last executing test programs: 6.171429314s ago: executing program 2 (id=3443): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6(0xa, 0x1, 0x401) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4044, &(0x7f00000001c0)={0xa, 0x4e20, 0xc0a, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/185, 0x10}}], 0x1, 0x12040, 0x0) fsmount(r0, 0x1, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x2000000000000161, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x8452a000) 5.276447018s ago: executing program 2 (id=3444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x10008, 0x1, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) syz_usb_connect(0x0, 0x7d6, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x9, 0xbd, 0xc2, 0x8, 0x17dc, 0x202, 0x8add, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c4, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x3, [@uac_control], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}, @generic={0x1b, 0x0, "7fc6d9b85cbf7d143b9290e22dd20d9aa1ae135442873038b1"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x10, 0xa5, 0xdd, 0x2a, 0x0, [@hid_hid={0x9}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7f, 0x0, "2ec80771d2efea551ed5f5266df81394ff8ab79e92616977b64d67c237b0645e2fff487bf98a6d13c17181645e60721b8bef3605875766c9619fd1b27d8e42b36d557ba514a13518b1e56bedeb800b0cb099dccc37d0b17e9dc69bb3d796dbc377f2dbd39e1547765fd52f20bb1e7751a2df60d8ff3ae7ce688fd5f32f"}, @generic={0x40, 0x0, "25f6834f9374f8846629fccd8c2f12d7e4626e844a1fad1e9980c2c02986dd32e95f760878b307a934dc23dafa5444897d69e05028f4a4da498927990235"}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x76, 0x0, "d33501c36ca3f5700cdbc3a103864b88f0e2870e85309aed5931b79a3b3d735c8e026762d159da5c00985cd3d40bace232e46cf99334d251386ac139a3af7f155add521867a58070e090520a029afe9a60775edd9934659826585798b924d5aa62ea2d06f15b06c4013d6390dad6c08798c372f1"}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7, 0x0, 0x0, [@uac_iso={0x7}, @generic={0xe3, 0x0, "ec9bd15e9d87cfe2bb344ab1ab24a1224283597f4a09903886305241be77504ea0c83a4f52763480a5f2b5d36bca35a3f1a7c85f48649dac5908a295f294fd9cd80184afa4d58dbc7552115ab592ee90286814f4b87f965bedcd3bd941c4c24d86db9eeddca0c4e42e74b6468da385f3f5aecb04fe0d9d4ed48dfadb0dd3c03c3ad317291ec30e60f8eaba101b2a3e4038c0cbd51f3330c9ae3af7def84b24c5c8297ed0b0891fbab6fc4e7d06b23869aaeda2cc9952c57d7b4fa426c88b3a1fb6980bedeb490ccf7511013ee8e7fc95bb7d65679fc508f09021e2831e4b7b4c05"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xe8, 0x0, "7c036800cbfba95ed76f9e4a4b0a3de16f63333ee82ccf1270ff13881aa44ac624a14c1c2df84d2636d8a304f01163f1044bf7641b2ea69132c313b4d1bbaa3f26712076d355c839223e6d0d9d47b634fe1c162a2b9ee2f2602499da20f1127a7d114900a4f56430ea6b18632c735dcd495ae54fc44bf3221f2558a9e8e5ca426f86cdfd0339cb9f771b60217df27e22d3f212753984387814a43ca471dcfb6444d315a7503804004a7678ec6e9689bb7a0ec66c114f732573aec615d7227931756d6c0323919f22bd9a4439374ba4ee67fc57730d95cd0d2035e880e22be51d1ce5dbc3641b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x42, 0x0, "670ffdca832d53759612929f0a12f1c60c893d5a3fbc9dc62dedac34e2b8829a5a53fb34412cb5d09ae1198b03420a28175f8ad1841ef17a56dfed88e7963abe"}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x87, 0x0, "244aec00df9a422efae80ca62d278f47196d219edda84ab2fcf2c59bd17092ffe5aa6dfe0fdd92d26100826d8726bdc7c02b396ea61b6b6c38daf49fd4bfafab79e5ed287e913e102171693bc1401d6f9c775cc8a57a8e55ff732569045788fd3d463515dc2d41d539974702fbef8532417092b9b858be9a80f03c36dc9ad8c604ebc81ddb"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xb7, 0x0, "6d72c3a27ed9fc7eb92ee469cfd48110c3d55baa7162788c4b42cb56e80d1f3d15d0b0576b31740bab6889035951696f1ecfefc18ace5b5851bbd84dabfcb53156982d18de0ffb459eb64f4d8368d7e681da02bd8e4e362d14832e1cca65169af504d93c9a7eedc3e2c88cc013f20259a43888727714ac7c90678382cdf22d85d26920e8abd23f28855ad4b3d5eb5483f93a257cb7ea103a34ab348e305e5786195d0f4571e8c9827ba0ddbba89dd9306c3837856e"}, @generic={0x34, 0x0, "3b51ebf944821be48a5dc48870fe64bd4890f2557b3baccd4db13d2ee785dbf214b44ef93a6ebf3aab2ea4767aa46fac5859"}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x12, 0x0, "4c918b66c2e90a3c87fd71751340b490"}, @generic={0x51, 0x0, "162c49e03ee1e727330e3169133e50c6cdafd854edf5d7fb30e2aa1636cc67d20958d3bcf5e1599c531ee930af4f01ea27d38667b05b443a5a4edfef3c81a7a850638d550dac39dad9220428c5239c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb3}, @generic={0x59, 0x0, "63fbff75eed5cfa208c5d0484766975ba13d529deb19659db0169f59e4b2207f1f8b34afce81e00061c8637fcafce5b85aa46993516a374b54e3434261e1112dfce2ab54aac9b2e72ee8cc6d35309d845a65b1ca33a5a2"}]}}, {{0x9, 0x5, 0x0, 0x10}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x8, 0xe6, 0x15, 0x65, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "ec"}, {0x5, 0x24, 0x0, 0x9}, {0xd}, [@ncm={0x6}]}], [{}, {}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0xf8, 0x9, 0xb6, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xa5, 0x0, "5468ccd987b2faaba1336b3a424a3a459a94c7d94948edc262597f4b5ea459e34efe7731acedbcc2068b8b002536bc44b21060812efb5e32de928dd47a2eb51efdc8addd64ae371e0a135b270e3ff86e2110933674732f6697586feb0152e3dcc2d5e887500bbaac9d31a73185b1661479da8d9d312bed5918f8cc3f92ee6403c9135889da1ea9341d5e5cbd861091855b64db3cbe497719552a5d530911acf45a451f"}]}}]}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5.147527579s ago: executing program 1 (id=3445): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0x9, 0x43000000}, {0x2}, {}]}]}}, &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f00000003c0), 0x2, 0x4e6, &(0x7f0000000840)="$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") r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.858447593s ago: executing program 1 (id=3446): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e80)={0x1d48, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1d34, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x12, 0x6, 0x1, 0x0, "d24204903a8d27dabcd32d86e79c"}, @NFTA_SET_ELEM_USERDATA={0x97, 0x6, 0x1, 0x0, "eafa15a87184542754b27e693b7141501a49b2efe70fe122e37a720bf0071004458729164bd1d2062fa92e2520baaedd946c6333e77f2d2cd7d9e7355596ba619a315f0818791dc3790a06aa57a41bf11a8f3b60ab1e9db0c1219f8f65dbe471bd35f1fe1053ce92350b2527ab9613209fc7be1892a248d24a9de64e578b627fc2751287783dacc5bfdaf64eec2111160fa6a4"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x14c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8, 0x1, "c9d27915"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "d43d55ac50ac5a551a5b6fff2cbf85c8cd5b9c558aec19eb46dad6fe154310118d399126431fa21bc776aeac8fa75108e5a46f6d571cf39db4524623d98227a7794096a64a542779cf7adeadc8b305b453647dd3e47cda022f6bd00d8bff2c42f0cfd05caaff9e4dd7d86f81b4796290b8514529da6ea35b408a7978b0a7833c9c8e5f897f2b438f6863a5e97392930a5a8527ac078889a8c9794828e5ef4dce97121d0c5fd7a812953d2627b9f0343bc232d679e0c71c74936f2323ae0bfce30a1c6b4e914a97eb693d45c6b6814ae86d16886170b94138"}]}]}, {0x1b18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x6d8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x628, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x614, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "55a448640ad6da2aafc5dc287a9c"}]}, @NFTA_IMMEDIATE_DATA={0xd4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x67, 0x1, "c43a633bac4ebbd87ca0232c5d17042546046ead30c3cc8bbb2512e542187b063c463656f973f6d1705407819ea6d434116d4dbea85dc1eed188176360ae063e3d9e36bfbf9198a46152e26eab94cb36affc7414630cb2a726588b9ae7b84bcb313f55"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "cc77af8c377d8e1fd4cf9317adbb52fd7e01103d3872918c095778"}, @NFTA_DATA_VALUE={0x68, 0x1, "d6e78a79f39a3701900f8b59a911f3d71023581d9cccf3a2a0c3381cdcb8d296fb11fb85298d9476d75c9a19151298e702b41145f7dc19b5ddbb16c4515fa223cf3a3de3d5adb77e35dd0913b81173db3190375f997f8a137947f9e0e7b5d692299826e6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8, 0x1, "eb08c5f8"}]}, @NFTA_IMMEDIATE_DATA={0x3c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "94749a8ed32f9e39b468eb52d3288896a3eb298ce80a305c8f9e05c1c74e4c4a29ab8ce138c0e6fd17971d954c4a311c2bf2713b06ab9912478b7daebe76ad04a1338aae7953ce3c9c29233cfe116f73304d7539e8740329b472823e126e9fff479ae81bb9e12bc5ec34b197078fa73b84e083f8c1a90bc56ca2dae9776bb1a2ed21d4f2580a25e9df1a1109d1b2f2d1fac2628d5849e896f10757c1532104c4f033e06aac82e7aa4d7bebd316"}, @NFTA_DATA_VALUE={0xae, 0x1, "72f68a36765db78a158c5e8c4664af6efdae3c20f978c577ec12d7861b05524196201be7b748585d8b28f7bd5dface8470c0e900f0d5ce9c37a5daf896217aa7457090b63fd0f4d0dab1d6c237e059fb12f06f9b15dba24136e83455311e862577f1eb0540535f3213fd2b9bc630b3ec04e1ebfd2f00dff822fec3220ba6c885db278ffb4f016af7bb7e369dce59415a3e621491cc306358f55d4bad2b93c108594190008a8e99a8244d"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x73143ca8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8d9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffdba}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xca, 0x1, "76f24a31a8a0441f5cce6f344647715be647aead703f6687c029277abde9e8fe6ccc6e9fb2601652acabcc35caf856017a205e558e0ae7d5e1582dc839881b0f6c9706f14141b3707ce78add9f78f03006244d5406a2ba62075234b763a6a9564efe74e4f8419f2e50db88e0c9b4f27aec7b4dd5d1eccd2e493fd7e2ad3143ab6f9ea771e7113d2760d4381142536df374590bec7dd73579b389cf560c0e72fcedf84da877930fba3011001e2fc0641eb4ff252e562838244d60b54b98c2ac79d33d959b904b"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x77, 0x1, "d2452c0a8c1023deb39a3fe7aa99e6809868c9ad7cdf9675998cf3f189acf7ef925359a5aaa4fffb7072a63af3d5eed5856f66487435ae60ea7fa3f4bab8b358e8ccc7b4ed1250b48da2181bb389d86b45a1412eb90e56b7461272fe8863bc5ab6ed77411d706cc00bb8fb0f8be6fbb574f8c2"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd9ab}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_KEY={0x10d0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "2ab0c3ec238f412ccbfea03b0ac1e7d07404"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "2521be888ecb5307b9656b4ff26ebbdf9c737fb9b53db5b6fbd6e42a2c6a757172779186771f8f45"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x6c, 0x1, "fe34d222bb01cec4a71f8e3c7737c364f73be16c47523c3ee161809ac9f3ffe1e6c8035bc790ce717bd9ac0ec54e50428b83a7386a85bf7c6c94af2796efc1daec86e24bb83ac49cadfed5b9ce238529fcc79839777f04b4452e585bce55523fdb4855f8cd80ece4"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x118, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xb8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xa8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_MASK={0x84, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x34, 0x1, "ac8354fd093e3fb0d5df3022d5e4f7496f51581957e13ac3742f1c953382522cc66658c6f8a96ef2407cddb11b73318c"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d948"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "a6648438a176cf41bd8850a5631bc4a3d3a3a03583f4bf5caa"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x39, 0x1, "fa0f63e6b42956cbb9d68002b7a8ff362562750d215be87a5e15a5d650df915b6d22f07480b78203fa1a7d4936604b3d67f6d3b6c2"}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x83d}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "a86f7c7c0d924ece6eff7ac4531548ea713c2b8e81ff3aaf47c1c23c96d4bb7793f825e37b7ed9ec8cdc961576a065fafa7edf4e56b2b31fa126aae4919a195cde61afe1341bd4a33b8fd1e51719d565f58cfbf9a2729b167a34f02bf7ea467de779b0b6c206"}]}, @NFTA_SET_ELEM_KEY_END={0x98, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x66, 0x1, "cd58824342dd99df04c7fd154b4f60917ac93abc9020e6f531ccef2cea67abdf102d1b2f70c9422964df3d6ddb5a41d17e7eab433d556ad0038c83c439884c2e868358211e8de0de9c8be9dc8e6fef4abcaf4bf6da8319591d096a75ce90151656d0"}]}]}]}]}, 0x1d48}, 0x1, 0x0, 0x0, 0x8040}, 0x40480c4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x288, 0xf0, 0x5802, 0x294, 0x0, 0x294, 0x208, 0x378, 0x378, 0x208, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0xf0, 0x52020000}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYBLOB="82"]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRESDEC, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES64=0x0, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x90) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000e40)={0x73622a85, 0x1100, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000180), &(0x7f00000004c0)=r4}, 0x20) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 4.356457153s ago: executing program 3 (id=3447): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='btrfs_find_cluster\x00'}, 0xfffffffffffffe96) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="00000500"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 3.643493622s ago: executing program 4 (id=3449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x81ff, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 3.588544806s ago: executing program 4 (id=3450): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000085000000050000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.577838577s ago: executing program 4 (id=3451): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800004a93246e00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='h']) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000d40)=ANY=[@ANYBLOB='dmask=00000000000000000000001,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp949,iocharset=cp862,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c646973636172642c6572726f72733d636f6e74696e75652c009efc2fc3867ba7d6f0e030d94b28925c72f8443e739b65b5369d38d1fe638b7512f0c3bfdea6b14c64eb19be8d0eb1798ea448da65e107b884ef2b96a0a7c30961de8e809f78fa06ade5556980fa06147dd48a0119b94779243f215814e98c67459c6a1e5975945120653ec9d9f6359e4f75327ad5b1b11b1c3662be6f26f9eb8ed96665db514896577f90765e435972bc8c81b69db20d023955c6c8516150112f89120a87ddd270c807eefa2cf6f98b0bc7c836d3538e767115aa0765ac4c0054"], 0x5, 0x1510, &(0x7f00000037c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x61, &(0x7f0000000340)={&(0x7f0000000500)=@migrate={0x78, 0x21, 0x1, 0x70bd27, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2}}, [@address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x5, 0xa, 0x1, 0xe}}]}, 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "000200"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.30248096s ago: executing program 0 (id=3452): ptrace(0x10, 0x0) pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000280)='./bus\x00', 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000000240)={0x60000003}) epoll_wait(r5, &(0x7f0000000080), 0x0, 0x0) open(0x0, 0x141b42, 0x0) pipe(&(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.240133355s ago: executing program 2 (id=3453): ptrace(0x10, 0x0) pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x553b, &(0x7f000000ac00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000280)='./bus\x00', 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000000240)={0x60000003}) epoll_wait(r5, &(0x7f0000000080), 0x0, 0x0) open(0x0, 0x141b42, 0x0) pipe(&(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.231260906s ago: executing program 1 (id=3454): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='btrfs_find_cluster\x00', r0}, 0xfffffffffffffe96) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x80000004}, 0x0, &(0x7f00000003c0)={0x3ff}, 0x0, 0x0) 2.190035121s ago: executing program 2 (id=3455): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200007ea94ffc14000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair(0x11, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000290000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000005d40)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000500)="a4416e826de8a6dd2790d5bd290681e9558b03c99bad857c601002f7738c662ec6408b53ef2cbf3fb88ee2a92bc94d04269cf535df4f2a3013d78b4e4c019d2a044d97ed7d29d946ff79", 0x4a}, {&(0x7f0000000740)="8542d669ce1ddc71ff2f49a3033bf34f5c6c9bb52d7e66c32faf287bdfdf39674d9cf28a6ff0099b10b818e5c0574c511b94c9ec822b9b36b7714d986bb0dcf23e66d056ec98be485b5d0eb64dd2e9cc27f8fa03bc49f7098228576860b4da0e1f183dd0bb40c9315e49ca43e0e0a939f452ca5b02e96bd694ba1837d8a9689f7c4ef5f857335117bd5c8d3c3d", 0x8d}, {&(0x7f0000000800)="ebdb5d95d6b99c4499cf1593c8e70e3e4c373aa5d08f4d20ccbc9b86b7842d7bf8bbfae0f5aaff3d7c0957a12ef456e9d47e5f16bdd44d09e38956689c738479ba7f8f6863b2e27fe66d06a79f886c70f1279f3688cc348fc1525d1031cfdae017a006ab01dc70a99a9bbca066a1fbdf6cd862b866a6cc5845bff342689031fc969a653c0c1f0c4d075e0bed9d91734852f22850c32298c43720fb7a5e9db9755e757bbe622763fccbf1", 0xaa}, {&(0x7f0000000a40)="667995259ca7e17e7fc5728f0508bbf2e87f8aba6eff22c4a191dca97fa98d609ccfbddad1f8638e7046e790ec6bc44643a7d8e571bfaeb2b08a76a2ee5ebaf6a239e910800869f566f3042e70d6157141e944e20e23fb60f3afd07359af958347707d27518e2f7493b6a114d568dfc7049785d3cd2ef890e48b5e125f254bbf619e1cf95749119c3cf7b47b9b83fb106e124473caaa5279a4ae1723c8bcbf8b62bfda0e63a30e44684ad7a0b4d33668", 0xb0}, {&(0x7f0000000580)="f60fee608904345a9388052edbe5695de92d8cade38a128f0ea26bf848f44ed654b77da326e814b4fe22e6841826b9387d7ff0f13fd6bab9d383bf1bf09404ffaf81b868dc1611c48476d88a5c08c983c3629b18b39806b327fb05c9edffb27a324f", 0x62}], 0x5, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r8, r8]}}, @rights={{0x24, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r11, r11, r10, r5]}}, @rights={{0x28, 0x1, 0x1, [r10, r2, 0xffffffffffffffff, r10, r10, r7]}}], 0xf0, 0x4000000}}, {{&(0x7f0000002480)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002500)="47713420a501c4d1e4ae762af8c6462de0da227b2ca67bfefe9fb2891e4e8db3923a73d646f7670de66c41d1fb6e756e42107166c14d90bd55f46b623d1b9dc1025df2f3dd5693eb3ccdf502e2b53da5451153aa77b158f3be7033369bd9b26e27d7e85605b940e4d7c7fe8f593ab762426cb0edb04e98cac2cde978394719b53a8fb312c4a3bf1b5a999e80323496ccaa4ea7f949f324d25cac35b917c66b4c2aba10dc08f754192b8ff052888241de98fbbc685a17fdd69a6bfb51148758b074f899eae0", 