last executing test programs: 9.420929623s ago: executing program 0 (id=561): mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x2000001, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001380)={0x0, 0x4, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) r7 = dup2(r1, r1) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x4, 0x1f, &(0x7f0000001080)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @map_fd={0x18, 0x4}, @ringbuf_query, @map_fd, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcbdf}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000001180)='syzkaller\x00', 0x10001, 0x3b, &(0x7f00000011c0)=""/59, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0x11, 0x4, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, r3, r4, r5, r6, r7], 0x0, 0x10, 0x5}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x2205, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) tkill(r0, 0x13) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r10 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(r10, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/67, 0x43) 9.293166553s ago: executing program 0 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x38}}, {@fsname={'fsname', 0x3d, 'dioread_nolock'}}, {@appraise}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00') r2 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2710, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 8.452938241s ago: executing program 0 (id=567): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0x17e, &(0x7f0000000d40)='cgroup\x00Q\xeeg(\xd1\xb7\x86\xccp\xffWd\xd7b\xeb\xc9}\xda\xf6P\xdb\x12.\xa1\xf0jD\xc03\xeb\xbf\xc9\xd7\xa5\xf5\x19C~h\xde\xbel\x00\x97\xd4\xab\xcc\x17@\xeb\xde2\xab\x91\xf80n=\xd1m\x8b\xa4\x85\b\x96\xb2b\xb6\xa2\xa9\x1e\xb7\x87\x15\xa7\x1341?\xffk\x12}\x17\x7f\x19\x98:i\xd6.\xd0\xa8\xbc\x8c\x15\xac\x13\xfd\xf8\xed\"\xc6\xf1\xe3l\xa8\xb0!\x90\x85V\nf\a\xaa\vp\xfc\x9eS\xbe\xb9B\x85~\b\xd8\xde~<\x7f\xe6\xa9\xaa$\x90\xf4\x9aA\x9b>\xb9*\\\xc1\x95y\x1aeY\xb1\xd7d\x95\xc4\xe4\xf6q\xab\x1e\x854\xee\x0e\xf9\r\xa0\xa9\xa5\xd4Sg\x1f\xbf\xb3\xab\xadh\x18\xe3\xb6\x00\xf1\xd6kK\x0e*u@(HM)\xcc$l\xee\x18C\xd0q\xdb\x86\xe5u\x91\xd5\xf9\xff\x9aL:\x06\x00\x00\x00\x00\x00\xac\xa8\xbf;\x81\xcc\x1f\xd1}\x8dj\x87\v\xb6\x8ae\xc5I\xbd\x85((w$\x86\xc0\x00:R\xa4fPO\x86\x81\xa6\xf9H\xcak\x90y\x96\xbaC\xbf\x7fB\xd0B8W\xc0\xb4\vO\x8e\x00.\xc2\xe8\xd1\xff\xc1\xa1!\xf1\xc5\xef\xeb!\xe4T\xa8\x80n\xf8|\xf3\x14\xc0-:n\x81\xe7\'5\xfch\xbao\x95\xcc+`\xcd\xdd\xfce\xc6J\xc4\xfd\xe45\xb2\xae\xbf\xb2\x8a+\xad(\xaf\x1e\x90L\x9e\x8f1\x81\xa9B\xb3@i\x17~V)X\xc6\x916\x0eo\x89\\]\x9d\x91\xa3\x9d\x9b\x95N\xd7\xa2\x81@_\x1f\xb8j'}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output, @ldst={0x3, 0x1, 0x96fb10e35749d42f, 0x8, 0x2, 0x50, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0xc9}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0xef, &(0x7f0000000640)=""/239, 0x40f00, 0x26, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x80, 0x8, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, r4, r5], 0x0, 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000b40)={0xbc, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0xbc}}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r8, 0xb, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f00000000c0)='./file0\x00', 0x0) read(r9, &(0x7f0000000100)=""/208, 0xd0) io_setup(0x3, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'xfrm0\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0x1000000}}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x5, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x2, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x0, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in=@local}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c281d2"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.392095546s ago: executing program 4 (id=571): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x5) r4 = eventfd(0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r3, 0x7, 0x2, r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x6, 0x2, r4}) sched_setaffinity(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r5, 0x0, 0x0, 0x4001c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) 5.810042333s ago: executing program 3 (id=576): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) unshare(0x62040200) 5.808463774s ago: executing program 1 (id=577): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 5.786157185s ago: executing program 4 (id=578): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x38}}, {@fsname={'fsname', 0x3d, 'dioread_nolock'}}, {@appraise}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00') r2 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2710, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 5.677098094s ago: executing program 1 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xf9, 0x0, 0x0, 0x8980, 0xffffffffffffffff, 0xcf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f00000000c0)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, @ldst={0x3, 0x2, 0x1, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffffffffffc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x81, 0x3, 0xe, 0x9, 0x4}], &(0x7f0000000140)='GPL\x00', 0x4, 0xd2, &(0x7f0000000180)=""/210, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xd, 0xe, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1, r5], &(0x7f00000003c0)=[{0x4, 0x1, 0x9, 0x7}, {0x2, 0x4, 0xd, 0xb}], 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000640)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000740)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @private=0xa010102}}}}, &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') r7 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000800), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, 0xffffff00, 0xffffff00, 0x6, 0x6, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x660934d4dbb84bcc, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x0, 0x1, 0x1, 'vcan0\x00', 'xfrm0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @multicast1, @loopback, 0x7, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast1, 0x2}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 0x4, 0x8, {@mac=@random="15d197f069f5", {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x7f, 0x7fff, 0x6, 0x4, 0x6bd, 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 3.972411161s ago: executing program 4 (id=580): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), 0x0, 0x0, 0xc5, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) clock_settime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 3.86364543s ago: executing program 0 (id=581): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xbc2b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4048841) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @dev}, 0x80, 0x0}, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r5, 0x6, &(0x7f00000002c0)={0x1, 0x0, 0xff34, 0x5}) fcntl$lock(r5, 0x24, &(0x7f0000000400)={0x0, 0x1, 0x101, 0x80000001}) 3.823323293s ago: executing program 1 (id=582): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0xc0}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) 3.775760277s ago: executing program 3 (id=584): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0x17e, &(0x7f0000000d40)='cgroup\x00Q\xeeg(\xd1\xb7\x86\xccp\xffWd\xd7b\xeb\xc9}\xda\xf6P\xdb\x12.\xa1\xf0jD\xc03\xeb\xbf\xc9\xd7\xa5\xf5\x19C~h\xde\xbel\x00\x97\xd4\xab\xcc\x17@\xeb\xde2\xab\x91\xf80n=\xd1m\x8b\xa4\x85\b\x96\xb2b\xb6\xa2\xa9\x1e\xb7\x87\x15\xa7\x1341?\xffk\x12}\x17\x7f\x19\x98:i\xd6.\xd0\xa8\xbc\x8c\x15\xac\x13\xfd\xf8\xed\"\xc6\xf1\xe3l\xa8\xb0!\x90\x85V\nf\a\xaa\vp\xfc\x9eS\xbe\xb9B\x85~\b\xd8\xde~<\x7f\xe6\xa9\xaa$\x90\xf4\x9aA\x9b>\xb9*\\\xc1\x95y\x1aeY\xb1\xd7d\x95\xc4\xe4\xf6q\xab\x1e\x854\xee\x0e\xf9\r\xa0\xa9\xa5\xd4Sg\x1f\xbf\xb3\xab\xadh\x18\xe3\xb6\x00\xf1\xd6kK\x0e*u@(HM)\xcc$l\xee\x18C\xd0q\xdb\x86\xe5u\x91\xd5\xf9\xff\x9aL:\x06\x00\x00\x00\x00\x00\xac\xa8\xbf;\x81\xcc\x1f\xd1}\x8dj\x87\v\xb6\x8ae\xc5I\xbd\x85((w$\x86\xc0\x00:R\xa4fPO\x86\x81\xa6\xf9H\xcak\x90y\x96\xbaC\xbf\x7fB\xd0B8W\xc0\xb4\vO\x8e\x00.\xc2\xe8\xd1\xff\xc1\xa1!\xf1\xc5\xef\xeb!\xe4T\xa8\x80n\xf8|\xf3\x14\xc0-:n\x81\xe7\'5\xfch\xbao\x95\xcc+`\xcd\xdd\xfce\xc6J\xc4\xfd\xe45\xb2\xae\xbf\xb2\x8a+\xad(\xaf\x1e\x90L\x9e\x8f1\x81\xa9B\xb3@i\x17~V)X\xc6\x916\x0eo\x89\\]\x9d\x91\xa3\x9d\x9b\x95N\xd7\xa2\x81@_\x1f\xb8j'}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output, @ldst={0x3, 0x1, 0x96fb10e35749d42f, 0x8, 0x2, 0x50, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0xc9}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0xef, &(0x7f0000000640)=""/239, 0x40f00, 0x26, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x80, 0x8, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, r4, r5], 0x0, 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000b40)={0xbc, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0xbc}}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r8, 0xb, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f00000000c0)='./file0\x00', 0x0) read(r9, &(0x7f0000000100)=""/208, 0xd0) io_setup(0x3, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'xfrm0\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0x1000000}}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x5, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x2, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x0, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in=@local}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010003000000106e05fd0040000002030109022400010105001009040009020301000c0921070056012264020905fe0300047f10006196c06dc0cbe6f28548d9f8f855f3cd132139fe94c0062f7cc19ee27a07ea04e32c0857c1530635"], &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xe5, 0x0, 0x7f, 0x10, 0x4}, 0x17, &(0x7f0000000140)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x88, 0xb0, 0x3ff, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0xc, 0xa}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41e}}, {0x9c, &(0x7f0000000440)=@string={0x9c, 0x3, "314fe2975668a733e4a587b70bc7f8cce17cf55704274a3dc962849788b4e7b197affb0fd22ff191fbfead9956b2c351019f4b863dade18c6fd254a25d0074694035fec50bae6c6f2cb38c07630eeedf8d8b59eedf42cb48fcf411d857ae96150d506082a684d1069a91fe8f4db42103a75476912642ec84958350c207cbba2535cd7a827d948bb8f8903b34e1d16218114fbef9a4f200894a61"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="000364f98aed7a3aa3da46d18f0e6f1fd3318f60017e22f3a99cae3267e6d85d065f6cab38c3b6af84dcc45848998ccd8b01b246a7d1401bd17b7bb16fed5105fc6bb382ccfe2b7bcb62949b969ad57838267dc44c9c5e387427aa8bc1df0c4e5bdda4ab8289146fe4b52d58e493a17ab2bc8baad7e9e537c6f28e8fb6fbee2b0ec6089b661fbd01"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40e}}, {0x86, &(0x7f0000000640)=@string={0x86, 0x3, "415cf2b4ed0e1774b2a93ef8c1f25c54b24e685e27c89e962e288d3c0ea1c78568f8fe82f5832ab6cc51f612442fdb7ae45ac9015b9192660275d9c1ea73ad9bf3f2066fd62d686ef4475663fb8b8d1818eb8f938ad9400bd1d7bcc9b8976c950508a284f1a35de6f9c33d47883152c10f092185b25b42b680df2b85da9e2c862220769e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x7e36}}]}) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c281d2"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.7265953s ago: executing program 1 (id=585): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x225, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x10000000, 0x0, 0x40}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000090000000000000080000000850000007500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000200000085000000860000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000040)='./file1/file3\x00', &(0x7f0000000240)='./bus/file0\x00', &(0x7f0000000280), 0x10800, &(0x7f0000000400)={'trans=unix,', {[], [{@pcr={'pcr', 0x3d, 0xe}}, {@flag='ro'}, {@smackfshat={'smackfshat', 0x3d, ',\xe3.@-%,*#-+'}}]}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknod(&(0x7f0000000140)='./file1/file3\x00', 0x10, 0x8) 3.726024571s ago: executing program 2 (id=586): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@norecovery}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@errors_remount}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20004810, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) sendmmsg(r8, &(0x7f0000007040)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000580)="38ee", 0x2}], 0x2}}], 0x1, 0x20000000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4a, 0x0, 0x7, 0x6, 0x10}, {0x8000000, 0xffff1000, 0x3, 0x5, 0x7, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0x4000, 0xd5dd0000, 0x8, 0x2, 0xfe, 0x3, 0xc, 0x4, 0x2, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0xb, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0xa, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0xa}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0xffff1000, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x5, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x2, 0x5}, 0x10, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0xffffffff80000000]}) write$P9_RRENAMEAT(r1, &(0x7f0000001200)={0x7, 0x4b, 0x2}, 0x7) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 3.24100483s ago: executing program 1 (id=587): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x2000}, 0x7a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x40000000, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 3.130038789s ago: executing program 1 (id=588): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000fd00130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0xff80) sched_setscheduler(r1, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='xen_mmu_set_pud\x00', r4, 0x0, 0x33a3}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c0000001d00070f00000000000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ea"], 0x2c}}, 0x20008000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r8, 0x0) 3.033063056s ago: executing program 32 (id=588): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000fd00130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0xff80) sched_setscheduler(r1, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='xen_mmu_set_pud\x00', r4, 0x0, 0x33a3}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c0000001d00070f00000000000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ea"], 0x2c}}, 0x20008000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r8, 0x0) 3.014859758s ago: executing program 2 (id=590): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='page_pool_state_release\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000040)={0x7, 'veth0_to_team\x00', {0x2}, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.924477275s ago: executing program 4 (id=591): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x38}}, {@fsname={'fsname', 0x3d, 'dioread_nolock'}}, {@appraise}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00') r2 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2710, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 2.881465898s ago: executing program 2 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xf9, 0x0, 0x0, 0x8980, 0xffffffffffffffff, 0xcf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f00000000c0)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, @ldst={0x3, 0x2, 0x1, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffffffffffc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x81, 0x3, 0xe, 0x9, 0x4}], &(0x7f0000000140)='GPL\x00', 0x4, 0xd2, &(0x7f0000000180)=""/210, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xd, 0xe, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1, r5], &(0x7f00000003c0)=[{0x4, 0x1, 0x9, 0x7}, {0x2, 0x4, 0xd, 0xb}], 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000640)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000740)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @private=0xa010102}}}}, &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') r7 