785693559ed0e1c4c194d4ee4dc718656e15bcb658cb9a7b30a79152db845be9b6655e8dfff23f0b174c88dd43872ebbf552bc5a436fbbc14e89335240ea710c4253b87"}]}) bpf$PROG_LOAD(0x5, &(0x7f00000037c0)={0x2, 0x10, &(0x7f0000003580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x742}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x1d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003600)='GPL\x00', 0x2, 0x94, &(0x7f0000003640)=""/148, 0x41000, 0x48, '\x00', r8, @fallback=0x9, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003700)={0x5, 0xe, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x2, &(0x7f0000003740)=[r9, r6, r9, r6, r0, r5], &(0x7f0000003780)=[{0x2, 0x5, 0x4}, {0x2, 0x1, 0x6, 0x1}], 0x10, 0x8}, 0x94) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000003880), 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000038c0)={0x10002, 0x0, 0x26000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000003900)={0x3, 0x0, [{0x234, 0x0, 0x2}, {0xa32, 0x0, 0x8000000000000000}, {0xbef, 0x0, 0x8}]}) write$uinput_user_dev(r10, &(0x7f0000003940)={'syz0\x00', {0x2db, 0x3, 0x4, 0x8000}, 0x16, [0x858, 0x1, 0x2, 0x9, 0x400, 0x4c, 0x1, 0x1, 0xfffffff8, 0x3, 0xcc, 0x9, 0x2, 0x5, 0x1, 0x9, 0xea, 0x1, 0x8, 0x1, 0x401, 0x5, 0x5, 0x0, 0x8000, 0x5, 0x5, 0x5, 0xe09, 0x1, 0x4, 0xfffff9e0, 0x4, 0x0, 0x7, 0x581d, 0x0, 0x3ff, 0x2, 0x33, 0x28000000, 0x0, 0x9, 0xc50, 0x6, 0x7, 0x1, 0x5, 0xfffffffc, 0x6, 0x2, 0x5, 0x401, 0x3, 0x5, 0xfffffff7, 0xf32, 0x3, 0x7fff, 0x966, 0x7, 0x8, 0x1, 0x4], [0x3, 0x5, 0x8000, 0xf6ce, 0x3, 0x3b, 0x4, 0x3, 0x5, 0x1, 0x9, 0x3ee9c53b, 0x10, 0x9, 0x4, 0xc1, 0x5, 0x4, 0x0, 0x9, 0x7fffffff, 0x9, 0x0, 0x5, 0x8, 0x605f1ed4, 0xfffffff7, 0x1, 0x1, 0xfffffff9, 0x8, 0x6, 0x81, 0x6, 0x7fffffff, 0xffff0f8b, 0x49, 0xfffffeff, 0x6, 0x7, 0x80000001, 0x81, 0x10000, 0x7, 0x5, 0xd9, 0xffffffff, 0xc67, 0x200, 0xa, 0x8, 0x974, 0x263, 0xfffffffa, 0x400, 0x80, 0x8, 0x7, 0x2, 0x7, 0xff, 0xe, 0x29d3, 0xb7], [0x100, 0x1, 0xfffffc49, 0x2, 0x7, 0x7, 0x7ff, 0xe5, 0x7fffffff, 0x0, 0x1, 0x1, 0x3ff, 0x7, 0xe, 0x4, 0x3, 0xfffff001, 0xfffffff7, 0x0, 0x9, 0x96eb, 0x8, 0xd50c, 0x6, 0x7ff, 0x1, 0x8, 0x9, 0x4, 0x4, 0x81, 0x52de0af4, 0x6, 0x33, 0x6, 0x9, 0x9, 0x6, 0x1, 0x7, 0x7fff, 0x40000000, 0x1a, 0x8111, 0x3, 0x7f, 0x4, 0x2, 0xfffffffd, 0x7, 0x800, 0x9, 0x1, 0x89, 0x10001, 0x6, 0x101, 0x7, 0x17ed, 0xff800000, 0x3, 0xa, 0x8], [0x5c, 0x10000, 0xe, 0x1, 0x1, 0x3b, 0x400, 0x3745, 0x5, 0x9, 0x3, 0xfffffff8, 0x9, 0x10000, 0xd76d, 0x9, 0x1, 0x5, 0x5, 0x1, 0x5, 0x6, 0x1ff, 0x4, 0xfffff001, 0x8, 0x2, 0x6ce8, 0x6, 0x0, 0x3, 0x80, 0x9, 0x8, 0x74029872, 0x6f5e5754, 0xbd, 0x9, 0x45f, 0x2, 0x8000, 0x6, 0x9, 0xc3, 0x2, 0x8001, 0x6, 0x2, 0x22b, 0x3, 0x3, 0x975, 0x800, 0x101, 0x3ff, 0x3, 0x3, 0x6, 0x7, 0x1000, 0x8, 0x1, 0xb8b, 0xc]}, 0x45c) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000004280)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004240)={&(0x7f0000003e00)={0x434, 0x13, 0x100, 0x70bd26, 0x25dfdbfb, {0x32, 0x84, 0x3a, 0x58, {0x4e20, 0x4e23, [0xdf90, 0x2, 0x2, 0xe], [0x9, 0x10, 0x3, 0x87], r8, [0x65]}, 0xf, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x62, 0x1, "af31396b7200c0c55b001f6467603bdba39f5e31798d9990c9d8da53e517f93d882d5d3181737f3109d6b974ef7bdec133969c0c822803dd51ea9e22320f7f96620e477325de259921b77740d8c9151dd8b284c5ece4a5b41adb0fec9f70"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "0d6fefcc9949c6f1ff2f598e37b24e0f003728f6c552e64c9c7f24efd07ab9de805aefee86c23cd052e431ab0674a50c6e44b7059b1040c585bc24bf085403b83cc5991cb988a7cbb5072e962b6f3ab28dbc2156020c1873529ab38d4272fe6d3b6ec27b4385a1b05aa27186f431cc14c8802eaf9451792e657489bf314c4596ad5a23cac0ad84bb60c5afef2ddfaa8d361f76e188f9cb64d8"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "02ab4ea75919d3e59923563bc2a0bc9d1dd7deba4d5c9ac8db363f8085d3d9a6e7610e253b1d268490869e0693c76d7c886fe9c7b538605569ac307c87cd20113508508cf654b877652ce66c8a7134eb76d69602d57563579baba478948a4f8c1b5ecfb242fa27bf4a2bd10c584714200db33c4fac916a5c54115387a38464a4c7e62b33ff59248e3d35553f9b585b47e3664d39849dcbdd4c6d66aafd3e5bdb49684f7632a28a7845b54788bd4e6de1aebd45284a7dc2aa4c2403ef344e054d82095ecfd7143bef8d7279b9cf7f32df70f08bf0f242e6c7c245a788276f4f9d0f03a6d2bd32ebd3e779a76cf17eeb"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "49b0bb60e9d069ebeb3c426611670af78cfacd10afcc2b8075221017198cdd754b68484cc8687e2978de2863b2646d8ba39ff83520e5e1c131b660b6b54512b68ed1a6695b92850ffdba81a00473b59991f2cc5ad64cde72f553"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "451cbcaba05e77975c5dd594c7bffce7801c33e88106a8f75f7c1bd47ba461250e9486a445a281326e59824bdf4bd0ef14ba39217027efe90985eaf747c04db5eba1a9a0ce6cc28ce75a3b140cb515838382afc220c72e0e04910eb17718b64f7e9ab62406ee1dad11c19344b3aa7c7d9226e79d154dba31549529fa888c0d96698a4a39115fcbdf7a76b57eb719a677528f9b155b0b53baab6ecd72b159a49d66754582a4524ddd945f1549bdead937f17420f513778d8b42ee485ada6302bd85cf6dcc7deb3bedfcb8a7b2c7742e4ffb3f"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "d80d2fa19218d8f64ad5ec3ecccd40058bf264e572150bc1a5bcb050f792b1fbf185b34c05dc6f787089febc5c819a85cc0f272c926d72df94e5d859c8783c31e5b9f89d70feff7d6d54f5dad0e314ce337ca39f65014268b8d502022cb58c48e8a6b9d7b48b7b4d77e2db4a5778777ce05e3d625d74a7b9405dd69516a503c4615cbe93b0b75a8e170ed23cde7f97e050feb8cdfba3e9c2a8c5aed631ba2b6d5aa32cf099c5fe0320168b8c64"}]}, 0x434}, 0x1, 0x0, 0x0, 0x820}, 0x88) writev(0xffffffffffffffff, &(0x7f0000004380)=[{&(0x7f00000042c0)="67a02c5bb5e22630629775281222c096e1eec96c3f7a6d781cd55d63562938e84cddbc8d05024c3c6d762be03e9f6e750d1bb7766b8e37246337bb6a0bf903880bbf44e7c9c002c61145e6922de399b77c705472601d9a21617e9d3733ecc4b40fd3fc733e99ae8888020fa7dd2741b970e3bd47dd31a1c247a1b5100d1caa02dd8aa21c668916c0b2a44585943358e577b7d1395e3f5e94b1c589036a47bd4b69250d3f443cb19735eb6dd02757877e0146ecd5fc0976f3", 0xb8}], 0x1) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000004400), r10) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f00000044c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x38, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x84) dup2(r3, r4) socket$packet(0x11, 0x2, 0x300) 7.087937393s ago: executing program 1 (id=93): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x7fff, 0x8c}, 0x0) madvise(&(0x7f00005af000/0x3000)=nil, 0x3000, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x2000, 0x0) 6.867978332s ago: executing program 1 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYRES8=0x0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x1]}}) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000002000)="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", 0x1000}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r12, &(0x7f0000007080)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000004c0)="5ad1efb1fc14e9afea24463bcf9f6f5ed3747c93d85950f239eea98fb1d80371719fb935bfe986c1bf3ec92c4cf50b42f7b2af5f15864316660ab5bcec92be5f04c5bd5c847e6659cab3caa8cc4caf8457c5610640cc3777a6c786f69a607c5aabaaab9f4ad0861b48cb2cb4d086", 0x6e}, {&(0x7f0000000700)="2ce2a92474771440f4eb0adc8f837d056c27b2df3417777c26e6609803e3abcdb1be57ab46c44191d1fe6a7aa9e21f9c61ca66f566783017b049a53a5966e6edc9f858f4e3951f9cb5bfc872579336a0bc71c20a58744346f4d4fb09a905711c05e06105cbaa6c5cc60e97f9e688484ea6d31b9adde97b39a13f908a0ae609ece51f8ffd00c408f1b9523ce2a2a1fb3046cdae79311be4a7ebf7c76a2dcd9d9d8931475611e307e03d9e32810bdcf0a0f8dcfbffa397d6adf936e9eb4ca004d929e186e5799f17187333", 0xca}], 0x2, &(0x7f0000000bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x80, 0x40000}}, {{&(0x7f0000000c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000cc0)="f2f3b1a64d0f0c0c11f0d2da65c230c720967a0ea55b1d71be04c6e962cfc742ee601e5975261ddb38c530a4f1229d38f5e176b50bef515e28a69ba9a386126b81a679", 0x43}, {&(0x7f0000000d40)="e470db3c4924c627f765640c897714065096ff7fe0bde6f3c7a90adb2bd3e7fcb91fa017b7d52a885dd9b098ea6c7e9beb19ad3fca82a8", 0x37}], 0x2, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r7, r9, r8, r5, r12]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x108, 0x100c0000}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001140)="5ace4e182e046ef61dc4ca2440bc23f4ac0e03e31f916cfe12a9361be9e185a8c57b6a1400a6f2d134e5a781243571c413e25244d0d361eef8b3100624b788f1048997e545e6d28d6c5c18b5c957f3977a31d581501c6e19127d974138f7fb8ff1bc3ddea6a2e1f479d949bd3acc2d12dd279c1f21b041cf0baa812c80a091738ea597bc61d5fad3db520caf24e29755bb3491b1d785aef15014c0831ca5c0214f8f3f14e431c9c3ec1ce4884f7608067bd25b2f1b548d170c7db4adcbf81b5d346be1e70d282dd173d5d8cb26e49aef80983e4043f88ee6718b356f3c62ba69a3b2c799ddd766dad9fa18", 0xeb}, {&(0x7f0000001240)="f0bd52cbeba8ae54bbe612f9e8f5afc52fe64f33abfc72cc317ee54168f48f9690117f4a235739766ddf01890477169c46eaaba0e114c04b95d2a4432d3f17bb495dc1039ef0ba1d744cbb6a60321e6e3b4bcb8ba3c1abbec6b4d6a95f75dfb2b763d2f09bd659499ddcf3d9d9f65279612a2dbe639af4d0d79ba72b529931264e48e97c79bd347ef19caa5cdd63ab241ba767868a1ed38a78d39ef860eea7ea23d55ac3020ee971859e61a9e6f51c4311c7e8512ba0997acb710971a80725cbbf0fdb6a34d6875ef98d309417ebe9f5962b814a230879825b8c89e2bf0949eeb06dc3f2896970a5efbca13bb00f752f1e311194", 0xf4}], 0x2, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r8]}}, @rights={{0x20, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, r9]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r8, 0xffffffffffffffff, r4, r11]}}, @rights={{0x18, 0x1, 0x1, [r7, r1]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x20, 0x1, 0x1, [r6, r7, r6, r7]}}, @cred={{0x1c}}], 0x110, 0x40001}}, {{&(0x7f0000001600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001680)="c2b2fa1d5b5477414047a84143a53413b6f96018ae1a4462cec233732d711d5ef7c414901763444b97d8740b90e383fc70d568b4ba2d7b7619b8e84e1ae624de375e92ae17fac802919298f2cad470b2", 0x50}, {&(0x7f0000001740)="074a5c59c64c93a23c0a413ae4064c6a452d44d67d596a05fdcf44ddfc76d4bd6ffadd3d3dcf318ef06097f9b62bccb0bc03146a995cc409da74", 0x3a}], 0x2, &(0x7f0000001800)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, r4, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r9]}}, @cred={{0x1c}}], 0x80, 0x40014}}, {{&(0x7f0000001880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001900)="d7ae9e1df296a4b86b3455566ef680c6eb9959bf4a75bfd1d380031f6be247d5c7d10eb04074e23d7ad4efff11fb00785080e041a2201f68025e3b370b427d03c55ec487c665cb0862a0ccae179bffe18ce6cb49408d8a490327006a9a797e18fe3670071c44602b47d7669ef0062d3c06018c27c15950da63380036f3a571706542db9ff66d029176141267399a0feaeeb7cc8d187e76e655822ef8d01a263fc2e901cf83e814c8adfee7", 0xab}, {&(0x7f00000019c0)="2999a810c73f0413cbf98403d257dadee3cfb13276fc376954a7cf81356d9e570060c9ccd78854002d2df79a571dedafe58c5ed42b6245f74f29757ae60c815e69c0e1ebb84e267ea02fef13b08b47fdb08e9d12beb29ed5f139eeb4ecb95d7a56c1bb8a04e0d7b1bee21732d5f96c9ab948ee5a459ca2c891b9163550c2e715e27b8668dba6cbf0cf00dc15eef312ad9bd57577f23e47c5afe6a9183b461c1a36fdfbc6a906458d700d4d", 