last executing test programs: 17.965024607s ago: executing program 1 (id=2): sendto$packet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x20040801, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c330a000010000e69400000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000240)=""/210, 0x41100}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x400, 0x7, 0x2000, 0x8, 0x1, 0x1000}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x29}, 0x80, r3}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000480)={@loopback, 0x80, r3}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setxattr$system_posix_acl(&(0x7f0000000080)='.\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0x24, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000003c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab) fchown(r4, 0x0, 0xee01) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0xffffffff, 0x0, 0x1, 0x0, 0x10100}, 0x1c) 17.812522702s ago: executing program 1 (id=6): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2808080, &(0x7f00000008c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d302c756d61736b3d30303030303030303030303030303030303030303031322c636f6465706167653d3836302c756d61736b3d30303030303030303030303030303030303030303030322c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c696f636861727365743d63703733372c747a3d5554432c6e6f6e756d7461696c3d302c009056d8d195b3e20fee80f962745894b7a8d051b578dc26babbd9fddb86adcabf8d9e"], 0x81, 0x2ae, &(0x7f00000009c0)="$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") r1 = open(&(0x7f0000000c80)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000000cc0)=""/184, 0xb8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='proc\x00', 0x2800444, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) write(r3, &(0x7f0000000d80)=',1', 0x2) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x4, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = getuid() syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f40)={[], [{@uid_lt}, {@dont_measure}, {@context={'context', 0x3d, 'sysadm_u'}}, {@seclabel}, {@uid_lt}, {@euid_eq={'euid', 0x3d, r8}}, {@euid_gt}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@appraise}]}, 0x3, 0x57e, &(0x7f0000000340)="$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") open(0x0, 0x14927e, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) unshare(0x22020600) setns(0xffffffffffffffff, 0x24020000) 17.679275556s ago: executing program 1 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) syslog(0xf6a0db57, 0x0, 0x0) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"ff142500000400"}}], 0x18}) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r7, &(0x7f0000000580)=""/265, 0x109) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000100)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x4000000}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000280)=r8, 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000002c0)='syz_tun\x00', 0x10) connect$inet(r9, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @multicast2}, 'syz_tun\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 17.365078929s ago: executing program 1 (id=8): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c, 0x0, r4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffb, 0x200, 0x1006, 0x15a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbf}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 17.273747048s ago: executing program 32 (id=8): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c, 0x0, r4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffb, 0x200, 0x1006, 0x15a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbf}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 5.42603602s ago: executing program 5 (id=104): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f00000004c0)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = epoll_create1(0x80000) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f0000000240)={[0x7f]}, 0x8) close(r1) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002) syz_clone3(&(0x7f0000000540)={0x800000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2012}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x44}}, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) syz_usb_connect$cdc_ecm(0x5, 0x91, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109027f00010103500409040006020206000506240600000805240000000d240f01101000000a00090008192413000b93be3bee2464f8302da5389e279dd64971986877052415000807241446647f001524123a0fa317a88b045e4f01a607c0ffcb7e392a090581"], 0x0) mlock2(&(0x7f00001a4000/0x4000)=nil, 0x4000, 0x1) sendto$inet6(r3, 0x0, 0xfeeb, 0x8040, &(0x7f0000000040)={0xa, 0x4e21, 0xf7ffffff, @loopback, 0xbf}, 0x1c) madvise(&(0x7f000001f000/0x2000)=nil, 0x2000, 0x9) 4.593416357s ago: executing program 4 (id=121): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x844, &(0x7f0000000100)=ANY=[], 0x1, 0x267, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0x8, 0x8e229) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r0, 0x71e6) 4.454521431s ago: executing program 4 (id=124): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40980) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b40500000000000071104d000000000066000000000000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000700)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000800), 0xfffffffffffffd56, 0x10, &(0x7f0000000840), 0x1dd}, 0x48) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b30f"], 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) flock(r4, 0x2) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x1, 0x4) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="2000000076000d0b04000000fddbdf25030000000000000008000500a28d2aaa"], 0x20}, 0x1, 0x0, 0x0, 0x40081}, 0x20000000) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000900)={0xaa, 0x4ec}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000a40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000f40)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1}) (async) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01c5db004b9770398af7e7e75e859e9e817fe8774c0fe1c8a95898e28dda92a04e73c70f1bfa5241765bd67cc33aa5ccf38b50c25a3096e9c59bc612bcd1c201f1be6a489d28d09ce8f8ef2700"/91, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1e, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000dc0)={0x0, 0x0}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0xf, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r6, @ANYRES64=r2], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000b40)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x5452, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0xd000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x3, 0x1, 0xdddd1000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) 3.762834732s ago: executing program 5 (id=129): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009d973ec5f18fb6ba25bfa35134f1ac8166b3890c15b91f5b889b123d67dd9a32cecc7f77f10fa999308a29f10bf118353a61ff9cf0bfc00a2970825a97100c0e434d9f93dac5ae9cd91c4e136a91ab89b372de3f52b353f1"], &(0x7f0000000240)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000300)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f00000003c0), 0x1}, 0x6d) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 3.741456534s ago: executing program 5 (id=130): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x18008, &(0x7f0000000140)={[{@namecase}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@discard}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {}]}, 0x11, 0x1533, &(0x7f0000000240)="$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") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000079c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$MAP_CREATE(0x0, &(0x7f0000007cc0)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000007d40)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000007d80)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000007dc0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000007e00), 0x400000000000284, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x31, &(0x7f0000007f00)=""/4096, &(0x7f0000008f00)=0x1000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000007e80)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000007e40)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000001780)='.\x00', 0x80000, 0x0) recvmmsg(r3, &(0x7f0000007780)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002800)=""/118, 0x76}], 0x1, &(0x7f00000028c0)=""/167, 0xa7}, 0x6}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002980)=""/90, 0x5a}, {&(0x7f0000002a00)=""/222, 0xde}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/44, 0x2c}], 0x4}, 0x80000001}, {{&(0x7f0000003b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000005040)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/27, 0x1b}, {&(0x7f0000004c40)=""/162, 0xa2}, {&(0x7f0000004d00)=""/210, 0xd2}, {&(0x7f0000004e00)=""/228, 0xe4}, {&(0x7f0000004f00)=""/213, 0xd5}, {&(0x7f0000005000)=""/14, 0xe}], 0x7, &(0x7f00000050c0)=""/216, 0xd8}, 0x391}, {{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000051c0)=""/83, 0x53}, {&(0x7f0000005240)=""/152, 0x98}, {&(0x7f0000005300)=""/146, 0x92}, {&(0x7f00000053c0)=""/82, 0x52}, {&(0x7f0000005440)=""/172, 0xac}, {&(0x7f0000005500)=""/39, 0x27}, {&(0x7f0000005540)=""/246, 0xf6}], 0x7}}, {{&(0x7f00000056c0)=@xdp, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005740)=""/140, 0x8c}, {&(0x7f0000005800)=""/57, 0x39}, {&(0x7f0000005840)=""/158, 0x9e}, {&(0x7f0000005900)=""/200, 0xc8}, {&(0x7f0000005a00)=""/99, 0x63}], 0x5}, 0x7ff}, {{&(0x7f0000005b00)=@caif=@dbg, 0x80, &(0x7f0000007040)=[{&(0x7f0000005b80)=""/125, 0x7d}, {&(0x7f0000005c00)=""/59, 0x3b}, {&(0x7f0000005c40)=""/166, 0xa6}, {&(0x7f0000005d00)=""/84, 0x54}, {&(0x7f0000005d80)=""/176, 0xb0}, {&(0x7f0000005e40)=""/176, 0xb0}, {&(0x7f0000005f00)=""/206, 0xce}, {&(0x7f0000006000)=""/48, 0x30}, {&(0x7f0000006040)=""/4096, 0x1000}], 0x9, &(0x7f0000007100)=""/196, 0xc4}, 0x8}, {{&(0x7f0000007200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000007280), 0x0, &(0x7f00000072c0)=""/17, 0x11}, 0x9}, {{&(0x7f0000007300)=@rc, 0x80, &(0x7f0000007640)=[{&(0x7f0000007380)=""/87, 0x57}, {&(0x7f0000007400)=""/141, 0x8d}, {&(0x7f00000074c0)=""/181, 0xb5}, {&(0x7f0000007580)=""/95, 0x5f}, {&(0x7f0000007600)=""/13, 0xd}], 0x5, &(0x7f00000076c0)=""/179, 0xb3}, 0x1}], 0x8, 0x40010040, &(0x7f0000007980)) getdents64(r3, &(0x7f00000017c0)=""/4128, 0x1020) 3.660971753s ago: executing program 4 (id=131): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040a306c516f7da0ac619de0a59aecc9bb5a4d00c00000000004109022400010000a002090400050203008400092100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f0f09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x16, 0x4, "50f87673"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f00000003c0)={0x14, &(0x7f0000000340)={0x0, 0x8, 0x27, {0x27, 0x23, "acc44044ce00953ef99bf13632008e6f42924930c11ffa5840704f3ea5b52309f3f25d5d2d"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000400)={0x40, 0xb, 0x69, "f7fa4b0cd9ad904bf61e328aa913a1d33f666bc263413670a7794add5b563dc127d8169f66629737e6ff1f31aa1f86989db933407bd854c0079e4d3f33408bde2eca4c7b61595bca4875776df512f787fce94cbd7b9cef469fbccf40e96db068592a20e276f671c00f"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x5, {0x3, "c8b000"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0xd}}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x994d, 0x5d, 0xc0000000}) 3.601176489s ago: executing program 5 (id=135): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@bh}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x3b}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x2, &(0x7f0000000740)=@raw=[@call={0x85, 0x0, 0x0, 0xc9}, @exit], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000980)='./bus\x00', &(0x7f00000009c0), 0x8, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000000540)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000580)) timer_settime(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) chdir(&(0x7f0000000a40)='./bus\x00') symlinkat(&(0x7f0000000a80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket(0x10, 0x803, 0x0) r5 = inotify_init1(0x80800) poll(&(0x7f0000000640)=[{r5, 0x1044}], 0x1, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x80000006}]}, 0x10) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000440)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@local, @random="6c22c7f3e9bb", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @wg=@data={0x4, 0x80000001, 0x7, "d69ccf0131b5a2cfe8da65c267ec09fa4a2733b5621038d6"}}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 3.20581619s ago: executing program 2 (id=145): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) (async) sendmsg(r0, 0x0, 0x44000) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffff00300000000000019078ac1e0001ac1414aa05009078e04af3e04500000000000000002f0000000000007f000001"], 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x2d0, 0x0, 0x148, 0x0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x8001, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000203030000000000000000ddffffff000800010001"], 0x1c}}, 0x0) (async) r4 = fsopen(&(0x7f0000000300)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) fchdir(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000020303009600000000000000000000140800010001"], 0x1c}}, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r7, &(0x7f0000000f00)=""/1024, 0x400) (async) read$FUSE(r7, &(0x7f0000001300)={0x2020}, 0x2020) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000bc0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) (async) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000d00)=""/214, &(0x7f0000000e00)=0xd6) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) mremap(&(0x7f0000af3000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) syz_open_procfs(0x0, &(0x7f0000000e40)='smaps\x00') 