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000800), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, 0xffffff00, 0xffffff00, 0x6, 0x6, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x660934d4dbb84bcc, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x0, 0x1, 0x1, 'vcan0\x00', 'xfrm0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @multicast1, @loopback, 0x7, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast1, 0x2}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 0x4, 0x8, {@mac=@random="15d197f069f5", {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x7f, 0x7fff, 0x6, 0x4, 0x6bd, 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.212675102s ago: executing program 0 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r1, 0x0) getuid() ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.064470054s ago: executing program 4 (id=594): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) chown(0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getrandom(&(0x7f0000000240)=""/94, 0x5e, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x100000000000000}, 0x0) 1.968412872s ago: executing program 2 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000006780)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/45, 0x2d}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000001ac0)=[{&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000800)=""/97, 0x61}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000000980)=""/127, 0x7f}], 0x8, &(0x7f0000001b40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001bc0)=""/250, 0xfa}, {&(0x7f0000001cc0)=""/84, 0x54}, {&(0x7f0000001d40)=""/132, 0x84}], 0x3}}, {{&(0x7f0000001e00), 0x6e, &(0x7f0000004300)=[{&(0x7f0000001e80)=""/26, 0x1a}, {&(0x7f0000001ec0)=""/241, 0xf1}, {&(0x7f0000001fc0)=""/66, 0x42}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/108, 0x6c}, {&(0x7f00000040c0)=""/224, 0xe0}, {&(0x7f00000041c0)=""/240, 0xf0}, {&(0x7f00000042c0)=""/23, 0x17}], 0x9, &(0x7f00000043c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004440)=@abs, 0x6e, &(0x7f0000005580)=[{&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/164, 0xa4}], 0x2}}, {{&(0x7f00000055c0)=@abs, 0x6e, &(0x7f0000005880)=[{&(0x7f0000005640)=""/34, 0x22}, {&(0x7f0000005680)=""/167, 0xa7}, {&(0x7f0000005740)=""/101, 0x65}, {&(0x7f00000057c0)=""/154, 0x9a}], 0x4}}, {{&(0x7f00000058c0), 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005940)=""/43, 0x2b}, {&(0x7f0000005980)=""/242, 0xf2}], 0x2, &(0x7f0000005ac0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000005b40)=""/150, 0x96}, {&(0x7f0000005c00)=""/211, 0xd3}, {&(0x7f0000005d00)=""/238, 0xee}, {&(0x7f0000005e00)=""/77, 0x4d}, {&(0x7f0000005e80)=""/252, 0xfc}], 0x5, &(0x7f0000006000)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006040)=@abs, 0x6e, &(0x7f0000006600)=[{&(0x7f00000060c0)=""/254, 0xfe}, {&(0x7f00000061c0)=""/210, 0xd2}, {&(0x7f00000062c0)=""/93, 0x5d}, {&(0x7f0000006340)=""/56, 0x38}, {&(0x7f0000006380)=""/228, 0xe4}, {&(0x7f0000006480)=""/227, 0xe3}, {&(0x7f0000006580)=""/86, 0x56}], 0x7, &(0x7f0000006680)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}], 0x9, 0x0, &(0x7f00000069c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000540), &(0x7f0000000a40)=@udp6=r6, 0x2}, 0x20) close(r3) 1.819392064s ago: executing program 3 (id=596): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = epoll_create(0xb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x30001000}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @printk={@lx}, @exit, @jmp={0x5, 0x1, 0x1, 0x5, 0x0, 0xffffffffffffffc0, 0xa6a6fb3c31d388e2}, @call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000080)='syzkaller\x00', 0xe, 0x3b, &(0x7f0000000180)=""/59, 0x41100, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xc, 0x6f42cbb2, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000240)=[r0, r0, r0, r0, r0], &(0x7f00000002c0)=[{0x5, 0x1, 0xb}, {0x1, 0x3, 0x6, 0x1e}, {0x1, 0x3, 0x9, 0x3}, {0x5, 0x1, 0xb, 0x7}, {0x2, 0x5, 0x5, 0x7}, {0x5, 0x1, 0x7, 0x8}], 0x10, 0x4}, 0x94) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) epoll_wait(r2, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x100) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) connect$unix(r12, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r11}, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r6, 0x25, 0x8, @void}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.806469015s ago: executing program 3 (id=597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x215000, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x11ee, &(0x7f0000003680)="$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") socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) socket$netlink(0x10, 0x3, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000000000000000001000"}}}]}, 0x48}}, 0x0) 1.723133762s ago: executing program 5 (id=589): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) clock_gettime(0xfffffffffffffffc, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$snapshot(r5, &(0x7f0000000100)="bdb79fbd22", 0x10) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.417439626s ago: executing program 5 (id=598): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x225, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x10000000, 0x0, 0x40}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000090000000000000080000000850000007500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000200000085000000860000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000040)='./file1/file3\x00', &(0x7f0000000240)='./bus/file0\x00', &(0x7f0000000280), 0x10800, &(0x7f0000000400)={'trans=unix,', {[], [{@pcr={'pcr', 0x3d, 0xe}}, {@flag='ro'}, {@smackfshat={'smackfshat', 0x3d, ',\xe3.@-%,*#-+'}}]}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknod(&(0x7f0000000140)='./file1/file3\x00', 0x10, 0x8) 1.328490484s ago: executing program 0 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r10}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r11}, 0x10) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x5}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 1.207446243s ago: executing program 5 (id=600): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000004fc0), 0x4481, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/576]) timerfd_create(0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b700000000000000950000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 1.187113665s ago: executing program 4 (id=601): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000340)={'nat\x00', 0x2, [{0x8800000000000000}, {}]}, 0x48) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x64, 0x4c6, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 1.060431775s ago: executing program 5 (id=602): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getpgid(r1) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffc}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 994.18389ms ago: executing program 33 (id=602): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getpgid(r1) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffc}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 992.284551ms ago: executing program 2 (id=604): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x38}}, {@fsname={'fsname', 0x3d, 'dioread_nolock'}}, {@appraise}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00') r2 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2710, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 843.121723ms ago: executing program 3 (id=605): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f800"/22], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000180), &(0x7f0000000500)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410e9) sendfile(r4, r3, 0x0, 0x100000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 215.945723ms ago: executing program 6 (id=603): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000780)={[{@dax_always}, {@min_batch_time={'min_batch_time', 0x3d, 0x54326232}}, {@resuid}, {@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}, {@resgid}, {@errors_remount}, {@jqfmt_vfsv0}, {@delalloc}, {@data_err_ignore}]}, 0x0, 0x607, &(0x7f0000000ac0)="$eJzs3ctvFdUfAPDvTJ+0v58txKi4kCbGQKK0tIAhxkTYGkLwsXNVaSFIoYTWaJHEkuDGxLhxYeLKhfhfKIlbF25duHFlSIgxLMQQuWZuZ8r09t4+bh+33H4+ydBzZrjnnCn3y5l77jkzAexaQ9kfacT+iLiaRAyUjnVGfnBo4e/d/+vGuWxLolJ5588kbnyazJfLSvKf/fmL/x2I5Jc0Yl/H8npn5q5fGp+amryW50dmL18dmZm7fvji5fELkxcmr4y9Onbi+LHjJ0aPbOj8klL69K0PPhr4/Mx7333zMBn9/rczSZyMR3nbsvOqfW3PhmrOfmdDUVnwoLw/+72e2GDZO8XfA8X75LGkdgc7Vpq/H7si4tkYiI7Sv+ZAfPZWSxsHbKlKEkUfBew6SVPx37v5DQG2WXEdUHy2r/c5eLl0i69KgO1w79TCAMBC7HdFRBH/nQtjg9FbHRvou58sGedJImJjI3MLsjp+/unMrWyLBuNwwNaYv1mMctf2/0k1Ngejt5rru58uif+0tGX7326y/qGa/LL4f7PJgoFVzd+MiOfy/r871hX/Q6X4f7/J+leNfwAAAAAAAGDN7pyKiFfqzf9LF+f/dNeZ/9MfESc3of7Vv/9L7+aJZBOqA0runYp4ve7838U5voMdee7/1fkAXcn5i1OTRyLiqYg4FF09WX60ptzyDOHDX+z7ulH95fl/2ZbVX8wFzEu621mzEHdifHZ8o+cNRNy7GfF8df7vgXzP0vk/Wf+f1On/s/i+usY69r10+2yjY6vHP7BVKt9GHKzb/z++3E5Wvj/HSPV6YKS4KljuhU++/KFR/eIfWifr//tWjv+epHy/npn1ld8dEUfnOiuNjjd7/d+dvNtRlJ/5eHx29tpoRHdyevn+sfW1GdpVEQ9FvGTxf+jFlcf/Fq//S3G4JyLm11jnM4/6f290TP8PrZPF/8TK/f/g0v5//Ymx24M/Nqr/7Jr6/2PVPv1Qvsf4H5Qtvx/HWgO0Jc0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCdcGhH/iyQdXkyn6fBwRH9EPB196dT0zOzL56c/vDKRHas+/z8tnvQ7sJBPiuf/D5byYzX5oxGxNyK+6thTzQ+fm56aaPXJAwAAAAAAAAAAAAAAAAAAwA7RX13zX+mpXf+f+aOj1a0Dtlxn/lO8w+7T2fQrKz2Nj/U2XSqwfZqPf+BJt/b479rSdgDbr3H8P3hYqdrW5gDbyPU/7F5Nxr+vC6AN6P9ht1rjmJ6v86At6f8BAAAAAKCt7D1w59ckIuZf21PdMt35MZP9ob2lrW4A0DLm8MLu1Tnd6hYAreIzPpAspv6pu9i/8ez/ZGsaBAAAAAAAAAAAAAAsc3C/9f+wW628/t/cfmhnK6z/rxf8bhcAbaTxoz/0/dDufMYHVuvtrf8HAAAAAAAAAAAAgB2g9/ql8ampyWszc09e4o2d0Yz1JebHd0QzNi9RTA3f/JK7ImIHnGALEsUtOFrYjBb+nwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACzxXwAAAP//elUjeQ==") bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000004d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r2}, 0x18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000040000000800000005000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00af2c0000000000000000000000000000000000000000000000000040ef272b3a4bf1df321819f003be2516a1651f8392073eba34d0991945d81988"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 127.8934ms ago: executing program 2 (id=606): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0x17e, &(0x7f0000000d40)='cgroup\x00Q\xeeg(\xd1\xb7\x86\xccp\xffWd\xd7b\xeb\xc9}\xda\xf6P\xdb\x12.\xa1\xf0jD\xc03\xeb\xbf\xc9\xd7\xa5\xf5\x19C~h\xde\xbel\x00\x97\xd4\xab\xcc\x17@\xeb\xde2\xab\x91\xf80n=\xd1m\x8b\xa4\x85\b\x96\xb2b\xb6\xa2\xa9\x1e\xb7\x87\x15\xa7\x1341?\xffk\x12}\x17\x7f\x19\x98:i\xd6.\xd0\xa8\xbc\x8c\x15\xac\x13\xfd\xf8\xed\"\xc6\xf1\xe3l\xa8\xb0!\x90\x85V\nf\a\xaa\vp\xfc\x9eS\xbe\xb9B\x85~\b\xd8\xde~<\x7f\xe6\xa9\xaa$\x90\xf4\x9aA\x9b>\xb9*\\\xc1\x95y\x1aeY\xb1\xd7d\x95\xc4\xe4\xf6q\xab\x1e\x854\xee\x0e\xf9\r\xa0\xa9\xa5\xd4Sg\x1f\xbf\xb3\xab\xadh\x18\xe3\xb6\x00\xf1\xd6kK\x0e*u@(HM)\xcc$l\xee\x18C\xd0q\xdb\x86\xe5u\x91\xd5\xf9\xff\x9aL:\x06\x00\x00\x00\x00\x00\xac\xa8\xbf;\x81\xcc\x1f\xd1}\x8dj\x87\v\xb6\x8ae\xc5I\xbd\x85((w$\x86\xc0\x00:R\xa4fPO\x86\x81\xa6\xf9H\xcak\x90y\x96\xbaC\xbf\x7fB\xd0B8W\xc0\xb4\vO\x8e\x00.\xc2\xe8\xd1\xff\xc1\xa1!\xf1\xc5\xef\xeb!\xe4T\xa8\x80n\xf8|\xf3\x14\xc0-:n\x81\xe7\'5\xfch\xbao\x95\xcc+`\xcd\xdd\xfce\xc6J\xc4\xfd\xe45\xb2\xae\xbf\xb2\x8a+\xad(\xaf\x1e\x90L\x9e\x8f1\x81\xa9B\xb3@i\x17~V)X\xc6\x916\x0eo\x89\\]\x9d\x91\xa3\x9d\x9b\x95N\xd7\xa2\x81@_\x1f\xb8j'}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output, @ldst={0x3, 0x1, 0x96fb10e35749d42f, 0x8, 0x2, 0x50, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0xc9}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0xef, &(0x7f0000000640)=""/239, 0x40f00, 0x26, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x80, 0x8, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, r4, r5], 0x0, 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000b40)={0xbc, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0xbc}}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r8, 0xb, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f00000000c0)='./file0\x00', 0x0) read(r9, &(0x7f0000000100)=""/208, 0xd0) io_setup(0x3, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'xfrm0\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0x1000000}}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x5, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x2, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x0, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in=@local}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010003000000106e05fd0040000002030109022400010105001009040009020301000c0921070056012264020905fe0300047f10006196c06dc0cbe6f28548d9f8f855f3cd132139fe94c0062f7cc19ee27a07ea04e32c0857c1530635"], &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xe5, 0x0, 0x7f, 0x10, 0x4}, 0x17, &(0x7f0000000140)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x88, 0xb0, 0x3ff, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0xc, 0xa}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41e}}, {0x9c, &(0x7f0000000440)=@string={0x9c, 0x3, "314fe2975668a733e4a587b70bc7f8cce17cf55704274a3dc962849788b4e7b197affb0fd22ff191fbfead9956b2c351019f4b863dade18c6fd254a25d0074694035fec50bae6c6f2cb38c07630eeedf8d8b59eedf42cb48fcf411d857ae96150d506082a684d1069a91fe8f4db42103a75476912642ec84958350c207cbba2535cd7a827d948bb8f8903b34e1d16218114fbef9a4f200894a61"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="000364f98aed7a3aa3da46d18f0e6f1fd3318f60017e22f3a99cae3267e6d85d065f6cab38c3b6af84dcc45848998ccd8b01b246a7d1401bd17b7bb16fed5105fc6bb382ccfe2b7bcb62949b969ad57838267dc44c9c5e387427aa8bc1df0c4e5bdda4ab8289146fe4b52d58e493a17ab2bc8baad7e9e537c6f28e8fb6fbee2b0ec6089b661fbd01"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40e}}, {0x86, &(0x7f0000000640)=@string={0x86, 0x3, "415cf2b4ed0e1774b2a93ef8c1f25c54b24e685e27c89e962e288d3c0ea1c78568f8fe82f5832ab6cc51f612442fdb7ae45ac9015b9192660275d9c1ea73ad9bf3f2066fd62d686ef4475663fb8b8d1818eb8f938ad9400bd1d7bcc9b8976c950508a284f1a35de6f9c33d47883152c10f092185b25b42b680df2b85da9e2c862220769e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x7e36}}]}) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c281d2"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 70.201635ms ago: executing program 6 (id=607): io_setup(0x5, &(0x7f0000000240)=0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000000e0ff", @ANYRES32=0x0, @ANYBLOB="00020000000000001c0012800b0001006d616373656300000c0002800500030010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000000e0ff", @ANYRES32=0x0, @ANYBLOB="00020000000000001c0012800b0001006d616373656300000c0002800500030010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = inotify_init() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) (async) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r3, 0x6090}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000140)=[{r3, 0x6090}], 0x1, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000002c0), 0x880) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x880) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="74e70e72616e733d66642c5366646e6f35", @ANYRESHEX=r4, @ANYRES32=r3, @ANYRESHEX=r3, @ANYBLOB=',nodevmap,aname=[^%,cachetag=-!