0xab}, {&(0x7f0000001a80)="3a0997d493eff8d2a592542cd2783f974474e38109bd5d788d78b55c99a04c8a30cc64dd1c171bf4a9ce2a253868c4054329b0b39da3d1ceadb6351c176e8c0ef3276f0014671c16c084c04cfb3b29f188fcbe365e7994de380c61c254dbefb098a730fb4a003da75033bb8eb8e2b509f4fc072ab3287c8103fac31f9025cc1eea3b7f5b87755146014d52603ecf9abbbc05142b3f2e1b97b6b5233718e9a53eb3038d0b12354f75d4e03fdb063a10e83c2d67eff748baa5b415c2f8706f517b4ccf23e3864e5da71954b834703fbf9ee0f22291c68ed1cfaf32c8f1678942095525cc9a161e77", 0xe7}, {&(0x7f0000001b80)="437c1aff061a8fcc6824f8d7ffeb3c178bc87dc9343513dbc50dab9ae39c9ce945dc42a23f78ddbacf", 0x29}, {&(0x7f0000001bc0)="ae4248646327add598ab7a8b49aa52186e9eed70b6303188a05e853045b55efc59be15c8362d83749fd048c02d7512622b973478bf98bde31da3a9f309fce6e0b15ca44acdc373fca5c46b0714bc6cce80b0229937a99aba7ae0b6c5e436fcd728fe01a10d1ec7b918a8ae666c6d6d8fc772ef058b3934a28c05b9f9256d12540369c47733a7e36dc76ad5e344d61541fd9e80cb7dd13500b4efe9dd9d361cda7554889fd9c3dfd892eac620fc19226d45f20f08bd927aa5ddf0d24d2fedb05dd7b2a74682afcec85dad4ec67e8166f1f117c7ff5b3e6b4d95c367bfe5ad85cf6d9d9453583390ca8b4e1840", 0xec}], 0x5, &(0x7f0000001e80)=[@rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r8]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0xc8, 0x40884}}], 0x5, 0x8000801) 5.180239772s ago: executing program 1 (id=96): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x6b, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES8=0xffffffffffffffff, @ANYRES64=r1, @ANYRES64, @ANYRES64=r0, @ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe28) r3 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x1840000, &(0x7f0000000200)=ANY=[]) statfs(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_sset_info={0x37, 0x10, 0x101, [0x9, 0x9]}}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e21, 0x8, @local, 0xa}, 0x1c) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f00000023c0)) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6672dc0e0b25a4b3952a1e21807e7de6cce28dad61", @ANYRES16=0x0, @ANYBLOB="080026bd7000fedbdf25340000000c009900ff0700001d0000000a000600b722d89638080000140055006705502f8942fb7bf069ade1a660788914005500785feb6912e31540ec015f5d979375881400550024f52ef25d7749050be10f925b1019cc0600fd00010000000a00060008021100000000000a000600234587a3bd9c00001400fe002b104bc1cea4f32770b7d3b8fde557320500200148000000140055009ef47e2fc9668e74c5b44b82283e068a"], 0xb8}}, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 4.41592736s ago: executing program 2 (id=99): r0 = socket(0x1e, 0x80004, 0x0) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000003100)="23a331a50bd02e06", 0x8}], 0x1) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x2, 0x40}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/wakeup_count', 0x103a81, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) (async) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588", @ANYRES32], 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588", @ANYRES32], 0x0) 3.545065287s ago: executing program 1 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\trust\xe3c*swO\x00\x00\xee\x02\x00\x00', 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "00000300"}, @local=@item_4={0x3, 0x2, 0x8, "4f3baeef"}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3900a43d}, 0x94) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) write$evdev(r6, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000100)=0x6a52) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x1, 0x5ef}) syz_usb_ep_write(r5, 0x81, 0x41, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd553") 3.544301457s ago: executing program 4 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80340, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x42820, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e1, &(0x7f0000000140)) timer_create(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@can={0xc, {{0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "1983c96e653ca2a9"}}}}, 0x0) 3.543892796s ago: executing program 2 (id=102): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) wait4(r1, 0x0, 0x40000000, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 3.526445748s ago: executing program 3 (id=103): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40001, 0x80) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f00000000c0)=[0xe, 0xfffffe01, 0xfe, 0x5, 0x4, 0xfffffffa, 0x0, 0xfffffc00]) sendto$inet(r0, &(0x7f0000000100)="017939e99b7e99f660574dd92bad130fc64d7c455461e61dd50c4eec6464546b78651c8a006436144612a9f666d1ff6d3e7e194498e2748b36a0eba227ad6d1d6d897519b9b03b68", 0x48, 0x4040, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f00000001c0)="0f718175191a31657a5c7650c98c892cea5cfec415246aac1af5fbc2fa9863812bb5c8bf6a0132454847706ec4ae604574c4e1d373abd11584241366137bda1f878811c67a94ae625853ddec32d97f2bea229b4410d4997d8dbf7ef5a4a5e8c511a77514192429b891768b6a9e542473a2902c03e3de5ab80d4b0144264d6f6a66944f0d17de4988f937aa94cf748eec79fc85d7dc3d354ab8fda6807f266b", &(0x7f0000000280)=""/91, 0x4}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001600)={'syztnl1\x00', &(0x7f00000014c0)={'gre0\x00', 0x0, 0x7800, 0x40, 0x80000000, 0x4, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0xbd, 0x0, 0x4, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x0, 0xe, "73f2810eec55d8dfcb22ac42"}, {0x0, 0x2}, {0x2, 0xe, "38879b7dcfd43a4f04d2cdbe"}, {0x5, 0xe, "5c8c8792269a97ec5467e20b"}, {0x5, 0xd, "8cf1151d1ec706ca9604a5"}]}, @cipso={0x86, 0x2f, 0x3, [{0x6, 0x5, "608352"}, {0x2, 0xa, "71f675af5329a612"}, {0x67fcbc2a884d1cde, 0x9, "22a9d39620546b"}, {0x6, 0xb, "364782086073caab91"}, {0x7, 0x4, "48ee"}, {0x2, 0x2}]}, @ssrr={0x89, 0x17, 0xe, [@multicast1, @local, @multicast2, @multicast2, @multicast2]}, @ssrr={0x89, 0x13, 0xd0, [@rand_addr=0x64010100, @multicast1, @remote, @private=0xa010101]}, @rr={0x7, 0x17, 0xed, [@broadcast, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end, @noop, @ssrr={0x89, 0xb, 0x2, [@dev={0xac, 0x14, 0x14, 0x3e}, @local]}, @rr={0x7, 0x1b, 0xac, [@rand_addr=0x64010102, @multicast2, @private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}]}, @generic={0x89, 0xf, "3569895d1cb017479fe97a73e1"}]}}}}}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001700)=@generic={&(0x7f00000016c0)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x23, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x79d, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xbe}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff00}}, @call={0x85, 0x0, 0x0, 0x21}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000480)='GPL\x00', 0x200, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x7, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000001640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x1, 0xb, 0x1, 0x673}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001740)=[r2], &(0x7f0000001780)=[{0x3, 0x5, 0x1, 0xc}], 0x10, 0xb}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000018c0)={0x9, 0x8, '\x00', 0x1, &(0x7f0000001880)=[0x0]}) r4 = syz_open_dev$MSR(&(0x7f0000001900), 0x1057, 0x0) io_uring_enter(r0, 0x29f0, 0xce84, 0x10, &(0x7f0000001940), 0x8) sendmsg$nl_route(r0, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)=@mpls_getnetconf={0x34, 0x52, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x40804) connect$inet(r0, &(0x7f0000001a80)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000001ac0)={0x81, 0x3, "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"}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001c00), r0) syz_io_uring_setup(0xef7, &(0x7f0000001c40)={0x0, 0x9abd, 0x80, 0x3, 0x314, 0x0, r4}, &(0x7f0000001cc0), &(0x7f0000001d00)) r5 = syz_open_dev$mouse(&(0x7f0000001e40), 0xe, 0x480500) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x6, 0xf, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7fff}, @exit, @printk={@llx}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000001dc0)='GPL\x00', 0xf3, 0x5, &(0x7f0000001e00)=""/5, 0x41100, 0x14, '\x00', r1, 0x25, r5, 0x8, &(0x7f0000001e80)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x10, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001f00)=[{0x2, 0x2, 0xa, 0xc}, {0x0, 0x3, 0x3, 0x2}, {0x3, 0x4, 0x1, 0x5}, {0x2, 0x5, 0x10, 0xb}], 0x10, 0x2}, 0x94) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002000)={0xfffffff9, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002040)=r6, 0x4) write$binfmt_elf32(r5, &(0x7f0000002080)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0x7f, 0x9, 0x9, 0x2, 0x6, 0xff, 0x154, 0x38, 0x33d, 0x100, 0xc, 0x20, 0x1, 0x8, 0x5ec, 0x8001}, [{0x6474e551, 0x1, 0x3, 0x5, 0x40, 0x7, 0x10001, 0x3}], "44e8ac1046aa3b9885fd4036ad267b8fa1cf38711f02cefbcb0bff3b981251478cc7f035b2527be3bf3a30179280dd52ff26856c6b04f4d3cb13784bf05f0a2680691e78cb1024f2c3e81e0edce9ae49b510e61e95", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaad) fstat(r4, &(0x7f0000002b40)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f0000002bc0)={0x8f, 0x0, 0x4}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002c80)={0x2, &(0x7f0000002c40)=[{0x0, 0x69, 0xbb}, {0x5, 0xd5, 0xd, 0x80}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000002cc0)={0x0, 0x7fff, 0x200}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002fc0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x3, '\x00', r1, r5, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x13, 0x1f, &(0x7f0000002d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x6e}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002e00)='syzkaller\x00', 0x0, 0xd9, &(0x7f0000002e40)=""/217, 0x7bb3957e6deea36d, 0x40, '\x00', r1, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000002f40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000002f80)={0x0, 0x9, 0x400, 0x7}, 0x10, 0x0, r3, 0x5, &(0x7f0000003140)=[r5, r2, r0, r8, r2, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003180)=[{0x5, 0x2, 0xc, 0x4}, {0x5, 0x5, 0xc, 0x4}, {0x4, 0x3, 0x6}, {0x3, 0x4, 0x8, 0xb}, {0x5, 0x5, 0xb, 0x4}], 0x10, 0x34}, 0x94) 3.359957573s ago: executing program 0 (id=104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000000)="3a9a2d0c35db66abc68a3b581a56812cad34fddefba0b05311c6002d378b163854af7117", &(0x7f0000000040)="6294d904740d227a480ce93c9e1e4263ee227d852ebf46d9db73cddce9d9da"}}, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x108, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x2, 0x2}, {0x2, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x1, 0x22065920}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@icmp6={{0x28}, {0x12, "fc91", 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 