0xc5}, {&(0x7f0000002600)="1c576ced8f351a0ed9cd8b775170d61229dc8fe051fe3078f27d5416f1b6d58baf3d3a583b86f85dac98017ca5282c8a2e47ae12376f2ec4b90765550098dff080e5aabc40b6afa295af9530e720a6866a4ed06d7d7773d36a184f4c299a30ab8d10f8c5170cf112fa0e1d2a872e252fb77da2290eff111d5a6dbd897c5a6144724e3881c4da03e5e803e75be0dd3b6b", 0x90}, {&(0x7f00000026c0)="824081d37ee79b352c557f9bb7b7e266c3cd0263a2c1b85d3f38079662daa19b4956b4ff742f28b5214ecddeceedb420143237dc8a92ab8b68f7a165a1916ff07057eea7054996d4c892d0128366d60d224f1ef04c0dbef6c7d4791de871b4f62da694f2d4008162e14d80a21024bfba0a5af0e8643e0c21555f81511bdeb29b6a3e4314107f7168bc0006000000", 0x8e}, {&(0x7f0000002780)="689f37ce64a8f81a4e87bf40d56e58d4bfa205d9535504ba8935f43ab126db4b7aad2a82631823f4d9c280ab5cebbe5713642d7ee1255a5559bd02d629c6355c84a473bd65e752bc7e", 0x49}, {&(0x7f0000002800)="1c5aeecefec2ad6ef6c884260f6ea6db782afc61da1025961db71c8554e7793f6b0607348f5f9f4b561d248d5ca4af2019cced874886afb458091762d2d07d9a576a6b85125bb6f6dc348fa336a0147dcf1b7297b7cc224284a18e776edf8b33c35917612656e6ef5d4ea4fd6bc523195787ad6e1e3446aab3e5196721b0e265767dcc6f", 0x84}, {&(0x7f00000028c0)="3a5b4e2c13dc9002c8130c4e4f028cdc5f5422a2a67c3f5eb5a2e9f99c286635dca0d8d17fae1a0b42fedc8c538af54efc6a86abe55ed4c71b6169101810", 0x3e}, {&(0x7f0000002900)="8974840112a2a0ead0c5c0e05700819dd410be5ed2860c8fa6ac77f0d3d35e9e7bfc0204dd2f539c02c8d94d8d2d73064c6d9cacc630d02cb2b9a7865ab41d653abafd4372547779c157b22a54f6205906f8452a4f3cf8d522263d33d108d4df9d", 0x61}, {&(0x7f0000002980)="1e33d7f92416c348ea3f0234fbec4d0bad032b1a6fea396afebc5919", 0x1c}], 0x8, 0x0, 0x0, 0x40040}}, {{&(0x7f0000003f80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005140)=[{&(0x7f0000004000)="97c9e97caf422a0bd1d023fe82fcdadb3c2a3ccff245a985dba6307adbe60aeef0f1b32d45e8116ee7bd679a48dc409a7206e6fff2b98e651a73f3dc69af55a50301000b870a43f1745a0e4c6ac6f4b3c11566928dc0ec03b68aa49ded8a4483f4ef97e06b5bf603d306da10b13632a2e8225852389697d41f03eeaea9c68d95", 0x80}, {&(0x7f0000004080)="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", 0x1000}, {&(0x7f0000005080)="10b80d9d20b2513390235d0017020ee1095b46f8c9955bcc97c809428e608e9b1604e6ac2fb287ad2296a4b515ad8f0528c3f2ef00925ae71f81dd368b56e0d33a2639ff796ddae0040b0a9c8f9e5d0342c9f5bea73ffe7272614282948c3729a501ef7be85993ed92cfa81697a667036c97ea6175d920d7a063eb6117ba313b9979fe664ac84d7c395ecc5554418ec6510503b62e4d8c3f6f65a51d8264868faf3142e5c272fd795756ab134d4a0a4dbb93cc9fe368a7", 0xb7}, {&(0x7f0000002a40)="a859e34fc3e80a6d9dcb0db88c8843e3245613103dd35e69731db34852553fd2116bd462d76cbd57c80d2fb4b28eb46467379c2aecc2a9e405dbdb", 0x3b}], 0x4, &(0x7f0000005180)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0x58, 0x24004101}}, {{&(0x7f0000005200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005300)=[{&(0x7f0000005280)="c3db13de36f4893a1e034293eee588f8663c23c82efe1f8fd1ed0b17ac9ad9ed146854c5d6b5122e735c9bc0fe8c7e4636352efe85c7ba48a897be95acbca71c5fd9728e7134eecebff89122f483496dee5b25353ff3325610afe15c32b8e3985655a152d9e9a50dc83ad23ecd055284a19a15", 0x73}], 0x1, &(0x7f0000005380)=[@rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r12, r9, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}], 0x68, 0x4001}}, {{&(0x7f0000005400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005a00)=[{&(0x7f0000005480)="7b4779768b36e4395fd46623fc68d86c8d86bab18e7754b5dd91e74dc8ed5a020ac7d9fa8095018453c755819aad9b74c4f949e68bc57e9010d5bb7d7ef13a77e46780c2c5450738828afe8011a37b803f9a5f054e91fefa3528ad8e1735d89d4b8691dac784be6c2771d4b9de87dbe3fa2263581d46f0a18464cdef45dd06a2e14de45620956033ff3b7dc8fa445fce9eb65b2749b3e8e50a98bc791a948432ada26581dd7b16c02433453dd96a1801154f12b57ddff56d6b4680fd3b38", 0xbe}, {&(0x7f0000005540)="0919f9a6ecc6a06550336f9d45d45c5ea6283b7388dd922b5aa46969aab049e18f75d04c480d8563f07625702a3984b8d4f78553fdec3da0a90d4611378dc191c2885100f20dc5d8883868d161129c68ec4317f39bbec4b11844f380d0eaf60976fe578eda0f5f4c2a7b7cc71e06e05dd321f25fc15934b3eaed775f3e3c6b223d6c0cc19ea3b5859910da80c085285d6d60e7ffe90d3637a21ad06e1d", 0x9d}, {&(0x7f0000005600)="1988736ea257d4af485720eab3f6d729c9ccc80ff5834433e2ba7c", 0x1b}, {&(0x7f0000005640)="87a0a13fc3318fd462d672328ce7d700fb252bbbd3b245ca9f2731918d", 0x1d}, {&(0x7f0000005680)="9186824fb27dea06c2ceafa584b4ecd35138ff26071bf29076570ab363a59fb1f213182c8795b390f662eece063bd0ebcf0865744af2a24fd7316aa193c99008ff6ccecd403a23c698e78baf188cab443f7bf6388a28b565670b23759c8dcccdd8096d4b8af95b9dcb0d72e0545ad0fff9451c1b98be1e4185cda938c4a8d68f34f99a0a604c14615c51b8d7dc44d0936da701469576495d33c0c24b9f37797397", 0xa1}, {&(0x7f0000005740)="7f17cfa0ac044084556233a0737ace295230df341778b14df0fa737e0170d6e3eb1ee4226c0b9ec51639468948aed5ca16ebc358346597951f0d44b6009f03c44c5d117ad60c8964542aec10e281e988ca88b01fe53891f0b07e214ee462a5ee8118b97e4c2925b2a331f35ce12ce6879d437be43cea7b3dbcba8d8a1e", 0x7d}, {&(0x7f00000057c0)="ed8bda5eb8e72bc392eb8183ab1476704acd8554145a2fdd13e44172cd1decbb94df53d64e13ae329bd8285fa7b6c8f617f42308d030a405c9ac10def1e1e07815063e768a9a50614e06a5cde3271c22c86aeec808118e6f1b8d91a69d025f16c18484bfa6d60018d60a7d33eeda21d67de929a78cb6f6224187f41975fc1cd193de84cec02337e8bbc970fe2c6ccc19d17c040d41561287968deff43136032029453da50c9fb01a1f520c10e7edb3eed786dca8d3854f9145e7233d93bead2d58f1fa22a45fe0135d3d142514d4c0f6240eb7452ec0f900c392", 0xda}, {&(0x7f00000058c0)="1fedf54a692c65a47f486c71710349ab51c28dee6a25efb5ee43f521c0ec1b77fab459f63f9b4f9484429c2770b065b4e8a4", 0x32}, {&(0x7f0000005900)="0f1f929aa1a8142e0909234c543aa2d9a2e82b878dbcc5eae43d97f9d9bf6ed9a9f2fd80a43caa7779bae629057a7302fbe5d77fd528bab67f6217f008e7940796b5cd944eb406eeb897e1fb54a3b77cfae52bf7df94abec7961ae0277a90863d45bf1117794e167127c9fbda86211a0afc28f18650eaeeccb33946c34a7f94943ebd9e499d3758897480899b856132c1acf1bb33667e2668de93a4e529bde4886c372b6d875c2f5e2410982f7143aebe838fa8c5c2cd5157b91e4950542a3a24f2de366ab7f4bd6b1abfaa7513f0ef3ae644a6f454e62f632dad201494025299e43dd", 0xe3}], 0x9, &(0x7f0000005c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r10, r6]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r10]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}], 0x110, 0x20008040}}], 0x5, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b200000000f58510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, 0x0, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000e40000000018110086", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r14}, 0x10) r15 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r15, &(0x7f00000008c0)=ANY=[@ANYBLOB='system_u:object_r:ptch0 unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 0'], 0x67) 2.170118653s ago: executing program 1 (id=3456): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f0003010900000904000000010100000a240100000002010209040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402019f240200000905820900000b000007250100"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) syz_mount_image$ext4(&(0x7f0000002080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f00000020c0)={[{@init_itable}, {@noinit_itable}, {@debug}]}, 0x1, 0x544, &(0x7f0000000740)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_usb_control_io(r0, &(0x7f0000001300)={0x2c, 0x0, &(0x7f0000000d80)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000003e00)={0x14, 0x0, &(0x7f0000003dc0)=ANY=[@ANYBLOB="020318000095defa3d"]}, 0x0) 2.168697332s ago: executing program 0 (id=3457): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x5, 0x51, 0x9, 0x0, 0xffffffffffffffff, 0xae09, '\x00', 0x0, 0xffffffffffffffff, 0x400, 0x5, 0x4, 0xa}, 0x48) r0 = dup(0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xc, 0x0, 0xffffffffffffffff, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) keyctl$negate(0xd, r1, 0x9, r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000001000000000000000c90d15f67333fae168f33d58cec48f80700431ec6726d1660152e615388efbe"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x110, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0xff], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x2, 0x0, [0x7b9, 0x2, 0xff, 0x1, 0x0, 0x2, 0x1, 0xfffa, 0x5, 0x1fa1, 0x4, 0x7, 0x2, 0x9, 0xfeff, 0x9], 0x7}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x800000009}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0xe6, 0x3a}, &(0x7f0000000a80)={'enc=', 'raw', ' hash=', {'sha1-neon\x00'}}, &(0x7f0000001080)="8a6beb28e87e05eb2b203e55373bb018d8921754bcef5b3e6f44de73a6105d3765bc1ac6f9f9896cf9336c903091c9942ab86be3314c9d41c5311fc0b15631d297e583a75041ada5c0e3cf59ab510c8a979c0fd8f9bba25f5d1728e083c4a08637fcf4b9e6675601a8e96e0a41690cb4a47e0459d19d8c6e50ec91273a86feaf2b7b8f52b9ab56a5a404768b14f8c02738930439918fb96d10cd1f6105b57fe626a3ecbe4af0f0a62ad9dc2bd101fb363a7c1c69198b3fb2da4a0f191a6bd9a5d2abb4d095da906c1a9028e6666ce769e2fa4deef5a9192eacdeef26b6f3bd8bde57c00969d8", &(0x7f0000000c80)=""/58) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xe2, 0x1, 0x8, 0xc03, r0, 0xbed4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xc}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x7, &(0x7f0000000500)=ANY=[@ANYRES8=r7, @ANYRES32=r10, @ANYRESOCT=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x8, 0x9}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000f8ff00000000bf07010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='xen_mmu_flush_tlb_one_user\x00', r12}, 0x10) 1.912343984s ago: executing program 0 (id=3458): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000580003470fbb", 0xa}], 0x1) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0xfffffffffffffffc}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000580003470fbb", 0xa}], 0x1) (async) dup(0xffffffffffffffff) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0xfffffffffffffffc}], 0x1, 0x20, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async) ioctl$KVM_NMI(r1, 0xae9a) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) 1.905461824s ago: executing program 0 (id=3459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 1.758465886s ago: executing program 3 (id=3460): socket$inet6(0xa, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000229bd7000fedbdf25350000000c00990006000000720000000600fd000b00000014005500f83dd2abc72b9f4b2fb07f4ede07cc870600fd00000000001100340075486aff18d9432607ca29a3ea00000008001f0105000000050020011b000000"], 0x68}, 0x1, 0x0, 0x0, 0x635725db6d5e86e7}, 0x4040) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x7ffff000, 0x0) 1.679467433s ago: executing program 0 (id=3461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000085000000050000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.678324703s ago: executing program 0 (id=3462): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009214000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000050000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.032127086s ago: executing program 2 (id=3463): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='btrfs_find_cluster\x00', r0}, 0xfffffffffffffe96) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1000003) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x80000004}, 0x0, &(0x7f00000003c0)={0x3ff}, 0x0, 0x0) 983.24323ms ago: executing program 4 (id=3464): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xfffffe1f, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x49}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x2000000, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x739d, 0x0, 0x20}, 0x28) 899.502497ms ago: executing program 3 (id=3465): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@bsdgroups}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0x1, 0x564, &(0x7f0000002bc0)="$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") r0 = creat(&(0x7f0000003840)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) ftruncate(r0, 0x1f) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x14507e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f8) sendfile(r4, r4, 0x0, 0x100000000) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$packet(0x11, 0x0, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgid(0x0) write$P9_RVERSION(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r9 = dup(r6) write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x70, '\x00', 0x0, r9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 848.196031ms ago: executing program 4 (id=3466): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='btrfs_find_cluster\x00', r0}, 0xfffffffffffffe96) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x80000004}, 0x0, &(0x7f00000003c0)={0x3ff}, 0x0, 0x0) 749.312319ms ago: executing program 3 (id=3467): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nouser_xattr}]}, 0x1, 0x513, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOt7rW1aSpOmNOk6LYt28T8QQcEnn3wR/AOEZR78A2RgQF/EB1FRRGf0QVDnSpIbp5Mmbd1pm07z+cBpzrn35n7PuSEn98fpvQGMrRci4o2ImIiIlyOimE9P87TYLux3l7t/753ldkoiy976axJJPq23rnZ5MiKud98SUxHxtS9HfDM5HLe5u7exVKtVt/NypVXfqjR3926u15fWqmvVzfn5udcWXl94dWE2yz1WO0u9zE++9Pn3Pv2t3y3++ca329X63EeiEH3tOE3dphc626KnvY22zyLYCEzk7SmMuiIAAJxIex//gxHxic7+fzEmOntzfSZGUTMAAADgtGRfmI5/JxEZAAAAcGmlETEdSVrOxwJMR5peyc8NfDiupbVGs/Wp1cbO5kp7XkQpCunqeq06m48VLkUhaZfn8jG2vfIrfeX5iHgmIr5fvNopl5cbtZURn/sAAACAcXG97/j/H8W0kz/egP8TAAAAAC6u0tACAAAAcFk45AcAAIDLr//4/70R1QMAAAA4E1958812ynrPv155e3dno/H2zZVqc6Nc31kuLze2t8prjcZa55599ePWV2s0tj4Tmzu3Kq1qs1Vp7u4t1hs7m63F9UcegQ0AAACco2c+fvvXSUTsf/ZqJ0V+H0CAR/xh1BUATtPEqCsAjIy7eMP4Koy6AsDIJcfMN3gHAACefDMfPXz9v/f8f+cG4HIz1gcAxo/r/zC+CkYAwlhLI+ID3exTw5YZev3/lyeNkmURd4oHpzi/CAAA52u6k5K0nB8HTEealssRT0ekpSgkq+u16mx+fPCrYuGpdnmu887k2DHDAAAAAAAAAAAAAAAAAAAAAAAAAEBXliWRAQAAAJdaRPqnpHM3/4iZ4kvT/ecHriT/LMYf88KP3vrBraVWa3uuPf1vnWd5XYmI1g/z6a8MfXwYAAAAcNqS/aGzusfp+evcudYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDFw/947y710nnH/8sWIKA2KPxlTndepKETEtb8nMXngfUlETJxC/P13I+LZQfGTeJBlWSmvxaD4V884fqmzaQbHTyPi+inEh3F2u93/vDHo+5fGC53Xwd+/yTw9ruH9X5pHfrbTzw3qf54+tLb6wBjP3f1ZZWj8dyOemxzc//T632RI/BcPre1fWZYdjvGNr+/tDYuf/ThiZuDvT/JIrEqrvlVp7u7dXK8vrVXXqpvz83OvLby+8OrCbGV1vVbN/w6M8b2P/fzBUe2/NiD+b3/T7X+Pav9Lw1ba5z93b937UDdbGBT/xosDf3+nYkj8NP/t+2Seb8+f6eX3u/mDnv/pneePav/KkO1/3Od/44Ttf/mr3/39CRcFAM5Bc3dvY6lWq24fkZk6wTJPYuYXUxeiGv9nJvtO95O7KPV5v5n23urDKb1WXYCKHchk5xZrIi5Ik/+XGWm3BAAAnIGHO/2jrgkAAAAAAAAAAAAAAAAAAACMr/O4nVh/zP3RNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ej/DQAA///M/t/r") (async) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) (async) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000380)="875c679bd5dd3ab43e480d74d7f85ea48c1a7dcb569b3467b7f8b3c75011b1daba05dbf9a2e3c271", 0x28, 0x0, 0x0, 0x0) (async) r2 = socket(0x1d, 0x80a, 0x9) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1506, &(0x7f0000001b00)="$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") (async, rerun: 64) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x50) (async) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000300)=0x4) 679.815375ms ago: executing program 3 (id=3468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) eventfd(0x0) r3 = eventfd(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x300, 0x2, r2}) 602.747381ms ago: executing program 3 (id=3469): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xfffffe1f, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x49}, 0x15) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79105e042107259c0102030109022200010000000009040000000e0100000824020101020000000000"], 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x17b, &(0x7f0000000740)="$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") r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffb, 0x2) getdents(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x63) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000108000000000000000000a90000", @ANYRES32=r4, @ANYBLOB="00000000000000000c002b80080003000000000008002300ffffff7f"], 0x34}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xa83c, 0x7, 0x8001, 0x20, r1, 0x401, '\x00', r4, r1, 0x1, 0x4, 0x1, 0xb}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000004850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000b00)={r6, 0x2, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) pidfd_getfd(r1, r2, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b"], 0x6, 0x2aa, &(0x7f0000000e40)="$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") bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0xe}}, {@bsdgroups}, {@nodelalloc}, {@abort}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fff}}]}, 0xfe, 0x454, &(0x7f00000009c0)="$eJzs3M1vG0UbAPDHmzj9fuO3lI+WFgIFUQlImvSDHrgUgcQBJCQ4FHEyaVqVug1qgkSrCgqHcESVuCPu/AVcKBcEnJC4wh0hRSgXCiejtXcTN7GdOHHiEv9+0iYz3nFmnt2deDzjdQB9ayT9UYjYGxG/RsRwPXtvgZH6r7sLNyf/Xrg5WYhq9c0/C7Vyfy3cnMyL5s/bU89UB9rUO/dORLlSmbqW5cdmr7w/NnP9xvOXrpQvTl2cujpx5szJE0eGTk+c6kqc+9K2Hvpo+vDBV9++/frkudvv/vh12t692f7GOLplpH50m3q625X12L6GdGGwhw2hI2kfTU9Xsdb/h2Mgdi3uG45XPu1p44BNVa0m1R2td9+qAttYOpoH+lH+Qp++/823LRp63Bfmz8biPMbdbKvvGYwkK1PcxPpHIuLcrX++TLfYpHkIAIBGd85GxHPNxn9JPNRQ7n/Z2lApIv4fEfsj4oGIOBARD0bUyj4cEY90WP/yFZKV45/q8LoCW6N0/PditrZ17/gvH/1FaSDL7avFXyxcuFSZOp4dk2NR3JHmx9vU8d3Lv3zeal/j+C/d0vrzsWDWjj8Gl03QnS8XyxuJudH8J/VWrIy/EPkyTjo+PhgRhzr829maUNKuzOrxt9GFdabqVxHP1M//rVgWf67Qcn1y/IXTE6fGdkZl6vhYflWs9NPPc2+0qn9D8XfB/J1q7G56/S/GXyrsjJi5fuNybb12pvM65n77rOV7mvVd/7PlocJbtfRQ9tiH5dnZa+MRQ4XXVj4+sfTcPJ+XT6//Y0eb9//9sXQkHo2IwxFxJCIei4jHs7Y/ERFPRsTRNvH/8NJT73Uef5tZ+S5K4z/f4vxnC/ilNP6l8995YuDy9990Hn8uPf8na6lj2SPp+V8trrU2cIOHDwAAAP4Tktpn4AvJ6GI6SUZH65/hPxC7k8r0zOyzF6Y/uHq+/ln5UhSTfKZruGE+dDybG87zE8vyJ7J54y8GdtXyo5PTlU7nioHu2tOi/6d+b3cDD7A9uF8L+pf+D/1L/4f+pf9D/9L/oX816/8f96AdwNZb5fV/11a1A9h6xv/Qv/R/6F/6P/SllvfGJxu65V+iR4lvhzb2XQ1porSmwpHcJyFvm0Qxmu4aXPOXWawzsaPprl7/ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//1A/gqw==") creat(&(0x7f0000000540)='./file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f000000bb415ca0bf4618ed072b02428a123364f739411dec2bc27a74918dd4f8b5cf6886255db6068027cfd8d6ef43f008af50ed9907721393467f65d91f1d351600afd9e0b9e1bd4963fc981f940eda2742c6c68f85d23e8de009c28fdf6d0abdb4b5ec64fcb7e86040fe3f6e813c887c0e4b4019e9a91f494d65b440967c51c4fa48125949f22ddb1545c6b86f53b384e8e2eb213fd2610f2fc617f9ebe4f8a6f307e6c308b6bf0de92b"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 