3.034145298s ago: executing program 3 (id=148): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udp\x00') setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f0000000180)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000000340)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000880)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000008c0)={0x1, 0x1, 0x246, 0x7, 0x9, 0xfffffffffffffff8, 0x1, 0x9, 0xf69}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001c00)='ext4\x00', &(0x7f0000001c40)='./bus\x00', 0x0, &(0x7f0000001c80), 0x21, 0x4b5, &(0x7f0000001cc0)="$eJzs3cFvE9kZAPBvJjEJIZDQcmirtlBKSyuEnRiIECd6aVUhpKqopx4gTUwUxY6j2EEk5RD+h0rl2v4JPVTqoRKn3ntrb73QQyW6i3ZFVlqtvJqxAyHEIbsEW4p/P/E08+YZf+9hzXv2R+IXwMA6FxGbEXEsIu5FxETnetIpcbNdsse9fPFobuvFo7kkWq07HyV5e3YtdvydzInOc45GxK9/EfG75O24jfWNpdlqtbLaqZeatZVSY33j8mJtdqGyUFkul2emZ6auX7lWPrSxnq395fnPF2/95u9/+96zf27+9PdZt8Y7bTvHcZjaQy+8ipMZjohbHyJYHwx1xnOs3x3ha0kj4hsRcT6//ydiKH81AYCjrNWaiNbEzjoAcNSleQ4sSYudXMB4pGmx2M7hnYmxtFpvNC/dr68tz7dzZZNRSO8vVitTnVzhZBSSrD6dn7+ul3fVr0TE6Yj4w8jxvF6cq1fn+/nGBwAG2Ild6/+nI+31HwA44kb73QEAoOes/wAweKz/ADB4rP8AMHis/wAwePZf/0d61g8AoHd8/geAgfKr27ez0trqfP/1/IP1taX6g8vzlcZSsbY2V5yrr64UF+r1hfw7e2rver5qvb4yfTXWHpaalUaz1FjfuFurry037+bf6323UujJqACA/Zw++/TfSURs3jiel9ixl4O1Go62tN8dAPpmqN8dAPrGbl8wuHzGB/bYovcNXX9E6Mnh9wXojYvflv+HQSX/D4NL/h8Gl/w/DK5WK7HnPwAMGDl+wP//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFc3npckLXb2Ah+PNC0WI05GxGQUkvuL1cpURJyKiH+NFEay+nS/Ow0AvKf0f0ln/6+LExfGd7ceSz4byY/5n1xzdTq7/vH29Wg+ufPHh7PN5mq5130HAA5ie53Ojzs+yL988Whuu/SyP89/1t5cNIu71SntluEYzo+jUYiIsU+STr0te78ydAjxNx9HxLf2Gn+S50YmOzuf7o6fxT7Z0/jpG/HTvK19zP4tvnkIfYFB8zSbf27udf+lcS4/7n3/j+Yz1Pvbnv+23pr/0lfz31CX+e/cQWNc/ccvu7Y9jvjO8F7xk1fxky7xLxww/n+++/3z3dpaf4q4GHvH3xmr1KytlBrrG5cXa7MLlYXKcrk8Mz0zdf3KtXIpz1GXtjPVb/v/jUun9hv/WJf4o+8Y/48OOP4/f37vtz/YJ/5Pfrj3639mn/jZmvjjA8afHftr1+27s/jzXcb/rtf/0gHjP/vvxvwBHwoA9EBjfWNptlqtrPbhZKQd/Yv+RHfi5CifFN7zefo9MwEf2uubvt89AQAAAAAAAAAAAAAAuunFbyP1e4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcXV8GAAD//2i91V8=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000021c0), 0x208e24b) mmap(&(0x7f00000a1000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x1000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @private=0xa010100}, 0x5}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r4 = openat(r0, &(0x7f0000001a00)='./bus\x00', 0x444140, 0x20) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80), r0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f0000001b80)={&(0x7f0000002200)=ANY=[@ANYBLOB="840000009e7a29f861bb69f9a0ca1f18ef779e94fdcab98ce6328c8ea6e70fd33c3816a3d09495ecabbd230e8457bf1506f10cdec144cd7cdd5183919603ecf2209d68b82a09aaeffd1246c88fdc4c78be43b5864cf0de6987935fcd6df0f4a5ae0f822d649f5ab5982b9b1d12268b20bf9adb43f3f3157b082d137914a69bffc92a197184d21b8e0a8b5d0ee79db56fda2da450f3a4741a79afd8a7f1178d8fc723d9d6f1c649c2b2703567f7ad4988f5ed4a2c6056c79840cedf2f770f4c1482adf33ace3d5b7fa8a3d2bc9106000000e00997400c43635a184a4e15ee79eaf21937270f1c83af4f896a083ef41612537f253590b0b831b3ef66bb7220f16285ff9704b52c0000000000000000ccc357a3a5034378dcd5", @ANYRES16=r5, @ANYBLOB="00032cbd7000fedbdf250700000034000980080001000200000008000100000000000800010097a60000080002000300000008000200a10a000008000100080000003c00058008000100657468000700010069620000140002800800020001000000080001000100000008000100756470000c0002800800010010000000"], 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x850) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f0000001940)=""/78, 0x4e}, 0x9}], 0x1, 0x1, &(0x7f00000019c0)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') 2.7228559s ago: executing program 5 (id=150): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x280440e, &(0x7f0000000840)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@jqfmt_vfsv1}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000005f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000006b80)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000006bc0)='./file0\x00', &(0x7f0000006c00), 0x0, 0x0, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000002010400000000000000000a0000000400018004000380300002802c00018014000300"], 0x4c}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) mount$overlay(0x0, &(0x7f0000006c80)='./file0\x00', &(0x7f0000006cc0), 0x8, &(0x7f0000006d00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2.647339878s ago: executing program 3 (id=151): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009d973ec5f18fb6ba25bfa35134f1ac8166b3890c15b91f5b889b123d67dd9a32cecc7f77f10fa999308a29f10bf118353a61ff9cf0bfc00a2970825a97100c0e434d9f93dac5ae9cd91c4e136a91ab89b372de3f52b353f1"], &(0x7f0000000240)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000300)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f00000003c0), 0x1}, 0x6d) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 2.606860271s ago: executing program 3 (id=152): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1506, &(0x7f0000004b80)="$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") (async) rmdir(&(0x7f0000002380)='./file0\x00') (async) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000001840)='rxrpc_s\x00', 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000840)=""/84, 0x54}], 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x7}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x50000, 0x1ff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x25000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0xc, 0x58, 0x9, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0xa, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x1, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x2, 0x5}, {0x1fff, 0x1}, {0x0, 0x2}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) (async) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000580)={0x70000, 0x1000, 0x2, 0x1c, 0x50}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000340)=0x8, 0x4) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r4, &(0x7f00000003c0), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000400)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000100)={[{@gid}, {@fmask={'fmask', 0x3d, 0x8001}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8}, {@namecase}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@umask={'umask', 0x3d, 0x1}}, {@utf8}, {}]}, 0x1, 0x1533, &(0x7f00000023c0)="$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") socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000019c0)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000001a00)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000020000000400000009"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0xc, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) (async) connect$unix(0xffffffffffffffff, &(0x7f0000001ac0)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40), 0x651, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001b80), 0x4000087, 0x2, 0x0) 2.201400033s ago: executing program 2 (id=153): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) close(r3) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES64=r1]) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r5, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.179582936s ago: executing program 2 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000014d3b903ccbd7080faffffff0218ef00354e3033f0c2dfd248cfbedac2a2ecd3af4ff59007377fd257447be531cdd3b37f69953b5747dca9f822b8626006000000544e258fce3960310bb642670b95e437762d8aa76a6ddaca9b01a8187733d61bcd15011d46314367ea48759f11dbbf861845c3c5bc4dbbc4c4db21bbe5a33333b9f7e76155795cf212729c920b0041ae9f6fc44cf13050e0db077fc62005a2ca237416e32843", @ANYRES32=r1, @ANYBLOB="14000600ff0f0000ff7f0000090000000400000008000200ac1e0101"], 0x34}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x48040}, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000200), 0x4000087, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd2(0xe5c, 0x80000) r9 = eventfd2(0x6, 0x80800) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000480)={r8, 0x0, 0x2, r9}) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000600)) ptrace$cont(0x1f, 0x0, 0x2, 0x8) r10 = syz_ublk_setup_io_uring(0x4c26, &(0x7f0000000240)={0x0, 0x7985, 0x2000, 0x1, 0x1e}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2, 0x50, r10, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000b00)="$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") r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000001100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000001180)=0x5) sendmmsg(0xffffffffffffffff, &(0x7f00000011c0), 0x307017fdb7a66cb, 0x0) 1.448376031s ago: executing program 0 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000240)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xf, &(0x7f0000000100)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x14, 0x14, 0x211, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) 1.189085448s ago: executing program 0 (id=157): r0 = add_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000700)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000c80)={r1}, &(0x7f0000000cc0)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha3_-'], 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000e80)={{0xffffffffffffffff, &(0x7f0000000000)='keyring\x00', 0x101000, &(0x7f0000000040)={@_ha_fsid={[0x890f, 0x4]}, {0x2, 0xd, 0x6, 0xc}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x6}, 0x7, &(0x7f0000000d80)=[{0x3, 0x40, &(0x7f0000000100)='-##\\#&\x00', &(0x7f0000000140)="05c9e03c5d0f366694ff087bc5a78e2e24a9f7849203ac3ff598d1feaa361ca879eca6e756dfacaffc97dca94f065f0a457422afa5a6a1e2e8d3bee43d1529aefef6372a967103b248e2dadb3c35830f31893acdfe2120bc9c747cf43e829a216889e869", 0x64, 0x12}, {0x1, 0x1, &(0x7f00000001c0)='@%&\x00', &(0x7f0000000200)="fbe606e83bd7c12ef5a0860dc5aa0c3aeadbdb04915ab2017b23257f2691866012335670317307cc854534d4e9a126d2e58e6d3adc3e8a428c90c82e11f8986f581402ea1085968c7ef14a9c9b14cd5d1535fa1663a8b2becf13458f4fc83e3b02e17125e05e0586cb12a4f23948ba256aee5205c88e6dc8533ad226e2bfe19e9694dfcfbc1bdf8f39ce55dc48c965847985477eb6fb89de359490f5c7eb381f7c1461bd6481bf860d7b05d4bf08673208c58c286e4357cd6a3a24c20e34e3eabe1b", 0xc2, 0x28}, {0x3, 0x7632, &(0x7f0000000300)='\'/[/\x00', &(0x7f0000000340), 0x0, 0xa}, {0x2, 0x3ff, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="3db301cc793e15db09408bcf323026f4f5f7da6ade948ac18aadeef0fe383162bd5438d987429b21ad5ad0e6c72b1b0fb85810ad04f529552075cafa89", 0x3d, 0x2}, {0x3, 0xffffffff, &(0x7f0000000400)='\x00', &(0x7f0000000440)="d607c9ecbc97264983aed80b1ea53a730d085e4381d5542bb91df10e810bd1b06a61b92d8038a8962696927ded826b88ef8a2bdd7bf59c5f01cedc6133f4aa50495e44419c63fe95037037b62696308a8566b444b7953349d0989033900f7f9c8dab803b652bb54c568b9a4c7525997aeddb02f690ce917c7b2cb96a7d775173741d39359eaebfe6f735365a31f590f59ed109b6f6b6babe3947f733167959e909c6667c34fa55eefa69a446390ee990f5de3ea803911eff9c36202037b818ffec3baa39f60fb0198e512265aa6e65aa0426811537dcb5aa7e", 0xd9}, {0x2, 0x4, &(0x7f0000000540)='syz', &(0x7f0000000580)="825d8a7c3790243adef59f801404d798732bdade61d98742cbba9a9e8fbf55b42cc55c2c24be93c740a6990b888c130fa6e3726421d5097e4b999ae8229a368ff88670876469df253f47ec5d2ca157d25d14f8ab22f68539dbbfda4ea5ef47980658292e9d17ffa3b372d6d666a6a5537ebb15e5f862a0aff7bf5cacbda08d24ae6039970b48a34ccc2ebb3d83beae23f63d9df3be158fc68586bc890a29330b177723ba077d40917e2ea8112e9984fa877d5d3dc071b17333ab9f29c12967", 0xbf}, {0x3, 0xfffffffe, &(0x7f0000000d00)=':(\x00', &(0x7f0000000d40)="de120ac399a5cc4ad60809df3ff08fb19e", 0x11, 0x28}]}) ioctl$KIOCSOUND(r2, 0x4b2f, 0xe9) 1.187082718s ago: executing program 0 (id=158): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r1 = inotify_init() ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x16, 0x2, 0x1, 0x40000000}]}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14020000", @ANYRES16=r4, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x4044084}, 0x40000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x7}]}, 0x10) 1.118844195s ago: executing program 0 (id=159): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x6a) close(r0) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x2, 0x1}, 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x0, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff4, 0x1}, {0x6}, {0x7, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x42d9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="1843", 0x2}], 0x1}, 0x20000001) fallocate(r0, 0x40, 0x4, 0x8) fsync(r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0xffffffffffffff89, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040095}, 0x4004001) 1.102713657s ago: executing program 2 (id=160): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4002085) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4002085) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x68, {0x2, 0x4e20, @local}}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x68, {0x2, 0x4e20, @local}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000000c0)={0x0, 0xc0, 0x180, &(0x7f0000000300)=[0x3, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x8, 0x10000, 0x466c, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x7, 0x3, 0x5, 0x2, 0x1, 0x9, 0x8, 0xc1, 0x1, 0x2, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0x100000002, 0x9, 0x6, 0x5, 0x7, 0x4, 0x3, 0x9, 0x10000008892, 0x1, 0x8000000006, 0x43, 0x0, 0x3, 0x85, 0x7, 0x8, 0x5, 0x6, 0x6, 0xffffffffffffffb7, 0x2, 0x2, 0xfffffffffffffffe, 0x5, 0x4, 0xe6, 0x200000000000101, 0x5, 0xd, 0x66, 0x6, 0x7, 0x1, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0x0, 0xfffffffffffffff6, 0xfffffffffffffc00, 0x2, 0x7, 0xbc6, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x0, 0xfff, 0x2, 0x2004, 0x2, 0x1, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0x102, 