3.154224161s ago: executing program 3 (id=105): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0307e804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) (async) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) read$rfkill(r1, &(0x7f0000000080), 0x8) (async) read$rfkill(r1, &(0x7f0000000080), 0x8) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) (async) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.694920022s ago: executing program 3 (id=106): userfaultfd(0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x42000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff2}, {0xfff1, 0xffe0}, {0xd, 0xfff3}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffd, 0x810800, 0x0, 0xfffd, 0x6, 0xfffffffe, 0x0, 0x0, 0x100}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000797000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r4, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000180000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000005c0), &(0x7f0000000600)=0x30) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r9) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCOUTQ(r10, 0x80045440, 0x0) r11 = io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x1, 0x23b, 0x0, r9}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB='\x00\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) socket(0x28, 0x800, 0x8) 2.531238346s ago: executing program 0 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') socket$inet_udp(0x2, 0x2, 0x0) 1.822390559s ago: executing program 2 (id=108): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async) ioctl$HIDIOCGPHYS(r0, 0x80404812, 0x0) (async) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000280)="84105eb64b3bec4ebf7dcf527189d8336ff502905f31b0502b487965eea45c6073c631b1e0dfdaa757d060082208dbcf93cf3af9c5307d2c4803fb7d337c7e3be04c928c91d05d636a0ee86ee4d22189f8c80f11f5cbc3bdbc557547c6bca4d1a17c0164efd7769adf24346ac6cb4e64937f4fb668831ed423790a715c98474c24b5e5d3e0cd274c1d1d08917366a6dd97b28a9ad1b64916a48c7af9d55fa40c1dd3fbfbb7d722e6de29ed9fb4cfdeff4f41cb58f4d83b0932b97de815b6896256579e01b5a161d9983d8eaeeea35a1f3d995741ff26b7ff33d0cb40f165", 0xde}], 0x1, 0xe7b, 0x0, 0x0) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000540)={[], [{@euid_lt}, {@permit_directio}]}, 0x2, 0x553, &(0x7f0000001080)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r2, 0x3, 0x4002) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000240)) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async) socket(0x400000000010, 0x2, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 1.807087701s ago: executing program 2 (id=109): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='cpu.stat\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file2'}, 0xb) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB="f8fb01a7c41db653"], 0x8) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000a80)=""/263, 0x107}], 0x1) write$evdev(r8, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x0, 0x2}], 0x18) r9 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r9}, &(0x7f0000000080)=0x0) read$FUSE(r5, &(0x7f0000002900)={0x2020}, 0x179c0641) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r10, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r12, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES8=r7, @ANYRES16=r2, @ANYBLOB="000128bd7000fedbdf256c00000008000300", @ANYRES32=r3, @ANYBLOB="0c009900010001007f0000000500180104000000080027000100000008002600cd665a5266a41e715cc3e265fe6b3d14fc55955733a10d82b22e1034e7955014806676c4d6c11b429c5560e440b11b0eaa5bb38f932c1ad4e11e5b7d74fad4a437a68aa3e0c32917fd40f0c0d7ac83f63dd04b15dbbec6e9b019a0b0029ae66bdcdd324e1a046b468ad6e20220cefa5032762f4f281f318a2a1a6e1904cc59657a70a900"/177], 0x40}, 0x1, 0x0, 0x0, 0x44840}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) inotify_init1(0x800) 1.731925937s ago: executing program 0 (id=110): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000100)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1.543022594s ago: executing program 3 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000005400e500000000000000000007"], 0x38}, 0x1, 0x0, 0x0, 0x4044844}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000004c0)={0xffffffffffffffc7, 0x3bc, 0x0, 0x8, 0x4, 0x0, [{0x6, 0x7, 0x1ac, '\x00', 0x80}, {0x2, 0xffffffffffffffa0, 0xa4e, '\x00', 0x80}, {0x1, 0x732, 0x6, '\x00', 0x84}, {0x7fffffffffffffff, 0x1, 0x430, '\x00', 0x84}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5, 0x0, 0x500000000000000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getdents64(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pause() 1.321427253s ago: executing program 4 (id=112): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x40009, 0x5, 0x86f, 0xffff, 0x3, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000180)=r3}, 0x20) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, '\x00\x00M'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0}) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 899.91783ms ago: executing program 2 (id=113): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x5, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r4, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x133) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000002c00)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x2, 0xcb, 0x5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x4) fsetxattr$system_posix_acl(r6, &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 774.343932ms ago: executing program 2 (id=114): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x2) unshare(0x22020600) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x3}, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) open(&(0x7f00000004c0)='./file0\x00', 0x600dc3, 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x80000002, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x14}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) exit(0x8000000000000000) r5 = openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x200402, 0x0) io_setup(0x4, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r6, &(0x7f0000000a00)="c788", 0x2) sendfile(r6, r5, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 336.081371ms ago: executing program 3 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2003, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) sendmsg$AUDIT_SET(r2, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000180)={0x3c, 0x3e9, 0x20, 0x70bd2a, 0x25dfdbff, {0x23, 0x1, 0x1, r0, 0x8000, 0x3, 0xe, 0xe218, 0x0, 0x9, 0x5}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x57447}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x20404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@oldalloc}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x43d, &(0x7f0000000300)="$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") 324.046951ms ago: executing program 1 (id=116): socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000180001002abd7000fcdbdf270a800000ff02fe08"], 0x44}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x48}}, 0x2000000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='siox_get_data\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r5, @ANYBLOB="fdffff504998dce369c096006ec308dc0068df8b6f0fab54cb000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x50) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x18) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf25e0000002000000000000000000000000ac14143d000000000000000000000000000000004c210002000000005c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff020000000000000000000000000001000000fe32000000fe80000000000000000000000000001b0000000000000000000000000000000000000000000000000a000000000000000000000000000000000008000000000000000800000000004305000000000000040100000000000000ffffffffffff7f0000080000000000000000000000000000000000000000000000000028bd7000003500000a000400050000000000000060001200726663343130362867636d286174f3225b44b20075025120d9816573292900116ce5ab4d3e643b6899a6ddb59b4100000000006800000000000000000000000000000000000000000000000000000000000000000000000000000000a000000040000000217d66d38547aa140db8a200000000c538c7cb7a"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x420040, 0x0) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x1}) close(r2) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="120110013995be08fd1340390e8d0102030109021b0002fc00000f09048e050008"], 0x0) 34.992417ms ago: executing program 0 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='rpc_socket_nospace\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) mknodat(0xffffffffffffffff, 0x0, 0x1, 0x2) (async) mknodat(0xffffffffffffffff, 0x0, 0x1, 0x2) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61d53a0600522f00fe8000000000000000000000000000bbfe800000000000"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000180)={0x8, 0x20000000, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0x149, 0x1}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) write$P9_RVERSION(r0, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 23.923430][ T28] audit: type=1400 audit(1767597660.605:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.924530][ T275] cgroup: Unknown subsys name 'net' [ 23.946564][ T28] audit: type=1400 audit(1767597660.605:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.974378][ T28] audit: type=1400 audit(1767597660.635:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.974523][ T275] cgroup: Unknown subsys name 'devices' [ 24.143172][ T275] cgroup: Unknown subsys name 'hugetlb' [ 24.148794][ T275] cgroup: Unknown subsys name 'rlimit' [ 24.270846][ T28] audit: type=1400 audit(1767597660.945:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.294407][ T28] audit: type=1400 audit(1767597660.945:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.313103][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.320785][ T28] audit: type=1400 audit(1767597660.945:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.353617][ T28] audit: type=1400 audit(1767597661.015:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.380218][ T28] audit: type=1400 audit(1767597661.015:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.421837][ T28] audit: type=1400 audit(1767597661.105:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.422272][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.447758][ T28] audit: type=1400 audit(1767597661.105:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.389564][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.396768][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.404281][ T283] device bridge_slave_0 entered