291.553866ms ago: executing program 1 (id=3470): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x4}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x4, 0x20000000, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 178.776576ms ago: executing program 2 (id=3471): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x0, 0xa9}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) lgetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)=@known='system.sockprotoname\x00', &(0x7f0000000140)=""/137, 0x89) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 339.05µs ago: executing program 4 (id=3472): prlimit64(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2bd, &(0x7f0000000640)="$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") r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x60002, 0x0) writev(r0, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}], 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x180) 0s ago: executing program 1 (id=3473): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000002f4486b46aa96d075d4dc0a17c8cd2340621637d9de7505ee6805c52b19542cc1958b0e011bcc731030f5c70af63699378026485d5d4"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x13, 0x4, 0x4, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): DDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.129355][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.129420][T10202] loop4: detected capacity change from 0 to 128 [ 430.136757][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.143297][ T607] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 430.160652][ T607] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 430.162140][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.178824][T10199] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.186796][ T30] audit: type=1400 audit(2000000097.220:778): avc: denied { mounton } for pid=10198 comm="syz.4.3241" path="/syzcgroup/unified/file0/file0" dev="cgroup2" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 430.212898][ T607] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.249862][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 430.257958][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.290504][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 430.298854][ T608] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 430.307552][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.317951][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 430.338941][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 430.352016][T10171] device veth0_vlan entered promiscuous mode [ 430.358658][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 430.367976][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 430.385441][T10171] device veth1_macvtap entered promiscuous mode [ 430.395353][T10199] loop4: detected capacity change from 0 to 16 [ 430.402825][ T607] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.412728][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.420819][ T607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.430020][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.438722][ T607] usb 2-1: Product: syz [ 430.442773][ T607] usb 2-1: Manufacturer: syz [ 430.449157][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.458392][ T607] usb 2-1: SerialNumber: syz [ 430.463969][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.473260][T10199] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 430.483994][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.492437][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.501713][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.515657][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.524635][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 430.538244][ T608] usb 4-1: Using ep0 maxpacket: 32 [ 430.605304][ T30] audit: type=1400 audit(2000000097.640:779): avc: denied { append } for pid=10210 comm="syz.2.3244" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 430.638307][ T30] audit: type=1400 audit(2000000097.640:780): avc: denied { open } for pid=10210 comm="syz.2.3244" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 430.713133][ T608] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 430.727391][ T511] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 430.743131][T10178] loop1: detected capacity change from 0 to 512 [ 430.788319][T10217] tipc: Enabling of bearer rejected, failed to enable media [ 430.829740][T10178] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 430.839048][T10178] System zones: 0-2, 18-18, 34-35 [ 430.845667][T10178] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 430.860634][T10178] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038 (0x7fffffff) [ 430.884795][ T30] audit: type=1400 audit(2000000097.920:781): avc: denied { unlink } for pid=10177 comm="syz.1.3236" name="#9b" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 430.909704][ T608] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.40 [ 430.919334][ T608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.927658][ T608] usb 4-1: Product: syz [ 430.932117][ T608] usb 4-1: Manufacturer: syz [ 430.937541][ T608] usb 4-1: SerialNumber: syz [ 430.978438][ T511] usb 1-1: Using ep0 maxpacket: 32 [ 430.985435][ T608] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 431.088415][ T607] usb 2-1: 0:2 : does not exist [ 431.097620][ T607] usb 2-1: USB disconnect, device number 57 [ 431.183569][T10197] loop3: detected capacity change from 0 to 512 [ 431.258280][ T511] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 431.267921][ T511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.276081][ T511] usb 1-1: Product: syz [ 431.280973][ T511] usb 1-1: Manufacturer: syz [ 431.288557][ T511] usb 1-1: SerialNumber: syz [ 431.295266][ T511] usb 1-1: config 0 descriptor?? [ 431.303951][T10197] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3242: bad orphan inode 17 [ 431.315523][T10197] ext4_test_bit(bit=16, block=4) = 1 [ 431.322151][T10197] is_bad_inode(inode)=0 [ 431.327244][T10197] NEXT_ORPHAN(inode)=0 [ 431.332540][T10197] max_ino=32 [ 431.337053][T10197] i_nlink=1 [ 431.342503][T10197] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 431.360673][T10197] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3242: bg 0: block 7: invalid block bitmap [ 431.469303][ T8931] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /76/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 431.498849][ T8931] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /76/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 431.523574][ T8931] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /76/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 431.548579][ T8931] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /76/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 431.577167][ T8931] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /76/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 431.599773][ T378] usb 4-1: USB disconnect, device number 59 [ 431.606964][ T8931] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /76/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 431.634220][ T8931] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /76/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 431.646644][T10226] loop2: detected capacity change from 0 to 256 [ 431.659276][ T8931] EXT4-fs error (device loop1): ext4_map_blocks:602: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 431.699369][T10226] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 431.701885][T10228] loop4: detected capacity change from 0 to 2048 [ 431.892780][T10228] loop4: detected capacity change from 0 to 256 [ 432.019419][ T511] (unnamed net_device) (uninitialized): Assigned a random MAC address: 6e:73:a4:33:cc:85 [ 432.048880][ T511] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 432.072384][ T511] usb 1-1: USB disconnect, device number 59 [ 432.085906][ T30] audit: type=1400 audit(2000000099.120:782): avc: denied { read } for pid=137 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 432.318731][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.348032][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.362302][T10235] device bridge_slave_0 entered promiscuous mode [ 432.371355][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.383239][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.394033][T10235] device bridge_slave_1 entered promiscuous mode [ 432.545034][T10244] loop0: detected capacity change from 0 to 512 [ 432.613938][T10248] fuse: Bad value for 'user_id' [ 432.651571][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.659390][T10235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.666938][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.674384][T10235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.689197][T10244] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 432.709335][T10244] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038 (0x7fffffff) [ 432.741999][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.754928][ T511] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.764476][ T511] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.790298][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.803291][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.815364][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.826542][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.838831][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.847205][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.868601][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.878473][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.896964][T10235] device veth0_vlan entered promiscuous mode [ 432.905675][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.915811][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.925958][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.934153][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.951967][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.963146][T10235] device veth1_macvtap entered promiscuous mode [ 432.976906][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.991997][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.028625][ T503] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 433.249486][ T437] device bridge_slave_1 left promiscuous mode [ 433.258330][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.275593][T10260] loop1: detected capacity change from 0 to 40427 [ 433.275675][ T437] device bridge_slave_0 left promiscuous mode [ 433.304993][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.306572][T10260] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 433.321631][T10260] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 433.331600][ T437] device veth1_macvtap left promiscuous mode [ 433.334311][T10260] F2FS-fs (loop1): Found nat_bits in checkpoint [ 433.378769][T10260] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 433.386077][T10260] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 433.408264][ T503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.420485][ T503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.436423][ T503] usb 1-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 433.455313][ T503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.486589][ T503] usb 1-1: config 0 descriptor?? [ 433.961714][T10268] loop4: detected capacity change from 0 to 40427 [ 434.041191][T10268] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 434.049553][T10268] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 434.073376][T10268] F2FS-fs (loop4): Found nat_bits in checkpoint [ 434.125837][T10268] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 434.133788][T10268] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 434.206823][T10244] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #2: comm syz.0.3254: corrupted inode contents [ 434.220179][T10244] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #2: comm syz.0.3254: mark_inode_dirty error [ 434.234713][T10280] tipc: Enabling of bearer rejected, failed to enable media [ 434.263145][T10244] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #2: comm syz.0.3254: corrupted inode contents [ 434.277994][T10244] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.3254: mark_inode_dirty error [ 434.301092][ T30] audit: type=1400 audit(2000000101.340:783): avc: denied { write } for pid=10243 comm="syz.0.3254" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 434.688260][ T503] usbhid 1-1:0.0: can't add hid device: -71 [ 434.695492][ T503] usbhid: probe of 1-1:0.0 failed with error -71 [ 434.718665][ T503] usb 1-1: USB disconnect, device number 60 [ 434.747689][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 434.805554][T10293] loop3: detected capacity change from 0 to 512 [ 434.837029][T10293] EXT4-fs (loop3): invalid inodes per group: 0 [ 434.837029][T10293] [ 435.056767][T10295] loop4: detected capacity change from 0 to 40427 [ 435.109598][T10295] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 435.117813][T10295] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 435.132436][T10295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 435.212878][T10311] loop0: detected capacity change from 0 to 512 [ 435.232966][T10295] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 435.243626][T10295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 435.258825][T10311] EXT4-fs (loop0): 1 truncate cleaned up [ 435.264782][T10311] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 436.233205][ T30] audit: type=1326 audit(2000000103.270:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37131429f9 code=0x7ffc0000 [ 436.298694][ T30] audit: type=1326 audit(2000000103.300:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37131429f9 code=0x7ffc0000 [ 436.310751][T10327] loop3: detected capacity change from 0 to 512 [ 436.358194][ T30] audit: type=1326 audit(2000000103.300:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37131429f9 code=0x7ffc0000 [ 436.393899][ T30] audit: type=1326 audit(2000000103.300:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37131429f9 code=0x7ffc0000 [ 436.409366][T10327] EXT4-fs (loop3): 1 truncate cleaned up [ 436.421446][ T30] audit: type=1326 audit(2000000103.300:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37131429f9 code=0x7ffc0000 [ 436.434443][T10327] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 436.463881][ T607] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 436.473736][ T30] audit: type=1326 audit(2000000103.300:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f37131429f9 code=0x7ffc0000 [ 436.498634][ T30] audit: type=1326 audit(2000000103.300:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37131429f9 code=0x7ffc0000 [ 436.525906][ T30] audit: type=1326 audit(2000000103.300:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37131429f9 code=0x7ffc0000 [ 436.551496][ T30] audit: type=1326 audit(2000000103.300:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f37131429f9 code=0x7ffc0000 [ 436.588190][ T30] audit: type=1326 audit(2000000103.300:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.0.