0x80000000006, 0x28000000, 0xed, 0x8061d, 0xfffffffffffffffd, 0x7, 0x2, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x7fffffffffffffff, 0x1, 0x65ec, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0x40000000000005, 0x8, 0x100000000000001, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb68e, 0x0, 0xc, 0x1000003]}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000000c0)={0x0, 0xc0, 0x180, &(0x7f0000000300)=[0x3, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x8, 0x10000, 0x466c, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x7, 0x3, 0x5, 0x2, 0x1, 0x9, 0x8, 0xc1, 0x1, 0x2, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0x100000002, 0x9, 0x6, 0x5, 0x7, 0x4, 0x3, 0x9, 0x10000008892, 0x1, 0x8000000006, 0x43, 0x0, 0x3, 0x85, 0x7, 0x8, 0x5, 0x6, 0x6, 0xffffffffffffffb7, 0x2, 0x2, 0xfffffffffffffffe, 0x5, 0x4, 0xe6, 0x200000000000101, 0x5, 0xd, 0x66, 0x6, 0x7, 0x1, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0x0, 0xfffffffffffffff6, 0xfffffffffffffc00, 0x2, 0x7, 0xbc6, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x0, 0xfff, 0x2, 0x2004, 0x2, 0x1, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0x102, 0x80000000006, 0x28000000, 0xed, 0x8061d, 0xfffffffffffffffd, 0x7, 0x2, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x7fffffffffffffff, 0x1, 0x65ec, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0x40000000000005, 0x8, 0x100000000000001, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb68e, 0x0, 0xc, 0x1000003]}) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000380), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r4, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fsopen(&(0x7f0000000700)='cgroup2\x00', 0x1) (async) r6 = fsopen(&(0x7f0000000700)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup=r7, 0x10, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r10, r8, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r9}}, 0x1c) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r11, 0x107, 0x15, 0x0, &(0x7f0000000900)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004151) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004151) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 945.190043ms ago: executing program 5 (id=161): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4002085) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x68, {0x2, 0x4e20, @local}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004151) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x50, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 939.039094ms ago: executing program 33 (id=161): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4002085) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x68, {0x2, 0x4e20, @local}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004151) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x50, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 872.495291ms ago: executing program 3 (id=163): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000440)="$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") syz_mount_image$exfat(0x0, &(0x7f00000009c0)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000a00)) mount$overlay(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x8, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) r1 = io_uring_setup(0x1690, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x2d520c}], 0x100000000000011a) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x68c01, 0x0) write$binfmt_format(r2, 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000100)=""/189, 0xbd) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 735.566075ms ago: executing program 3 (id=164): getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000500)) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, r0, &(0x7f0000000540)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0xa10000, &(0x7f0000000600)={[{@init_itable_val={'init_itable', 0x3d, 0x32}}, {@inode_readahead_blks}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000d00)='./file0\x00') chmod(&(0x7f0000000d40)='./file1\x00', 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000001240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) connect$inet(r3, &(0x7f0000001280)={0x2, 0x4e20, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r5 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r5, 0x1000) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x80}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f00000004c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, 0x0, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000d80), 0x0, 0x40) write$P9_RSTAT(r8, &(0x7f0000000dc0)={0x52, 0x7d, 0x1, {0x0, 0x4b, 0x3, 0x1, {0x4, 0x1, 0x2}, 0x11000000, 0x73a3, 0x3, 0x3, 0x6, '&\\-,.(', 0x8, 'overlay\x00', 0x5, 'ext4\x00', 0x5, 'ext4\x00'}}, 0x52) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x2000420}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x2e, 0x0, 0x0, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x0, 0x1, 0x25, 0x4}}, @txtime={{0x0, 0x1, 0x3d, 0x7}}, @timestamping={{0x0, 0x1, 0x25, 0xffffff82}}, @timestamping={{0xfffffffffffffddc, 0x1, 0x25, 0x205fe}}], 0x18}}], 0x1, 0x0) 636.881305ms ago: executing program 4 (id=165): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000003c0)=0x80) clock_gettime(0x0, &(0x7f0000003e00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003cc0)=[{{&(0x7f00000008c0)=@alg, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/27, 0x1b}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000b00)=""/56, 0x38}, {&(0x7f0000000b40)=""/80, 0x50}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/7, 0x7}, {&(0x7f0000000c40)=""/179, 0xb3}, {&(0x7f0000000d00)=""/106, 0x6a}, {&(0x7f00000035c0)=""/102, 0x66}], 0xa, &(0x7f0000000ec0)=""/133, 0x85}, 0xe00}, {{0x0, 0x0, &(0x7f0000002180), 0x0, &(0x7f0000002200)=""/250, 0xfa}, 0x8}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/230, 0xe6}, {&(0x7f0000003400)=""/223, 0xdf}, {&(0x7f0000003500)=""/96, 0xff99}, {&(0x7f0000003580)=""/27, 0x1b}, {&(0x7f0000003ec0)=""/255, 0xff}], 0x6, &(0x7f0000003740)}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003780)=""/162, 0xa2}, {&(0x7f0000000400)}, {&(0x7f0000003880)=""/19, 0x13}], 0x3, &(0x7f0000003900)=""/105, 0x69}, 0x6}, {{&(0x7f0000003980)=@nfc_llcp, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/36, 0x24}, {&(0x7f0000003a40)=""/80, 0x50}, {&(0x7f0000003ac0)=""/195, 0xc3}], 0x3, &(0x7f0000003c00)=""/189, 0xbd}, 0x5bb2}], 0x5, 0x20, &(0x7f0000003e40)={r1, r2+10000000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000000c0)=0x7, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x401c2, 0x0) ftruncate(r8, 0x8800000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x2000, 0x1e1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fstat(r9, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000480), &(0x7f0000000600)=0x30) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaa2aaaaaaaab19e34d5000008004f00005000000000000690780a010101ac1e0101890bd1ac1414aa640101024414050300000000000000002d9aa70e0400000000e0ffff0786060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@x86={0x9, 0x0, 0x81, 0x0, 0x7ff, 0x9, 0x4, 0x9, 0x90, 0x8, 0xc9, 0xd6, 0x0, 0xb2e, 0x2, 0x8, 0x9, 0x5, 0x2, '\x00', 0x8, 0x100000000}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x1, 0x0, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x6000, 0xc, 0x2, 0x0, 0x0, 0x10, 0x0, 0x7, 0x7, 0x0, 0x1}, {0xe000, 0x1000, 0xa, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x8, 0x6, 0xfc}, {0xeeee8000, 0xffff1000, 0x9, 0x75, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0x100000, 0x3000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0xa, 0x2, 0x0, 0x4}, {0x2, 0x9000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, [0x8b3b, 0x0, 0x1, 0x40]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000069111600000000008510000002000000870000000000000095000300000000009500a50500000000"], &(0x7f0000000780)='GPL\x00', 0x5, 0x29e, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000003e80)=ANY=[@ANYRES32=r3, @ANYRESOCT=r11, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a0cb7c0}, 0x94) getpid() 407.178018ms ago: executing program 4 (id=166): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 390.61897ms ago: executing program 3 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000002440)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r1, 0x54a6) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newroute={0x100, 0x18, 0x1, 0x0, 0x1, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x3, 0xc8}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0xffffffffffff0000}}, @RTA_METRICS={0xb5, 0x8, 0x0, 0x1, "a8c54ab637812ed26674321447d225ef23c55b340e3df0693cdff27ef3c8e4626cd7a505969cef88abc068991cd85424789b563b6226f8c9b261d98dfd0d229b608463cdbfa77150846ab909aaba5a87ccd94e4158b0a6818b70a82ad7acc449130987d76b44837ebfb0685abedfbbc08e938178227156215dbf09c7bd419431e96560f5fd10a9a1386154520d7c42099798ac4634d8e7cb608e89997a1ff170b94d01e91aeb767a067dcabef34bd2e571"}, @RTA_PREF={0x5, 0x14, 0x6}, @RTA_EXPIRES={0x8, 0x17, 0x202}, @RTA_PRIORITY={0x8, 0x6, 0x7fff}]}, 0x100}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%ps \x00'}, 0x20) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000002300)={0x1d, r7}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000002400)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)=@bridge_newneigh={0x74, 0x1c, 0x100, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, r7, 0x80, 0x40, 0x1}, [@NDA_PROBES={0x8, 0x4, 0xc}, @NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_SRC_VNI={0x8, 0xb, 0x2}, @NDA_VNI={0x8, 0x7, 0x2}, @NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_CACHEINFO={0x14, 0x3, {0x61d9, 0x0, 0xd, 0x2}}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x840) (async) r8 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x78, 0x13, 0x53b, 0x0, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_sample={0x60, 0x8, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x3350, 0x5, 0x9, 0xa}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x401}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10048c81}, 0x60004) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r4, r3}, 0x4) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$usbfs(&(0x7f00000024c0), 0x1ff, 0x2) r11 = dup(r10) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r9}, 0xc) (async) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000002544,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303130363135312c756d61736b3d30303030303030303030303030303030303030303336302c6e616d65636173653d312c756d61736b3d30303030303030303030303030303030303030303136352c6572726f72733d636f6e74696e75652c75056964", @ANYRESHEX=0x0, @ANYBLOB=',discard,dmask=00000000000000000000007,utf8,\x00'], 0x1, 0x1535, &(0x7f0000000d80)="$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") r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r12, 0x4068aea3, &(0x7f0000000200)={0xdf, 0x0, 0x81000}) (async) openat(0xffffffffffffff9c, &(0x7f00000022c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x42, 0xa1) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x0, 0x6, 0x2, {0x0, 0x0, 0x7fff, 0x4, 0x2, 0x80000000}, {0xff, 0x1, 0x1, 0x7, 0x1, 0x8}, 0x9, 0x2, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 336.944806ms ago: executing program 34 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000002440)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r1, 0x54a6) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newroute={0x100, 0x18, 0x1, 0x0, 0x1, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x3, 0xc8}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0xffffffffffff0000}}, @RTA_METRICS={0xb5, 0x8, 0x0, 0x1, "a8c54ab637812ed26674321447d225ef23c55b340e3df0693cdff27ef3c8e4626cd7a505969cef88abc068991cd85424789b563b6226f8c9b261d98dfd0d229b608463cdbfa77150846ab909aaba5a87ccd94e4158b0a6818b70a82ad7acc449130987d76b44837ebfb0685abedfbbc08e938178227156215dbf09c7bd419431e96560f5fd10a9a1386154520d7c42099798ac4634d8e7cb608e89997a1ff170b94d01e91aeb767a067dcabef34bd2e571"}, @RTA_PREF={0x5, 0x14, 0x6}, @RTA_EXPIRES={0x8, 0x17, 0x202}, @RTA_PRIORITY={0x8, 0x6, 0x7fff}]}, 0x100}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%ps \x00'}, 0x20) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000002300)={0x1d, r7}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000002400)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)=@bridge_newneigh={0x74, 0x1c, 0x100, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, r7, 0x80, 0x40, 0x1}, [@NDA_PROBES={0x8, 0x4, 0xc}, @NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_SRC_VNI={0x8, 0xb, 0x2}, @NDA_VNI={0x8, 0x7, 0x2}, @NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_CACHEINFO={0x14, 0x3, {0x61d9, 0x0, 0xd, 0x2}}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x840) (async) r8 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x78, 0x13, 0x53b, 0x0, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_sample={0x60, 0x8, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x3350, 0x5, 0x9, 0xa}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x401}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10048c81}, 0x60004) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r4, r3}, 0x4) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$usbfs(&(0x7f00000024c0), 0x1ff, 0x2) r11 = dup(r10) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r9}, 0xc) (async) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000002544,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303130363135312c756d61736b3d30303030303030303030303030303030303030303336302c6e616d65636173653d312c756d61736b3d30303030303030303030303030303030303030303136352c6572726f72733d636f6e74696e75652c75056964", @ANYRESHEX=0x0, @ANYBLOB=',discard,dmask=00000000000000000000007,utf8,\x00'], 