promiscuous mode [ 27.412276][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.419326][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.427287][ T285] device bridge_slave_0 entered promiscuous mode [ 27.439078][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.446158][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.453605][ T283] device bridge_slave_1 entered promiscuous mode [ 27.461676][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.468730][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.476200][ T285] device bridge_slave_1 entered promiscuous mode [ 27.502221][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.509560][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.517130][ T286] device bridge_slave_0 entered promiscuous mode [ 27.534769][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.542076][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.549436][ T284] device bridge_slave_0 entered promiscuous mode [ 27.556884][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.564014][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.571457][ T286] device bridge_slave_1 entered promiscuous mode [ 27.582340][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.589490][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.597250][ T287] device bridge_slave_0 entered promiscuous mode [ 27.603941][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.611114][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.618521][ T284] device bridge_slave_1 entered promiscuous mode [ 27.632690][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.639924][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.647456][ T287] device bridge_slave_1 entered promiscuous mode [ 27.853615][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.860743][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.868208][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.875342][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.894598][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.901679][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.909274][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.916329][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.937862][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.945002][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.952336][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.959376][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.976408][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.983556][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.990792][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.997830][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.006808][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.014774][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.022344][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.029617][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.037101][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.044550][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.051807][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.059167][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.067629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.075107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.097517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.105237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.113624][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.120745][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.128177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.136703][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.143786][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.151915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.160107][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.167251][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.200800][ T287] device veth0_vlan entered promiscuous mode [ 28.209784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.218889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.227715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.236212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.244185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.252062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.260454][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.267680][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.275269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.283530][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.290896][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.298448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.306852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.321405][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.330160][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.337450][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.361186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.376467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.385019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.394308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.402885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.413652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.421463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.433849][ T287] device veth1_macvtap entered promiscuous mode [ 28.462497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.470836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.479125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.487532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.496344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.504512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.513153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.521775][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.528809][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.536368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.544909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.553151][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.560261][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.567665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.575982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.584261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.593260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.601604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.609910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.618239][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.625460][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.633413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.642059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.650261][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.657766][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.665211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.673823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.682082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.690276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.698999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.718538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.727189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.735963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.745240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.753867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.762329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.775364][ T284] device veth0_vlan entered promiscuous mode [ 28.789836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.798334][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 28.798334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.814020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.821881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.831772][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.840524][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.850069][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.858796][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.870784][ T284] device veth1_macvtap entered promiscuous mode [ 28.879655][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.888823][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.902229][ T286] device veth0_vlan entered promiscuous mode [ 28.917819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.926357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.935289][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.943599][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.952085][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.960373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.968523][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.976932][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.017394][ T285] device veth0_vlan entered promiscuous mode [ 29.018386][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 29.018400][ T28] audit: type=1326 audit(1767597665.695:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=335 comm="syz.3.4" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12ae58f749 code=0x0 [ 29.032401][ T285] device veth1_macvtap entered promiscuous mode [ 29.059889][ T28] audit: type=1400 audit(1767597665.735:102): avc: denied { read write } for pid=337 comm="syz.1.2" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.077248][ T286] device veth1_macvtap entered promiscuous mode [ 29.090084][ T28] audit: type=1400 audit(1767597665.735:103): avc: denied { open } for pid=337 comm="syz.1.2" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.097895][ T283] device veth0_vlan entered promiscuous mode [ 29.119638][ T28] audit: type=1400 audit(1767597665.735:104): avc: denied { ioctl } for pid=337 comm="syz.1.2" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.120236][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.153557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.162087][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.170890][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.179617][ T28] audit: type=1400 audit(1767597665.855:105): avc: denied { map_read map_write } for pid=335 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.183850][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.200316][ T28] audit: type=1400 audit(1767597665.855:106): avc: denied { prog_load } for pid=335 