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37131429f9 code=0x7ffc0000 [ 437.188493][ T607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.221818][ T607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.279483][ T607] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 437.316348][ T607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.350035][ T607] usb 3-1: config 0 descriptor?? [ 437.414288][T10351] tipc: Enabling of bearer rejected, failed to enable media [ 437.587203][T10344] loop3: detected capacity change from 0 to 40427 [ 437.617795][T10344] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 437.629631][T10344] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 437.662437][T10344] F2FS-fs (loop3): Found nat_bits in checkpoint [ 437.730787][T10344] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 437.738200][T10344] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 437.998296][ T511] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 438.251470][ T607] usb 3-1: string descriptor 0 read error: -22 [ 438.339493][T10368] loop0: detected capacity change from 0 to 1024 [ 438.448542][ T511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.570991][ T511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.629632][T10368] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.672782][ T511] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 438.677742][T10374] loop3: detected capacity change from 0 to 512 [ 438.682613][ T511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.700694][ T511] usb 5-1: config 0 descriptor?? [ 438.708375][ T607] uclogic 0003:256C:006D.0072: failed retrieving string descriptor #100: -71 [ 438.718585][ T607] uclogic 0003:256C:006D.0072: failed retrieving pen parameters: -71 [ 438.727488][ T607] uclogic 0003:256C:006D.0072: failed probing pen v1 parameters: -71 [ 438.736597][ T607] uclogic 0003:256C:006D.0072: failed probing parameters: -71 [ 438.745095][ T607] uclogic: probe of 0003:256C:006D.0072 failed with error -71 [ 438.759273][T10374] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3281: casefold flag without casefold feature [ 438.774619][T10374] EXT4-fs error (device loop3): __ext4_iget:4892: inode #12: block 2: comm syz.3.3281: invalid block [ 438.775267][ T607] usb 3-1: USB disconnect, device number 62 [ 438.793073][T10374] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3281: error while reading EA inode 12 err=-117 [ 438.810258][T10374] EXT4-fs (loop3): 1 orphan inode deleted [ 438.816565][T10374] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 438.833091][T10374] syz.3.3281 (pid 10374) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 439.567122][ T511] usb 5-1: string descriptor 0 read error: -22 [ 439.940707][T10402] loop0: detected capacity change from 0 to 512 [ 440.020914][T10402] EXT4-fs (loop0): 1 truncate cleaned up [ 440.026970][T10402] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 440.088219][ T511] uclogic 0003:256C:006D.0073: failed retrieving string descriptor #100: -71 [ 440.097303][ T511] uclogic 0003:256C:006D.0073: failed retrieving pen parameters: -71 [ 440.106407][ T511] uclogic 0003:256C:006D.0073: failed probing pen v1 parameters: -71 [ 440.115293][ T511] uclogic 0003:256C:006D.0073: failed probing parameters: -71 [ 440.123549][ T511] uclogic: probe of 0003:256C:006D.0073 failed with error -71 [ 440.134228][ T511] usb 5-1: USB disconnect, device number 57 [ 440.645676][T10416] tipc: Enabling of bearer rejected, failed to enable media [ 440.788150][ T607] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 440.866950][T10420] loop0: detected capacity change from 0 to 512 [ 440.899428][T10420] EXT4-fs (loop0): Mount option "dioread_nolock" incompatible with ext3 [ 440.922612][T10418] loop4: detected capacity change from 0 to 40427 [ 441.005324][T10418] F2FS-fs (loop4): Unrecognized mount option "alloc_modm=reuse" or missing value [ 441.101847][T10423] loop0: detected capacity change from 0 to 512 [ 441.140582][T10423] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 441.164435][T10423] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 441.178746][T10423] EXT4-fs (loop0): 1 orphan inode deleted [ 441.185161][T10423] EXT4-fs (loop0): 1 truncate cleaned up [ 441.191744][T10423] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,nomblk_io_submit,noinit_itable,grpjquota=,. Quota mode: none. [ 441.219176][ T607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.230425][ T607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.240405][ T607] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 441.249479][ T607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.258872][ T607] usb 2-1: config 0 descriptor?? [ 441.325088][T10426] incfs: Error accessing: ./file1. [ 441.330622][T10426] incfs: mount failed -2 [ 441.501641][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 441.501672][ T30] audit: type=1400 audit(2000000108.540:851): avc: denied { bind } for pid=10413 comm="syz.1.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.528544][ T20] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 441.670219][ T30] audit: type=1400 audit(2000000108.710:852): avc: denied { bind } for pid=10433 comm="syz.4.3297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 441.690228][ T30] audit: type=1400 audit(2000000108.710:853): avc: denied { name_bind } for pid=10433 comm="syz.4.3297" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 441.712201][ T30] audit: type=1400 audit(2000000108.710:854): avc: denied { node_bind } for pid=10433 comm="syz.4.3297" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 441.898273][ T503] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 441.938347][ T310] Bluetooth: hci0: command 0x1003 tx timeout [ 441.944933][T10399] Bluetooth: hci0: sending frame failed (-49) [ 441.958270][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.971073][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.982015][ T20] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 441.991282][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.001298][ T20] usb 1-1: config 0 descriptor?? [ 442.008218][ T6] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 442.138168][ T503] usb 4-1: Using ep0 maxpacket: 32 [ 442.198338][ T607] hid-led: probe of 0003:27B8:01ED.0074 failed with error -71 [ 442.209528][ T607] usb 2-1: USB disconnect, device number 58 [ 442.258302][ T503] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 442.268158][ T503] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 442.278976][ T503] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.408333][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.419986][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.430893][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 442.441173][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.450128][ T6] usb 5-1: config 0 descriptor?? [ 442.468354][ T503] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.479057][ T20] apple 0003:05AC:029C.0075: unknown main item tag 0x0 [ 442.486875][ T20] apple 0003:05AC:029C.0075: ignoring exceeding usage max [ 442.495506][ T503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.504871][ T20] apple 0003:05AC:029C.0075: usage index exceeded [ 442.511938][ T503] usb 4-1: Product: syz [ 442.516129][ T503] usb 4-1: Manufacturer: syz [ 442.521198][ T20] apple 0003:05AC:029C.0075: item 0 0 2 0 parsing failed [ 442.528478][ T503] usb 4-1: SerialNumber: syz [ 442.533988][ T20] apple 0003:05AC:029C.0075: parse failed [ 442.540654][ T20] apple: probe of 0003:05AC:029C.0075 failed with error -22 [ 442.700417][T10439] loop1: detected capacity change from 0 to 256 [ 442.779445][T10439] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 442.796332][T10432] loop3: detected capacity change from 0 to 512 [ 442.919543][T10432] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 442.930280][T10432] System zones: 0-2, 18-18, 34-35 [ 442.936764][T10432] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 442.952010][T10432] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 443.138603][ T6] usb 5-1: string descriptor 0 read error: -22 [ 443.198228][ T503] usb 4-1: 0:2 : does not exist [ 443.203575][ T378] usb 1-1: USB disconnect, device number 61 [ 443.214814][ T503] usb 4-1: USB disconnect, device number 60 [ 443.221995][ T8844] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 443.256764][ T8844] EXT4-fs (loop0): Remounting filesystem read-only [ 443.414306][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.422894][T10446] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.431549][T10446] device bridge_slave_0 entered promiscuous mode [ 443.440582][T10446] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.447897][T10446] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.455399][T10446] device bridge_slave_1 entered promiscuous mode [ 443.511330][T10446] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.519455][T10446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.526903][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.534140][T10446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.556479][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.565653][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.574151][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 443.578302][ T6] uclogic 0003:256C:006D.0076: failed retrieving string descriptor #100: -71 [ 443.582566][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.601126][ T6] uclogic 0003:256C:006D.0076: failed retrieving pen parameters: -71 [ 443.601631][T10103] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 443.609804][ T6] uclogic 0003:256C:006D.0076: failed probing pen v1 parameters: -71 [ 443.635117][T10103] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 443.640606][ T6] uclogic 0003:256C:006D.0076: failed probing parameters: -71 [ 443.668209][T10103] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 443.672430][ T6] uclogic: probe of 0003:256C:006D.0076 failed with error -71 [ 443.698380][T10103] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 443.714076][ T6] usb 5-1: USB disconnect, device number 58 [ 443.731203][T10103] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 443.763160][T10103] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 443.786468][T10103] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 443.808839][T10103] EXT4-fs error (device loop3): ext4_map_blocks:602: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 443.841003][T10446] device veth0_vlan entered promiscuous mode [ 443.849179][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.857933][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.867531][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.876260][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.885297][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.894583][ T607] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.902936][ T607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.910696][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.919152][ T607] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.927381][ T607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.935478][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.944456][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.966598][T10446] device veth1_macvtap entered promiscuous mode [ 443.974995][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.009402][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.018727][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.028699][ T378] Bluetooth: hci0: command 0x1001 tx timeout [ 444.036058][T10399] Bluetooth: hci0: sending frame failed (-49) [ 444.130335][T10454] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.137759][T10454] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.146436][T10454] device bridge_slave_0 entered promiscuous mode [ 444.154790][T10454] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.163432][T10454] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.171663][T10454] device bridge_slave_1 entered promiscuous mode [ 444.276704][T10454] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.284911][T10454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.292678][T10454] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.300656][T10454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.341459][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.350108][ T607] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.359063][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.376441][ T503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.385515][ T503] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.392650][ T503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.405048][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 444.415557][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 444.425914][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.433890][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.454620][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 444.463374][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.474368][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 444.484366][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.494001][ T45] device bridge_slave_1 left promiscuous mode [ 444.502020][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.510688][ T45] device bridge_slave_0 left promiscuous mode [ 444.517411][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.527892][ T45] device veth1_macvtap left promiscuous mode [ 444.707893][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 444.719024][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 444.734723][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 444.743786][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 444.755577][T10454] device veth0_vlan entered promiscuous mode [ 444.762711][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 444.771063][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 444.790408][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 444.801807][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.814408][T10454] device veth1_macvtap entered promiscuous mode [ 444.829944][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 444.839383][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 444.849163][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.867324][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 444.877026][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.993128][T10469] loop0: detected capacity change from 0 to 1024 [ 445.268194][ T607] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 445.318267][ T346] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 445.468743][ T45] device bridge_slave_1 left promiscuous mode [ 445.475775][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.484585][ T45] device bridge_slave_0 left promiscuous mode [ 445.491777][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.501718][ T45] device veth1_macvtap left promiscuous mode [ 445.509208][ T45] device veth0_vlan left promiscuous mode [ 445.588268][ T346] usb 5-1: Using ep0 maxpacket: 32 [ 445.628291][ T607] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 445.640585][ T607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.653722][ T607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.664970][ T607] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 445.738429][ T346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.751427][ T346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.758246][ T607] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 445.765041][ T346] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 445.776031][ T607] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 445.790436][ T607] usb 1-1: Manufacturer: syz [ 445.800034][ T346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.804885][T10474] loop1: detected capacity change from 0 to 512 [ 445.810328][ T346] usb 5-1: config 0 descriptor?? [ 445.816353][ T607] usb 1-1: config 0 descriptor?? [ 445.840869][T10474] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #3: comm syz.1.3309: corrupted inode contents [ 445.854914][T10474] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #3: comm syz.1.3309: mark_inode_dirty error [ 445.873742][T10474] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #3: comm syz.1.3309: corrupted inode contents [ 445.891350][T10474] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.3309: mark_inode_dirty error [ 445.907172][T10474] Quota error (device loop1): write_blk: dquota write failed [ 445.917181][T10474] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 445.989009][T10474] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.3309: corrupted inode contents [ 446.006320][T10474] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #16: comm syz.1.3309: mark_inode_dirty error [ 446.020613][T10474] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.3309: corrupted inode contents [ 446.035793][T10474] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.3309: mark_inode_dirty error [ 446.049777][T10474] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.3309: corrupted inode contents [ 446.065691][T10474] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 446.078278][T10474] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.3309: corrupted inode contents [ 446.092041][T10474] EXT4-fs error (device loop1): ext4_truncate:4292: inode #16: comm syz.1.3309: mark_inode_dirty error [ 446.106369][T10474] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 446.116713][ T608] Bluetooth: hci0: command 0x1009 tx timeout [ 446.117252][T10474] EXT4-fs (loop1): 1 truncate cleaned up [ 446.129099][T10474] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 446.141310][T10474] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 446.302996][T10471] UDC core: couldn't find an available UDC or it's busy: -16 [ 446.311849][T10471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 446.607160][T10471] loop4: detected capacity change from 0 to 512 [ 446.618534][T10469] UDC core: couldn't find an available UDC or it's busy: -16 [ 446.626249][T10469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 446.654876][T10469] UDC core: couldn't find an available UDC or it's busy: -16 [ 446.664184][T10469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 446.673132][T10469] UDC core: couldn't find an available UDC or it's busy: -16 [ 446.692532][T10469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 446.708552][T10469] loop0: detected capacity change from 0 to 2048 [ 446.710607][T10471] EXT4-fs (loop4): 1 orphan inode deleted [ 446.722049][T10471] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue,. Quota mode: writeback. [ 446.744526][T10471] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038 (0x7fffffff) [ 446.761902][T10469] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 446.779265][ T346] lua 0003:1E7D:2C2E.0077: global environment stack underflow [ 446.787456][ T30] audit: type=1400 audit(2000000113.820:855): avc: denied { write } for pid=10467 comm="syz.0.3306" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 446.801545][ T346] lua 0003:1E7D:2C2E.0077: item 0 0 1 11 parsing failed [ 446.823167][ T346] lua 0003:1E7D:2C2E.0077: parse failed [ 446.829918][ T346] lua: probe of 0003:1E7D:2C2E.0077 failed with error -22 [ 446.841366][ T30] audit: type=1400 audit(2000000113.880:856): avc: denied { setopt } for pid=10491 comm="syz.1.