0x1, 0x1535, &(0x7f0000000d80)="$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") r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r12, 0x4068aea3, &(0x7f0000000200)={0xdf, 0x0, 0x81000}) (async) openat(0xffffffffffffff9c, &(0x7f00000022c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x42, 0xa1) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x0, 0x6, 0x2, {0x0, 0x0, 0x7fff, 0x4, 0x2, 0x80000000}, {0xff, 0x1, 0x1, 0x7, 0x1, 0x8}, 0x9, 0x2, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 334.376736ms ago: executing program 4 (id=169): syz_mount_image$f2fs(&(0x7f00000005c0), &(0x7f0000000600)='./bus\x00', 0x1014004, &(0x7f0000006100)={[{@discard_unit_segment}, {@fsync_mode_posix}, {@resuid={'resuid', 0x3d, 0xee00}}, {@disable_roll_forward}, {@alloc_mode_reuse}, {@flush_merge}, {@acl}, {@nogc_merge}, {@checkpoint_diasble}, {@noacl}, {@atgc}, {@gc_merge}, {@nolazytime}, {@noextent_cache}, {@io_bits={'io_bits', 0x3d, 0xab}}]}, 0x0, 0x5543, &(0x7f0000000740)="$eJzs3M2LG2UYAPAn2W67/bAu4sFbB4qwC01oth/orWqLH7ilVD140mwyDWmTzLJJ09iTB4/iwf9EFDx59D8QPHj2Jh4Ub4KSmdna1RYsm0368fvB5Jn3nXeeed+wLPvMLBPAM2s1+eO3SpyMo2X7UkS+Xym3e50R8VJEnIqI6n1bpey/13E4Io5FxMlp8oilcsz00Jdnxqcv/PrO79/9eOTQ8a++/WkxKwYeBy9HRH+72L/TL2LWKeLNsr857uaxf35cxuJAb6U43s+K/jvpVp7hTnN3XDOP5zrF+Gz79nAab/SarWnsdG/k/duD4oLDcWc3T37CzeZO3m6nW3nsDrM8du4W153cLX633R2OijztMt8nefoYjXZj0Z9O0mI927fy2Brk523GpMibtdPJNI7LWF4uWlmvnc9jaz/f9OPt3e7g9iQZpzvDbjZILtQbr9QbF2uNnaydjtLztWa/ffF8stbpTYfVRmmzf6mTZZ1eWm9l/fVkrdNq1RqNZO1yutVtDpJGo36ufrZ2Yb3cO5O8efWDpNdO1qbx9e7g9qjbGyY3sp2kOGM92aife3U9Od1I3tu8lly7fuXK5rX3P7r84dXXNt9+oxz0n2klaxtnNzZqjbO1jcb6M7T+z8pJz3D9sC+VRxv+w0HNA+AJcn/9P/179oT6H5iD/dT//Vtl+4H1/871iIOv/2P/9X+k9+r/8oZGqP8f6/r3IfV/9RlfPyzMI9b/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8PX5e/vqtfGe1aB8v+58ru14o25WIqEbEXw+wFIf35Fwq8yw/ZPzyv+bwfSXyDNNrHCm3YxFxqdz+fP6gvwUAAAB4en3z6akvimq9+Fhd9ISYp+KmTfXExzPKtxIRy6u/zChbdfrx4oyS5T/fh2Iyo2z5DayVGSUrbrkdmlW2/2VpT1i5L1SKUJ3rdAAAgLnYWwnMtwoBAABgnj5f9ARYjErsPsrcfRac/+f9Pw8Ej+5pAQAAAE+gyqInAAAAABy4vP73/j8AAAB4uhXv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/ZuZ/bxIEoDsDPZr2w/7Qoyj2t5AZlpISUEFFAmqCAHKghDVADuaWECCLsEQHEIZLHthJ9n+RMxjI/3iA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJdeqlUVDzePbXO2u3byjAYAAAC4ZFOt5vU/06b/J93/l25dpX4REWVEXJq7j+LnSeYo5VQfzz8dP1+d1fAcUSfs32Ocrt8RcZuut/9dfwoAAADwfa0Xy1kzW2/+TIcuiD41izbl37tMeUVEVNPXTGnlPu86U9j++32+6tRCHTXJlVYvuf3IlfYp9c/9sGo3OWqKpikvvuxQZLaxAwAAPRqdNP3OQgAAAOjT/dAFMIwi4rArmrYCx02Ttvd+nfQAAACAL6gYugAAAACgc/X8v6fz/3bO/wMAAIBhNOf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KVNtZqvF8tZ25ztrp08owEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN7Zn3cUCIEwCIO96zuTuf9hpUFTU5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB487u//J+YGmeSudfG0vNIsnZqbJ0ae+fG0R/G168BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/XlIgBIIgCuaM/530/Q8rCXoGESKg4VFFLRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7od7/8n5gaZ5K508bS8UiydtXYumrsPWgcPRhv/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLnfl7jqOIAgH93Z2f7Q8UYJYeIKHjQi023tbU38aAED/4JQki3NXbjjzYHW4o0F2+Scy+iRxFBibf+Dz230Eu99ZBDBfG4MrMzydQubVrozMT9fODt+84wzPu+WQj5znsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGnng704yT7mJnG3OHfr/tXViFi/Pemj7DM3tu4sZi2LO7VmfSC8Vj3oLDSXCAAAALMjKev7iLibbi9nfXcur//T8pqs5v/xhUlc1vP/rfvLvqz9s/bH7/de2R1objJOdtNza6Ph8YdT6T27Wbbbi4+9opc/+fzdS5J/Id2PN1/eSfPn2fn+5s0P+3l4qI5sAYCncazsi6D8fSjrB00mBsDM6FUK77L+T+aazQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgDjub8VwZdyJisbcXZ27fv7o6rb+xdWexbKevX9+Ka3v3zG6RRsS5tdHweK2zaY9rU85dunzlwspoNLxYf/B6RDQ1+vvF9C98uo+LIxp5Pk8e/NOONNoWdIsvuy35HIygxh9MAADMhLRoWV1/N91ezs515iPGPz1Y/79ViWOf9f+9z07fqo5Vrf8Htc2w/ZY21r9aunT5yjtr6yvnh+eHX7x7YvDe4OSZU6fOLOXvSpZm+Y0JAAAAT2k8Ho93D/pFq9b/3fmH1/+PVuLYZ/3/9Q+Db6sDJ+r/qfYW/ZrOBAAAYLa99Mbff3WmnO/0+/HNysbGxcHkc/f4xOTz0Xc9/KzSfSKHilat/5P5prMCAAAA6rCz2Xlg/f9sJY7Hrv8n+fr/8z+/+mv1nklEHCnW/4+tfjk6W990Wq2OPydueo4AAAA060jRquv/ab7/v7u75aEbEW+/OYmLfwP4yPo/Lfb/Jx9990t1rOr+/5P1TbGVuguT55H3CxG9haYzAgAA4P/scNGyYv/PdHv589+OftK3/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgbv8GAAD//1ivP3A=") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005cc0)={0x11, 0x3, &(0x7f0000005d80)=ANY=[], &(0x7f0000005dc0)='GPL\x00', 0x2, 0xb2, &(0x7f0000005e00)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000005ec0)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000005f00)=0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) ptrace$setregs(0xd, r1, 0xeb7a74a, &(0x7f0000005f40)="0b9ee808878b13116339029c3f77538fb7538e08e4ac183eda9274e4703e33230564313145d9a250618bff907ae54672e0cf9d906dbec1ab2513aeb2d8c3817eb2bb37e62a34047966824d028617307d428a7c629c7256af587ea6d45ecfaa72efbf5fd99c3dfc6178a842e21503e597eadc240ba6b0da2c030365eb1e43400d50ee6b9dda84f29ec260d047e5c387e70122d7cf9d7e8b1e6baefcc73100abeb207670c51bda2ecf8edd1e692a59f8b28fa520cf05bfbd5fc5da1e5bb355c4") memfd_create(&(0x7f0000006000)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000006080)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) io_uring_register$IORING_REGISTER_QUERY(r0, 0x23, &(0x7f0000000540)=[{&(0x7f00000001c0)={0x0, &(0x7f0000000140)="f79e23fda4afce57d18c36ff0a05461da3ec4269e5e2b464231d721bb6901adb5a167091c39def308ca1a4524f89fdf9e547cddf3a4bd9a6485c6685761f6527cb4047f9476ba15263f2585cd15e3ba31ac72f2e544b8e9d24960396f0c397b8e898efa40dadff1eecde96cc8beb880b6e404c79c25b3084463504377b48de", 0x2, 0x7f}, &(0x7f0000000200)="80d76bd76bf9c390999f95b86f269e5f99c186cda126d4887af0f567d51c73eb61ea632507056f31c0f50795933185301b0db493f9d0a290b79efdee478972b03cd375e184eaf8f384d8813eb296629bb3", 0x1, 0x51}, {&(0x7f0000000440)={&(0x7f0000000340)={0x0, &(0x7f0000000280)="b7bc7d5fbdc7e9bd2428f25596fb3463ff15b17f42e6c28a1f07ba4d74571675ea9bc34d16ab988fbfe92dd9452fc6ad796dca9aa894277e19750043771f7dfd5b03c0c1064c91f4733e62a84e9bb6455ea9a3e87fbf9ed2d719dc6c32ec11528d5468c81d5d0aac061cae88eefd551b3f19510e3011e4f6b291199990a5ba927ac2bc45c5ef64b96214c97a3966b433ee451dc4", 0x1, 0x94}, &(0x7f0000000380)="33f9839247f1c43ac99d9732bb3f3758cb223c19ff6120467678a2c518a3dbff295fe307064ccba75cc4d17ce8df3b598cdc63932f91669fce8527ae6856042c44a6d916bf5d285418f5e160f7487742b624799f4ddc453f8174f37fc19a7e0cba6db2b119ce2a3260c2b40d02f927598a18d5fcce75b2603fede9b02a8aebef2319a19f4892d880b7222a60b8b15a4c44c2069efa89adb3e4ca1bd285f1c40ce8ea9b5e7ced", 0x0, 0xa6}, &(0x7f0000000480)="de79dedb129dad8c372af558e8ee0c7a3de7ea2557d8bbe229f013dc7958ea7af33ea95c8d14e46a46e91d8c8be9b986144caceba105e996ebde44301be93dcf3406dcf98a9d46dfe5d9b7e0a5f4d43e6ee0ebcb2a52231fd1be681dca703c1391ac741333cf6bed3920a14e14b697e30b789fc56aa8ba51c4129fd2490100bcbea32e57b4", 0x1, 0x85}], 0x0) readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000040)=""/155, 0x9b) 224.831787ms ago: executing program 0 (id=170): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x0, 0x2, 0x4, 0x2, 0x3}}) r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3000001, &(0x7f0000000800)={[{@nobarrier}]}, 0x4, 0x521, &(0x7f0000001200)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r4], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000300), 0x0}, 0x20) renameat2(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000000000)=[0x21, 0x4]) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x0, 0x2, 0x4, 0x2, 0x3}}) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3000001, &(0x7f0000000800)={[{@nobarrier}]}, 0x4, 0x521, &(0x7f0000001200)="$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") (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="130000000800000008"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r4], 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000300), 0x0}, 0x20) (async) renameat2(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000000000)=[0x21, 0x4]) (async) 183.420822ms ago: executing program 2 (id=171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000140)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) syz_read_part_table(0x105c, &(0x7f00000006c0)="$eJzsz71xwkAUBOCVZMu6GTlxBYrcketwCSihD2I6IKIAOqEJMfqBEoDg+4Lbmb13N/PCS7VJhjqZ0p/6ufjYLqbdmmOb/FTl8WD8WqKbj5JrGfZ1/peqSlLfxy7dmqX5rLbqMP/a5Py7jrb5zt/xGTsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLu7BQAA//9yaQtA") ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000200)={0x0}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001a40)={0x0, &(0x7f0000001740)=[@nested_amd_inject_event={0x180, 0x38, {0x0, 0x46, 0x5, 0x1000, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x7fff}}, @nested_amd_vmload={0x182, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x4}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0x5022, 0x2, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc06, 0x3, 0x8000, 0xfff}}, @nested_load_code={0x12e, 0x51, {0x1, "450f23a166b8bf000f00d8460f01c30fc76f73450f0666b84f008ed03e260f38f19a1b02bd4e66450f38819d9700000066460f07460f73f400"}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xee47, 0xffffffffffffff40}}, @cpuid={0x64, 0x18, {0x4, 0x8}}, @nested_intel_msr_list_add={0x155, 0x30, {0x1, 0x0, 0x998, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x2, 0xfffffffffffffff9, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x25, 0x5, 0x8, 0x20}}, @wr_drn={0x68, 0x20, {0x0, 0x7}}, @nested_create_vm={0x12d, 0x18}], 0x2e1}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6b, 0x6, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xff, 0x8, 0x5, 0x0, 0xfffb, 0x9, 0x7a, 0x3, 0x2e, 0x5, '\x00', 0x1, 0xffffffffffffff7f}) pipe2$9p(&(0x7f0000001ac0)={0xffffffffffffffff}, 0x84800) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000001a80), 0x2000000, &(0x7f0000001b00)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\xee#H$+{$[-%\''}}, {@cache_loose}, {@version_u}, {@version_9p2000}, {@mmap}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x4c8}}, {@msize={'msize', 0x3d, 0x3}}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00000002c0)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x3) 470.651µs ago: executing program 2 (id=172): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000800), 0x68c01, 0x0) write$binfmt_format(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_genetlink_get_family_id$wireguard(&(0x7f0000000880), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000980)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b00)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="15000000080000000800"/20, @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00\x00\t\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x8, 0xf, 0x0, &(0x7f0000000e00)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r6], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r5, &(0x7f0000000ec0), 0x0}, 0x20) tgkill(r1, 0x0, 0x15) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x0, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000f40), 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) 0s ago: executing program 0 (id=173): io_setup(0x6894, &(0x7f0000000000)=0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) io_destroy(r0) io_getevents(r0, 0x139097a, 0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500)=0x6e, 0x80000) shutdown(r1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000400000000500"], 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000001c0)={0x0, &(0x7f00000005c0)=[@wrmsr={0x65, 0x20, {0x40000104}}], 0x20}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000600)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000640)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) clock_getres(0x2, &(0x7f0000000400)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0xfff, r2, 0x0, 0xa0028000}, 0x38) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000053000000ff0300000100000000000000", @ANYRES32=0x1, @ANYBLOB="00009412ad94feffffffffffffff0000f9ff5c9a32f87cb8f2fbd669564b9f78c15dc3ac00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000300)="0b4bce8f2ded350be9d2dfb14d892a02caa58a5cd4e6ddfbb0daa7", &(0x7f0000000340)=""/19, &(0x7f0000000380)="1e110c0d6e49fc2765ca8ca82850247baadc65baa593d61ad5585cdf81323cab9a7596b69c65b58c7b73e52a8c3c506f5f6f39df24c0353159c3087760801caec1732bad64cc51e7eca46015935ed19b52ebc1947d0850ca621eec318b", &(0x7f0000000400), 0x4, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={&(0x7f0000000240)="aabece", 0x0, 0x0, 0x0, 0x401, r7}, 0x38) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 22.882716][ T28] audit: type=1400 audit(1793344164.576:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.883941][ T278] cgroup: Unknown subsys name 'net' [ 22.906232][ T28] audit: type=1400 audit(1793344164.576:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.938645][ T28] audit: type=1400 audit(1793344164.606:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.938811][ T278] cgroup: Unknown subsys name 'devices' [ 23.055182][ T278] cgroup: Unknown subsys name 'hugetlb' [ 23.061186][ T278] cgroup: Unknown subsys name 'rlimit' [ 23.193048][ T28] audit: type=1400 audit(1793344164.886:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.221327][ T28] audit: type=1400 audit(1793344164.896:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.224549][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.250894][ T28] audit: type=1400 audit(1793344164.896:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.289397][ T28] audit: type=1400 audit(1793344164.966:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 23.318972][ T28] audit: type=1400 audit(1793344164.966:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.354574][ T28] audit: type=1400 audit(1793344165.056:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.355173][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.387069][ T28] audit: type=1400 audit(1793344165.056:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.311381][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.320185][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.329766][ T288] device bridge_slave_0 entered promiscuous mode [ 24.340799][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.350167][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.358738][ T288] device bridge_slave_1 entered promiscuous mode [ 24.411572][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.419877][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.428616][ T286] device bridge_slave_0 entered promiscuous mode [ 24.436612][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.444918][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.452965][ T286] device bridge_slave_1 entered promiscuous mode [ 24.493911][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.502620][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.512440][ T287] device bridge_slave_0 entered promiscuous mode [ 24.527751][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.536232][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.543691][ T290] device bridge_slave_0 entered promiscuous mode [ 24.554504][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.562003][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.569998][ T287] device bridge_slave_1 entered promiscuous mode [ 24.584168][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.593487][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.602021][ T290] device bridge_slave_1 entered promiscuous mode [ 24.724878][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.733421][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.741289][ T289] device bridge_slave_0 entered promiscuous mode [ 24.749602][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.757348][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.765299][ T289] device bridge_slave_1 entered promiscuous mode [ 24.852676][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.860232][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.868679][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.876358][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.912733][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.920666][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.928619][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.935950][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.953280][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.961217][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.970273][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.978780][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.997060][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.007766][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.017367][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.025270][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.048658][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.056965][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.066407][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.074708][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.110028][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.119863][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.129773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.140655][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.149115][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.158543][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.167139][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.175722][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.184894][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.193651][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.202671][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.217956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.228586][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.238502][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.246460][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.256520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.266283][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.276584][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.287262][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.297144][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.329175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.339458][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.348033][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.358349][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.371800][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.378987][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.387550][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.400669][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.409130][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.418564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.427805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.437977][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.448786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.461619][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.471116][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.479913][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.490168][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.499390][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.507929][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.517762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.528177][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.538082][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.548159][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.575657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.585083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.595497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.605520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.616026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.629435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.639256][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.648804][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.658350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.668610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.678866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.688344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.702074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.713701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.728278][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.738978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.748095][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.761439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.777175][ T287] device veth0_vlan entered promiscuous mode [ 25.788410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.799929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.809815][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.817643][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.828250][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.838760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.849810][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.857836][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.866333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.875744][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.885551][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.893571][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.915941][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.926285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.935324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.944066][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.956561][ T287] device veth1_macvtap entered promiscuous mode [ 25.968004][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.979768][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.990284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.019051][ T286] device veth0_vlan entered promiscuous mode [ 26.026855][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.036060][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.047482][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.057154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.067718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.078796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.088765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.101100][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.113312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.123642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.133001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.144659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.154088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.163494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.172442][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.180892][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.197339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.207784][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.219118][ T289] device veth0_vlan entered promiscuous mode [ 26.231500][ T288] device veth0_vlan entered promiscuous mode [ 26.241084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.250817][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.264216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.273983][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.284508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.294684][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.312026][ T290] device veth0_vlan entered promiscuous mode [ 26.320624][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 26.328790][ T288] device veth1_macvtap entered promiscuous mode [ 26.344209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.355027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.367564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.381457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.392658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.406254][ T289] device veth1_macvtap entered promiscuous mode [ 26.417560][ T286] device veth1_macvtap entered promiscuous mode [ 26.441099][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.451466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.463687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.475301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.489098][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.503375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.515220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.525837][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.536102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.545827][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.554480][ T312] loop1: detected capacity change from 0 to 256 [ 26.570814][ T290] device veth1_macvtap entered promiscuous mode [ 26.588422][ T312] ======================================================= [ 26.588422][ T312] WARNING: The mand mount option has been deprecated and [ 26.588422][ T312] and is ignored by this kernel. Remove the mand [ 26.588422][ T312] option from the mount to silence this warning. [ 26.588422][ T312] ======================================================= [ 26.604129][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.642400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.659572][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.678159][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.691375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.702346][ T287] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 26.734945][ T287] FAT-fs (loop1): Filesystem has been set read-only [ 26.749505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.763557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.765022][ T287] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 26.783512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.788356][ T318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.803537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.834206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.846400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.920343][ T324] loop0: detected capacity change from 0 to 512 [ 26.934742][ T324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 26.945026][ T287] syz-executor (287) used greatest stack depth: 22208 bytes left [ 26.958879][ T333] loop4: detected capacity change from 0 to 512 [ 26.996968][ T332] loop3: detected capacity change from 0 to 512 [ 27.006761][ T324] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 27.018053][ T332] EXT4-fs: Ignoring removed i_version option [ 27.026478][ T324] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.100860][ T332] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 27.123003][ T332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.143370][ T332] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.298635][ T316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.565546][ T316] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.656893][ T43] device bridge_slave_1 left promiscuous mode [ 27.678534][ T316] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.697731][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.063144][ T316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 28.095332][ T316] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 28.104869][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 28.104881][ T28] audit: type=1400 audit(1793344169.806:144): avc: denied { read } for pid=343 comm="syz.4.9" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 28.137402][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.137509][ T28] audit: type=1400 audit(1793344169.806:145): avc: denied { open } for pid=343 comm="syz.4.9" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 28.150739][ T316] usb 3-1: config 0 descriptor?? [ 28.171167][ T28] audit: type=1400 audit(1793344169.806:146): avc: denied { ioctl } for pid=343 comm="syz.4.9" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 28.179228][ T43] device bridge_slave_0 left promiscuous mode [ 28.204740][ T28] audit: type=1400 audit(1793344169.816:147): avc: denied { map } for pid=323 comm="syz.0.1" path="socket:[16545]" dev="sockfs" ino=16545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 28.214130][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.254554][ T43] device veth1_macvtap left promiscuous mode [ 28.262791][ T28] audit: type=1400 audit(1793344169.956:148): avc: denied { prog_run } for pid=343 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.263005][ T43] device veth0_vlan left promiscuous mode [ 28.393230][ T344] netlink: 'syz.4.9': attribute type 28 has an invalid length. [ 28.401090][ T344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9'. [ 28.466960][ T332] syz.3.4 (332) used greatest stack depth: 22112 bytes left [ 28.477298][ T28] audit: type=1400 audit(1793344170.176:149): avc: denied { create } for pid=317 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.502033][ T288] EXT4-fs (loop0): unmounting filesystem. [ 28.519448][ T28] audit: type=1400 audit(1793344170.206:150): avc: denied { remove_name } for pid=286 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.538891][ T354] loop0: detected capacity change from 0 to 256 [ 28.548371][ T286] EXT4-fs (loop3): unmounting filesystem. [ 28.564060][ T320] î [ 28.566663][ T28] audit: type=1400 audit(1793344170.206:151): avc: denied { rmdir } for pid=286 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.598221][ T354] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 28.627452][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.636046][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.644723][ T345] device bridge_slave_0 entered promiscuous mode [ 28.650618][ T363] process 'syz.4.13' launched './file1' with NULL argv: empty string added [ 28.652240][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.669024][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.677076][ T345] device bridge_slave_1 entered promiscuous mode [ 28.722637][ T316] usbhid 3-1:0.0: can't add hid device: -71 [ 28.739618][ T316] usbhid: probe of 3-1:0.0 failed with error -71 [ 28.740724][ T28] audit: type=1400 audit(1793344170.216:152): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.760323][ T316] usb 3-1: USB disconnect, device number 2 [ 28.792839][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.800912][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.808401][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.816715][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.827538][ T28] audit: type=1400 audit(1793344170.216:153): avc: denied { unlink } for pid=286 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 28.856018][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.871161][ T370] loop3: detected capacity change from 0 to 1024 [ 28.873641][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.908218][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.952153][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.972799][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.983890][ T321] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 29.030669][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.049310][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.060927][ T363] loop4: detected capacity change from 0 to 256 [ 29.061984][ T374] loop3: detected capacity change from 0 to 256 [ 29.069218][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.101509][ T363] exfat: Deprecated parameter 'utf8' [ 29.116356][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.129024][ T363] exfat: Deprecated parameter 'utf8' [ 29.141594][ T345] device veth0_vlan entered promiscuous mode [ 29.149081][ T363] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 29.164931][ T345] device veth1_macvtap entered promiscuous mode [ 29.174517][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.193545][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.207276][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 29.223496][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.315786][ T386] loop4: detected capacity change from 0 to 512 [ 29.332117][ T386] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.346822][ T386] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.381654][ T386] EXT4-fs (loop4): 1 truncate cleaned up [ 29.387724][ T386] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.420596][ T386] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.16: iget: bad extended attribute block 4294967040 [ 29.434412][ T386] EXT4-fs (loop4): Remounting filesystem read-only [ 29.490044][ T290] EXT4-fs (loop4): unmounting filesystem. [ 29.543226][ T348] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 29.694726][ T399] netlink: 'syz.0.20': attribute type 28 has an invalid length. [ 29.704537][ T399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 29.817051][ T348] usb 6-1: Using ep0 maxpacket: 8 [ 29.828632][ T348] usb 6-1: config index 0 descriptor too short (expected 36, got 10) [ 29.838938][ T348] usb 6-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 29.849551][ T348] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 29.857844][ T348] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 29.875835][ T348] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 29.897634][ T348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.914894][ T348] usb 6-1: Product: syz [ 29.923776][ T348] usb 6-1: Manufacturer: syz [ 29.935165][ T348] usb 6-1: SerialNumber: syz [ 29.946311][ T348] usb 6-1: config 0 descriptor?? [ 30.161492][ T379] usb 6-1: USB disconnect, device number 2 [ 30.208444][ T403] loop0: detected capacity change from 0 to 131072 [ 30.222841][ T403] F2FS-fs (loop0): invalid crc value [ 30.248104][ T403] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.285425][ T403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 30.764946][ T434] netlink: 'syz.2.32': attribute type 28 has an invalid length. [ 30.793253][ T434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'. [ 30.859350][ T423] F2FS-fs (loop4): invalid crc value [ 30.889357][ T423] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.983201][ T423] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 31.019803][ T423] syz.4.28: attempt to access beyond end of device [ 31.019803][ T423] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.064983][ T435] loop5: p1 p3 < > [ 31.152219][ T466] netlink: 80 bytes leftover after parsing attributes in process `syz.5.33'. [ 31.163342][ T466] netlink: 41 bytes leftover after parsing attributes in process `syz.5.33'. [ 31.490884][ T480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.44'. [ 31.602490][ T489] netlink: 'syz.2.47': attribute type 28 has an invalid length. [ 31.612619][ T489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'. [ 31.823160][ T348] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.862657][ T497] set_capacity_and_notify: 3 callbacks suppressed [ 31.862676][ T497] loop3: detected capacity change from 0 to 512 [ 31.910965][ T497] EXT4-fs: Ignoring removed oldalloc option [ 31.933628][ T497] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 31.944335][ T497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 31.957992][ T497] EXT4-fs (loop3): orphan cleanup on readonly fs [ 31.966354][ T497] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.50: bad orphan inode 267 [ 31.976714][ T497] EXT4-fs (loop3): Remounting filesystem read-only [ 31.983697][ T497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.043133][ T348] usb 5-1: Using ep0 maxpacket: 16 [ 32.054039][ T348] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.083155][ T348] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 32.093813][ T348] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 32.107362][ T348] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.119085][ T503] loop0: detected capacity change from 0 to 40427 [ 32.133990][ T348] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.143082][ T503] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 32.153597][ T348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 32.159857][ T503] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.174858][ T503] F2FS-fs (loop0): invalid crc value [ 32.176911][ T348] usb 5-1: SerialNumber: syz [ 32.189465][ T503] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.198013][ T478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 32.219889][ T478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 32.233767][ T348] hub 5-1:1.0: bad descriptor, ignoring hub [ 32.241168][ T348] hub: probe of 5-1:1.0 failed with error -5 [ 32.250992][ T503] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 32.258476][ T503] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.287080][ T286] EXT4-fs (loop3): unmounting filesystem. [ 32.312689][ T509] loop3: detected capacity change from 0 to 2048 [ 32.335411][ T509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.443989][ T478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 32.456904][ T516] netlink: 48 bytes leftover after parsing attributes in process `syz.5.53'. [ 32.464433][ T448] kworker/u4:4: attempt to access beyond end of device [ 32.464433][ T448] loop0: rw=1, sector=77824, nr_sectors = 2128 limit=40427 [ 32.468801][ T478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 32.487974][ T448] kworker/u4:4: attempt to access beyond end of device [ 32.487974][ T448] loop0: rw=1, sector=79952, nr_sectors = 1968 limit=40427 [ 32.518633][ T448] kworker/u4:4: attempt to access beyond end of device [ 32.518633][ T448] loop0: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 32.537955][ T448] kworker/u4:4: attempt to access beyond end of device [ 32.537955][ T448] loop0: rw=1, sector=57344, nr_sectors = 2168 limit=40427 [ 32.556074][ T448] kworker/u4:4: attempt to access beyond end of device [ 32.556074][ T448] loop0: rw=1, sector=59512, nr_sectors = 1176 limit=40427 [ 32.654374][ T520] loop0: detected capacity change from 0 to 4096 [ 32.666936][ T520] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.678382][ T520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.734830][ T288] EXT4-fs (loop0): unmounting filesystem. [ 32.910363][ T529] loop0: detected capacity change from 0 to 40427 [ 32.921480][ T348] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 33.005520][ T539] netlink: 'syz.0.58': attribute type 28 has an invalid length. [ 33.016774][ T539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.58'. [ 33.156522][ T286] EXT4-fs (loop3): unmounting filesystem. [ 33.172667][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 33.172680][ T28] audit: type=1400 audit(1793344174.866:247): avc: denied { mount } for pid=561 comm="syz.3.62" name="/" dev="ramfs" ino=17083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.233916][ C0] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 68! [ 33.291473][ T568] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3425896386 (6851792772 ns) > initial count (3024884844 ns). Using initial count to start timer. [ 33.497361][ T348] usb 5-1: USB disconnect, device number 2 [ 33.505467][ T348] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 33.517547][ T568] syz.3.64 (568) used greatest stack depth: 20648 bytes left [ 33.569537][ T28] audit: type=1400 audit(1793344175.266:248): avc: denied { bind } for pid=578 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.657878][ T592] device syzkaller0 entered promiscuous mode [ 33.663201][ T379] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 33.751285][ T594] netlink: 'syz.3.69': attribute type 28 has an invalid length. [ 33.759252][ T594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.69'. [ 33.785846][ T598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 33.805264][ T600] loop3: detected capacity change from 0 to 256 [ 33.812042][ T600] FAT-fs (loop3): Unrecognized mount option "shortname=w" or missing value [ 33.822775][ T28] audit: type=1326 audit(1793344175.526:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=599 comm="syz.3.72" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade039f559 code=0x7ffc0000 [ 33.847936][ T28] audit: type=1326 audit(1793344175.526:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=599 comm="syz.3.72" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade039f559 code=0x7ffc0000 [ 33.848025][ T379] usb 6-1: device descriptor read/64, error -71 [ 33.873990][ T28] audit: type=1326 audit(1793344175.526:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=599 comm="syz.3.72" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade039f559 code=0x7ffc0000 [ 33.906722][ T28] audit: type=1326 audit(1793344175.526:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=599 comm="syz.3.72" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade039f559 code=0x7ffc0000 [ 33.932551][ T28] audit: type=1326 audit(1793344175.526:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=599 comm="syz.3.72" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fade039f559 code=0x7ffc0000 [ 33.957714][ T28] audit: type=1326 audit(1793344175.526:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=599 comm="syz.3.72" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade039f559 code=0x7ffc0000 [ 33.983416][ T28] audit: type=1326 audit(1793344175.526:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=599 comm="syz.3.72" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade039f559 