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.227176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.236081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.244759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.244990][ T28] audit: type=1400 audit(1767597665.855:107): avc: denied { perfmon } for pid=335 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.253860][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.274257][ T28] audit: type=1400 audit(1767597665.855:108): avc: denied { prog_run } for pid=335 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.282380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.315189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.322722][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.322977][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.338255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.347083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.359305][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.367844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.383674][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.392695][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.404718][ T283] device veth1_macvtap entered promiscuous mode [ 29.413723][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.422324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.430772][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.439551][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.448215][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.469029][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.477792][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.487343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.496073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.521426][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.534330][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.547166][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 29.557060][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.583973][ T352] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.616066][ T24] usb 2-1: config 0 descriptor?? [ 29.666323][ T28] audit: type=1400 audit(1767597666.345:109): avc: denied { read write } for pid=354 comm="syz.4.6" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.669529][ T355] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.689656][ T28] audit: type=1400 audit(1767597666.345:110): avc: denied { open } for pid=354 comm="syz.4.6" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.799093][ T358] loop0: detected capacity change from 0 to 16 [ 29.806996][ T358] ======================================================= [ 29.806996][ T358] WARNING: The mand mount option has been deprecated and [ 29.806996][ T358] and is ignored by this kernel. Remove the mand [ 29.806996][ T358] option from the mount to silence this warning. [ 29.806996][ T358] ======================================================= [ 29.844672][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.860103][ T358] erofs: (device loop0): mounted with root inode @ nid 36. [ 29.916904][ T358] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 29.926158][ T358] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 29.958933][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 30.283115][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.777993][ T364] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 30.790166][ T24] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 30.802818][ T24] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 30.814358][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.824712][ T60] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 30.834463][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.839339][ T364] netlink: 'syz.3.7': attribute type 2 has an invalid length. [ 30.843292][ T60] usb 3-1: config 0 descriptor?? [ 30.865573][ T368] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 30.873738][ T368] netlink: 'syz.3.7': attribute type 2 has an invalid length. [ 30.906088][ T372] device pim6reg1 entered promiscuous mode [ 30.919128][ T372] syz.3.9 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 30.996256][ T24] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x4D [ 31.049870][ T378] loop3: detected capacity change from 0 to 4096 [ 31.061545][ T378] EXT4-fs (loop3): Test dummy encryption mode enabled [ 31.069533][ T378] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 31.078348][ T378] System zones: 0-5 [ 31.083493][ T378] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 31.364951][ T60] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 31.405780][ T338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.408801][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.424829][ T60] cp2112 0003:10C4:EA90.0002: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 31.441307][ T338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.465188][ T24] cp2112 0003:10C4:EA90.0001: error setting SMBus config [ 31.474975][ T24] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71 [ 31.494913][ T24] usb 2-1: USB disconnect, device number 2 [ 31.561466][ T386] fido_id[386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 31.577556][ T60] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x4D [ 31.611049][ T19] usb 1-1: device descriptor read/64, error -71 [ 31.787038][ T347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.795942][ T347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.825628][ T60] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 31.853150][ T60] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 31.862396][ T60] usb 3-1: USB disconnect, device number 2 [ 31.891716][ T19] usb 1-1: device descriptor read/64, error -71 [ 31.899204][ T389] fido_id[389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 31.964882][ T287] EXT4-fs (loop3): unmounting filesystem. [ 31.994581][ T392] loop3: detected capacity change from 0 to 512 [ 32.003082][ T392] ext2: Unknown parameter 'noacl' [ 32.009427][ T392] syz.3.14[392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.009510][ T392] syz.3.14[392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.039179][ T392] loop3: detected capacity change from 0 to 128 [ 32.062225][ T392] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.099917][ T396] loop4: detected capacity change from 0 to 512 [ 32.108785][ T396] EXT4-fs: Ignoring removed i_version option [ 32.270529][ T396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 32.270784][ T392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.288461][ T392] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.331884][ T392] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 32.411061][ T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.561029][ T19] usb 1-1: device descriptor read/64, error -71 [ 32.591047][ T60] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 32.691774][ T407] fuse: Unknown parameter 'úÓ}­groä00000000000000000000' [ 32.707245][ T407] loop2: detected capacity change from 0 to 512 [ 32.714048][ T407] EXT4-fs: Ignoring removed i_version option [ 32.720211][ T407] EXT4-fs: Ignoring removed bh option [ 32.780183][ T283] EXT4-fs (loop4): unmounting filesystem. [ 32.866412][ T287] EXT4-fs (loop3): unmounting filesystem. [ 32.923585][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.954325][ T407] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.964540][ T407] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.148617][ T60] usb 2-1: not running at top speed; connect to a high speed hub [ 33.170430][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.182037][ T60] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.195258][ T60] usb 2-1: string descriptor 0 read error: -22 [ 33.202733][ T60] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.212921][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.261388][ T60] usb 2-1: 0:2 : does not exist [ 33.699132][ T286] EXT4-fs (loop2): unmounting filesystem. [ 33.759334][ T418] loop4: detected capacity change from 0 to 1024 [ 33.783397][ T418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 33.791018][ T19] usb 1-1: device descriptor read/64, error -71 [ 33.799881][ T418] device pim6reg1 entered promiscuous mode [ 33.856344][ T431] loop0: detected capacity change from 0 to 1024 [ 33.869042][ T433] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 33.888870][ T431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.897875][ T431] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.931049][ T19] usb usb1-port1: attempt power cycle [ 33.987560][ T283] EXT4-fs (loop4): unmounting filesystem. [ 34.251058][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 34.251077][ T28] audit: type=1400 audit(1767597670.905:141): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 34.300372][ T285] EXT4-fs (loop0): unmounting filesystem. [ 34.302626][ T28] audit: type=1400 audit(1767597670.965:142): avc: denied { create } for pid=445 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.326868][ T28] audit: type=1400 audit(1767597670.965:143): avc: denied { shutdown } for pid=445 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.348210][ T28] audit: type=1400 audit(1767597670.965:144): avc: denied { ioctl } for pid=445 comm="syz.4.25" path="socket:[15270]" dev="sockfs" ino=15270 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.374143][ T28] audit: type=1400 audit(1767597670.965:145): avc: denied { create } for pid=445 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.399627][ T60] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 34.415035][ T60] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 34.430818][ T60] usb 2-1: USB disconnect, device number 3 [ 34.441771][ T28] audit: type=1400 audit(1767597670.965:146): avc: denied { setopt } for pid=445 comm="syz.4.25" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.569499][ T459] process 'syz.0.29' launched './file1' with NULL argv: empty string added [ 34.578770][ T28] audit: type=1400 audit(1767597671.255:147): avc: denied { execute } for pid=458 comm="syz.0.29" name="file1" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.602502][ T28] audit: type=1400 audit(1767597671.255:148): avc: denied { execute_no_trans } for pid=458 comm="syz.0.29" path="/6/file1" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.626170][ T28] audit: type=1400 audit(1767597671.255:149): avc: denied { create } for pid=460 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.674619][ T469] loop4: detected capacity change from 0 to 512 [ 34.680991][ T28] audit: type=1400 audit(1767597671.265:150): avc: denied { ioctl } for pid=447 comm="syz.4.27" path="socket:[15307]" dev="sockfs" ino=15307 