%+,fscontext=sysadm_u,\x00']) r5 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x11) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x891b, &(0x7f0000000000)={'veth0\x00', {0x2, 0x0, @multicast2=0xac14140a}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) io_submit(r0, 0x1b, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) (async) io_submit(r0, 0x1b, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0x85000bd3) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 0s ago: executing program 3 (id=608): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000000)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESOCT=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffff41ffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec1034b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361110080a4e21c81d310584158fd37cea6623dc422c2ddbc5e8c9001016b598b3b7a2c05de53dafefb8a492bc4da59466c2399beff5d4e13fa307f1a5b87a60a3fa39f1457c35842a234b386a0626b3502018474bf4debf37eed125ba3bf81e3323af06923d0baa34215649d5d58708d7e6590fa0c7dbfd8d5f03789c664b1b553f1e279fb3aef29429a45e3facb3647098bb16830caa47f1df80862"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = getuid() setresuid(0xffffffffffffffff, r3, 0xee00) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x4, 0x5, 0x18, @rand_addr=' \x01\x00', @local, 0x7f08, 0x7, 0xf8b, 0xfff}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r7, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f00000005c0)=@acquire={0x11b0, 0x17, 0x300, 0x70bd27, 0x25dfdbfd, {{@in6=@private1, 0x4d6, 0x6c}, @in6=@mcast2, {@in=@remote, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0xa0, 0x87, r2, r3}, {{@in=@remote, @in6=@private1, 0x4e23, 0x8001, 0x4e22, 0x0, 0x0, 0xa0, 0x0, 0x0, r4, r7}, {0x6468, 0x1000, 0x686, 0xf4, 0xb4, 0x1, 0x5, 0x80000001}, {0x4, 0x5, 0x2, 0x3}, 0x7fffffff, 0x0, 0x0, 0x1, 0x3, 0x2}, 0x4, 0x2, 0xfffffff3, 0x70bd2a}, [@address_filter={0x28, 0x1a, {@in6=@local, @in=@private=0xa010102, 0x2, 0x8, 0xc}}, @mark={0xc, 0x15, {0x350759, 0x7f}}, @policy_type={0xa}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}]}, 0x11b0}, 0x1, 0x0, 0x0, 0x30040000}, 0x20004110) kernel console output (not intermixed with test programs): r" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75da78ebe9 code=0x7ffc0000 [ 79.894587][ T28] audit: type=1326 audit(1756376437.419:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75da78ebe9 code=0x7ffc0000 [ 79.918249][ T28] audit: type=1326 audit(1756376437.449:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75da78ebe9 code=0x7ffc0000 [ 79.948306][ T283] syz-executor: attempt to access beyond end of device [ 79.948306][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 79.971933][ T28] audit: type=1326 audit(1756376437.449:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75da78ebe9 code=0x7ffc0000 [ 80.008237][ T28] audit: type=1326 audit(1756376437.449:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75da78ebe9 code=0x7ffc0000 [ 80.067082][ T28] audit: type=1326 audit(1756376437.449:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75da78ebe9 code=0x7ffc0000 [ 80.164663][ T1186] loop3: detected capacity change from 0 to 1024 [ 80.171345][ T28] audit: type=1326 audit(1756376437.449:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75da78ebe9 code=0x7ffc0000 [ 80.198190][ T28] audit: type=1326 audit(1756376437.449:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75da78ebe9 code=0x7ffc0000 [ 80.198633][ T1186] EXT4-fs: Ignoring removed nobh option [ 80.313389][ T28] audit: type=1326 audit(1756376437.459:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f75da78ebe9 code=0x7ffc0000 [ 80.337356][ T28] audit: type=1326 audit(1756376437.459:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75da78ebe9 code=0x7ffc0000 [ 80.337712][ T1186] ext4: Unknown parameter 'fsmagic' [ 80.463616][ T1210] loop0: detected capacity change from 0 to 2048 [ 80.473689][ T1210] EXT4-fs: Ignoring removed bh option [ 80.516672][ T1210] EXT4-fs: test_dummy_encryption requires encrypt feature [ 80.880331][ T1224] loop1: detected capacity change from 0 to 1024 [ 80.908062][ T1224] EXT4-fs: Ignoring removed i_version option [ 80.921319][ T1224] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.944195][ T1224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.176173][ T1232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 81.601485][ T1244] tmpfs: Too small a size for current use [ 81.681625][ T1237] loop4: detected capacity change from 0 to 40427 [ 81.697049][ T1237] F2FS-fs (loop4): Invalid segment/section count (31 != 24 * 1) [ 81.712904][ T1237] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 81.729953][ T1237] F2FS-fs (loop4): heap/no_heap options were deprecated [ 81.750138][ T1237] F2FS-fs (loop4): invalid crc value [ 81.781032][ T285] EXT4-fs (loop1): unmounting filesystem. [ 81.791927][ T1237] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.875978][ T1237] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 81.892512][ T1237] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 82.003621][ T1257] loop1: detected capacity change from 0 to 2048 [ 82.013196][ T1262] loop2: detected capacity change from 0 to 16 [ 82.038078][ T1262] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 82.107836][ T1265] loop0: detected capacity change from 0 to 16 [ 82.144218][ T1262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.151482][ T1262] IPv6: NLM_F_CREATE should be set when creating new route [ 82.188278][ T1265] erofs: (device loop0): mounted with root inode @ nid 36. [ 82.203600][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 82.214947][ T1265] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 82.240503][ T1265] x_tables: duplicate underflow at hook 1 [ 82.329665][ T1257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.346488][ T284] syz-executor: attempt to access beyond end of device [ 82.346488][ T284] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.363907][ T1257] EXT4-fs (loop1): unmounting filesystem. [ 82.504382][ T1272] loop4: detected capacity change from 0 to 512 [ 82.517500][ T1272] EXT4-fs: Ignoring removed nobh option [ 82.568102][ T1272] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.589627][ T1272] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 82.609144][ T1272] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.211: Corrupt directory, running e2fsck is recommended [ 82.632892][ T1269] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.640984][ T1272] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 82.641328][ T1269] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.657000][ T1272] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.211: corrupted in-inode xattr [ 82.672612][ T1272] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.211: couldn't read orphan inode 15 (err -117) [ 82.685938][ T1272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.710290][ T284] EXT4-fs (loop4): unmounting filesystem. [ 82.737147][ T547] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.936730][ T547] usb 2-1: Using ep0 maxpacket: 16 [ 82.944343][ T547] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 82.984762][ T1287] loop0: detected capacity change from 0 to 1024 [ 82.999619][ T547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.028162][ T1287] EXT4-fs: Ignoring removed i_version option [ 83.044446][ T547] usb 2-1: Product: syz [ 83.056717][ T1287] EXT4-fs (loop0): Test dummy encryption mode enabled [ 83.126868][ T547] usb 2-1: Manufacturer: syz [ 83.140194][ T547] usb 2-1: SerialNumber: syz [ 83.157021][ T1287] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.176007][ T547] usb 2-1: config 0 descriptor?? [ 83.189086][ T547] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 83.312607][ T547] usb 2-1: Detected FT-X [ 83.393662][ T547] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 83.502068][ T1294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 83.579429][ T1285] loop3: detected capacity change from 0 to 40427 [ 83.602786][ T1285] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 83.614539][ T1285] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.637235][ T1285] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.670949][ T1285] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 83.678374][ T1285] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.057938][ T547] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 84.506832][ T283] EXT4-fs (loop0): unmounting filesystem. [ 84.556975][ T547] usb 2-1: USB disconnect, device number 2 [ 84.570633][ T547] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.599623][ T547] ftdi_sio 2-1:0.0: device disconnected [ 84.671738][ T1328] loop4: detected capacity change from 0 to 512 [ 84.709586][ T1328] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.735859][ T1328] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.752731][ T1328] EXT4-fs (loop4): Test dummy encryption mode enabled [ 84.762398][ T1309] loop3: detected capacity change from 0 to 40427 [ 84.765872][ T1328] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.782340][ T1309] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 84.798934][ T1309] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.809336][ T1328] EXT4-fs (loop4): 1 truncate cleaned up [ 84.816561][ T1328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.826991][ T1325] loop0: detected capacity change from 0 to 40427 [ 84.837515][ T1328] EXT4-fs (loop4): unmounting filesystem. [ 84.837976][ T1309] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.845929][ T1325] F2FS-fs (loop0): Invalid segment/section count (31 != 24 * 1) [ 84.866105][ T1325] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 84.876114][ T1325] F2FS-fs (loop0): heap/no_heap options were deprecated [ 84.894907][ T1325] F2FS-fs (loop0): invalid crc value [ 84.904248][ T1309] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.911560][ T1309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.921840][ T1325] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.981092][ T1325] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 84.988242][ T1325] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.032316][ T283] syz-executor: attempt to access beyond end of device [ 86.032316][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.134062][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 86.134077][ T28] audit: type=1400 audit(1756376443.712:261): avc: denied { create } for pid=1346 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.160022][ T1347] netlink: 48 bytes leftover after parsing attributes in process `syz.2.225'. [ 86.171367][ T1347] loop2: detected capacity change from 0 to 512 [ 86.181658][ T1347] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 86.190203][ T1347] FAT-fs (loop2): Filesystem has been set read-only [ 86.278370][ T28] audit: type=1400 audit(1756376443.862:262): avc: denied { ioctl } for pid=1350 comm="syz.3.226" path="socket:[20109]" dev="sockfs" ino=20109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.654866][ T288] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 86.845829][ T288] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 86.874741][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.885227][ T288] usb 1-1: config 0 descriptor?? [ 87.134963][ T1317] syz.4.220 (1317) used greatest stack depth: 18496 bytes left [ 87.184592][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.243002][ T1363] loop1: detected capacity change from 0 to 512 [ 87.258841][ T1366] loop4: detected capacity change from 0 to 1024 [ 87.285354][ T1366] EXT4-fs: Ignoring removed nobh option [ 87.301205][ T1366] ext4: Unknown parameter 'fsmagic' [ 87.341192][ T1361] mmap: syz.1.230 (1361): VmData 17715200 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 87.351678][ T1360] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.375591][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.444575][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.465577][ T39] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 87.484449][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.501948][ T39] usb 3-1: config 0 descriptor?? [ 87.745003][ T28] audit: type=1400 audit(1756376445.333:263): avc: denied { watch watch_reads } for pid=1358 comm="syz.2.228" path="/59" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.842200][ T1370] loop1: detected capacity change from 0 to 128 [ 87.995542][ T1359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.064303][ T28] audit: type=1400 audit(1756376445.623:264): avc: denied { sqpoll } for pid=1369 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.187544][ T1359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.245042][ T39] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 88.255156][ T39] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 88.454784][ T39] cp2112 0003:10C4:EA90.0001: Part Number: 0x81 Device Version: 0xD2 [ 88.463976][ T343] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.653874][ T343] usb 2-1: Using ep0 maxpacket: 32 [ 88.659500][ T39] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 88.674971][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.694864][ T39] cp2112: probe of 0003:10C4:EA90.0001 failed with error -32 [ 88.714820][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.724969][ T39] usb 3-1: USB disconnect, device number 4 [ 88.746290][ T343] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 88.765104][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.782306][ T1386] fido_id[1386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 88.788583][ T1354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.804532][ T343] usb 2-1: config 0 descriptor?? [ 88.829335][ T1354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.887179][ T288] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 88.905114][ T288] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 88.918407][ T288] asix: probe of 1-1:0.0 failed with error -71 [ 88.946385][ T288] usb 1-1: USB disconnect, device number 4 [ 89.059101][ T1389] loop4: detected capacity change from 0 to 1024 [ 89.066011][ T1389] EXT4-fs: Ignoring removed nobh option [ 89.071809][ T1389] ext4: Unknown parameter 'fsmagic' [ 89.221324][ T343] savu 0003:1E7D:2D5A.