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.889013][T10492] loop1: detected capacity change from 0 to 8192 [ 446.928648][T10492] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 446.934118][T10492] loop1: partition table partially beyond EOD, truncated [ 446.941458][T10492] loop1: p1 start 277760 is beyond EOD, truncated [ 446.948834][T10492] loop1: p2 start 6684676 is beyond EOD, truncated [ 446.956943][T10492] loop1: p5 start 6684676 is beyond EOD, truncated [ 446.984977][ T6] usb 5-1: USB disconnect, device number 59 [ 446.998208][ T346] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 447.051734][ T366] udevd[366]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 447.053569][ T314] udevd[314]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 447.065231][ T365] udevd[365]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 447.126836][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3314'. [ 447.140684][T10494] loop1: detected capacity change from 0 to 256 [ 447.196558][T10494] FAT-fs (loop1): Directory bread(block 64) failed [ 447.204393][T10494] FAT-fs (loop1): Directory bread(block 65) failed [ 447.211733][T10494] FAT-fs (loop1): Directory bread(block 66) failed [ 447.218559][T10494] FAT-fs (loop1): Directory bread(block 67) failed [ 447.225801][T10494] FAT-fs (loop1): Directory bread(block 68) failed [ 447.232925][T10494] FAT-fs (loop1): Directory bread(block 69) failed [ 447.240320][T10494] FAT-fs (loop1): Directory bread(block 70) failed [ 447.246754][T10494] FAT-fs (loop1): Directory bread(block 71) failed [ 447.253978][T10494] FAT-fs (loop1): Directory bread(block 72) failed [ 447.260264][T10494] FAT-fs (loop1): Directory bread(block 73) failed [ 447.348146][ T346] usb 4-1: Using ep0 maxpacket: 32 [ 447.468240][ T346] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 447.479555][ T346] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 447.491374][ T346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.698795][ T346] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.731282][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.748706][T10501] loop4: detected capacity change from 0 to 1024 [ 447.809897][ T346] usb 4-1: Product: syz [ 447.826265][T10501] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 447.839664][ T346] usb 4-1: Manufacturer: syz [ 447.844364][ T346] usb 4-1: SerialNumber: syz [ 447.910531][T10501] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,user_xattr,norecovery,,errors=continue. Quota mode: writeback. [ 448.200709][T10486] loop3: detected capacity change from 0 to 512 [ 448.369346][T10486] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 448.377913][T10486] System zones: 0-2, 18-18, 34-35 [ 448.388620][T10486] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 448.404202][T10486] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 448.528194][ T607] usbhid 1-1:0.0: can't add hid device: -71 [ 448.534366][ T607] usbhid: probe of 1-1:0.0 failed with error -71 [ 448.543290][ T607] usb 1-1: USB disconnect, device number 62 [ 448.638496][ T346] usb 4-1: 0:2 : does not exist [ 448.657763][ T346] usb 4-1: USB disconnect, device number 61 [ 448.781307][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 448.967614][T10512] loop4: detected capacity change from 0 to 40427 [ 449.003514][T10454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 449.026955][T10454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 449.051151][T10454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 449.073525][T10454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 449.095389][T10454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 449.101338][T10512] F2FS-fs (loop4): invalid crc value [ 449.124918][T10454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 449.127429][T10512] F2FS-fs (loop4): Found nat_bits in checkpoint [ 449.149365][T10454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 449.178715][T10454] EXT4-fs error (device loop3): ext4_map_blocks:602: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 449.183057][T10512] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 449.399889][ T30] audit: type=1400 audit(2000000116.420:857): avc: denied { mounton } for pid=10525 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 449.477336][T10538] loop1: detected capacity change from 0 to 512 [ 449.528875][T10525] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.568160][T10525] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.575674][T10525] device bridge_slave_0 entered promiscuous mode [ 449.594140][T10538] EXT4-fs (loop1): 1 orphan inode deleted [ 449.605010][T10538] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,noquota,max_batch_time=0x0000000000000008,stripe=0x0000000000000079,bsddf,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 449.699641][T10525] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.770588][T10525] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.852363][T10525] device bridge_slave_1 entered promiscuous mode [ 449.878291][T10538] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 449.927514][ T30] audit: type=1400 audit(2000000116.960:858): avc: denied { create } for pid=10537 comm="syz.1.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 450.067206][T10073] attempt to access beyond end of device [ 450.067206][T10073] loop4: rw=2049, want=45112, limit=40427 [ 450.091698][T10545] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.099572][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.108204][T10545] device bridge_slave_0 entered promiscuous mode [ 450.121112][T10545] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.128205][T10545] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.135865][T10545] device bridge_slave_1 entered promiscuous mode [ 450.169248][ T437] device bridge_slave_1 left promiscuous mode [ 450.176395][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.186201][ T437] device bridge_slave_0 left promiscuous mode [ 450.193087][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.229072][ T437] device veth1_macvtap left promiscuous mode [ 450.235357][ T437] device veth0_vlan left promiscuous mode [ 450.409370][T10551] loop4: detected capacity change from 0 to 40427 [ 450.434633][T10551] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 450.444054][T10551] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 450.467787][T10551] F2FS-fs (loop4): Found nat_bits in checkpoint [ 450.539340][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.542959][T10551] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 450.549058][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.566312][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.569335][T10551] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 450.578650][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.607349][ T861] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.615150][ T861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.618649][T10566] loop1: detected capacity change from 0 to 256 [ 450.622965][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.675241][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.684530][ T861] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.692426][ T861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.708191][ T607] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 450.709402][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.729832][T10566] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 450.934837][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 450.945066][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.955287][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.964808][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.044160][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 451.054271][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.131837][T10525] device veth0_vlan entered promiscuous mode [ 451.155388][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 451.165252][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.197693][T10525] device veth1_macvtap entered promiscuous mode [ 451.211327][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.220190][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.228152][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 451.238329][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.247604][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.298290][ T607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.317635][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.338920][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.348354][ T607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.369198][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.377944][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.387159][ T607] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 451.408137][ T607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.428505][ T607] usb 1-1: config 0 descriptor?? [ 451.508174][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 451.516261][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 451.524370][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 451.533642][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 451.543993][ T861] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.551431][ T861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.559594][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 451.571008][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 451.580545][ T861] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.588016][ T861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.602482][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 451.685897][T10582] loop3: detected capacity change from 0 to 128 [ 451.764152][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.776081][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.788210][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 451.795582][T10578] attempt to access beyond end of device [ 451.795582][T10578] loop3: rw=2049, want=241, limit=128 [ 451.797411][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.828616][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 451.838635][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.847869][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 451.857434][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.867372][T10545] device veth0_vlan entered promiscuous mode [ 451.876798][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.887405][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.901593][ T45] attempt to access beyond end of device [ 451.901593][ T45] loop3: rw=1, want=153, limit=128 [ 451.921487][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 451.932549][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.956825][T10545] device veth1_macvtap entered promiscuous mode [ 451.971400][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.980704][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.990276][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 452.010135][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.019186][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.080443][T10588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3326'. [ 452.120223][ T437] device bridge_slave_1 left promiscuous mode [ 452.127103][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.136130][ T437] device bridge_slave_0 left promiscuous mode [ 452.137505][T10590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3335'. [ 452.144139][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.163428][ T437] device veth1_macvtap left promiscuous mode [ 452.169685][ T437] device veth0_vlan left promiscuous mode [ 452.334990][T10590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3335'. [ 452.390267][ T607] usb 1-1: string descriptor 0 read error: -71 [ 452.418412][ T607] uclogic 0003:256C:006D.0078: failed retrieving string descriptor #200: -71 [ 452.428055][ T607] uclogic 0003:256C:006D.0078: failed retrieving pen parameters: -71 [ 452.436857][ T607] uclogic 0003:256C:006D.0078: failed probing pen v2 parameters: -71 [ 452.446156][ T607] uclogic 0003:256C:006D.0078: failed probing parameters: -71 [ 452.454663][ T607] uclogic: probe of 0003:256C:006D.0078 failed with error -71 [ 452.476109][ T607] usb 1-1: USB disconnect, device number 63 [ 452.946778][T10596] loop2: detected capacity change from 0 to 131072 [ 453.009944][T10604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10604 comm=syz.3.3338 [ 453.015069][T10596] F2FS-fs (loop2): invalid crc value [ 453.082525][T10596] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 453.168186][ T607] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 453.186331][T10596] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 453.645283][T10614] loop4: detected capacity change from 0 to 512 [ 453.704135][T10614] EXT4-fs (loop4): 1 truncate cleaned up [ 453.710019][T10614] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 453.769878][T10619] loop1: detected capacity change from 0 to 512 [ 453.808294][ T607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.857835][T10619] EXT4-fs (loop1): 1 truncate cleaned up [ 453.865854][T10619] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 453.865933][ T607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.199630][ T607] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 454.229037][ T607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.240877][ T607] usb 1-1: config 0 descriptor?? [ 454.269050][T10629] loop3: detected capacity change from 0 to 128 [ 455.593211][T10629] attempt to access beyond end of device [ 455.593211][T10629] loop3: rw=2049, want=241, limit=128 [ 455.607270][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3345'. [ 455.671301][T10633] attempt to access beyond end of device [ 455.671301][T10633] loop3: rw=524288, want=193, limit=128 [ 455.722722][ T437] attempt to access beyond end of device [ 455.722722][ T437] loop3: rw=1, want=153, limit=128 [ 455.739817][ T607] hid-steam 0003:28DE:1142.0079: unknown main item tag 0x0 [ 455.749558][ T607] hid-steam 0003:28DE:1142.0079: unknown main item tag 0x0 [ 455.757005][ T607] hid-steam 0003:28DE:1142.0079: unknown main item tag 0x0 [ 456.094452][ T607] hid-steam 0003:28DE:1142.0079: unknown main item tag 0x0 [ 456.102959][ T607] hid-steam 0003:28DE:1142.0079: unknown main item tag 0x0 [ 456.112421][ T607] hid-steam 0003:28DE:1142.0079: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 456.126548][ T607] usb 1-1: USB disconnect, device number 64 [ 456.258159][ T20] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 456.530402][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 456.545363][T10655] loop4: detected capacity change from 0 to 512 [ 456.626297][T10655] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 456.646694][T10655] ext4 filesystem being mounted at /29/bus supports timestamps until 2038 (0x7fffffff) [ 456.658232][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.689834][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.718211][ T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 456.748151][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.780163][ T20] usb 2-1: config 0 descriptor?? [ 456.827042][T10673] loop3: detected capacity change from 0 to 16 [ 456.863014][T10673] erofs: Unknown parameter 'v @lJpHʫPXmʦ' [ 456.909239][T10661] loop2: detected capacity change from 0 to 40427 [ 456.949714][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3357'. [ 456.978256][T10661] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 457.021877][T10661] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 457.046440][T10661] F2FS-fs (loop2): invalid crc value [ 457.053448][T10681] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.061337][T10681] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.089320][T10661] F2FS-fs (loop2): Found nat_bits in checkpoint [ 457.178638][T10661] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 457.191650][T10661] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 457.750916][ T20] usb 2-1: string descriptor 0 read error: -22 [ 457.778356][T10705] device veth1_macvtap left promiscuous mode [ 457.785312][T10705] device macsec0 entered promiscuous mode [ 457.833909][T10707] device veth1_macvtap entered promiscuous mode [ 457.846580][T10707] device macsec0 left promiscuous mode [ 458.008161][ T20] uclogic 0003:256C:006D.007A: failed retrieving string descriptor #100: -71 [ 458.021196][ T20] uclogic 0003:256C:006D.007A: failed retrieving pen parameters: -71 [ 458.044649][ T20] uclogic 0003:256C:006D.007A: failed probing pen v1 parameters: -71 [ 458.057880][T10713] loop4: detected capacity change from 0 to 512 [ 458.066770][ T20] uclogic 0003:256C:006D.007A: failed probing parameters: -71 [ 458.085462][ T20] uclogic: probe of 0003:256C:006D.007A failed with error -71 [ 458.101797][ T20] usb 2-1: USB disconnect, device number 59 [ 458.119433][T10713] EXT4-fs (loop4): Mount option "dioread_nolock" incompatible with ext3 [ 458.359674][ T30] audit: type=1400 audit(2000000125.400:859): avc: denied { bind } for pid=10712 comm="syz.4.