code=0x7ffc0000 [ 34.013475][ T605] loop0: detected capacity change from 0 to 4096 [ 34.023725][ T28] audit: type=1326 audit(1793344175.526:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=599 comm="syz.3.72" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade039f559 code=0x7ffc0000 [ 34.067445][ T605] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.076833][ T614] IPv6: sit1: Disabled Multicast RS [ 34.093466][ T615] ip_tables: iptables: counters copy to user failed while replacing table [ 34.108666][ T605] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.111915][ T618] using random self ethernet address [ 34.132612][ T615] loop3: detected capacity change from 0 to 256 [ 34.142972][ T618] using random host ethernet address [ 34.160385][ T618] fuse: Bad value for 'fd' [ 34.183181][ T379] usb 6-1: device descriptor read/64, error -71 [ 34.749468][ T379] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 34.800197][ T627] 9pnet_fd: Insufficient options for proto=fd [ 34.955486][ T379] usb 6-1: device descriptor read/64, error -71 [ 35.368911][ T379] usb 6-1: device descriptor read/64, error -71 [ 35.566714][ T379] usb usb6-port1: attempt power cycle [ 35.903093][ C1] sched: RT throttling activated [ 36.047458][ T379] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 36.085937][ T379] usb 6-1: device descriptor read/8, error -71 [ 36.244433][ T379] usb 6-1: device descriptor read/8, error -71 [ 36.981276][ T288] EXT4-fs (loop0): unmounting filesystem. [ 36.988431][ T634] netlink: 'syz.5.81': attribute type 28 has an invalid length. [ 37.004440][ T634] netlink: 20 bytes leftover after parsing attributes in process `syz.5.81'. [ 37.038887][ T641] FAULT_INJECTION: forcing a failure. [ 37.038887][ T641] name failslab, interval 1, probability 0, space 0, times 1 [ 37.067451][ T641] CPU: 0 PID: 641 Comm: syz.0.84 Not tainted syzkaller #0 [ 37.076350][ T641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.088071][ T641] Call Trace: [ 37.091465][ T641] [ 37.095120][ T641] __dump_stack+0x21/0x24 [ 37.099688][ T641] dump_stack_lvl+0x110/0x170 [ 37.104595][ T641] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.109815][ T641] dump_stack+0x15/0x24 [ 37.114456][ T641] should_fail_ex+0x3bf/0x510 [ 37.119828][ T641] ? __kernfs_new_node+0xe1/0x670 [ 37.125434][ T641] __should_failslab+0xac/0xf0 [ 37.131034][ T641] should_failslab+0x9/0x20 [ 37.136651][ T641] kmem_cache_alloc+0x3b/0x320 [ 37.141738][ T641] __kernfs_new_node+0xe1/0x670 [ 37.146715][ T641] ? kernfs_new_node+0x260/0x260 [ 37.152742][ T641] ? snprintf+0xe5/0x140 [ 37.158212][ T641] kernfs_new_node+0x150/0x260 [ 37.163344][ T641] __kernfs_create_file+0x4e/0x270 [ 37.168643][ T641] cgroup_addrm_files+0x701/0xbb0 [ 37.174234][ T641] ? percpu_ref_init+0xce/0x340 [ 37.179483][ T641] ? cgroup_apply_control_enable+0x3dc/0xdd0 [ 37.187201][ T641] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 37.194863][ T641] ? delete_node+0x3df/0xa60 [ 37.200222][ T641] ? idr_replace+0x133/0x1a0 [ 37.206116][ T641] ? __cfi_idr_replace+0x10/0x10 [ 37.213966][ T641] ? _raw_spin_lock_bh+0x94/0xf0 [ 37.220345][ T641] css_populate_dir+0x13b/0x370 [ 37.226064][ T641] cgroup_apply_control_enable+0x5d5/0xdd0 [ 37.233376][ T641] cgroup_mkdir+0x12f6/0x1550 [ 37.240873][ T641] ? __cfi_cgroup_mkdir+0x10/0x10 [ 37.246535][ T641] ? _raw_spin_lock+0x94/0xf0 [ 37.251881][ T641] ? up_read+0x56/0x1d0 [ 37.258150][ T641] ? __cfi_cgroup_mkdir+0x10/0x10 [ 37.264546][ T641] kernfs_iop_mkdir+0x1b1/0x2b0 [ 37.270870][ T641] vfs_mkdir+0x39c/0x580 [ 37.277008][ T641] do_mkdirat+0x174/0x4d0 [ 37.282109][ T641] __x64_sys_mkdirat+0x89/0xa0 [ 37.287227][ T641] x64_sys_call+0x73d/0x9a0 [ 37.292471][ T641] do_syscall_64+0x4c/0xa0 [ 37.298180][ T641] ? clear_bhb_loop+0x30/0x80 [ 37.303141][ T641] ? clear_bhb_loop+0x30/0x80 [ 37.310477][ T641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.317714][ T641] RIP: 0033:0x7f82bd19f559 [ 37.323581][ T641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.347554][ T641] RSP: 002b:00007f82be055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 37.359143][ T641] RAX: ffffffffffffffda RBX: 00007f82bd425fa0 RCX: 00007f82bd19f559 [ 37.369126][ T641] RDX: 00000000000001ff RSI: 0000200000000180 RDI: ffffffffffffff9c [ 37.378353][ T641] RBP: 00007f82bd236b20 R08: 0000000000000000 R09: 0000000000000000 [ 37.387203][ T641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.395832][ T641] R13: 00007f82bd426038 R14: 00007f82bd425fa0 R15: 00007ffe0c4ece08 [ 37.405394][ T641] [ 37.409364][ T641] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 37.440642][ T649] Zero length message leads to an empty skb [ 37.460025][ T654] loop5: detected capacity change from 0 to 256 [ 37.467579][ T654] exfat: Deprecated parameter 'namecase' [ 37.523261][ T654] exfat: Deprecated parameter 'namecase' [ 37.535388][ T654] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 37.849765][ T656] loop0: detected capacity change from 0 to 131072 [ 37.871109][ T656] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 37.890641][ T656] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 37.891037][ T663] capability: warning: `syz.4.90' uses 32-bit capabilities (legacy support in use) [ 37.908669][ T656] F2FS-fs (loop0): invalid crc value [ 37.918942][ T668] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 37.928325][ T656] F2FS-fs (loop0): Mismatch valid blocks 4 vs. 5 [ 37.942265][ T656] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 37.944509][ T663] loop4: detected capacity change from 0 to 1024 [ 37.965800][ T379] kernel write not supported for file /input/event2 (pid: 379 comm: kworker/0:3) [ 37.981819][ T663] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 37.998137][ T663] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 38.018731][ T663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.203250][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 38.203287][ T28] audit: type=1326 audit(1793344179.796:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.90" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ba19f559 code=0x7ffc0000 [ 38.302596][ T28] audit: type=1326 audit(1793344179.796:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.90" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ba19f559 code=0x7ffc0000 [ 38.338664][ T28] audit: type=1326 audit(1793344179.796:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.90" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f18ba19f2c2 code=0x7ffc0000 [ 38.373412][ T687] netlink: 'syz.5.97': attribute type 28 has an invalid length. [ 38.376386][ T28] audit: type=1326 audit(1793344179.796:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.90" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f18ba19f357 code=0x7ffc0000 [ 38.394484][ T687] netlink: 20 bytes leftover after parsing attributes in process `syz.5.97'. [ 38.424099][ T28] audit: type=1326 audit(1793344179.796:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.90" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f18ba15c251 code=0x7ffc0000 [ 38.452487][ T28] audit: type=1326 audit(1793344179.796:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.90" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f18ba1a0349 code=0x7ffc0000 [ 38.481031][ T28] audit: type=1326 audit(1793344179.796:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.90" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f18ba15c2bb code=0x7ffc0000 [ 38.509638][ T652] netlink: 'syz.0.88': attribute type 16 has an invalid length. [ 38.513070][ T28] audit: type=1326 audit(1793344179.796:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.90" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ba19f559 code=0x7ffc0000 [ 38.520589][ T652] netlink: 'syz.0.88': attribute type 17 has an invalid length. [ 38.549743][ T28] audit: type=1326 audit(1793344179.796:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.90" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ba19f559 code=0x7ffc0000 [ 38.558101][ T652] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 38.584922][ T28] audit: type=1326 audit(1793344179.796:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.90" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f18ba15b9ac code=0x7ffc0000 [ 38.621107][ T690] input: syz0 as /devices/virtual/input/input4 [ 38.627591][ T652] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 38.638248][ T690] loop5: detected capacity change from 0 to 512 [ 38.647283][ T652] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 38.656880][ T652] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 38.703341][ T690] EXT4-fs (loop5): 1 orphan inode deleted [ 38.723692][ T448] EXT4-fs error (device loop5): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 1 [ 38.745089][ T690] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 38.757216][ T690] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.791214][ T656] loop0: detected capacity change from 0 to 40427 [ 38.802718][ T700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.101'. [ 38.826692][ T345] EXT4-fs (loop5): unmounting filesystem. [ 38.834020][ T656] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.977363][ T656] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 39.098118][ T716] syz.3.105 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.304130][ T290] EXT4-fs (loop4): unmounting filesystem. [ 39.318915][ T723] loop0: detected capacity change from 0 to 512 [ 39.324846][ T725] netlink: 'syz.4.108': attribute type 28 has an invalid length. [ 39.336794][ T725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.108'. [ 39.339074][ T723] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.360696][ T723] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 39.376200][ T723] EXT4-fs (loop0): 1 truncate cleaned up [ 39.382067][ T730] xt_hashlimit: size too large, truncated to 1048576 [ 39.382788][ T723] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.403402][ T348] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 39.425140][ T288] EXT4-fs (loop0): unmounting filesystem. [ 39.619104][ T348] usb 6-1: Using ep0 maxpacket: 32 [ 39.626567][ T348] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.638916][ T348] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.650979][ T348] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.665770][ T348] usb 6-1: config 1 interface 0 has no altsetting 0 [ 39.677958][ T348] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.689468][ T348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.700847][ T348] usb 6-1: Product: syz [ 39.705857][ T348] usb 6-1: Manufacturer: syz [ 39.711861][ T348] usb 6-1: SerialNumber: syz [ 39.781022][ T757] loop4: detected capacity change from 0 to 256 [ 39.797775][ T757] FAT-fs (loop4): Directory bread(block 64) failed [ 39.804705][ T757] FAT-fs (loop4): Directory bread(block 65) failed [ 39.816815][ T757] FAT-fs (loop4): Directory bread(block 66) failed [ 39.823786][ T757] FAT-fs (loop4): Directory bread(block 67) failed [ 39.830881][ T757] FAT-fs (loop4): Directory bread(block 68) failed [ 39.839325][ T757] FAT-fs (loop4): Directory bread(block 69) failed [ 39.849410][ T757] FAT-fs (loop4): Directory bread(block 70) failed [ 39.856480][ T757] FAT-fs (loop4): Directory bread(block 71) failed [ 39.865869][ T757] FAT-fs (loop4): Directory bread(block 72) failed [ 39.875943][ T757] FAT-fs (loop4): Directory bread(block 73) failed [ 39.894031][ T757] syz.4.121: attempt to access beyond end of device [ 39.894031][ T757] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 39.979398][ T348] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 40.022017][ T348] usb 6-1: USB disconnect, device number 7 [ 40.616027][ T788] loop5: detected capacity change from 0 to 256 [ 40.631104][ T788] exfat: Deprecated parameter 'namecase' [ 40.638862][ T788] exfat: Deprecated parameter 'namecase' [ 40.649059][ T788] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 40.757530][ T801] loop5: detected capacity change from 0 to 1024 [ 40.775833][ T801] EXT4-fs: Ignoring removed bh option [ 40.793217][ T801] EXT4-fs: Ignoring removed bh option [ 40.816397][ T801] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 40.939752][ T819] EXT4-fs error (device loop5): ext4_check_all_de:666: inode #12: block 7: comm syz.5.135: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 40.943743][ T790] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.962861][ T819] EXT4-fs (loop5): Remounting filesystem read-only [ 41.144443][ T833] loop3: detected capacity change from 0 to 16 [ 41.166163][ T833] erofs: (device loop3): mounted with root inode @ nid 36. [ 41.175533][ T790] usb 5-1: too many configurations: 222, using maximum allowed: 8 [ 41.188337][ T790] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 41.198827][ T790] usb 5-1: can't read configurations, error -61 [ 41.199860][ T833] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 41.220189][ T833] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 41.294530][ T845] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.345435][ T847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.358960][ T847] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.370803][ T790] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 41.500103][ T851] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.563513][ T790] usb 5-1: too many configurations: 222, using maximum allowed: 8 [ 41.579820][ T790] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 41.599057][ T790] usb 5-1: can't read configurations, error -61 [ 41.625116][ T790] usb usb5-port1: attempt power cycle [ 41.647690][ T345] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 41.694524][ T286] EXT4-fs (loop3): unmounting filesystem. [ 41.722449][ T345] EXT4-fs (loop5): Remounting filesystem read-only [ 41.783435][ T345] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 