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 89.556736][ T343] usb 2-1: USB disconnect, device number 3 [ 89.728169][ T1394] loop2: detected capacity change from 0 to 40427 [ 89.734639][ T1396] loop0: detected capacity change from 0 to 40427 [ 89.750376][ T1394] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 89.760999][ T1396] F2FS-fs (loop0): Invalid segment/section count (31 != 24 * 1) [ 89.764340][ T1394] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 89.785230][ T1396] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 89.793925][ T1394] F2FS-fs (loop2): invalid crc value [ 89.802086][ T1396] F2FS-fs (loop0): heap/no_heap options were deprecated [ 89.812124][ T1396] F2FS-fs (loop0): invalid crc value [ 89.819690][ T1394] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.827355][ T1396] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.859445][ T1394] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 89.867153][ T1394] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.915074][ T28] audit: type=1400 audit(1756376447.504:265): avc: denied { wake_alarm } for pid=1393 comm="syz.2.238" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.923424][ T1396] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 89.943115][ T1396] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.121121][ T283] syz-executor: attempt to access beyond end of device [ 90.121121][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.144102][ T1406] loop3: detected capacity change from 0 to 40427 [ 90.162940][ T1406] F2FS-fs (loop3): invalid crc value [ 90.177501][ T1406] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.246106][ T1406] F2FS-fs (loop3): Start checkpoint disabled! [ 90.253955][ T288] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.268576][ T1406] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 90.623833][ T1418] futex_wake_op: syz.3.239 tries to shift op by -1; fix this program [ 90.663906][ T288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.674227][ T288] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 90.683539][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.692561][ T288] usb 3-1: config 0 descriptor?? [ 90.707701][ T288] usb 3-1: bad CDC descriptors [ 90.838067][ T1022] kworker/u4:8: attempt to access beyond end of device [ 90.838067][ T1022] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 90.901933][ T1394] ªªªªªª: renamed from vlan0 [ 90.913385][ T549] usb 3-1: USB disconnect, device number 5 [ 90.930379][ T1420] loop1: detected capacity change from 0 to 1024 [ 90.952988][ T1420] EXT4-fs: Ignoring removed nobh option [ 90.961747][ T1420] ext4: Unknown parameter 'fsmagic' [ 92.152396][ T1431] loop4: detected capacity change from 0 to 512 [ 92.167119][ T1431] EXT4-fs: Invalid uid value -1 [ 93.046292][ T1429] loop0: detected capacity change from 0 to 40427 [ 93.064602][ T1437] loop3: detected capacity change from 0 to 512 [ 93.074062][ T1429] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 93.081961][ T1429] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.112375][ T1437] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 93.112761][ T1429] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.120937][ T1437] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.136876][ T343] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.345304][ T343] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 93.359610][ T286] EXT4-fs (loop3): unmounting filesystem. [ 93.371833][ T1429] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.378985][ T343] usb 5-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 93.387613][ T1429] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.423944][ T1449] loop3: detected capacity change from 0 to 128 [ 93.434375][ T1449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.441163][ T1449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.448545][ T1449] EXT4-fs (loop3): Test dummy encryption mode enabled [ 93.473336][ T1449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.484067][ T1449] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.500759][ T343] usb 5-1: Product: syz [ 93.505086][ T343] usb 5-1: Manufacturer: syz [ 93.509089][ T28] audit: type=1400 audit(1756376451.086:266): avc: denied { getopt } for pid=1446 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.509865][ T343] usb 5-1: SerialNumber: syz [ 93.510970][ T343] r8152-cfgselector 5-1: config 0 descriptor?? [ 93.781413][ T1343] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 93.956386][ T343] r8152-cfgselector 5-1: Unknown version 0x0000 [ 93.981935][ T343] r8152-cfgselector 5-1: bad CDC descriptors [ 93.998557][ T343] r8152-cfgselector 5-1: Unknown version 0x0000 [ 94.020129][ T343] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 94.132178][ T1343] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 94.145667][ T1343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.165360][ T1343] usb 3-1: config 0 descriptor?? [ 94.226057][ T1455] loop1: detected capacity change from 0 to 40427 [ 94.250297][ T1455] F2FS-fs (loop1): invalid crc value [ 94.261782][ T1455] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.302301][ T286] EXT4-fs (loop3): unmounting filesystem. [ 94.303719][ T1455] F2FS-fs (loop1): Start checkpoint disabled! [ 94.331073][ T1455] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 94.463088][ T1460] loop3: detected capacity change from 0 to 40427 [ 94.463543][ T1464] futex_wake_op: syz.1.251 tries to shift op by -1; fix this program [ 94.482344][ T1460] F2FS-fs (loop3): invalid crc value [ 94.496841][ T1460] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.528056][ T1460] F2FS-fs (loop3): Start checkpoint disabled! [ 94.539528][ T1460] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 94.628487][ T1471] futex_wake_op: syz.3.253 tries to shift op by -1; fix this program [ 94.816235][ T10] kworker/u4:1: attempt to access beyond end of device [ 94.816235][ T10] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 94.908584][ T1477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 94.917833][ T1477] netlink: 2 bytes leftover after parsing attributes in process `syz.1.256'. [ 95.034170][ T1479] loop1: detected capacity change from 0 to 40427 [ 95.044295][ T1479] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 95.052141][ T1479] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.061237][ T1479] F2FS-fs (loop1): invalid crc value [ 95.068490][ T1479] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.093404][ T1479] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 95.105457][ T1479] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 95.112628][ T1479] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.145902][ T1479] syz.1.257: attempt to access beyond end of device [ 95.145902][ T1479] loop1: rw=2049, sector=45096, nr_sectors = 40 limit=40427 [ 95.181733][ T354] kworker/u4:5: attempt to access beyond end of device [ 95.181733][ T354] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 95.433650][ T1487] loop0: detected capacity change from 0 to 40427 [ 95.450633][ T1487] F2FS-fs (loop0): Invalid segment/section count (31 != 24 * 1) [ 95.463545][ T1487] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 95.471968][ T1487] F2FS-fs (loop0): heap/no_heap options were deprecated [ 95.479596][ T1487] F2FS-fs (loop0): invalid crc value [ 95.493749][ T1487] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.525944][ T1487] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 95.531744][ T1489] loop1: detected capacity change from 0 to 40427 [ 95.533332][ T1487] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.544404][ T1489] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 95.590493][ T1489] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.621483][ T1489] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.650494][ T1507] loop3: detected capacity change from 0 to 1024 [ 95.667312][ T1507] EXT4-fs: Ignoring removed oldalloc option [ 95.676575][ T1507] EXT4-fs: test_dummy_encryption requires encrypt feature [ 95.690732][ T283] syz-executor: attempt to access beyond end of device [ 95.690732][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.711759][ T1509] loop4: detected capacity change from 0 to 128 [ 95.718243][ T1489] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 95.719924][ T1509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.732786][ T1489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.734529][ T1509] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.774195][ T1509] pim6reg0: tun_chr_ioctl cmd 1074025684 [ 95.780690][ T1448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.789685][ T1448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.789888][ T1509] pim6reg0: tun_chr_ioctl cmd 1074025681 [ 95.930128][ T1343] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 95.970255][ T1343] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 96.018253][ T1343] asix: probe of 3-1:0.0 failed with error -71 [ 97.188973][ T1343] usb 3-1: USB disconnect, device number 6 [ 97.835521][ T284] EXT4-fs (loop4): unmounting filesystem. [ 98.179696][ T1530] loop2: detected capacity change from 0 to 40427 [ 98.191421][ T1530] F2FS-fs (loop2): invalid crc value [ 98.197679][ T1530] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.227487][ T1530] F2FS-fs (loop2): Start checkpoint disabled! [ 98.234259][ T1530] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 98.289047][ T343] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 98.310918][ T1542] futex_wake_op: syz.2.268 tries to shift op by -1; fix this program [ 98.428981][ T549] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 98.470085][ T343] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.481233][ T343] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.491641][ T343] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 98.500758][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.508804][ T343] usb 4-1: SerialNumber: syz [ 98.514997][ T343] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 98.521762][ T343] usb-storage 4-1:1.0: USB Mass Storage device detected [ 98.529460][ T343] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 98.537431][ T343] scsi host1: usb-storage 4-1:1.0 [ 98.586961][ T1547] loop0: detected capacity change from 0 to 256 [ 98.593957][ T1547] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.605110][ T1547] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 98.614960][ T1547] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 98.631667][ T549] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 98.640784][ T28] audit: type=1400 audit(1756376456.228:267): avc: denied { write } for pid=1546 comm="syz.0.272" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.662479][ T549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.672317][ T28] audit: type=1400 audit(1756376456.228:268): avc: denied { add_name } for pid=1546 comm="syz.0.272" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.693110][ T549] usb 2-1: config 0 descriptor?? [ 98.698715][ T28] audit: type=1400 audit(1756376456.228:269): avc: denied { associate } for pid=1546 comm="syz.0.272" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.720273][ T28] audit: type=1400 audit(1756376456.228:270): avc: denied { write } for pid=1546 comm="syz.0.272" name="file1" dev="loop0" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.743217][ T28] audit: type=1400 audit(1756376456.228:271): avc: denied { open } for pid=1546 comm="syz.0.272" path="/55/file0/file1" dev="loop0" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.745597][ T349] kworker/u4:4: attempt to access beyond end of device [ 98.745597][ T349] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 98.780571][ T28] audit: type=1400 audit(1756376456.228:272): avc: denied { bind } for pid=1546 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.816883][ T19] usb 4-1: USB disconnect, device number 5 [ 98.956913][ T28] audit: type=1400 audit(1756376456.538:273): avc: denied { setopt } for pid=1564 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.981466][ T28] audit: type=1400 audit(1756376456.568:274): avc: denied { map } for pid=1564 comm="syz.2.277" path="socket:[21626]" dev="sockfs" ino=21626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.065376][ T1571] loop4: detected capacity change from 0 to 1024 [ 99.072254][ T1571] EXT4-fs: Ignoring removed nobh option [ 99.078460][ T1571] ext4: Unknown parameter 'fsmagic' [ 99.578816][ T288] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.583253][ T1581] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 99.595814][ T1581] device syzkaller0 entered promiscuous mode [ 99.778378][ T288] usb 3-1: Using ep0 maxpacket: 32 [ 99.784550][ T288] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 99.793326][ T288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.803723][ T288] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 99.815696][ T288] usb 3-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 99.826295][ T288] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.835508][ T288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.843964][ T288] usb 3-1: Product: syz [ 99.850889][ T288] usb 3-1: Manufacturer: syz [ 99.855539][ T288] usb 3-1: SerialNumber: syz [ 100.148176][ T28] audit: type=1400 audit(1756376457.649:275): avc: denied { accept } for pid=1564 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.415055][ T1538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.423599][ T1538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.432146][ T549] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 100.442353][ T549] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 100.453744][ T549] asix: probe of 2-1:0.0 failed with error -71 [ 100.463335][ T549] usb 2-1: USB disconnect, device number 4 [ 100.571691][ T1598] loop3: detected capacity change from 0 to 8192 [ 100.925743][ T1602] loop4: detected capacity change from 0 to 128 [ 101.475401][ T1613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.294'. [ 101.520159][ T1615] x_tables: duplicate underflow at hook 2 [ 101.867266][ T334] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 101.951562][ T1631] loop4: detected capacity change from 0 to 16 [ 101.960214][ T1631] erofs: (device loop4): mounted with root inode @ nid 36. [ 101.971788][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 101.983019][ T1631] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 102.003660][ T1631] x_tables: duplicate underflow at hook 1 [ 102.417549][ T288] usb 3-1: USB disconnect, device number 7 [ 102.446740][ T1635] loop2: detected capacity change from 0 to 1024 [ 102.454725][ T1635] EXT4-fs: dax option not supported [ 102.498011][ T334] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.510893][ T334] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 102.520364][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.528623][ T334] usb 4-1: Product: syz [ 102.532944][ T334] usb 4-1: Manufacturer: syz [ 102.537642][ T334] usb 4-1: SerialNumber: syz [ 102.554564][ T334] usb 4-1: config 0 descriptor?? [ 102.627881][ T1360] udevd[1360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.857553][ T1643] loop2: detected capacity change from 0 to 8192 [ 102.876459][ T1645] netlink: 176 bytes leftover after parsing attributes in process `syz.3.297'. [ 102.937827][ T1638] loop4: detected capacity change from 0 to 40427 [ 102.973481][ T1638] F2FS-fs (loop4): invalid crc value [ 102.986515][ T1638] F2FS-fs (loop4): Found nat_bits in checkpoint [ 103.208153][ T1638] F2FS-fs (loop4): Start checkpoint disabled! [ 103.251307][ T1638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 103.354017][ T28] audit: type=1400 audit(1756376460.941:276): avc: denied { setopt } for pid=1650 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.375123][ T1652] futex_wake_op: syz.4.302 tries to shift op by -1; fix this program [ 103.394849][ T1654] loop1: detected capacity change from 0 to 512 [ 103.401540][ T1654] EXT4-fs: Ignoring removed nobh option [ 103.409430][ T1654] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 103.421114][ T1654] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 103.431405][ T1654] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.306: Corrupt directory, running e2fsck is recommended [ 103.444974][ T1654] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 103.453657][ T1654] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.306: corrupted in-inode xattr [ 103.465839][ T1654] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.306: couldn't read orphan inode 15 (err -117) [ 103.477821][ T1654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.496287][ T1654] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 103.507877][ T1654] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 103.518048][ T1654] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.306: Corrupt directory, running e2fsck is recommended [ 103.538391][ T285] EXT4-fs (loop1): unmounting filesystem. [ 103.551424][ T349] kworker/u4:4: attempt to access beyond end of device [ 103.551424][ T349] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 103.665839][ T1660] loop2: detected capacity change from 0 to 1024 [ 103.696801][ T340] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.712098][ T1658] loop1: detected capacity change from 0 to 40427 [ 103.724795][ T1658] F2FS-fs (loop1): Invalid segment/section count (31 != 24 * 1) [ 103.733102][ T1658] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 103.748969][ T1658] F2FS-fs (loop1): heap/no_heap options were deprecated [ 103.771258][ T1658] F2FS-fs (loop1): invalid crc value [ 103.777995][ T1658] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.848219][ T1658] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 103.855290][ T1658] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.197972][ T1668] loop2: detected capacity change from 0 to 40427 [ 104.207647][ T1668] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 104.215508][ T1668] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 104.226482][ T285] syz-executor: attempt to access beyond end of device [ 104.226482][ T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.239979][ T1668] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.275720][ T1668] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 104.282905][ T1668] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.340766][ T1678] loop1: detected capacity change from 0 to 256 [ 104.350035][ T1678] exfat: Unknown parameter 'ÿÿ' [ 104.416307][ T1360] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.590575][ T28] audit: type=1326 audit(1756376462.181:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1622 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75da78ebe9 code=0x7fc00000 [ 105.212877][ T1343] usb 4-1: USB disconnect, device number 6 [ 105.269245][ T1684] loop3: detected capacity change from 0 to 1024 [ 105.303622][ T1684] EXT4-fs: Ignoring removed nobh option [ 105.365683][ T1687] loop4: detected capacity change from 0 to 16 [ 105.374337][ T1687] erofs: (device loop4): mounted with root inode @ nid 36. [ 105.388579][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 105.399855][ T1687] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 105.422219][ T1687] x_tables: duplicate underflow at hook 1 [ 105.525640][ T1684] ext4: Unknown parameter 'fsmagic' [ 105.708283][ T1692] loop2: detected capacity change from 0 to 1024 [ 105.733925][ T1692] EXT4-fs: dax option not supported [ 106.174724][ T1694] loop1: detected capacity change from 0 to 40427 [ 106.196629][ T28] audit: type=1400 audit(1756376463.792:278): avc: denied { getopt } for pid=1699 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.215388][ T1694] F2FS-fs (loop1): invalid crc value [ 106.241382][ T1694] F2FS-fs (loop1): Found nat_bits in checkpoint [ 106.301842][ T1694] F2FS-fs (loop1): Start checkpoint disabled! [ 106.323675][ T1694] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 106.418393][ T1712] futex_wake_op: syz.1.317 tries to shift op by -1; fix this program [ 106.736854][ T10] kworker/u4:1: attempt to access beyond end of device [ 106.736854][ T10] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 107.046501][ T1727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 107.057088][ T28] audit: type=1400 audit(1756376464.652:279): avc: denied { create } for pid=1726 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 107.089824][ T28] audit: type=1400 audit(1756376464.672:280): avc: denied { sys_admin } for pid=1726 comm="syz.3.324" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 107.119716][ T1732] loop1: detected capacity change from 0 to 1024 [ 107.135494][ T1732] EXT4-fs: dax option not supported [ 107.317606][ T1735] loop2: detected capacity change from 0 to 1024 [ 107.324302][ T1735] EXT4-fs: dax option not supported [ 107.381417][ T1739] loop4: detected capacity change from 0 to 1024 [ 107.400937][ T1739] EXT4-fs: dax option not supported [ 107.989845][ T1751] loop1: detected capacity change from 0 to 16 [ 107.998880][ T1751] erofs: (device loop1): mounted with root inode @ nid 36. [ 108.013062][ T47] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 108.024344][ T1751] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 108.046947][ T1751] x_tables: duplicate underflow at hook 1 [ 108.362645][ T28] audit: type=1400 audit(1756376465.953:281): avc: denied { map } for pid=1756 comm="syz.3.332" path="socket:[22817]" dev="sockfs" ino=22817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 108.375601][ T1757] 9pnet_fd: Insufficient options for proto=fd [ 108.402450][ T28] audit: type=1400 audit(1756376465.993:282): avc: denied { create } for pid=1752 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.424522][ T28] audit: type=1400 audit(1756376466.013:284): avc: denied { getopt } for pid=1752 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.444381][ T28] audit: type=1400 audit(1756376466.013:283): avc: denied { getopt } for pid=1752 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.473962][ T288] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 108.566078][ T1759] loop4: detected capacity change from 0 to 40427 [ 108.583439][ T1759] F2FS-fs (loop4): invalid crc value [ 108.590284][ T1759] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.622201][ T1759] F2FS-fs (loop4): Start checkpoint disabled! [ 108.628991][ T1759] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 108.663893][ T19] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.672424][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.683412][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.693232][ T288] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 108.703479][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.718055][ T288] usb 3-1: config 0 descriptor?? [ 108.724431][ T1769] futex_wake_op: syz.4.333 tries to shift op by -1; fix this program [ 108.847273][ T19] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.855638][ T19] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 108.863265][ T19] usb 4-1: can't read configurations, error -71 [ 109.160849][ T1749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.170811][ T1749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.184821][ T288] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 109.192301][ T288] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 109.321516][ T1022] kworker/u4:8: attempt to access beyond end of device [ 109.321516][ T1022] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 109.384488][ T288] cp2112 0003:10C4:EA90.0003: Part Number: 0x81 Device Version: 0xD2 [ 109.593058][ T288] cp2112 0003:10C4:EA90.0003: error requesting SMBus config [ 109.601133][ T288] cp2112: probe of 0003:10C4:EA90.0003 failed with error -71 [ 109.617137][ T288] usb 3-1: USB disconnect, device number 8 [ 109.890590][ T1792] loop1: detected capacity change from 0 to 1024 [ 109.903747][ T1792] EXT4-fs: Ignoring removed nobh option [ 109.905362][ T1787] fido_id[1787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 109.913564][ T1792] ext4: Unknown parameter 'fsmagic' [ 110.040172][ T28] audit: type=1400 audit(1756376467.634:285): avc: denied { map } for pid=1794 comm="syz.3.342" path="socket:[22885]" dev="sockfs" ino=22885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 110.416692][ T1343] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 110.596706][ T1803] loop4: detected capacity change from 0 to 128 [ 110.614037][ T1343] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 110.627296][ T1343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.639763][ T1343] usb 1-1: config 0 descriptor?? [ 110.674758][ T28] audit: type=1400 audit(1756376468.274:286): avc: denied { read } for pid=1804 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.705097][ T10] kworker/u4:1: attempt to access beyond end of device [ 110.705097][ T10] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 110.744838][ T1807] loop4: detected capacity change from 0 to 512 [ 110.767675][ T28] audit: type=1400 audit(1756376468.344:287): avc: denied { write } for pid=1804 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.769895][ T1807] EXT4-fs (loop4): #blocks per group too big: 24576 [ 110.800080][ T28] audit: type=1400 audit(1756376468.354:288): avc: denied { setopt } for pid=1804 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.842532][ T1816] loop2: detected capacity change from 0 to 1024 [ 110.853110][ T1816] EXT4-fs: Ignoring removed nobh option [ 110.862001][ T1816] ext4: Unknown parameter 'fsmagic' [ 111.014153][ T1823] loop1: detected capacity change from 0 to 16 [ 111.055669][ T1823] erofs: (device loop1): mounted with root inode @ nid 36. [ 111.646138][ T1825] x_tables: duplicate underflow at hook 1 [ 111.653298][ T47] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 111.664669][ T1823] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 111.829657][ T1820] loop4: detected capacity change from 0 to 1024 [ 111.852594][ T1820] EXT4-fs: Ignoring removed nobh option [ 111.881681][ T1820] ext4: Unknown parameter 'fsmagic' [ 112.607434][ T1818] loop3: detected capacity change from 0 to 40427 [ 112.720320][ T1818] F2FS-fs (loop3): invalid crc value [ 112.742068][ T1818] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.754816][ T1829] syz.2.353[1829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.754912][ T1829] syz.2.353[1829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.890721][ T1818] F2FS-fs (loop3): Start checkpoint disabled! [ 112.950090][ T1844] loop1: detected capacity change from 0 to 1024 [ 112.956548][ T1818] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 112.993750][ T1844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.009345][ T28] audit: type=1400 audit(1756376470.595:289): avc: denied { map } for pid=1840 comm="syz.1.355" path="/70/file1/memory.swap.current" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.025663][ T1849] futex_wake_op: syz.3.349 tries to shift op by -1; fix this program [ 113.048215][ T1841] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.155418][ T285] EXT4-fs (loop1): unmounting filesystem. [ 113.182265][ T10] kworker/u4:1: attempt to access beyond end of device [ 113.182265][ T10] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 113.346426][ T1859] loop3: detected capacity change from 0 to 1024 [ 113.348328][ T1856] loop2: detected capacity change from 0 to 40427 [ 113.356477][ T1859] EXT4-fs: dax option not supported [ 113.365150][ T1856] F2FS-fs (loop2): Invalid segment/section count (31 != 24 * 1) [ 113.374103][ T1856] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 113.393657][ T1856] F2FS-fs (loop2): heap/no_heap options were deprecated [ 113.396990][ T1793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.416051][ T1856] F2FS-fs (loop2): invalid crc value [ 113.419059][ T1793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.433286][ T1856] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.435556][ T1343] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 113.453530][ T1343] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 113.465301][ T1343] asix: probe of 1-1:0.0 failed with error -71 [ 113.473172][ T1343] usb 1-1: USB disconnect, device number 5 [ 113.534555][ T1856] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 113.551427][ T1856] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.696374][ T287] syz-executor: attempt to access beyond end of device [ 113.696374][ T287] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.055686][ T1872] loop2: detected capacity change from 0 to 1024 [ 114.062571][ T1872] EXT4-fs: Ignoring removed nobh option [ 114.068217][ T1872] ext4: Unknown parameter 'fsmagic' [ 114.189684][ T1877] loop1: detected capacity change from 0 to 256 [ 114.627510][ T1880] x_tables: duplicate underflow at hook 1 [ 114.712647][ T1877] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.744860][ T1877] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 114.830861][ T1877] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 114.869991][ T28] audit: type=1400 audit(1756376472.456:290): avc: denied { mount } for pid=1875 comm="syz.1.364" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 114.950871][ T28] audit: type=1400 audit(1756376472.536:291): avc: denied { mount } for pid=1881 comm="syz.3.365" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 115.030664][ T28] audit: type=1400 audit(1756376472.536:292): avc: denied { mounton } for pid=1881 comm="syz.3.365" path="/69/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 115.284840][ T1886] loop1: detected capacity change from 0 to 40427 [ 115.305021][ T1889] loop2: detected capacity change from 0 to 40427 [ 115.320962][ T1886] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 115.336324][ T1889] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 115.345937][ T1886] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 115.364481][ T1889] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.382209][ T28] audit: type=1400 audit(1756376472.977:293): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 115.404516][ T1897] syz.3.369[1897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.404585][ T1897] syz.3.369[1897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.421282][ T1889] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.439555][ T1897] netlink: 88 bytes leftover after parsing attributes in process `syz.3.369'. [ 115.449772][ T1886] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.458747][ T1897] netlink: 48 bytes leftover after parsing attributes in process `syz.3.369'. [ 115.494629][ T1897] loop3: detected capacity change from 0 to 512 [ 115.512044][ T1897] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.536523][ T1886] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 115.544458][ T1889] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.552695][ T1897] EXT4-fs (loop3): 1 truncate cleaned up [ 115.558332][ T1897] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.567573][ T1889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.576394][ T1886] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.585732][ T1907] futex_wake_op: syz.0.367 tries to shift op by -1; fix this program [ 118.046977][ T286] EXT4-fs (loop3): unmounting filesystem. [ 118.273672][ T1930] loop2: detected capacity change from 0 to 1024 [ 118.280885][ T1930] EXT4-fs: Ignoring removed nobh option [ 118.286593][ T1930] ext4: Unknown parameter 'fsmagic' [ 118.330204][ T1360] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.705335][ T19] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 118.909751][ T19] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 118.918872][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.927648][ T19] usb 2-1: config 0 descriptor?? [ 119.020790][ T1938] x_tables: duplicate underflow at hook 1 [ 119.220503][ T1940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.378'. [ 120.103269][ T1954] futex_wake_op: syz.0.382 tries to shift op by -1; fix this program [ 120.181017][ T1960] loop3: detected capacity change from 0 to 256 [ 120.192451][ T1960] FAT-fs (loop3): Directory bread(block 64) failed [ 120.199288][ T1960] FAT-fs (loop3): Directory bread(block 65) failed [ 120.205894][ T1960] FAT-fs (loop3): Directory bread(block 66) failed [ 120.212631][ T1960] FAT-fs (loop3): Directory bread(block 67) failed [ 120.219310][ T1960] FAT-fs (loop3): Directory bread(block 68) failed [ 120.225935][ T1960] FAT-fs (loop3): Directory bread(block 69) failed [ 120.232550][ T1960] FAT-fs (loop3): Directory bread(block 70) failed [ 120.239094][ T1960] FAT-fs (loop3): Directory bread(block 71) failed [ 120.245624][ T1960] FAT-fs (loop3): Directory bread(block 72) failed [ 120.252180][ T1960] FAT-fs (loop3): Directory bread(block 73) failed [ 120.404309][ T1962] process 'syz.3.384' launched '/dev/fd/5' with NULL argv: empty string added [ 120.415070][ T1962] syz.3.384: attempt to access beyond end of device [ 120.415070][ T1962] loop3: rw=524288, sector=1256, nr_sectors = 4 limit=256 [ 120.428803][ T1962] syz.3.384: attempt to access beyond end of device [ 120.428803][ T1962] loop3: rw=0, sector=1256, nr_sectors = 4 limit=256 [ 120.488027][ T28] audit: type=1400 audit(1756376478.009:294): avc: denied { execute_no_trans } for pid=1959 comm="syz.3.384" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 120.653724][ T1965] loop4: detected capacity change from 0 to 40427 [ 120.674170][ T1965] F2FS-fs (loop4): invalid crc value [ 120.688039][ T1965] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.722506][ T1965] F2FS-fs (loop4): Start checkpoint disabled! [ 120.729133][ T1926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.737596][ T1926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.748419][ T19] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 120.758512][ T1965] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 