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.458123][ T378] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 458.521724][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3369'. [ 458.597098][T10730] loop0: detected capacity change from 0 to 512 [ 458.616877][T10723] loop2: detected capacity change from 0 to 40427 [ 458.689091][T10723] F2FS-fs (loop2): Unrecognized mount option "00000000000000000000000" or missing value [ 458.712061][T10730] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 458.712061][T10730] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 458.712061][T10730] [ 458.805521][T10730] EXT4-fs (loop0): 1 orphan inode deleted [ 458.816098][T10730] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,nodiscard,nodelalloc,init_itable,stripe=0x0000000000000003,resgid=0x0000000000000000,sysvgroups,nouser_xattr,usrquota,,errors=continue. Quota mode: writeback. [ 458.848951][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.861150][T10730] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 458.902865][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.918610][T10727] loop1: detected capacity change from 0 to 40427 [ 458.970049][T10727] F2FS-fs (loop1): invalid crc value [ 458.977861][T10727] F2FS-fs (loop1): invalid journal entries nats 0 sits 78 [ 458.986187][T10727] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-22) [ 459.015648][ T378] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 459.025287][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.026293][T10740] loop4: detected capacity change from 0 to 512 [ 459.035076][ T378] usb 4-1: config 0 descriptor?? [ 459.404644][ T607] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 459.411264][T10740] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 459.426023][T10740] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff) [ 459.506952][ T30] audit: type=1400 audit(2000000126.520:860): avc: denied { ioctl } for pid=10726 comm="syz.1.3370" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 459.538952][T10727] binder_alloc: 10726: binder_alloc_buf, no vma [ 459.554754][ T30] audit: type=1400 audit(2000000126.520:861): avc: denied { set_context_mgr } for pid=10726 comm="syz.1.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 459.577283][ T30] audit: type=1400 audit(2000000126.580:862): avc: denied { call } for pid=10726 comm="syz.1.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 459.603869][ T30] audit: type=1400 audit(2000000126.580:863): avc: denied { bind } for pid=10726 comm="syz.1.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 459.627700][T10749] fuse: Bad value for 'fd' [ 459.633180][T10749] fuse: Bad value for 'fd' [ 459.637971][T10747] loop1: detected capacity change from 0 to 512 [ 459.638214][T10749] fuse: Bad value for 'fd' [ 459.649114][T10749] fuse: Bad value for 'fd' [ 459.654441][T10749] fuse: Bad value for 'fd' [ 459.659551][T10749] fuse: Bad value for 'fd' [ 459.670564][T10749] fuse: Bad value for 'fd' [ 459.675326][T10749] fuse: Bad value for 'fd' [ 459.682212][ T378] hid-steam 0003:28DE:1142.007B: unknown main item tag 0x0 [ 459.686564][T10749] fuse: Bad value for 'fd' [ 459.691676][ T378] hid-steam 0003:28DE:1142.007B: unknown main item tag 0x0 [ 459.695698][T10749] fuse: Bad value for 'fd' [ 459.708522][ T378] hid-steam 0003:28DE:1142.007B: unknown main item tag 0x0 [ 459.716734][ T378] hid-steam 0003:28DE:1142.007B: unknown main item tag 0x0 [ 459.725692][ T378] hid-steam 0003:28DE:1142.007B: unknown main item tag 0x0 [ 459.727875][T10749] fuse: Bad value for 'fd' [ 459.741777][ T378] hid-steam 0003:28DE:1142.007B: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 459.778427][ T607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.801246][ T607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.814045][ T607] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 459.825239][ T607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.840673][ T607] usb 3-1: config 0 descriptor?? [ 459.888184][ T378] usb 4-1: USB disconnect, device number 62 [ 460.485847][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3380'. [ 460.538418][T10581] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 460.778338][ T607] usb 3-1: string descriptor 0 read error: -71 [ 460.798246][ T607] uclogic 0003:256C:006D.007C: failed retrieving string descriptor #200: -71 [ 460.809622][ T607] uclogic 0003:256C:006D.007C: failed retrieving pen parameters: -71 [ 460.820656][ T607] uclogic 0003:256C:006D.007C: failed probing pen v2 parameters: -71 [ 460.830739][ T607] uclogic 0003:256C:006D.007C: failed probing parameters: -71 [ 460.839501][ T607] uclogic: probe of 0003:256C:006D.007C failed with error -71 [ 460.851085][ T607] usb 3-1: USB disconnect, device number 63 [ 460.918171][ T6] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 460.928420][T10581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.945721][T10581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.959065][T10581] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 460.968823][T10581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.979727][T10581] usb 5-1: config 0 descriptor?? [ 461.158167][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 461.278270][ T6] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 461.287586][ T6] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 461.299051][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 461.468269][ T6] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.478780][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.489652][ T6] usb 2-1: Product: syz [ 461.494825][ T6] usb 2-1: Manufacturer: syz [ 461.502256][ T6] usb 2-1: SerialNumber: syz [ 461.668340][T10581] usb 5-1: string descriptor 0 read error: -22 [ 461.754163][T10776] loop1: detected capacity change from 0 to 512 [ 461.859849][T10776] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 461.871157][T10776] System zones: 0-2, 18-18, 34-35 [ 461.878806][T10776] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 461.893458][T10776] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 462.068250][ T6] usb 2-1: 0:2 : does not exist [ 462.076360][ T6] usb 2-1: USB disconnect, device number 60 [ 462.085253][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 462.101516][T10581] uclogic 0003:256C:006D.007D: failed retrieving string descriptor #100: -71 [ 462.111265][T10581] uclogic 0003:256C:006D.007D: failed retrieving pen parameters: -71 [ 462.120181][T10581] uclogic 0003:256C:006D.007D: failed probing pen v1 parameters: -71 [ 462.129642][T10581] uclogic 0003:256C:006D.007D: failed probing parameters: -71 [ 462.137929][T10581] uclogic: probe of 0003:256C:006D.007D failed with error -71 [ 462.147662][T10581] usb 5-1: USB disconnect, device number 60 [ 462.321368][T10801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3391'. [ 462.468203][ T299] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 462.519095][T10235] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 462.582300][T10235] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 462.607345][T10235] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 462.632795][T10235] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 462.654619][T10235] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 462.678512][T10235] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 462.702676][T10235] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 462.725610][T10235] EXT4-fs error (device loop1): ext4_map_blocks:602: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 462.868313][ T299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.881288][ T299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.892109][ T299] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 462.901201][ T299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.910183][ T299] usb 3-1: config 0 descriptor?? [ 462.965635][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.972845][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.981383][T10815] device bridge_slave_0 entered promiscuous mode [ 462.989442][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.996582][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.004428][T10815] device bridge_slave_1 entered promiscuous mode [ 463.095751][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.106528][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.116181][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.123267][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.165765][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.175080][ T861] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.183404][ T861] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.236561][ T30] audit: type=1326 audit(2000000130.270:864): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.270941][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.285854][ T30] audit: type=1326 audit(2000000130.270:865): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.311765][ T30] audit: type=1326 audit(2000000130.270:866): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.333146][ T861] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.341967][ T30] audit: type=1326 audit(2000000130.270:867): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.345100][ T861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.371575][ T30] audit: type=1326 audit(2000000130.270:868): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.379809][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.405103][ T30] audit: type=1326 audit(2000000130.270:869): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.437207][ T30] audit: type=1326 audit(2000000130.270:870): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.439791][ T299] hid-steam 0003:28DE:1142.007E: unknown main item tag 0x0 [ 463.469071][ T30] audit: type=1326 audit(2000000130.270:871): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.469149][ T861] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.496136][ T30] audit: type=1326 audit(2000000130.270:872): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.502390][ T861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.527037][ T30] audit: type=1326 audit(2000000130.270:873): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.533893][ T299] hid-steam 0003:28DE:1142.007E: unknown main item tag 0x0 [ 463.567482][ T299] hid-steam 0003:28DE:1142.007E: unknown main item tag 0x0 [ 463.574656][ T299] hid-steam 0003:28DE:1142.007E: unknown main item tag 0x0 [ 463.589296][ T299] hid-steam 0003:28DE:1142.007E: unknown main item tag 0x0 [ 463.600023][ T30] audit: type=1326 audit(2000000130.270:874): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.601417][ T299] hid-steam 0003:28DE:1142.007E: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 463.664642][ T30] audit: type=1326 audit(2000000130.270:875): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.676071][T10815] device veth0_vlan entered promiscuous mode [ 463.692368][ T30] audit: type=1326 audit(2000000130.270:876): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.701383][ T299] usb 3-1: USB disconnect, device number 64 [ 463.722576][ T30] audit: type=1326 audit(2000000130.270:877): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cad29f9 code=0x7ffc0000 [ 463.761348][T10581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 463.770634][T10581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 463.779301][T10581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 463.788307][T10581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 463.796971][T10581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.811157][T10581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 463.822037][ T45] device bridge_slave_1 left promiscuous mode [ 463.828875][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.838469][ T45] device bridge_slave_0 left promiscuous mode [ 463.846077][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.856892][ T45] device veth1_macvtap left promiscuous mode [ 463.934931][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 463.944182][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 463.956715][T10815] device veth1_macvtap entered promiscuous mode [ 463.969193][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 463.977621][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.987452][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 464.003207][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 464.012754][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 464.219325][T10837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3403'. [ 464.236555][T10837] loop2: detected capacity change from 0 to 256 [ 464.266672][T10842] usb usb8: usbfs: process 10842 (syz.0.3404) did not claim interface 0 before use [ 464.285058][T10837] FAT-fs (loop2): Directory bread(block 64) failed [ 464.292182][T10837] FAT-fs (loop2): Directory bread(block 65) failed [ 464.298214][ T299] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 464.299070][T10837] FAT-fs (loop2): Directory bread(block 66) failed [ 464.314388][T10837] FAT-fs (loop2): Directory bread(block 67) failed [ 464.321581][T10837] FAT-fs (loop2): Directory bread(block 68) failed [ 464.328891][T10837] FAT-fs (loop2): Directory bread(block 69) failed [ 464.335882][T10837] FAT-fs (loop2): Directory bread(block 70) failed [ 464.342783][T10837] FAT-fs (loop2): Directory bread(block 71) failed [ 464.350078][T10837] FAT-fs (loop2): Directory bread(block 72) failed [ 464.356305][T10837] FAT-fs (loop2): Directory bread(block 73) failed [ 464.677831][T10848] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 464.689865][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.773545][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.786139][ T299] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 464.825857][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.842244][ T299] usb 2-1: config 0 descriptor?? [ 464.898663][ T6] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 465.336216][ T299] hid-steam 0003:28DE:1142.007F: unknown main item tag 0x0 [ 465.372149][ T299] hid-steam 0003:28DE:1142.007F: unknown main item tag 0x0 [ 465.380004][ T299] hid-steam 0003:28DE:1142.007F: unknown main item tag 0x0 [ 465.388489][ T299] hid-steam 0003:28DE:1142.007F: unknown main item tag 0x0 [ 465.396882][ T299] hid-steam 0003:28DE:1142.007F: unknown main item tag 0x0 [ 465.405217][ T299] hid-steam 0003:28DE:1142.007F: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 465.528526][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.536276][ T299] usb 2-1: USB disconnect, device number 61 [ 465.542134][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.560907][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 465.570756][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.581070][ T6] usb 3-1: config 0 descriptor?? [ 466.188450][ T503] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 466.298279][ T6] usb 3-1: string descriptor 0 read error: -22 [ 466.548318][ T503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.561225][ T503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.571001][ T503] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 466.580108][ T503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.588856][ T503] usb 1-1: config 0 descriptor?? [ 466.738208][T10581] Bluetooth: hci0: command 0x1003 tx timeout [ 466.738231][ T6] uclogic 0003:256C:006D.0080: failed retrieving string descriptor #100: -71 [ 466.744177][T10399] Bluetooth: hci0: sending frame failed (-49) [ 466.753219][ T6] uclogic 0003:256C:006D.0080: failed retrieving pen parameters: -71 [ 466.767970][ T6] uclogic 0003:256C:006D.0080: failed probing pen v1 parameters: -71 [ 466.775968][ T6] uclogic 0003:256C:006D.0080: failed probing parameters: -71 [ 466.783338][ T6] uclogic: probe of 0003:256C:006D.0080 failed with error -71 [ 466.794270][ T6] usb 3-1: USB disconnect, device number 65 [ 467.255800][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3415'. [ 467.268410][T10873] loop2: detected capacity change from 0 to 256 [ 467.288725][T10581] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 467.336958][T10873] FAT-fs (loop2): Directory bread(block 64) failed [ 467.344502][T10873] FAT-fs (loop2): Directory bread(block 65) failed [ 467.352161][T10873] FAT-fs (loop2): Directory bread(block 66) failed [ 467.359149][T10873] FAT-fs (loop2): Directory bread(block 67) failed [ 467.366745][T10873] FAT-fs (loop2): Directory bread(block 68) failed [ 467.374489][T10873] FAT-fs (loop2): Directory bread(block 69) failed [ 467.381022][T10873] FAT-fs (loop2): Directory bread(block 70) failed [ 467.388224][T10873] FAT-fs (loop2): Directory bread(block 71) failed [ 467.394739][T10873] FAT-fs (loop2): Directory bread(block 72) failed [ 467.401344][T10873] FAT-fs (loop2): Directory bread(block 73) failed [ 467.528271][ T503] usb 1-1: string descriptor 0 read error: -71 [ 467.548466][ T503] uclogic 0003:256C:006D.0081: failed retrieving string descriptor #200: -71 [ 467.557213][ T503] uclogic 0003:256C:006D.0081: failed retrieving pen parameters: -71 [ 467.565245][ T503] uclogic 0003:256C:006D.0081: failed probing pen v2 parameters: -71 [ 467.574236][ T503] uclogic 0003:256C:006D.0081: failed probing parameters: -71 [ 467.581608][ T503] uclogic: probe of 0003:256C:006D.0081 failed with error -71 [ 467.590903][ T503] usb 1-1: USB disconnect, device number 65 [ 467.748324][T10581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.762260][T10581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.771902][T10581] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 467.782425][T10581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.793599][T10581] usb 2-1: config 0 descriptor?? [ 468.280207][T10581] hid-steam 0003:28DE:1142.0082: unknown main item tag 0x0 [ 468.288472][T10581] hid-steam 0003:28DE:1142.0082: unknown main item tag 0x0 [ 468.298399][T10581] hid-steam 0003:28DE:1142.0082: unknown main item tag 0x0 [ 468.310912][T10581] hid-steam 0003:28DE:1142.0082: unknown main item tag 0x0 [ 468.322429][T10581] hid-steam 0003:28DE:1142.0082: unknown main item tag 0x0 [ 468.331299][T10581] hid-steam 0003:28DE:1142.0082: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 468.479951][ T503] usb 2-1: USB disconnect, device number 62 [ 468.638217][T10581] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 468.818360][ T299] Bluetooth: hci0: command 0x1001 tx timeout [ 468.825242][T10399] Bluetooth: hci0: sending frame failed (-49) [ 468.898336][T10581] usb 3-1: Using ep0 maxpacket: 16 [ 469.098253][T10581] usb 3-1: config 91 has an invalid descriptor of length 0, skipping remainder of the config [ 469.110537][T10581] usb 3-1: config 91 has 0 interfaces, different from the descriptor's value: 2 [ 469.318330][T10581] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 469.332096][T10581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.344617][T10581] usb 3-1: Product: syz [ 469.349975][T10581] usb 3-1: Manufacturer: ͦᨕペ禋挑儒꺤캴汉槴䡸乸䏝횯훺㓢失厷垒Ȯ⾽뚥왭巻噺㕴푁㲚卌ﴍ㥎证ᗡމ룛嚣꣪鵥ɡ듄䮻⃈ⲳ뜚ꊷꟼ牧篑싻읽ժ탽诡磑幰ꆘА줫䊍ޭ팑鉩 [ 469.380989][T10581] usb 3-1: SerialNumber: syz [ 469.643213][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 469.643267][ T30] audit: type=1400 audit(2000000136.680:896): avc: denied { bind } for pid=10883 comm="syz.2.