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.725509][ T469] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.773761][ T469] EXT4-fs (loop4): 1 orphan inode deleted [ 34.787584][ T469] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.801102][ T410] EXT4-fs error (device loop4): ext4_release_dquot:6832: comm kworker/u4:5: Failed to release dquot type 1 [ 34.823760][ T469] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.765343][ T476] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 36.049615][ T283] EXT4-fs (loop4): unmounting filesystem. [ 36.111045][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.203038][ T510] device pim6reg1 entered promiscuous mode [ 36.211600][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 36.218205][ T19] usb 1-1: descriptor type invalid, skip [ 36.236290][ T19] usb 1-1: config 0 has no interfaces? [ 36.250902][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 36.279286][ T515] loop3: detected capacity change from 0 to 256 [ 36.287521][ T516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40'. [ 36.302487][ T19] usb 1-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 36.334140][ T516] loop1: detected capacity change from 0 to 512 [ 36.354295][ T19] usb 1-1: Product: syz [ 36.360335][ T19] usb 1-1: Manufacturer: syz [ 36.368439][ T19] usb 1-1: SerialNumber: syz [ 36.372394][ T515] loop3: detected capacity change from 0 to 1024 [ 36.381135][ T515] ext4: Unknown parameter 'err' [ 36.391905][ T516] EXT4-fs warning (device loop1): ext4_enable_quotas:7048: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 36.408400][ T516] EXT4-fs (loop1): mount failed [ 36.438887][ T19] usb 1-1: config 0 descriptor?? [ 36.441927][ T367] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.690786][ T19] usb 1-1: USB disconnect, device number 4 [ 37.033974][ T527] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 37.048556][ T527] device batadv_slave_0 entered promiscuous mode [ 37.146196][ T542] loop3: detected capacity change from 0 to 256 [ 37.283007][ T550] netlink: 96 bytes leftover after parsing attributes in process `syz.0.54'. [ 37.384963][ T556] Zero length message leads to an empty skb [ 37.455476][ T557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 37.491569][ T557] loop4: detected capacity change from 0 to 1024 [ 37.631679][ T557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.643898][ T557] xt_hashlimit: size too large, truncated to 1048576 [ 39.375736][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 39.375761][ T28] audit: type=1400 audit(1767597676.055:198): avc: denied { mount } for pid=579 comm="syz.1.59" name="/" dev="configfs" ino=12791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.755197][ T28] audit: type=1400 audit(1767597676.095:199): avc: denied { search } for pid=579 comm="syz.1.59" name="/" dev="configfs" ino=12791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.692049][ T283] EXT4-fs (loop4): unmounting filesystem. [ 40.733821][ T28] audit: type=1400 audit(1767597677.415:200): avc: denied { create } for pid=594 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.785406][ T28] audit: type=1400 audit(1767597677.435:201): avc: denied { bind } for pid=594 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.836981][ T611] loop1: detected capacity change from 0 to 256 [ 40.858142][ T615] loop3: detected capacity change from 0 to 128 [ 40.871719][ T611] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.890129][ T28] audit: type=1400 audit(1767597677.435:202): avc: denied { listen } for pid=594 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.979534][ T28] audit: type=1400 audit(1767597677.465:203): avc: denied { bind } for pid=603 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.989355][ T615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.008958][ T28] audit: type=1400 audit(1767597677.465:204): avc: denied { setopt } for pid=603 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.051185][ T615] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.087705][ T621] tipc: Started in network mode [ 41.092733][ T621] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 41.101965][ T621] tipc: Enabling of bearer rejected, failed to enable media [ 41.314796][ T28] audit: type=1400 audit(1767597677.495:205): avc: denied { write } for pid=603 comm="syz.3.65" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.734200][ T28] audit: type=1400 audit(1767597677.565:206): avc: denied { create } for pid=610 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 41.768577][ T626] netlink: 'syz.4.70': attribute type 4 has an invalid length. [ 41.816057][ T287] EXT4-fs (loop3): unmounting filesystem. [ 41.865845][ T28] audit: type=1400 audit(1767597677.705:207): avc: denied { create } for pid=616 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.897398][ T627] netlink: 'syz.4.70': attribute type 4 has an invalid length. [ 41.911044][ T587] loop0: detected capacity change from 0 to 40427 [ 41.928939][ T587] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 41.968659][ T626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 41.971278][ T587] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.074443][ T587] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.430563][ T627] syz.4.70 (627) used greatest stack depth: 20992 bytes left [ 42.471832][ T587] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.489196][ T587] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.498671][ T630] netlink: 'syz.3.71': attribute type 27 has an invalid length. [ 42.546606][ T630] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.554099][ T630] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.622724][ T630] netlink: 47 bytes leftover after parsing attributes in process `syz.3.71'. [ 42.641575][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.761574][ T630] device veth0_vlan left promiscuous mode [ 42.778625][ T630] device veth0_vlan entered promiscuous mode [ 43.047240][ T658] loop2: detected capacity change from 0 to 512 [ 43.178756][ T658] EXT4-fs (loop2): Test dummy encryption mode enabled [ 43.223908][ T658] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 43.298980][ T658] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 43.307170][ T658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 43.318508][ T658] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.325111][ T658] EXT4-fs error (device loop2): __ext4_iget:5093: inode #11: block 783: comm syz.2.76: invalid block [ 43.337444][ T658] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.76: couldn't read orphan inode 11 (err -117) [ 43.350223][ T658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.553945][ T630] device veth1_macvtap left promiscuous mode [ 43.560763][ T630] device veth1_macvtap entered promiscuous mode [ 43.581062][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.598136][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.631397][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.653901][ T630] syz.3.71 (630) used greatest stack depth: 19640 bytes left [ 43.663745][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.670942][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.678840][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.694820][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.708332][ T664] loop4: detected capacity change from 0 to 512 [ 43.727534][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.734740][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.775318][ T342] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.780353][ T285] syz-executor: attempt to access beyond end of device [ 43.780353][ T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.814077][ T664] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.823481][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.833531][ T664] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.840455][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 43.858726][ T664] EXT4-fs error (device loop4): ext4_acquire_dquot:6796: comm syz.4.78: Failed to acquire dquot type 1 [ 43.877353][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.899125][ T664] EXT4-fs (loop4): 1 truncate cleaned up [ 43.908505][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 43.920599][ T664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.935284][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.949813][ T664] EXT4-fs (loop4): unmounting filesystem. [ 43.967350][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.986459][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.995031][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.004179][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.012938][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.031527][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.046219][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.062729][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.072497][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.082383][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.091499][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.099652][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.108229][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.131275][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.139892][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.161425][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.169581][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.185188][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.201834][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.219301][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.227789][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.237003][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.258341][ T678] loop4: detected capacity change from 0 to 40427 [ 44.276107][ T286] EXT4-fs (loop2): unmounting filesystem. [ 44.283975][ T678] F2FS-fs (loop4): fault_injection options not supported [ 44.297832][ T678] F2FS-fs (loop4): Image doesn't support compression [ 44.316898][ T678] F2FS-fs (loop4): invalid crc value [ 44.325625][ T678] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.060104][ T678] F2FS-fs (loop4): Start checkpoint disabled! [ 45.068662][ T678] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 45.481927][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 45.486381][ T28] audit: type=1400 audit(1767597681.915:223): avc: denied { write } for pid=694 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.581663][ T705] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 45.590820][ T689] kworker/u4:7: attempt to access beyond end of device [ 45.590820][ T689] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 45.625012][ T710] loop1: detected capacity change from 0 to 512 [ 45.671506][ T710] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 45.680075][ T710] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 45.688987][ T710] EXT4-fs (loop1): 1 truncate cleaned up [ 45.694987][ T710] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.725132][ T284] EXT4-fs (loop1): unmounting filesystem. [ 45.740310][ T28] audit: type=1400 audit(1767597682.415:224): avc: denied { getopt } for pid=719 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.822532][ T723] capability: warning: `syz.1.93' uses 32-bit capabilities (legacy support in use) [ 45.931009][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.991036][ T342] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.222654][ T731] loop3: detected capacity change from 0 to 256 [ 47.342534][ T731] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 47.357034][ T28] audit: type=1400 audit(1767597683.905:225): avc: denied { mounton } for pid=725 comm="syz.3.94" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 47.719706][ T28] audit: type=1400 audit(1767597684.105:226): avc: denied { create } for pid=725 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 47.847854][ T28] audit: type=1400 audit(1767597684.105:227): avc: denied { nlmsg_write } for pid=725 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.869533][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 47.881322][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.892912][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 48.291228][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.301317][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.314947][ T342] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 48.382221][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.391212][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.401735][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.416087][ T342] usb 5-1: config 0 descriptor?? [ 48.423409][ T24] usb 1-1: config 0 descriptor?? [ 48.428988][ T701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.444567][ T28] audit: type=1400 audit(1767597685.125:228): avc: denied { write } for pid=748 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.353419][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 49.364387][ T342] usbhid 5-1:0.0: can't add hid device: -71 [ 49.370626][ T342] usbhid: probe of 5-1:0.0 failed with error -71 [ 49.377355][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 49.385450][ T342] usb 5-1: USB disconnect, device number 2 [ 49.392085][ T24] usb 1-1: USB disconnect, device number 6 [ 49.432176][ T28] audit: type=1400 audit(1767597686.115:229): avc: denied { map } for pid=763 comm="syz.3.103" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.478884][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.677579][ T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 49.772635][ T773] x_tables: duplicate underflow at hook 3 [ 49.784832][ T773] xt_CT: No such helper "netbios-ns" [ 49.859478][ T28] audit: type=1400 audit(1767597686.135:230): avc: denied { read write } for pid=763 comm="syz.3.103" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.944234][ T28] audit: type=1400 audit(1767597686.165:231): avc: denied { ioctl } for pid=759 comm="syz.4.101" path="socket:[16828]" dev="sockfs" ino=16828 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.094428][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.107719][ T19] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 50.119183][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.374232][ T28] audit: type=1400 audit(1767597687.045:232): avc: denied { getopt } for pid=779 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.453486][ T785] xt_hashlimit: max too large, truncated to 1048576 [ 51.071968][ T19] usb 2-1: config 0 descriptor?? [ 51.118059][ T795] loop2: detected capacity change from 0 to 128 [ 51.135506][ T28] audit: type=1400 audit(1767597687.815:233): avc: denied { read } for pid=794 comm="syz.2.109" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.163043][ T28] audit: type=1400 audit(1767597687.845:234): avc: denied { mounton } for pid=779 comm="syz.3.106" path="/25/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 51.185406][ T784] 9pnet_fd: Insufficient options for proto=fd [ 51.290649][ T28] audit: type=1400 audit(1767597687.965:235): avc: denied { ioctl } for pid=756 comm="syz.1.100" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.353985][ T28] audit: type=1400 audit(1767597688.035:236): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 51.389045][ T28] audit: type=1400 audit(1767597688.055:237): avc: denied { bpf } for pid=796 comm="syz.0.110" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.412075][ T28] audit: type=1400 audit(1767597688.055:238): avc: denied { map_create } for pid=796 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.433503][ T802] loop0: detected capacity change from 0 to 128 [ 51.448153][ T28] audit: type=1400 audit(1767597688.055:240): avc: denied { read write } for pid=287 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.473080][ T28] audit: type=1400 audit(1767597688.055:241): avc: denied { open } for pid=287 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.497594][ T28] audit: type=1400 audit(1767597688.055:242): avc: denied { ioctl } for pid=287 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.523580][ T766] Bluetooth: hci0: command 0x1003 tx timeout [ 51.530215][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.537609][ T19] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 51.546146][ T760] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 51.565325][ T28] audit: type=1400 audit(1767597688.065:243): avc: denied { prog_load } for pid=803 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.594328][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input4 [ 51.674004][ T19] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 51.851010][ T342] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.962741][ T24] usb 2-1: USB disconnect, device number 4 [ 51.987690][ T813] all: renamed from team_slave_0 [ 52.003550][ T813] loop2: detected capacity change from 0 to 512 [ 52.018498][ T813] EXT4-fs: Ignoring removed bh option [ 52.024456][ T813] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 52.035185][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.046705][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.057516][ T342] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 52.067892][ T813] EXT4-fs (loop2): 1 truncate cleaned up [ 52.074094][ T813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.082923][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.091779][ T342] usb 5-1: config 0 descriptor?? [ 52.092448][ T813] EXT4-fs (loop2): shut down requested (0) [ 52.123386][ T286] EXT4-fs (loop2): unmounting filesystem. [ 52.528731][ T825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.116'. [ 52.528815][ T825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.528823][ T825] IPv6: NLM_F_CREATE should be set when creating new route [ 52.528857][ T825] IPv6: NLM_F_CREATE should be set when creating new route [ 52.870873][ T808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.897185][ C1] ================================================================== [ 52.905382][ C1] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 52.912545][ C1] Write of size 8 at addr ffff88813e558a00 by task swapper/1/0 [ 52.920174][ C1] [ 52.922486][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 52.929526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.939767][ C1] Call Trace: [ 52.943144][ C1] [ 52.946090][ C1] __dump_stack+0x21/0x24 [ 52.950607][ C1] dump_stack_lvl+0xee/0x150 [ 52.955390][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.960502][ C1] ? enqueue_timer+0xae/0x480 [ 52.965186][ C1] print_address_description+0x71/0x200 [ 52.970739][ C1] print_report+0x4a/0x60 [ 52.975062][ C1] kasan_report+0x122/0x150 [ 52.979906][ C1] ? enqueue_timer+0xae/0x480 [ 52.984590][ C1] ? __kasan_check_write+0x14/0x20 [ 52.989976][ C1] __asan_report_store8_noabort+0x17/0x20 [ 52.995700][ C1] enqueue_timer+0xae/0x480 [ 53.000341][ C1] __mod_timer+0x84a/0xbf0 [ 53.004762][ C1] mod_timer+0x1f/0x30 [ 53.009008][ C1] sk_reset_timer+0x22/0xb0 [ 53.013510][ C1] tcp_rearm_rto+0x312/0x700 [ 53.018266][ C1] ? tcp_rbtree_insert+0x149/0x180 [ 53.023524][ C1] tcp_event_new_data_sent+0x250/0x400 [ 53.029098][ C1] tcp_write_xmit+0x1760/0x6000 [ 53.034126][ C1] __tcp_push_pending_frames+0x9c/0x2f0 [ 53.039749][ C1] tcp_rcv_established+0xed9/0x1a20 [ 53.044937][ C1] ? __cfi_tcp_rcv_established+0x10/0x10 [ 53.050731][ C1] ? ipv4_dst_check+0xf2/0x160 [ 53.055756][ C1] tcp_v4_do_rcv+0x446/0xa10 [ 53.060552][ C1] tcp_v4_rcv+0x233c/0x2a80 [ 53.065174][ C1] ? __cfi_tcp_v4_rcv+0x10/0x10 [ 53.070569][ C1] ? __kasan_check_write+0x14/0x20 [ 53.075693][ C1] ? __inet_lookup_established+0x6d8/0x710 [ 53.081551][ C1] ip_protocol_deliver_rcu+0x325/0x6e0 [ 53.087111][ C1] ip_local_deliver_finish+0x24e/0x410 [ 53.092567][ C1] ip_local_deliver+0x1d8/0x320 [ 53.097403][ C1] ? __cfi_ip_local_deliver+0x10/0x10 [ 53.102843][ C1] ? ip_rcv_finish_core+0xb0b/0x1490 [ 53.108375][ C1] ip_sublist_rcv+0x773/0x880 [ 53.113046][ C1] ? ip_list_rcv+0x420/0x420 [ 53.117619][ C1] ? memset+0x35/0x40 [ 53.121585][ C1] ? ip_rcv_core+0x75f/0xbd0 [ 53.126343][ C1] ip_list_rcv+0x3da/0x420 [ 53.130838][ C1] ? __cfi_ip_list_rcv+0x10/0x10 [ 53.136300][ C1] ? __cfi_ip_list_rcv+0x10/0x10 [ 53.141231][ C1] __netif_receive_skb_list_core+0x59e/0x770 [ 53.147371][ C1] ? set_rps_cpu+0x5e0/0x5e0 [ 53.152123][ C1] ? receive_buf+0x22e2/0x4760 [ 53.156879][ C1] netif_receive_skb_list_internal+0x7d2/0xa60 [ 53.163197][ C1] ? __cfi_netif_receive_skb_list_internal+0x10/0x10 [ 53.169863][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 53.175657][ C1] ? dummy_timer+0x2d10/0x2ea0 [ 53.180420][ C1] ? detach_buf_split+0x882/0xa80 [ 53.185593][ C1] napi_complete_done+0x36f/0x790 [ 53.190674][ C1] ? __cfi_napi_complete_done+0x10/0x10 [ 53.196408][ C1] ? virtqueue_enable_cb_prepare+0x22e/0x510 [ 53.202494][ C1] virtnet_poll+0x991/0x1150 [ 53.207112][ C1] ? __cfi_virtnet_poll+0x10/0x10 [ 53.212317][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 53.217504][ C1] ? sched_clock+0x9/0x10 [ 53.222000][ C1] ? sched_clock_cpu+0x6e/0x250 [ 53.226847][ C1] __napi_poll+0xd0/0x5e0 [ 53.231277][ C1] net_rx_action+0x49b/0xaa0 [ 53.236033][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 