41.810820][ T860] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000400, checksum : 0x1119ac00) [ 41.825885][ T860] exFAT-fs (loop3): invalid boot region [ 41.832844][ T860] exFAT-fs (loop3): failed to recognize exfat type [ 41.833058][ T345] EXT4-fs (loop5): Remounting filesystem read-only [ 41.848685][ T345] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 41.874473][ T345] EXT4-fs (loop5): Remounting filesystem read-only [ 41.881380][ T345] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 41.897976][ T345] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 41.933406][ T345] EXT4-fs (loop5): Remounting filesystem read-only [ 41.958525][ T345] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 41.987023][ T345] EXT4-fs (loop5): Remounting filesystem read-only [ 41.995461][ T345] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 42.030151][ T345] EXT4-fs (loop5): Remounting filesystem read-only [ 42.052477][ T345] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 42.067751][ T790] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.082623][ T345] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 42.109843][ T790] usb 5-1: too many configurations: 222, using maximum allowed: 8 [ 42.119882][ T345] EXT4-fs (loop5): Remounting filesystem read-only [ 42.128342][ T790] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 42.128671][ T345] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 42.143164][ T790] usb 5-1: can't read configurations, error -61 [ 42.174648][ T345] EXT4-fs (loop5): Remounting filesystem read-only [ 42.183799][ T345] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 42.211332][ T345] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 42.228664][ T872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54036 sclass=netlink_route_socket pid=872 comm=syz.2.154 [ 42.229449][ T345] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 42.261087][ T345] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 42.284908][ T345] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 42.302482][ T345] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 42.317823][ T345] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 42.340832][ T790] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 42.364683][ T345] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 42.384279][ T345] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 43.190659][ T883] netlink: 224 bytes leftover after parsing attributes in process `syz.0.158'. [ 43.216662][ T883] netlink: 5 bytes leftover after parsing attributes in process `syz.0.158'. [ 43.273335][ T790] usb 5-1: too many configurations: 222, using maximum allowed: 8 [ 43.294539][ T790] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 43.302352][ T790] usb 5-1: can't read configurations, error -61 [ 43.309614][ T790] usb usb5-port1: unable to enumerate USB device [ 43.323618][ T28] kauditd_printk_skb: 304 callbacks suppressed [ 43.323632][ T28] audit: type=1400 audit(1793344185.026:731): avc: denied { mounton } for pid=884 comm="syz.0.159" path="/32/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.452456][ T28] audit: type=1400 audit(1793344185.146:732): avc: denied { getopt } for pid=886 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.507675][ T894] set_capacity_and_notify: 3 callbacks suppressed [ 43.507692][ T894] loop3: detected capacity change from 0 to 1024 [ 43.524722][ T894] EXT4-fs: Ignoring removed orlov option [ 43.537252][ T894] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.550693][ T894] EXT4-fs error (device loop3): __ext4_new_inode:1291: comm syz.3.163: failed to insert inode 12: doubly allocated? [ 43.561278][ T28] audit: type=1400 audit(1793344185.246:733): avc: denied { mounton } for pid=898 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.586854][ T894] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 43.586869][ T28] audit: type=1400 audit(1793344185.266:734): avc: denied { create } for pid=898 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.633866][ T286] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 43.636388][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.651329][ T898] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.652163][ T286] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 43.660819][ T898] device bridge_slave_0 entered promiscuous mode [ 43.670826][ T286] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 43.687629][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.697275][ T898] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.706787][ T286] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 43.709381][ T898] device bridge_slave_1 entered promiscuous mode [ 43.717221][ T286] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 43.736914][ T286] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 43.750361][ T28] audit: type=1400 audit(1793344185.446:735): avc: denied { setopt } for pid=902 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.764607][ T286] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 43.793273][ T286] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 43.808007][ T286] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 43.846918][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.854522][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.863240][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.872973][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.896357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.905175][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.913568][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.925257][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.935222][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.943070][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.953549][ T286] EXT4-fs (loop3): unmounting filesystem. [ 43.964288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.989386][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.998304][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.016442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.037956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.071779][ T898] device veth0_vlan entered promiscuous mode [ 44.085849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.096460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.114062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.133341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.147118][ T912] loop0: detected capacity change from 0 to 512 [ 44.164092][ T448] device bridge_slave_1 left promiscuous mode [ 44.176716][ T448] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.187489][ T912] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.199473][ T448] device bridge_slave_0 left promiscuous mode [ 44.207161][ T448] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.214240][ T912] EXT4-fs (loop0): 1 orphan inode deleted [ 44.223757][ T314] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 44.239798][ T448] device veth1_macvtap left promiscuous mode [ 44.249804][ T314] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 1 [ 44.263326][ T448] device veth0_vlan left promiscuous mode [ 44.283415][ T912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.331464][ T910] loop4: detected capacity change from 0 to 40427 [ 44.348654][ T910] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 44.359108][ T910] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 44.369064][ T910] ================================================================================ [ 44.379222][ T288] EXT4-fs (loop0): unmounting filesystem. [ 44.380462][ T910] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:955:5 [ 44.394041][ T910] shift exponent 121 is too large for 64-bit type 'unsigned long' [ 44.402937][ T910] CPU: 0 PID: 910 Comm: syz.4.169 Not tainted syzkaller #0 [ 44.410762][ T910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.422613][ T910] Call Trace: [ 44.426769][ T910] [ 44.429849][ T910] __dump_stack+0x21/0x24 [ 44.434418][ T910] dump_stack_lvl+0x110/0x170 [ 44.439902][ T910] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.444950][ T910] ? __kasan_slab_free+0x11/0x20 [ 44.449990][ T910] dump_stack+0x15/0x24 [ 44.455594][ T910] ubsan_epilogue+0xe/0x40 [ 44.461003][ T910] __ubsan_handle_shift_out_of_bounds+0x364/0x3f0 [ 44.468144][ T910] ? match_int+0x142/0x1a0 [ 44.472568][ T910] parse_options+0x4d05/0x4d30 [ 44.478659][ T910] ? mount_bdev+0x29b/0x3d0 [ 44.484138][ T910] ? f2fs_mount+0x34/0x40 [ 44.488844][ T910] ? legacy_get_tree+0xfe/0x1a0 [ 44.494341][ T910] ? default_options+0xce0/0xce0 [ 44.499904][ T910] ? kstrdup+0x56/0x80 [ 44.504280][ T910] ? memcpy+0x56/0x70 [ 44.508385][ T910] f2fs_fill_super+0x266c/0x7460 [ 44.513892][ T910] ? __cfi_f2fs_fill_super+0x10/0x10 [ 44.519663][ T910] ? mutex_unlock+0x8f/0x230 [ 44.524904][ T910] ? set_blocksize+0x1cc/0x470 [ 44.529967][ T910] ? sb_set_blocksize+0xaa/0xf0 [ 44.535521][ T910] ? __cfi_f2fs_fill_super+0x10/0x10 [ 44.541263][ T910] mount_bdev+0x29b/0x3d0 [ 44.545882][ T910] ? __cfi_f2fs_fill_super+0x10/0x10 [ 44.552134][ T910] f2fs_mount+0x34/0x40 [ 44.556286][ T910] legacy_get_tree+0xfe/0x1a0 [ 44.561546][ T910] ? __cfi_f2fs_mount+0x10/0x10 [ 44.567293][ T910] vfs_get_tree+0x9a/0x270 [ 44.572507][ T910] do_new_mount+0x251/0xb40 [ 44.577626][ T910] ? security_capable+0x99/0xc0 [ 44.583127][ T910] path_mount+0x640/0xfd0 [ 44.587936][ T910] __se_sys_mount+0x320/0x390 [ 44.593080][ T910] ? __x64_sys_mount+0xd0/0xd0 [ 44.598478][ T910] ? do_user_addr_fault+0x9a5/0x1030 [ 44.604419][ T910] __x64_sys_mount+0xbf/0xd0 [ 44.609830][ T910] x64_sys_call+0x65d/0x9a0 [ 44.614898][ T910] do_syscall_64+0x4c/0xa0 [ 44.620198][ T910] ? clear_bhb_loop+0x30/0x80 [ 44.625072][ T910] ? clear_bhb_loop+0x30/0x80 [ 44.630294][ T910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.637453][ T910] RIP: 0033:0x7f18ba1a07ca [ 44.642043][ T910] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.664603][ T910] RSP: 002b:00007f18bb074e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.673825][ T910] RAX: ffffffffffffffda RBX: 00007f18bb074ee0 RCX: 00007f18ba1a07ca [ 44.682430][ T910] RDX: 00002000000005c0 RSI: 0000200000000600 RDI: 00007f18bb074ea0 [ 44.690852][ T910] RBP: 00002000000005c0 R08: 00007f18bb074ee0 R09: 0000000001014004 [ 44.700515][ T910] R10: 0000000001014004 R11: 0000000000000246 R12: 0000200000000600 [ 44.711292][ T910] R13: 00007f18bb074ea0 R14: 0000000000005543 R15: 0000200000006100 [ 44.721621][ T910] [ 44.725507][ T910] ================================================================================ [ 44.749801][ T910] F2FS-fs (loop4): Not support 144115188075855872, larger than 256 [ 44.768185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.777624][ T898] device veth1_macvtap entered promiscuous mode [ 44.800541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.812231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.824335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.834822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.088380][ T28] audit: type=1400 audit(1793344186.766:736): avc: denied { mount } for pid=898 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.124506][ T28] audit: type=1400 audit(1793344186.796:737): avc: denied { mounton } for pid=898 comm="syz-executor" path="/root/syzkaller.HHvIVO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 45.165093][ T28] audit: type=1400 audit(1793344186.856:738): avc: denied { create } for pid=909 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.181964][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.196700][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.205990][ T913] device bridge_slave_0 entered promiscuous mode [ 45.213809][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.221808][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.231047][ T913] device bridge_slave_1 entered promiscuous mode [ 45.298894][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.307887][ T913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.317298][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.326321][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.358108][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.368120][ T929] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.379124][ T929] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.394380][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.405663][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.414090][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.424419][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.435252][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.442893][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.461498][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.472980][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.494727][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.505744][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.518522][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.527467][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.539272][ T913] device veth0_vlan entered promiscuous mode [ 45.550519][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.563952][ T913] device veth1_macvtap entered promiscuous mode [ 45.576434][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.587726][ T929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.884357][ T448] device bridge_slave_1 left promiscuous mode [ 45.894696][ T448] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.904857][ T448] device bridge_slave_0 left promiscuous mode [ 45.914027][ T448] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.922315][ T448] device veth1_macvtap left promiscuous mode [ 45.929039][ T448] device veth0_vlan left promiscuous mode