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 469.654589][T10884] loop2: detected capacity change from 0 to 512 [ 469.742607][T10884] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.3419: corrupted inode contents [ 469.759286][T10884] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #16: comm syz.2.3419: mark_inode_dirty error [ 469.776289][T10884] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.3419: corrupted inode contents [ 469.789859][T10884] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.3419: mark_inode_dirty error [ 469.803950][T10884] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.3419: corrupted inode contents [ 469.823089][T10884] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 469.833885][T10884] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.3419: corrupted inode contents [ 469.853352][T10899] loop0: detected capacity change from 0 to 128 [ 469.863126][T10884] EXT4-fs error (device loop2): ext4_truncate:4292: inode #16: comm syz.2.3419: mark_inode_dirty error [ 469.878538][T10884] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 469.893995][T10899] EXT4-fs (loop0): Test dummy encryption mode enabled [ 469.908735][T10884] EXT4-fs (loop2): 1 truncate cleaned up [ 469.916541][T10899] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 469.929976][T10884] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 469.942278][T10899] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038 (0x7fffffff) [ 469.953721][T10884] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 470.047382][T10902] loop1: detected capacity change from 0 to 40427 [ 470.086644][T10902] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 470.098533][T10902] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 470.112088][T10902] F2FS-fs (loop1): Found nat_bits in checkpoint [ 470.120704][T10581] usb 3-1: USB disconnect, device number 66 [ 470.145476][T10902] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 470.156239][T10902] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 470.267859][ T30] audit: type=1400 audit(2000000137.300:897): avc: denied { setopt } for pid=10901 comm="syz.1.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 470.378204][ T503] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 470.668174][ T503] usb 1-1: Using ep0 maxpacket: 32 [ 470.718264][T10815] attempt to access beyond end of device [ 470.718264][T10815] loop1: rw=2049, want=45104, limit=40427 [ 470.788231][ T503] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 470.801056][T10915] tipc: Enabling of bearer rejected, failed to enable media [ 470.810762][ T503] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 470.829199][ T503] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.898331][T10581] Bluetooth: hci0: command 0x1009 tx timeout [ 471.008219][ T503] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.021467][ T503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.030610][ T503] usb 1-1: Product: syz [ 471.036251][ T503] usb 1-1: Manufacturer: syz [ 471.042965][ T503] usb 1-1: SerialNumber: syz [ 471.218181][ T20] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 471.303355][T10906] loop0: detected capacity change from 0 to 512 [ 471.360092][T10906] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 471.368681][T10906] System zones: 0-2, 18-18, 34-35 [ 471.374705][T10906] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 471.390192][T10906] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 471.489091][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 471.568281][ T503] usb 1-1: 0:2 : does not exist [ 471.587550][ T503] usb 1-1: USB disconnect, device number 66 [ 471.608325][ T20] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 471.617665][ T20] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 471.632944][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.683985][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.691599][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.699780][T10925] device bridge_slave_0 entered promiscuous mode [ 471.707305][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.714689][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.722820][T10925] device bridge_slave_1 entered promiscuous mode [ 471.726075][T10924] loop2: detected capacity change from 0 to 40427 [ 471.758942][T10924] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 471.769032][T10924] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 471.782216][T10924] F2FS-fs (loop2): invalid crc value [ 471.792853][T10924] F2FS-fs (loop2): Found nat_bits in checkpoint [ 471.808288][ T20] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.820302][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.829727][ T20] usb 2-1: Product: syz [ 471.835507][ T20] usb 2-1: Manufacturer: syz [ 471.840270][ T20] usb 2-1: SerialNumber: syz [ 471.846759][T10924] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 471.855453][T10924] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 471.883965][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.891796][T10925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.899866][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.907881][T10925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.943524][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.952070][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.959714][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.974330][T10446] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 471.978910][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.010096][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.017093][T10446] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 472.018790][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.059241][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.068265][T10446] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 472.069150][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.097755][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.107855][T10446] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 472.143352][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.148463][T10446] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 472.152381][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.183463][T10446] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 472.210019][T10936] loop1: detected capacity change from 0 to 512 [ 472.222244][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.231531][T10446] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 472.232273][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 472.264269][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 472.275251][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 472.283829][T10446] EXT4-fs error (device loop0): ext4_map_blocks:602: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 472.284437][T10925] device veth0_vlan entered promiscuous mode [ 472.308686][T10936] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 472.326487][T10936] System zones: 0-2, 18-18, 34-35 [ 472.336744][T10581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.346161][T10936] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 472.365777][T10936] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 472.475684][T10925] device veth1_macvtap entered promiscuous mode [ 472.490269][ T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.508486][ T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.541480][ T45] device bridge_slave_1 left promiscuous mode [ 472.558371][ T20] usb 2-1: 0:2 : does not exist [ 472.565324][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.575421][ T20] usb 2-1: USB disconnect, device number 63 [ 472.605611][ T45] device bridge_slave_0 left promiscuous mode [ 472.626382][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.648967][ T45] device veth1_macvtap left promiscuous mode [ 472.655070][ T45] device veth0_vlan left promiscuous mode [ 472.764300][T10944] kvm: emulating exchange as write [ 472.918796][T10947] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.926769][T10947] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.935611][T10947] device bridge_slave_0 entered promiscuous mode [ 472.944082][T10947] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.952480][T10947] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.955472][T10815] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 472.962044][T10947] device bridge_slave_1 entered promiscuous mode [ 472.983209][T10815] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 473.010942][T10815] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 473.032960][T10815] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 473.056051][T10815] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 473.079181][T10815] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 473.101842][T10815] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 473.125691][T10815] EXT4-fs error (device loop1): ext4_map_blocks:602: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 473.222648][T10947] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.231220][T10947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.238572][T10947] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.246807][T10947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.285779][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.297644][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.322039][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.349619][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.361505][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.372984][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.392668][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.402857][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.410427][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.435650][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.445591][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.487228][T10959] loop3: detected capacity change from 0 to 16 [ 473.498706][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 473.509951][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 473.521325][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 473.530129][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.540019][T10947] device veth0_vlan entered promiscuous mode [ 473.562243][T10959] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 473.574595][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.586473][T10947] device veth1_macvtap entered promiscuous mode [ 473.629626][T10959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10959 comm=syz.3.3437 [ 473.654234][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.670889][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.707404][T10957] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.715973][T10957] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.724561][T10957] device bridge_slave_0 entered promiscuous mode [ 473.744052][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.757058][T10957] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.770582][T10957] device bridge_slave_1 entered promiscuous mode [ 474.704885][T10974] loop0: detected capacity change from 0 to 256 [ 474.713661][T10581] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 474.760622][T10974] exfat: Unknown parameter 'syzkaller' [ 474.991022][ T45] device bridge_slave_1 left promiscuous mode [ 475.016343][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.024626][ T45] device bridge_slave_0 left promiscuous mode [ 475.030946][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.039966][ T45] device veth1_macvtap left promiscuous mode [ 475.193587][T10581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.206076][ T861] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 475.214974][T10581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.226697][T10581] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 475.236874][T10581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.321260][T10581] usb 4-1: config 0 descriptor?? [ 475.340531][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.351853][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.573567][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.583168][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.593449][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.601796][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.609745][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.620983][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.630359][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.638873][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.648184][ T861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.654332][T10980] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.661052][ T861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.678472][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.686512][T10980] device bridge_slave_0 entered promiscuous mode [ 475.694628][T10980] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.703057][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.710979][T10980] device bridge_slave_1 entered promiscuous mode [ 475.717423][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.725829][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 475.734952][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 475.748426][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 475.757317][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 475.779022][ T861] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 475.790762][ T861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 475.800686][ T861] usb 1-1: SerialNumber: syz [ 475.810135][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.820224][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.849687][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 475.859803][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 475.871364][T10957] device veth0_vlan entered promiscuous mode [ 475.880579][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 475.890362][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 475.925537][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.935873][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.981933][T10957] device veth1_macvtap entered promiscuous mode [ 476.005965][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 476.021557][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 476.030685][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 476.065158][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 476.074308][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 476.103866][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 476.112500][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.134965][T10991] loop1: detected capacity change from 0 to 2048 [ 476.145102][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.154318][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.163750][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.170940][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.178961][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 476.192976][T10991] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 476.210523][T10991] syz.1.3445[10991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.210634][T10991] syz.1.3445[10991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.225712][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.249707][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.259811][T10976] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.267708][T10976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.278137][ T608] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 476.306859][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.316848][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.334712][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.335046][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.369340][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 476.380697][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.398283][T10581] usb 4-1: string descriptor 0 read error: -71 [ 