120.776418][ T28] audit: type=1400 audit(1756376478.369:295): avc: denied { read } for pid=1963 comm="syz.4.385" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.803912][ T19] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 120.811845][ T1915] kworker/u4:9: attempt to access beyond end of device [ 120.811845][ T1915] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 120.817193][ T19] asix: probe of 2-1:0.0 failed with error -71 [ 120.829480][ T28] audit: type=1326 audit(1756376478.419:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.0.387" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f021a18ebe9 code=0x0 [ 120.845016][ T19] usb 2-1: USB disconnect, device number 5 [ 120.889829][ T1972] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.897034][ T1972] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.923780][ T28] audit: type=1400 audit(1756376478.519:297): avc: denied { map } for pid=1970 comm="syz.0.387" path="socket:[23320]" dev="sockfs" ino=23320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.380503][ T1343] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 121.575487][ T1343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.586698][ T1343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.602237][ T1990] loop4: detected capacity change from 0 to 16 [ 121.620466][ T1343] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 121.634101][ T1343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.644778][ T1990] erofs: (device loop4): mounted with root inode @ nid 36. [ 121.679818][ T46] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 121.686608][ T1343] usb 4-1: config 0 descriptor?? [ 121.697169][ T1990] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 121.718722][ T1990] x_tables: duplicate underflow at hook 1 [ 121.879712][ T372] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.548963][ T372] usb 2-1: device descriptor read/64, error -71 [ 122.708954][ T1981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.718403][ T1981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.797525][ T1343] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 122.809597][ T1343] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 122.916736][ T372] usb 2-1: device descriptor read/64, error -71 [ 123.217616][ T1343] cp2112 0003:10C4:EA90.0004: error requesting version [ 123.245309][ T1343] cp2112: probe of 0003:10C4:EA90.0004 failed with error -32 [ 123.260653][ T1343] usb 4-1: USB disconnect, device number 9 [ 123.271517][ T2008] fido_id[2008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 123.373066][ T372] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.700717][ T372] usb 2-1: device descriptor read/64, error -71 [ 123.737257][ T2017] loop2: detected capacity change from 0 to 1024 [ 123.743988][ T2017] EXT4-fs: Ignoring removed nobh option [ 123.754890][ T2017] ext4: Unknown parameter 'fsmagic' [ 125.117162][ T2033] loop3: detected capacity change from 0 to 512 [ 125.138090][ T343] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.157372][ T2033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.187715][ T2033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.196670][ T2033] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.333988][ T547] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 125.611183][ T343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.635048][ T343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.646283][ T343] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.660458][ T343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.689862][ T343] usb 5-1: config 0 descriptor?? [ 125.727029][ T547] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 125.737215][ T547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.753332][ T547] usb 3-1: config 0 descriptor?? [ 125.759732][ T372] usb 2-1: device descriptor read/64, error -71 [ 126.145863][ T372] usb usb2-port1: attempt power cycle [ 126.181109][ T286] EXT4-fs (loop3): unmounting filesystem. [ 126.220885][ T2046] loop3: detected capacity change from 0 to 1024 [ 126.240069][ T2046] EXT4-fs: dax option not supported [ 126.985475][ T343] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input6 [ 127.038299][ T28] audit: type=1400 audit(1756376484.642:298): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1145 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.182746][ T343] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input7 [ 127.208750][ T343] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input8 [ 127.225380][ T28] audit: type=1400 audit(1756376484.662:299): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1145 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.260215][ T343] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input9 [ 127.287896][ T28] audit: type=1400 audit(1756376484.782:300): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1145 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.313201][ T343] uclogic 0003:256C:006D.0005: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 127.333688][ T372] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.368152][ T372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.393476][ T372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.414506][ T372] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 127.423567][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.445116][ T372] usb 2-1: config 0 descriptor?? [ 127.580178][ T2066] loop3: detected capacity change from 0 to 1024 [ 127.590322][ T2066] EXT4-fs: Ignoring removed nobh option [ 127.596297][ T2066] ext4: Unknown parameter 'fsmagic' [ 127.601948][ T2029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.611456][ T2029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.620690][ T547] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 127.631030][ T547] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 127.696824][ T547] asix: probe of 3-1:0.0 failed with error -71 [ 127.704106][ T547] usb 3-1: USB disconnect, device number 9 [ 127.929103][ T2035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.953899][ T2035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.108304][ T372] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 128.137293][ T372] cp2112 0003:10C4:EA90.0006: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 128.172986][ T2070] loop2: detected capacity change from 0 to 1024 [ 128.211522][ T549] usb 5-1: USB disconnect, device number 5 [ 128.217818][ T372] cp2112 0003:10C4:EA90.0006: Part Number: 0x81 Device Version: 0xD2 [ 128.227053][ T2072] loop4: detected capacity change from 0 to 1024 [ 128.231530][ T2070] EXT4-fs: dax option not supported [ 128.274969][ T2072] EXT4-fs: Ignoring removed nobh option [ 128.280666][ T2072] ext4: Unknown parameter 'fsmagic' [ 129.016603][ T372] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 129.034148][ T372] cp2112: probe of 0003:10C4:EA90.0006 failed with error -71 [ 129.042801][ T372] usb 2-1: USB disconnect, device number 8 [ 129.146918][ T2078] fido_id[2078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 129.248256][ T2081] loop3: detected capacity change from 0 to 4096 [ 129.257211][ T2081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.268832][ T28] audit: type=1400 audit(1756376486.874:301): avc: denied { link } for pid=2076 comm="syz.3.414" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.453832][ T2093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 129.683375][ T549] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.807945][ T286] EXT4-fs (loop3): unmounting filesystem. [ 129.846327][ T2098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.854858][ T2098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.864602][ T549] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.876126][ T549] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.885217][ T549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.893243][ T549] usb 5-1: Product: syz [ 129.897444][ T549] usb 5-1: Manufacturer: syz [ 129.902048][ T549] usb 5-1: SerialNumber: syz [ 129.907470][ T549] usb 5-1: config 0 descriptor?? [ 129.915161][ T549] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 129.945950][ T1360] udevd[1360]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.113169][ T19] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.209335][ T2101] loop1: detected capacity change from 0 to 40427 [ 130.343711][ T2101] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 130.408146][ T2111] 9pnet_fd: Insufficient options for proto=fd [ 130.433944][ T2101] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.477805][ T2101] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.524312][ T2101] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.531457][ T2101] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.539048][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 130.549763][ T549] usb 5-1: USB disconnect, device number 6 [ 130.558701][ T19] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.623448][ T19] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 130.633649][ T19] usb 4-1: config 13 has no interface number 0 [ 130.639832][ T19] usb 4-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.653071][ T19] usb 4-1: config 13 interface 50 has no altsetting 0 [ 131.240630][ T19] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 131.258372][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.275087][ T19] usb 4-1: Product: syz [ 131.279294][ T19] usb 4-1: Manufacturer: syz [ 131.284405][ T19] usb 4-1: SerialNumber: syz [ 131.531010][ T343] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 131.733454][ T343] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 131.742585][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.754569][ T343] usb 1-1: config 0 descriptor?? [ 132.141167][ T2140] loop4: detected capacity change from 0 to 1024 [ 132.147934][ T2140] EXT4-fs: Ignoring removed nobh option [ 132.154816][ T2140] ext4: Unknown parameter 'fsmagic' [ 132.193697][ T1360] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.522580][ T19] usb 4-1: MIDIStreaming interface descriptor not found [ 132.542643][ T19] usb 4-1: USB disconnect, device number 10 [ 132.550169][ T2144] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.557383][ T2144] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.633208][ T2148] loop3: detected capacity change from 0 to 1024 [ 132.664247][ T2148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.224049][ T2159] loop2: detected capacity change from 0 to 1024 [ 133.230788][ T2159] EXT4-fs: Ignoring removed nobh option [ 133.236628][ T2159] ext4: Unknown parameter 'fsmagic' [ 133.285306][ T1360] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.849284][ T286] EXT4-fs (loop3): unmounting filesystem. [ 133.991779][ T2121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.000721][ T2121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.009953][ T343] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 134.020655][ T343] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 134.032045][ T343] asix: probe of 1-1:0.0 failed with error -71 [ 134.039053][ T343] usb 1-1: USB disconnect, device number 6 [ 134.355173][ T28] audit: type=1400 audit(1756376491.956:302): avc: denied { ioctl } for pid=2174 comm="syz.2.438" path="socket:[24771]" dev="sockfs" ino=24771 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.356860][ T2175] loop2: detected capacity change from 0 to 256 [ 134.394327][ T2175] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿle0" or missing value [ 135.486465][ T2187] loop4: detected capacity change from 0 to 1024 [ 135.494280][ T2187] EXT4-fs: dax option not supported [ 135.799907][ T2200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 135.808887][ T2200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 135.940459][ T2201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 136.256602][ T2206] loop1: detected capacity change from 0 to 256 [ 136.290149][ T343] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.467281][ T2206] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.502265][ T2208] loop2: detected capacity change from 0 to 1024 [ 136.527612][ T2208] EXT4-fs: Ignoring removed nobh option [ 136.539938][ T2206] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 136.551580][ T2208] ext4: Unknown parameter 'fsmagic' [ 136.561090][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.579915][ T2206] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 136.659011][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.698060][ T343] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 136.986002][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.009452][ T28] audit: type=1400 audit(1756376494.607:303): avc: denied { mounton } for pid=2205 comm="syz.1.447" path="/83/file1/file0" dev="loop1" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.034626][ T2214] overlayfs: missing 'lowerdir' [ 137.035837][ T343] usb 4-1: config 0 descriptor?? [ 137.057710][ T28] audit: type=1400 audit(1756376494.657:304): avc: denied { read write } for pid=2217 comm="syz.4.451" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 137.082226][ T28] audit: type=1400 audit(1756376494.687:305): avc: denied { open } for pid=2217 comm="syz.4.451" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 137.119868][ T28] audit: type=1400 audit(1756376494.687:306): avc: denied { ioctl } for pid=2217 comm="syz.4.451" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 137.295710][ T2218] loop4: detected capacity change from 0 to 40427 [ 137.304426][ T2218] F2FS-fs (loop4): fault_injection options not supported [ 137.311531][ T2218] F2FS-fs (loop4): Image doesn't support compression [ 137.318227][ T2218] F2FS-fs (loop4): Image doesn't support compression [ 137.325900][ T2218] F2FS-fs (loop4): invalid crc value [ 137.430059][ T547] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 137.447208][ T2218] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.456558][ T2203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.476139][ T2203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.703301][ T2227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 137.719886][ T2218] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.741220][ T547] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 137.758496][ T547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.772043][ T343] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 137.779100][ T2229] loop1: detected capacity change from 0 to 256 [ 137.786787][ T343] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 137.814835][ T547] usb 1-1: config 0 descriptor?? [ 137.819923][ T2229] FAT-fs (loop1): Directory bread(block 64) failed [ 137.829130][ T2229] FAT-fs (loop1): Directory bread(block 65) failed [ 137.839323][ T2229] FAT-fs (loop1): Directory bread(block 66) failed [ 137.845909][ T2229] FAT-fs (loop1): Directory bread(block 67) failed [ 137.852622][ T2221] f2fs_ckpt-7:4: attempt to access beyond end of device [ 137.852622][ T2221] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.867122][ T2229] FAT-fs (loop1): Directory bread(block 68) failed [ 137.873845][ T2229] FAT-fs (loop1): Directory bread(block 69) failed [ 137.882816][ T2229] FAT-fs (loop1): Directory bread(block 70) failed [ 137.889652][ T2229] FAT-fs (loop1): Directory bread(block 71) failed [ 137.896391][ T2229] FAT-fs (loop1): Directory bread(block 72) failed [ 137.902998][ T2229] FAT-fs (loop1): Directory bread(block 73) failed [ 137.982923][ T343] cp2112 0003:10C4:EA90.0007: error requesting version [ 138.025629][ T343] cp2112: probe of 0003:10C4:EA90.0007 failed with error -32 [ 138.036415][ T343] usb 4-1: USB disconnect, device number 11 [ 138.052143][ T2235] fido_id[2235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 138.132392][ T2237] syz.1.453: attempt to access