53.241221][ C1] handle_softirqs+0x1d7/0x600 [ 53.246231][ C1] ? irqtime_account_irq+0xc4/0x240 [ 53.251420][ C1] __irq_exit_rcu+0x52/0xf0 [ 53.255905][ C1] irq_exit_rcu+0x9/0x10 [ 53.260396][ C1] common_interrupt+0xbe/0xe0 [ 53.265057][ C1] [ 53.267976][ C1] [ 53.270891][ C1] asm_common_interrupt+0x27/0x40 [ 53.275901][ C1] RIP: 0010:default_idle+0xf/0x20 [ 53.280998][ C1] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 73 e0 51 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 53.300807][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 53.307120][ C1] RAX: ffff8881f7100000 RBX: ffff888100331440 RCX: 089af94671db5c00 [ 53.315435][ C1] RDX: 0000000000000001 RSI: ffffffff85aa1a40 RDI: ffffffff85aa1a00 [ 53.323477][ C1] RBP: ffffc90000147dd8 R08: dffffc0000000000 R09: ffffed103ee26917 [ 53.331491][ C1] R10: 0000000000000000 R11: ffffffff84f45280 R12: 0000000000000000 [ 53.339539][ C1] R13: 0000000000000000 R14: ffff888100331440 R15: dffffc0000000000 [ 53.347513][ C1] ? __cfi_default_idle+0x10/0x10 [ 53.352624][ C1] arch_cpu_idle+0x1c/0x20 [ 53.357115][ C1] default_idle_call+0x71/0x1d0 [ 53.361956][ C1] do_idle+0x1a7/0x520 [ 53.366026][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 53.371252][ C1] ? schedule_idle+0x5b/0x90 [ 53.375835][ C1] cpu_startup_entry+0x43/0x60 [ 53.380603][ C1] start_secondary+0x119/0x120 [ 53.385548][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 53.391807][ C1] [ 53.395201][ C1] [ 53.397636][ C1] Allocated by task 760: [ 53.401890][ C1] kasan_set_track+0x4b/0x70 [ 53.406737][ C1] kasan_save_alloc_info+0x25/0x30 [ 53.412098][ C1] __kasan_kmalloc+0x95/0xb0 [ 53.416710][ C1] __kmalloc+0xb1/0x1e0 [ 53.420858][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 53.425874][ C1] hci_uart_tty_ioctl+0x3d6/0xa20 [ 53.430893][ C1] tty_ioctl+0x8ef/0xc60 [ 53.435299][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 53.440072][ C1] __x64_sys_ioctl+0x7b/0x90 [ 53.444864][ C1] x64_sys_call+0x58b/0x9a0 [ 53.449368][ C1] do_syscall_64+0x4c/0xa0 [ 53.453875][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.460126][ C1] [ 53.462544][ C1] Freed by task 760: [ 53.466594][ C1] kasan_set_track+0x4b/0x70 [ 53.471189][ C1] kasan_save_free_info+0x31/0x50 [ 53.476206][ C1] ____kasan_slab_free+0x132/0x180 [ 53.481644][ C1] __kasan_slab_free+0x11/0x20 [ 53.486942][ C1] slab_free_freelist_hook+0xc2/0x190 [ 53.492397][ C1] __kmem_cache_free+0xb7/0x1b0 [ 53.497267][ C1] kfree+0x6f/0xf0 [ 53.501186][ C1] hci_release_dev+0x12a3/0x13b0 [ 53.506400][ C1] bt_host_release+0x82/0x90 [ 53.511186][ C1] device_release+0xa4/0x1d0 [ 53.515947][ C1] kobject_put+0x19d/0x280 [ 53.520455][ C1] put_device+0x1f/0x30 [ 53.524740][ C1] hci_dev_cmd+0x265/0x720 [ 53.529145][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 53.533893][ C1] sock_do_ioctl+0x101/0x310 [ 53.538492][ C1] sock_ioctl+0x4d8/0x6e0 [ 53.543065][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 53.547817][ C1] __x64_sys_ioctl+0x7b/0x90 [ 53.552479][ C1] x64_sys_call+0x58b/0x9a0 [ 53.557172][ C1] do_syscall_64+0x4c/0xa0 [ 53.561697][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.567601][ C1] [ 53.569933][ C1] Last potentially related work creation: [ 53.575682][ C1] kasan_save_stack+0x3a/0x60 [ 53.580375][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 53.585911][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 53.591887][ C1] insert_work+0x51/0x300 [ 53.596216][ C1] __queue_work+0x9b1/0xd30 [ 53.600945][ C1] queue_work_on+0xd2/0x140 [ 53.605520][ C1] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 53.610449][ C1] hci_cmd_sync_status+0x53/0x120 [ 53.615544][ C1] hci_dev_cmd+0x628/0x720 [ 53.619944][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 53.624733][ C1] sock_do_ioctl+0x101/0x310 [ 53.629583][ C1] sock_ioctl+0x4d8/0x6e0 [ 53.633990][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 53.638651][ C1] __x64_sys_ioctl+0x7b/0x90 [ 53.643407][ C1] x64_sys_call+0x58b/0x9a0 [ 53.647901][ C1] do_syscall_64+0x4c/0xa0 [ 53.652304][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.658280][ C1] [ 53.660587][ C1] Second to last potentially related work creation: [ 53.667499][ C1] kasan_save_stack+0x3a/0x60 [ 53.672163][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 53.677544][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 53.683470][ C1] insert_work+0x51/0x300 [ 53.687959][ C1] __queue_work+0x9b1/0xd30 [ 53.692627][ C1] queue_work_on+0xd2/0x140 [ 53.697138][ C1] hci_cmd_timeout+0x191/0x200 [ 53.702167][ C1] process_one_work+0x71f/0xc40 [ 53.707005][ C1] worker_thread+0xa29/0x11f0 [ 53.711760][ C1] kthread+0x281/0x320 [ 53.715924][ C1] ret_from_fork+0x1f/0x30 [ 53.720341][ C1] [ 53.722680][ C1] The buggy address belongs to the object at ffff88813e558000 [ 53.722680][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 53.737586][ C1] The buggy address is located 2560 bytes inside of [ 53.737586][ C1] 8192-byte region [ffff88813e558000, ffff88813e55a000) [ 53.751378][ C1] [ 53.753690][ C1] The buggy address belongs to the physical page: [ 53.760167][ C1] page:ffffea0004f95600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13e558 [ 53.770389][ C1] head:ffffea0004f95600 order:3 compound_mapcount:0 compound_pincount:0 [ 53.778883][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 53.785311][ C1] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 53.794061][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 53.802874][ C1] page dumped because: kasan: bad access detected [ 53.809379][ C1] page_owner tracks the page as allocated [ 53.815261][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 757, tgid 756 (syz.1.100), ts 49312994935, free_ts 0 [ 53.838586][ C1] post_alloc_hook+0x1f5/0x210 [ 53.843459][ C1] prep_new_page+0x1c/0x110 [ 53.848154][ C1] get_page_from_freelist+0x2c7b/0x2cf0 [ 53.854037][ C1] __alloc_pages+0x1c3/0x450 [ 53.858617][ C1] alloc_slab_page+0x6e/0xf0 [ 53.863293][ C1] new_slab+0x98/0x3d0 [ 53.867481][ C1] ___slab_alloc+0x6bd/0xb20 [ 53.872066][ C1] __slab_alloc+0x5e/0xa0 [ 53.876396][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 53.882025][ C1] __kmalloc_node_track_caller+0xa0/0x1e0 [ 53.887750][ C1] __alloc_skb+0x236/0x4b0 [ 53.892413][ C1] netlink_dump+0x181/0xd80 [ 53.896898][ C1] __netlink_dump_start+0x643/0x860 [ 53.902257][ C1] genl_family_rcv_msg_dumpit+0x2cc/0x340 [ 53.908073][ C1] genl_rcv_msg+0x5a7/0x770 [ 53.912938][ C1] netlink_rcv_skb+0x1f2/0x440 [ 53.917961][ C1] page_owner free stack trace missing [ 53.923659][ C1] [ 53.925967][ C1] Memory state around the buggy address: [ 53.931760][ C1] ffff88813e558900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.939977][ C1] ffff88813e558980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.948694][ C1] >ffff88813e558a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.956756][ C1] ^ [ 53.960909][ C1] ffff88813e558a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.969050][ C1] ffff88813e558b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.977105][ C1] ================================================================== [ 53.985159][ C1] Disabling lock debugging due to kernel taint [ 53.992325][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 54.004165][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 54.011699][ T808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.012593][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G B syzkaller #0 [ 54.029301][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.039491][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 54.045158][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 e2 28 00 4c 89 ff e8 00 36 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 fc 63 6d 00 49 8b 7d 00 e8 e3 31 [ 54.065142][ C0] RSP: 0018:ffffc900000d7b10 EFLAGS: 00010046 [ 54.071434][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100323cc0 [ 54.079755][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 54.087766][ C0] RBP: ffffc900000d7ba8 R08: fffffffffffffffb R09: 0000000000000007 [ 54.095855][ C0] R10: ffffed1027cab139 R11: 1ffff11027cab139 R12: dffffc0000000000 [ 54.104030][ C0] R13: 0000000000000000 R14: ffff88813e5589c8 R15: 0000000000000008 [ 54.112014][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 54.121068][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.127671][ C0] CR2: 00007f12af3156c0 CR3: 000000013118d000 CR4: 00000000003506b0 [ 54.136902][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.144975][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.152970][ C0] Call Trace: [ 54.156273][ C0] [ 54.159240][ C0] delayed_work_timer_fn+0x61/0x80 [ 54.164553][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 54.170383][ C0] call_timer_fn+0x46/0x2a0 [ 54.174885][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 54.180688][ C0] __run_timers+0x672/0x9b0 [ 54.185197][ C0] ? calc_index+0x200/0x200 [ 54.189711][ C0] ? finish_task_switch+0x16b/0x7b0 [ 54.195099][ C0] ? __schedule+0xb8f/0x14e0 [ 54.200213][ C0] run_timer_softirq+0x6a/0xf0 [ 54.204989][ C0] handle_softirqs+0x1d7/0x600 [ 54.209851][ C0] ? __cfi_run_ksoftirqd+0x10/0x10 [ 54.215065][ C0] run_ksoftirqd+0x28/0x30 [ 54.219512][ C0] smpboot_thread_fn+0x4a0/0x910 [ 54.224488][ C0] kthread+0x281/0x320 [ 54.228782][ C0] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 54.234258][ C0] ? __cfi_kthread+0x10/0x10 [ 54.238849][ C0] ret_from_fork+0x1f/0x30 [ 54.243407][ C0] [ 54.246466][ C0] Modules linked in: [ 54.250376][ C0] ---[ end trace 0000000000000000 ]--- [ 54.256039][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 54.261354][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 e2 28 00 4c 89 ff e8 00 36 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 fc 63 6d 00 49 8b 7d 00 e8 e3 31 [ 54.281486][ C0] RSP: 0018:ffffc900000d7b10 EFLAGS: 00010046 [ 54.287839][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100323cc0 [ 54.296261][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 54.304496][ C0] RBP: ffffc900000d7ba8 R08: fffffffffffffffb R09: 0000000000000007 [ 54.312588][ C0] R10: ffffed1027cab139 R11: 1ffff11027cab139 R12: dffffc0000000000 [ 54.321099][ C0] R13: 0000000000000000 R14: ffff88813e5589c8 R15: 0000000000000008 [ 54.329267][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 54.338551][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.345570][ C0] CR2: 00007f12af3156c0 CR3: 000000013118d000 CR4: 00000000003506b0 [ 54.353541][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.362374][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.370373][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 54.378124][ C0] Kernel Offset: disabled [ 54.382703][ C0] Rebooting in 86400 seconds..