476.418861][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.428207][T10581] uclogic 0003:256C:006D.0083: failed retrieving string descriptor #200: -71 [ 476.440971][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.454168][T10581] uclogic 0003:256C:006D.0083: failed retrieving pen parameters: -71 [ 476.475111][T10581] uclogic 0003:256C:006D.0083: failed probing pen v2 parameters: -71 [ 476.488777][T10581] uclogic 0003:256C:006D.0083: failed probing parameters: -71 [ 476.499482][T10581] uclogic: probe of 0003:256C:006D.0083 failed with error -71 [ 476.510764][T10581] usb 4-1: USB disconnect, device number 63 [ 476.518596][ T608] usb 3-1: Using ep0 maxpacket: 8 [ 476.532441][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.544188][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.561781][T10980] device veth0_vlan entered promiscuous mode [ 476.577143][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 476.586090][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 476.600469][T10980] device veth1_macvtap entered promiscuous mode [ 476.614302][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 476.623731][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 476.633046][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 476.643859][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 476.653617][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 476.658189][ T608] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 476.672856][ T608] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 476.688518][ T607] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 476.708805][ T30] audit: type=1326 audit(2000000143.750:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c52db9f9 code=0x7ffc0000 [ 476.741898][ T30] audit: type=1326 audit(2000000143.750:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c52db9f9 code=0x7ffc0000 [ 476.742729][T10998] loop4: detected capacity change from 0 to 2048 [ 476.772388][ T30] audit: type=1326 audit(2000000143.750:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f50c52db9f9 code=0x7ffc0000 [ 476.809339][ T30] audit: type=1326 audit(2000000143.750:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c52db9f9 code=0x7ffc0000 [ 476.843743][ T30] audit: type=1326 audit(2000000143.750:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f50c52db9f9 code=0x7ffc0000 [ 476.843903][ T45] device bridge_slave_1 left promiscuous mode [ 476.869734][ T30] audit: type=1326 audit(2000000143.750:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f50c52dba33 code=0x7ffc0000 [ 476.877395][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.909913][ T30] audit: type=1326 audit(2000000143.750:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f50c52da4df code=0x7ffc0000 [ 476.921607][T10998] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3441: bad orphan inode 8192 [ 476.935241][ T30] audit: type=1326 audit(2000000143.760:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f50c52dba87 code=0x7ffc0000 [ 476.946089][T10998] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 476.969253][ T607] usb 2-1: Using ep0 maxpacket: 8 [ 476.980500][ T45] device bridge_slave_0 left promiscuous mode [ 476.985405][ T30] audit: type=1326 audit(2000000143.780:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50c52da390 code=0x7ffc0000 [ 476.990773][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.026611][ T45] device bridge_slave_1 left promiscuous mode [ 477.032813][ T30] audit: type=1326 audit(2000000143.780:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50c52db5fb code=0x7ffc0000 [ 477.038441][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.071130][ T45] device bridge_slave_0 left promiscuous mode [ 477.078837][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.089861][ T45] device veth1_macvtap left promiscuous mode [ 477.097051][ T45] device veth0_vlan left promiscuous mode [ 477.103405][ T45] device veth1_macvtap left promiscuous mode [ 477.111799][ T861] usb 1-1: cannot find UAC_HEADER [ 477.119224][ T45] device veth0_vlan left promiscuous mode [ 477.127359][ T861] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 477.135571][ T608] usb 3-1: string descriptor 0 read error: -22 [ 477.143512][ T608] usb 3-1: Dual-Role OTG device on HNP port [ 477.148331][ T607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.152437][ T861] usb 1-1: USB disconnect, device number 67 [ 477.188256][ T608] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 477.201664][ T26] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 477.210754][ T608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.222809][ T608] usb 3-1: config 0 descriptor?? [ 477.238359][ T607] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 477.249986][ T607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 477.259098][ T607] usb 2-1: SerialNumber: syz [ 477.275480][ T607] usb 2-1: config 0 descriptor?? [ 477.275614][ T608] hub 3-1:0.0: bad descriptor, ignoring hub [ 477.292368][ T608] hub: probe of 3-1:0.0 failed with error -5 [ 477.301882][ T608] usb 3-1: Found UVC 0.00 device (17dc:0202) [ 477.313103][ T608] usb 3-1: No valid video chain found. [ 477.558250][ T607] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 477.567084][ T607] usb 2-1: No valid video chain found. [ 477.576526][ T607] usb 2-1: USB disconnect, device number 64 [ 477.588342][ T20] usb 3-1: USB disconnect, device number 67 [ 477.608477][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.633914][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.645880][ T26] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 477.658828][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.669130][ T26] usb 4-1: config 0 descriptor?? [ 477.968146][ T861] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 478.167812][T11017] loop0: detected capacity change from 0 to 40427 [ 478.169797][T11019] loop2: detected capacity change from 0 to 40427 [ 478.183453][T11017] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 478.193354][T11017] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 478.197671][T11019] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 478.214899][T11019] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 478.215205][T11017] F2FS-fs (loop0): Found nat_bits in checkpoint [ 478.226211][T11019] F2FS-fs (loop2): Found nat_bits in checkpoint [ 478.263957][T11017] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 478.270454][T11019] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 478.271494][T11017] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 478.279744][T11019] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 478.402001][ T861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.417175][ T861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.429076][ T861] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 478.441570][ T861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.453149][ T861] usb 5-1: config 0 descriptor?? [ 478.888939][ T26] usb 4-1: string descriptor 0 read error: -71 [ 479.103200][ T26] uclogic 0003:256C:006D.0084: failed retrieving string descriptor #200: -71 [ 479.131580][ T26] uclogic 0003:256C:006D.0084: failed retrieving pen parameters: -71 [ 479.158326][ T26] uclogic 0003:256C:006D.0084: failed probing pen v2 parameters: -71 [ 479.170367][ T26] uclogic 0003:256C:006D.0084: failed probing parameters: -71 [ 479.182667][T11014] tmpfs: Unknown parameter 'h' [ 479.197062][T11014] loop4: detected capacity change from 0 to 256 [ 479.213728][ T26] uclogic: probe of 0003:256C:006D.0084 failed with error -71 [ 479.230264][ T26] usb 4-1: USB disconnect, device number 64 [ 479.262139][T11014] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 479.283237][T11041] overlayfs: missing 'lowerdir' [ 479.388273][ T6] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 479.539503][ T861] appleir 0003:05AC:8240.0085: unknown main item tag 0x0 [ 479.548488][ T861] appleir 0003:05AC:8240.0085: item fetching failed at offset 3/5 [ 479.557653][ T861] appleir 0003:05AC:8240.0085: parse failed [ 479.569253][ T861] appleir: probe of 0003:05AC:8240.0085 failed with error -22 [ 479.638203][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 479.747295][ T607] usb 5-1: USB disconnect, device number 61 [ 479.758167][ T6] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 479.769058][ T6] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 479.781886][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.868184][ T861] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 479.948476][ T6] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 479.959101][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.968487][ T6] usb 2-1: Product: syz [ 479.973226][ T6] usb 2-1: Manufacturer: syz [ 479.977713][ T6] usb 2-1: SerialNumber: syz [ 480.222757][T11039] loop1: detected capacity change from 0 to 512 [ 480.238270][ T861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.249924][ T861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.261441][ T861] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 480.272259][ T861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.285333][ T861] usb 1-1: config 0 descriptor?? [ 480.292707][T11039] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 480.303400][T11039] System zones: 0-2, 18-18, 34-35 [ 480.312186][T11039] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 480.328619][T11039] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 480.386556][T11076] loop3: detected capacity change from 0 to 1024 [ 480.402399][T11076] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 480.420910][T11076] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,jqfmt=vfsold,bsdgroups,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 480.475906][T11076] EXT4-fs error (device loop3): ext4_lookup:1855: inode #12: comm syz.3.3465: iget: bad extended attribute block 768799145984 [ 480.493371][T11076] EXT4-fs error (device loop3): ext4_lookup:1855: inode #12: comm syz.3.3465: iget: bad extended attribute block 768799145984 [ 480.551126][T11082] loop3: detected capacity change from 0 to 512 [ 480.559767][ T6] usb 2-1: 0:2 : does not exist [ 480.572298][ T6] usb 2-1: USB disconnect, device number 65 [ 480.617500][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 480.759754][ T861] hid-steam 0003:28DE:1142.0086: unknown main item tag 0x0 [ 480.768933][ T861] hid-steam 0003:28DE:1142.0086: unknown main item tag 0x0 [ 480.781376][ T861] hid-steam 0003:28DE:1142.0086: unknown main item tag 0x0 [ 480.790918][ T861] hid-steam 0003:28DE:1142.0086: unknown main item tag 0x0 [ 480.801414][ T861] hid-steam 0003:28DE:1142.0086: unknown main item tag 0x0 [ 480.811202][ T861] hid-steam 0003:28DE:1142.0086: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 480.951024][T10957] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 480.975313][ T861] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 480.975804][T10957] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 480.986426][T10976] usb 1-1: USB disconnect, device number 68 [ 481.012829][T10957] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 481.036728][T10957] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 481.063515][T10957] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 481.097115][T10957] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 481.121886][T10957] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 481.146791][T10957] EXT4-fs error (device loop1): ext4_map_blocks:602: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 481.229052][T11097] loop4: detected capacity change from 0 to 128 [ 481.324503][T11099] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 481.338537][T11099] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 481.348127][T11099] CPU: 0 PID: 11099 Comm: syz.2.3471 Not tainted 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 481.350050][T10980] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000074f) [ 481.360313][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 481.360340][T11099] RIP: 0010:bpf_check+0x9514/0x12bf0 [ 481.360380][T11099] Code: 24 70 80 3c 08 00 74 08 4c 89 ef e8 a6 af 30 00 49 8b 75 00 89 df 41 ff d6 48 89 c3 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 7e af 30 00 48 8b 1b 48 85 db 0f 84 [ 481.360398][T11099] RSP: 0018:ffffc90000947500 EFLAGS: 00010246 [ 481.383200][T10980] FAT-fs (loop4): Filesystem has been set read-only [ 481.385387][T11099] [ 481.385396][T11099] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 481.427714][T10980] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000074f) [ 481.431946][T11099] RDX: ffff88811a638000 RSI: 00000000fffffff3 RDI: 0000000000000000 [ 481.431976][T11099] RBP: ffffc90000947bd0 R08: ffffffff817c0aeb R09: 0000000000000003 [ 481.431989][T11099] R10: fffff52000128d6c R11: dffffc0000000001 R12: 1ffff92000015212 [ 481.432003][T11099] R13: ffff88810eeb8008 R14: ffffffff817bc3d0 R15: ffffc900000a9094 [ 481.432018][T11099] FS: 00007f9f91a796c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 481.432035][T11099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.491994][T11099] CR2: 0000000020002b00 CR3: 0000000134ffa000 CR4: 00000000003506b0 [ 481.500347][T11099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 481.509176][T11099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 481.517413][T11099] Call Trace: [ 481.521236][T11099] [ 481.524152][T11099] ? __die_body+0x62/0xb0 [ 481.528772][T11099] ? die_addr+0x9f/0xd0 [ 481.533542][T11099] ? exc_general_protection+0x311/0x4b0 [ 481.540272][T11099] ? asm_exc_general_protection+0x27/0x30 [ 481.547212][T11099] ? tracing_prog_func_proto+0x300/0x300 [ 481.553333][T11099] ? bpf_tracing_func_proto+0x29b/0x4a0 [ 481.558888][T11099] ? bpf_check+0x9514/0x12bf0 [ 481.563584][T11099] ? bpf_get_btf_vmlinux+0x60/0x60 [ 481.569289][T11099] ? arch_stack_walk+0xf3/0x140 [ 481.574193][T11099] ? stack_trace_save+0x113/0x1c0 [ 481.579217][T11099] ? stack_trace_snprint+0xf0/0xf0 [ 481.584442][T11099] ? ____kasan_kmalloc+0xed/0x110 [ 481.589911][T11099] ? ____kasan_kmalloc+0xdb/0x110 [ 481.595014][T11099] ? __kasan_kmalloc+0x9/0x10 [ 481.600851][T11099] ? kmem_cache_alloc_trace+0x115/0x210 [ 481.606921][T11099] ? selinux_bpf_prog_alloc+0x51/0x140 [ 481.612664][T11099] ? security_bpf_prog_alloc+0x62/0x90 [ 481.618846][T11099] ? bpf_prog_load+0x9ee/0x1b50 [ 481.624093][T11099] ? __sys_bpf+0x4bc/0x760 [ 481.628821][T11099] ? __x64_sys_bpf+0x7c/0x90 [ 481.633476][T11099] ? do_syscall_64+0x3d/0xb0 [ 481.638730][T11099] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 481.645070][T11099] ? __kasan_kmalloc+0x9/0x10 [ 481.649904][T11099] ? memset+0x35/0x40 [ 481.653986][T11099] ? bpf_obj_name_cpy+0x196/0x1e0 [ 481.659527][T11099] bpf_prog_load+0x12ac/0x1b50 [ 481.664706][T11099] ? map_freeze+0x370/0x370 [ 481.669123][T11099] ? selinux_bpf+0xcb/0x100 [ 481.673943][T11099] ? security_bpf+0x82/0xb0 [ 481.678403][T11099] __sys_bpf+0x4bc/0x760 [ 481.683526][T11099] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 481.688802][T11099] ? __kasan_check_read+0x11/0x20 [ 481.694544][T11099] __x64_sys_bpf+0x7c/0x90 [ 481.699252][T11099] do_syscall_64+0x3d/0xb0 [ 481.704184][T11099] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 481.710592][T11099] RIP: 0033:0x7f9f92e3b9f9 [ 481.715187][T11099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.736283][T11099] RSP: 002b:00007f9f91a79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 481.746508][T11099] RAX: ffffffffffffffda RBX: 00007f9f92fca130 RCX: 00007f9f92e3b9f9 [ 481.755476][T11099] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 481.764087][T11099] RBP: 00007f9f92ea98ee R08: 0000000000000000 R09: 0000000000000000 [ 481.773134][T11099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.782193][T11099] R13: 0000000000000000 R14: 00007f9f92fca130 R15: 00007ffde3cdec68 [ 481.791454][T11099] [ 481.794287][T11099] Modules linked in: [ 481.838155][ T861] usb 4-1: unable to read config index 0 descriptor/all [ 481.846530][ T861] usb 4-1: can't read configurations, error -71 [ 481.854339][T11099] ---[ end trace 4aa4a0fe9edf8efb ]--- [ 481.864340][T11099] RIP: 0010:bpf_check+0x9514/0x12bf0 [ 481.872436][T11099] Code: 24 70 80 3c 08 00 74 08 4c 89 ef e8 a6 af 30 00 49 8b 75 00 89 df 41 ff d6 48 89 c3 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 7e af 30 00 48 8b 1b 48 85 db 0f 84 [ 481.900657][T11099] RSP: 0018:ffffc90000947500 EFLAGS: 00010246 [ 481.907312][T11099] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 481.918830][T11099] RDX: ffff88811a638000 RSI: 00000000fffffff3 RDI: 0000000000000000 [ 481.929178][T11099] RBP: ffffc90000947bd0 R08: ffffffff817c0aeb R09: 0000000000000003 [ 481.940196][T11099] R10: fffff52000128d6c R11: dffffc0000000001 R12: 1ffff92000015212 [ 481.949937][T11099] R13: ffff88810eeb8008 R14: ffffffff817bc3d0 R15: ffffc900000a9094 [ 481.961584][T11099] FS: 00007f9f91a796c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 481.962367][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 481.962384][ T30] audit: type=1400 audit(2000000149.000:986): avc: denied { read } for pid=81 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 481.973086][T11099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.013924][T11099] CR2: 0000000020002b00 CR3: 0000000134ffa000 CR4: 00000000003506b0 [ 482.024085][T11099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 482.034928][T11099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 482.034959][T11099] Kernel panic - not syncing: Fatal exception [ 482.035351][T11099] Kernel Offset: disabled [ 482.062299][T11099] Rebooting in 86400 seconds..