beyond end of device [ 138.132392][ T2237] loop1: rw=524288, sector=1256, nr_sectors = 4 limit=256 [ 138.146223][ T2237] syz.1.453: attempt to access beyond end of device [ 138.146223][ T2237] loop1: rw=0, sector=1256, nr_sectors = 4 limit=256 [ 138.287172][ T2238] loop4: detected capacity change from 0 to 16 [ 138.540676][ T2238] erofs: (device loop4): mounted with root inode @ nid 36. [ 138.554470][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 138.565846][ T2238] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 138.590613][ T2238] x_tables: duplicate underflow at hook 1 [ 138.926326][ T2247] loop4: detected capacity change from 0 to 1024 [ 138.933071][ T2247] EXT4-fs: dax option not supported [ 139.058677][ T19] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 139.080679][ T28] audit: type=1400 audit(1756376496.688:307): avc: denied { execmem } for pid=2249 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 139.113987][ T28] audit: type=1400 audit(1756376496.718:308): avc: denied { ioctl } for pid=2213 comm="syz.0.450" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.143035][ T28] audit: type=1400 audit(1756376496.738:309): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.174518][ T28] audit: type=1400 audit(1756376496.738:310): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.199334][ T28] audit: type=1400 audit(1756376496.738:311): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.469543][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.506733][ T2254] loop3: detected capacity change from 0 to 40427 [ 139.515995][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.526994][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 139.527005][ T28] audit: type=1400 audit(1756376497.129:314): avc: denied { mounton } for pid=2253 comm="syz.3.461" path="/89/file0" dev="tmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 139.528116][ T19] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 139.538450][ T2254] F2FS-fs (loop3): invalid crc value [ 139.555403][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.580280][ T28] audit: type=1400 audit(1756376497.189:315): avc: denied { bpf } for pid=2257 comm="syz.2.462" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.584943][ T19] usb 2-1: config 0 descriptor?? [ 139.600747][ T28] audit: type=1400 audit(1756376497.189:316): avc: denied { prog_load } for pid=2257 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.606578][ T2254] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.624506][ T28] audit: type=1400 audit(1756376497.189:317): avc: denied { create } for pid=2257 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.651500][ T28] audit: type=1400 audit(1756376497.189:318): avc: denied { connect } for pid=2257 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.660210][ T2254] F2FS-fs (loop3): Start checkpoint disabled! [ 139.672177][ T28] audit: type=1400 audit(1756376497.189:319): avc: denied { shutdown } for pid=2257 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.677753][ T2254] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 139.696891][ T28] audit: type=1400 audit(1756376497.259:320): avc: denied { perfmon } for pid=2257 comm="syz.2.462" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.725107][ T28] audit: type=1400 audit(1756376497.259:321): avc: denied { map_create } for pid=2257 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.744383][ T28] audit: type=1400 audit(1756376497.259:322): avc: denied { map_read map_write } for pid=2257 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.764176][ T28] audit: type=1400 audit(1756376497.259:323): avc: denied { prog_run } for pid=2257 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.806911][ T2262] futex_wake_op: syz.3.461 tries to shift op by -1; fix this program [ 140.001186][ T547] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 140.011851][ T547] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 140.023493][ T547] asix: probe of 1-1:0.0 failed with error -71 [ 140.030102][ T2243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.039639][ T547] usb 1-1: USB disconnect, device number 7 [ 140.046494][ T2243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.047520][ T1915] kworker/u4:9: attempt to access beyond end of device [ 140.047520][ T1915] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 140.069287][ T19] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 140.077136][ T19] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 140.248066][ T1343] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.268562][ T19] cp2112 0003:10C4:EA90.0008: error requesting version [ 140.278424][ T19] cp2112: probe of 0003:10C4:EA90.0008 failed with error -32 [ 140.301832][ T19] usb 2-1: USB disconnect, device number 9 [ 140.317708][ T2271] fido_id[2271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 140.385357][ T2273] loop2: detected capacity change from 0 to 512 [ 140.454256][ T1343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.469251][ T1343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.479223][ T1343] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 140.488835][ T1343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.501204][ T1343] usb 5-1: config 0 descriptor?? [ 141.030148][ T2280] Illegal XDP return value 4294967274 on prog (id 309) dev N/A, expect packet loss! [ 141.049430][ T2266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.061708][ T2266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.078108][ T1343] usbhid 5-1:0.0: can't add hid device: -71 [ 141.085780][ T1343] usbhid: probe of 5-1:0.0 failed with error -71 [ 141.103270][ T1343] usb 5-1: USB disconnect, device number 7 [ 141.165258][ T2282] netlink: 96 bytes leftover after parsing attributes in process `syz.1.469'. [ 141.238971][ T2285] SELinux: failed to load policy [ 141.350248][ T2291] loop3: detected capacity change from 0 to 1024 [ 141.357007][ T2291] EXT4-fs: Ignoring removed nobh option [ 141.362844][ T2291] ext4: Unknown parameter 'fsmagic' [ 141.430064][ T1360] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.517442][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.908989][ T2300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.475'. [ 141.928318][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.944256][ T2299] loop4: detected capacity change from 0 to 512 [ 141.950660][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.960675][ T19] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 141.980259][ T2299] EXT4-fs: quotafile must be on filesystem root [ 141.991862][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.007973][ T19] usb 2-1: config 0 descriptor?? [ 142.224531][ T2305] loop3: detected capacity change from 0 to 1024 [ 142.231545][ T2305] EXT4-fs: Ignoring removed nobh option [ 142.242531][ T2305] ext4: Unknown parameter 'fsmagic' [ 142.422537][ T2287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.440073][ T2287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.595420][ T19] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 142.603343][ T19] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 142.677756][ T19] cp2112 0003:10C4:EA90.0009: error requesting version [ 142.685156][ T19] cp2112: probe of 0003:10C4:EA90.0009 failed with error -32 [ 142.693795][ T19] usb 2-1: USB disconnect, device number 10 [ 142.709434][ T2312] fido_id[2312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 142.999536][ T2314] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.006815][ T2314] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.105834][ T2318] loop3: detected capacity change from 0 to 512 [ 143.118794][ T2318] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.481: invalid indirect mapped block 4294967295 (level 1) [ 143.133028][ T2318] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.481: invalid indirect mapped block 4294967295 (level 1) [ 143.147444][ T2318] EXT4-fs (loop3): 2 truncates cleaned up [ 143.153192][ T2318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.177637][ T286] EXT4-fs (loop3): unmounting filesystem. [ 143.518272][ T547] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.531260][ T2331] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.538441][ T2331] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.676353][ T547] usb 5-1: device descriptor read/64, error -71 [ 143.772604][ T2339] loop2: detected capacity change from 0 to 1024 [ 143.779339][ T2339] EXT4-fs: Ignoring removed nobh option [ 143.784999][ T2339] ext4: Unknown parameter 'fsmagic' [ 143.816798][ T1360] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.946318][ T547] usb 5-1: device descriptor read/64, error -71 [ 144.346028][ T547] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 144.364400][ T2343] loop3: detected capacity change from 0 to 40427 [ 144.372221][ T2343] F2FS-fs (loop3): invalid crc value [ 144.386747][ T2343] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.423402][ T2343] F2FS-fs (loop3): Start checkpoint disabled! [ 144.430187][ T2343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 144.515954][ T547] usb 5-1: device descriptor read/64, error -71 [ 144.516368][ T2353] futex_wake_op: syz.3.489 tries to shift op by -1; fix this program [ 144.556938][ T2357] loop1: detected capacity change from 0 to 1024 [ 144.563628][ T2357] EXT4-fs: Ignoring removed nobh option [ 144.569409][ T2357] ext4: Unknown parameter 'fsmagic' [ 144.586775][ T1360] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.680973][ T2359] loop2: detected capacity change from 0 to 1024 [ 144.687812][ T2359] EXT4-fs: Ignoring removed nobh option [ 144.693466][ T2359] ext4: Unknown parameter 'fsmagic' [ 144.785854][ T547] usb 5-1: device descriptor read/64, error -71 [ 144.864897][ T1360] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.908262][ T547] usb usb5-port1: attempt power cycle [ 145.190034][ T548] kworker/u4:6: attempt to access beyond end of device [ 145.190034][ T548] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 146.078849][ T547] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.121656][ T2367] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 146.149944][ T2375] loop2: detected capacity change from 0 to 1024 [ 146.182221][ T2375] EXT4-fs: dax option not supported [ 146.249814][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 146.249828][ T28] audit: type=1400 audit(1756376503.862:363): avc: denied { create } for pid=2380 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.531379][ T547] usb 5-1: device not accepting address 10, error -71 [ 146.538965][ T28] audit: type=1400 audit(1756376504.152:364): avc: denied { block_suspend } for pid=2380 comm="syz.3.500" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.573785][ T2378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.499'. [ 146.590560][ T2379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.499'. [ 146.595785][ T2376] loop4: detected capacity change from 0 to 40427 [ 146.625611][ T2376] F2FS-fs (loop4): invalid crc value [ 146.638277][ T2376] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.708689][ T2376] F2FS-fs (loop4): Start checkpoint disabled! [ 146.723336][ T2376] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 146.747676][ T28] audit: type=1400 audit(1756376504.362:365): avc: denied { mount } for pid=2372 comm="syz.2.498" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 146.797140][ T2397] futex_wake_op: syz.4.496 tries to shift op by -1; fix this program [ 147.163974][ T548] kworker/u4:6: attempt to access beyond end of device [ 147.163974][ T548] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 147.189456][ T2405] loop3: detected capacity change from 0 to 1024 [ 147.196690][ T28] audit: type=1400 audit(1756376504.812:366): avc: denied { create } for pid=2402 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.200920][ T2405] EXT4-fs: Ignoring removed nobh option [ 147.261795][ T28] audit: type=1400 audit(1756376504.842:367): avc: denied { setopt } for pid=2402 comm="syz.1.507" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.277460][ T2405] ext4: Unknown parameter 'fsmagic' [ 147.292031][ T2407] loop1: detected capacity change from 0 to 1024 [ 147.312750][ T2407] EXT4-fs: Ignoring removed nobh option [ 147.321520][ T2407] ext4: Unknown parameter 'fsmagic' [ 149.633392][ T28] audit: type=1400 audit(1756376506.433:368): avc: denied { setopt } for pid=2408 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.669187][ T28] audit: type=1326 audit(1756376507.284:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.2.510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f810818ebe9 code=0x0 [ 149.747857][ T2422] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.755086][ T2422] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.799900][ T28] audit: type=1400 audit(1756376507.414:370): avc: denied { map } for pid=2417 comm="syz.2.510" path="socket:[24357]" dev="sockfs" ino=24357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.824918][ T28] audit: type=1400 audit(1756376507.414:371): avc: denied { read } for pid=2417 comm="syz.2.510" path="socket:[24357]" dev="sockfs" ino=24357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.549115][ T28] audit: type=1400 audit(1756376508.164:372): avc: denied { create } for pid=2440 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.568670][ T2443] loop1: detected capacity change from 0 to 128 [ 150.583426][ T2443] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 150.889531][ T1360] udevd[1360]: incorrect ext4 checksum on /dev/loop1 [ 151.074447][ T2443] device veth0_to_bridge entered promiscuous mode [ 151.081495][ T2440] device veth0_to_bridge left promiscuous mode [ 151.124439][ T2445] loop2: detected capacity change from 0 to 40427 [ 151.133558][ T2445] F2FS-fs (loop2): invalid crc value [ 151.142330][ T2445] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.205483][ T2445] F2FS-fs (loop2): Start checkpoint disabled! [ 151.215526][ T2445] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 151.295090][ T2461] futex_wake_op: syz.2.517 tries to shift op by -1; fix this program [ 151.332273][ T2456] loop4: detected capacity change from 0 to 40427 [ 151.342703][ T2456] F2FS-fs (loop4): invalid crc value [ 151.349108][ T2456] F2FS-fs (loop4): Found nat_bits in checkpoint [ 151.397175][ T2456] F2FS-fs (loop4): Start checkpoint disabled! [ 151.404101][ T2456] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 151.441785][ T2465] loop3: detected capacity change from 0 to 1024 [ 151.459090][ T548] kworker/u4:6: attempt to access beyond end of device [ 151.459090][ T548] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 151.460185][ T2465] EXT4-fs: dax option not supported [ 151.572911][ T2467] futex_wake_op: syz.4.519 tries to shift op by -1; fix this program [ 151.703852][ T2469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2469 comm=syz.2.522 [ 151.721927][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 151.721941][ T28] audit: type=1400 audit(1756376509.335:374): avc: denied { create } for pid=2468 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.748020][ T28] audit: type=1400 audit(1756376509.335:375): avc: denied { bind } for pid=2468 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.766323][ T2473] loop2: detected capacity change from 0 to 1024 [ 151.769556][ T28] audit: type=1400 audit(1756376509.335:376): avc: denied { listen } for pid=2468 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.777440][ T2473] EXT4-fs: Ignoring removed nobh option [ 151.800475][ T2473] ext4: Unknown parameter 'fsmagic' [ 152.084722][ T1915] kworker/u4:9: attempt to access beyond end of device [ 152.084722][ T1915] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 152.793298][ T28] audit: type=1326 audit(1756376510.405:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2482 comm="syz.0.527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f021a18ebe9 code=0x0 [ 152.825855][ T28] audit: type=1400 audit(1756376510.405:378): avc: denied { setopt } for pid=2484 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.097862][ T2496] loop3: detected capacity change from 0 to 16 [ 153.145569][ T2496] erofs: (device loop3): mounted with root inode @ nid 36. [ 153.175019][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 153.186298][ T2496] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 153.221625][ T2496] x_tables: duplicate underflow at hook 1 [ 153.399001][ T28] audit: type=1400 audit(1756376510.765:379): avc: denied { read } for pid=2485 comm="syz.3.529" name="file2" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.421018][ T28] audit: type=1400 audit(1756376510.775:380): avc: denied { open } for pid=2485 comm="syz.3.529" path="/104/file1/file2" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.602656][ T2498] loop1: detected capacity change from 0 to 40427 [ 153.616419][ T2498] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 153.624269][ T2498] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.651868][ T2498] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.751890][ T2498] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 153.782732][ T2498] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.815984][ T2517] loop3: detected capacity change from 0 to 16 [ 153.824468][ T2517] erofs: (device loop3): mounted with root inode @ nid 36. [ 153.873330][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 153.884585][ T2517] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 153.917225][ T2517] x_tables: duplicate underflow at hook 1 [ 154.301221][ T28] audit: type=1400 audit(1756376511.876:381): avc: denied { create } for pid=2497 comm="syz.1.530" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 154.849224][ T2528] loop3: detected capacity change from 0 to 16 [ 154.857798][ T2528] erofs: (device loop3): mounted with root inode @ nid 36. [ 154.878218][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 154.889575][ T2528] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 154.925768][ T2528] x_tables: duplicate underflow at hook 1 [ 155.109579][ T2530] futex_wake_op: syz.0.532 tries to shift op by -1; fix this program [ 155.263471][ T547] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 155.568967][ T547] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 155.583839][ T547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.594560][ T547] usb 3-1: config 0 descriptor?? [ 156.371462][ T481] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 156.517757][ T28] audit: type=1400 audit(1756376514.127:382): avc: denied { create } for pid=2552 comm="syz.0.542" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.233367][ T481] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 157.242634][ T481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.250956][ T28] audit: type=1400 audit(1756376514.868:383): avc: denied { name_bind } for pid=2561 comm="syz.3.545" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 157.272844][ T481] usb 5-1: config 0 descriptor?? [ 157.279934][ T2562] loop3: detected capacity change from 0 to 2048 [ 157.303715][ T2562] EXT4-fs (loop3): failed to initialize system zone (-117) [ 157.311084][ T2562] EXT4-fs (loop3): mount failed [ 157.382197][ T28] audit: type=1326 audit(1756376514.998:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2552 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021a18ebe9 code=0x7fc00000 [ 157.469490][ T19] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 157.619981][ T547] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 157.630248][ T547] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 157.641809][ T547] asix: probe of 3-1:0.0 failed with error -71 [ 157.648709][ T547] usb 3-1: USB disconnect, device number 10 [ 157.651754][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.665564][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.675497][ T19] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 157.684617][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.473072][ T19] usb 2-1: config 0 descriptor?? [ 158.745341][ T28] audit: type=1400 audit(1756376516.358:385): avc: denied { mount } for pid=2572 comm="syz.2.548" name="/" dev="incremental-fs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 158.787908][ T28] audit: type=1400 audit(1756376516.358:386): avc: denied { read } for pid=2572 comm="syz.2.548" name="file0" dev="incremental-fs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.821869][ T28] audit: type=1400 audit(1756376516.358:387): avc: denied { open } for pid=2572 comm="syz.2.548" path="/115/file0/file0" dev="incremental-fs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.891080][ T19] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 158.917038][ T19] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 159.100756][ T481] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 159.125012][ T481] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 159.172587][ T481] asix: probe of 5-1:0.0 failed with error -71 [ 159.218915][ T481] usb 5-1: USB disconnect, device number 12 [ 159.778701][ T28] audit: type=1400 audit(1756376517.399:388): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 159.822393][ T19] cp2112 0003:10C4:EA90.000A: Part Number: 0x81 Device Version: 0xD2 [ 159.835180][ T19] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 159.843315][ T19] cp2112: probe of 0003:10C4:EA90.000A failed with error -32 [ 159.924984][ T2592] loop3: detected capacity change from 0 to 1024 [ 159.931772][ T2592] EXT4-fs: Ignoring removed nobh option [ 159.937395][ T2592] ext4: Unknown parameter 'fsmagic' [ 160.568256][ T549] usb 2-1: USB disconnect, device number 11 [ 160.581086][ T28] audit: type=1400 audit(1756376518.199:389): avc: denied { nlmsg_read } for pid=2597 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.606011][ T2598] loop4: detected capacity change from 0 to 2048 [ 160.617899][ T19] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 160.648979][ T2598] GPT:first_usable_lbas don't match. [ 160.654306][ T2598] GPT:34 != 290 [ 160.657845][ T2598] GPT: Use GNU Parted to correct GPT errors. [ 160.663866][ T2598] loop4: p1 p2 p3 [ 160.716159][ T340] udevd[340]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 160.720830][ T2060] udevd[2060]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 160.727534][ T1360] udevd[1360]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 160.750415][ T1360] udevd[1360]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 160.750471][ T340] udevd[340]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 160.761300][ T2060] udevd[2060]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 160.829115][ T19] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 160.842518][ T19] usb 3-1: config 16 has no interface number 0 [ 160.849761][ T19] usb 3-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 160.860963][ T19] usb 3-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.875065][ T19] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 160.884341][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.892365][ T19] usb 3-1: Product: syz [ 160.896630][ T19] usb 3-1: Manufacturer: syz [ 160.901451][ T19] usb 3-1: SerialNumber: syz [ 161.491724][ T2589] 9pnet_fd: Insufficient options for proto=fd [ 161.964412][ T2614] loop1: detected capacity change from 0 to 8192 [ 162.256789][ T28] audit: type=1400 audit(1756376519.700:390): avc: denied { unlink } for pid=2615 comm="syz.3.560" name="#5" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.285951][ T19] usb 3-1: USB disconnect, device number 11 [ 162.311583][ T1360] udevd[1360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 162.860357][ T2638] loop3: detected capacity change from 0 to 16 [ 162.868772][ T2638] erofs: (device loop3): mounted with root inode @ nid 36. [ 162.895461][ T2638] x_tables: duplicate underflow at hook 1 [ 163.206612][ T19] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 163.387689][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.398902][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.459112][ T2646] loop4: detected capacity change from 0 to 16 [ 163.475010][ T2646] erofs: (device loop4): mounted with root inode @ nid 36. [ 163.496217][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 163.507667][ T2646] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 163.544615][ T2646] x_tables: duplicate underflow at hook 1 [ 163.675067][ T481] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.701344][ T549] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 163.709047][ T19] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 163.718478][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.727102][ T19] usb 3-1: config 0 descriptor?? [ 163.829093][ T28] audit: type=1400 audit(1756376521.441:391): avc: denied { write } for pid=2647 comm="syz.3.569" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.093734][ T2634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.105134][ T2634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.117992][ T481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.129142][ T481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.139154][ T481] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 164.149558][ T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.162239][ T481] usb 1-1: config 0 descriptor?? [ 164.163249][ T549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.178154][ T549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.187986][ T549] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 164.197100][ T549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.207360][ T549] usb 2-1: config 0 descriptor?? [ 164.232369][ T2653] loop4: detected capacity change from 0 to 1024 [ 164.239231][ T2653] EXT4-fs: dax option not supported [ 164.316690][ T19] usbhid 3-1:0.0: can't add hid device: -71 [ 164.323139][ T19] usbhid: probe of 3-1:0.0 failed with error -71 [ 164.336582][ T19] usb 3-1: USB disconnect, device number 12 [ 164.578514][ T481] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 164.586467][ T481] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 164.618578][ T549] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 164.626604][ T549] cp2112 0003:10C4:EA90.000C: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 164.788645][ T481] cp2112 0003:10C4:EA90.000B: Part Number: 0x81 Device Version: 0xD2 [ 164.819591][ T549] cp2112 0003:10C4:EA90.000C: Part Number: 0x81 Device Version: 0xD2 [ 165.002976][ T481] cp2112 0003:10C4:EA90.000B: error requesting SMBus config [ 165.024055][ T549] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 165.121428][ T481] cp2112: probe of 0003:10C4:EA90.000B failed with error -32 [ 165.175289][ T2668] loop2: detected capacity change from 0 to 16 [ 165.203468][ T2668] erofs: (device loop2): mounted with root inode @ nid 36. [ 165.319652][ T46] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 165.321725][ T481] usb 1-1: USB disconnect, device number 8 [ 165.349256][ T2669] x_tables: duplicate underflow at hook 1 [ 165.361106][ T2668] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 165.772942][ T2670] fido_id[2670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 165.913618][ T549] cp2112: probe of 0003:10C4:EA90.000C failed with error -32 [ 165.928959][ T549] usb 2-1: USB disconnect, device number 12 [ 165.969840][ T2677] fido_id[2677]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 165.977297][ T2679] loop4: detected capacity change from 0 to 1024 [ 165.990199][ T28] audit: type=1400 audit(1756376523.602:392): avc: denied { read } for pid=2675 comm="syz.1.577" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.001073][ T2679] EXT4-fs: Ignoring removed nobh option [ 166.018050][ T2676] binder: BINDER_SET_CONTEXT_MGR already set [ 166.025834][ T2676] binder: 2675:2676 ioctl 4018620d 200000000100 returned -16 [ 166.035594][ T2676] binder: BINDER_SET_CONTEXT_MGR already set [ 166.041590][ T2676] binder: 2675:2676 ioctl 4018620d 200000000180 returned -16 [ 166.054973][ T2679] ext4: Unknown parameter 'fsmagic' [ 166.071225][ T28] audit: type=1400 audit(1756376523.642:393): avc: denied { open } for pid=2675 comm="syz.1.577" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.095507][ T28] audit: type=1400 audit(1756376523.642:394): avc: denied { ioctl } for pid=2675 comm="syz.1.577" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.120800][ T28] audit: type=1400 audit(1756376523.652:395): avc: denied { map } for pid=2675 comm="syz.1.577" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.627993][ T2692] loop1: detected capacity change from 0 to 16 [ 167.666108][ T2692] erofs: (device loop1): mounted with root inode @ nid 36. [ 167.686524][ T2692] x_tables: duplicate underflow at hook 1 [ 167.991663][ T2705] loop1: detected capacity change from 0 to 512 [ 168.014836][ T2705] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.021962][ T2705] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.022851][ T2708] loop2: detected capacity change from 0 to 512 [ 168.053225][ T2708] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 168.196231][ T2705] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.585: bad orphan inode 131083 [ 168.231117][ T2708] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 168.248478][ T2705] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.257285][ T2708] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 168.270273][ T28] audit: type=1400 audit(1756376525.893:396): avc: denied { write } for pid=2704 comm="syz.1.585" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.284228][ T2708] EXT4-fs (loop2): 1 truncate cleaned up [ 168.297651][ T28] audit: type=1400 audit(1756376525.913:397): avc: denied { add_name } for pid=2704 comm="syz.1.585" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.307674][ T2708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.320660][ T28] audit: type=1400 audit(1756376525.913:398): avc: denied { mounton } for pid=2704 comm="syz.1.585" path="/114/bus/bus/file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.360693][ T28] audit: type=1400 audit(1756376525.983:399): avc: denied { write } for pid=2704 comm="syz.1.585" name="netlink" dev="proc" ino=4026532470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 168.397959][ T28] audit: type=1400 audit(1756376526.023:400): avc: denied { setattr } for pid=2704 comm="syz.1.585" name="work" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.398049][ T2705] overlayfs: upper fs needs to support d_type. [ 168.424003][ T549] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 168.438077][ T2705] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 168.462058][ T2708] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 4: comm syz.2.586: lblock 0 mapped to illegal pblock 4 (length 1) [ 168.484060][ T285] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /114/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 168.534465][ T2708] EXT4-fs (loop2): Remounting filesystem read-only [ 168.569714][ T2708] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.587456][ T2708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 168.588253][ T968] EXT4-fs (loop1): unmounting filesystem. [ 168.597403][ T2708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 168.611478][ T2708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 168.620521][ T2708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 168.630384][ T549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.648186][ T549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.658578][ T2708] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 168.665443][ T549] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 168.678195][ T549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.690423][ T549] usb 4-1: config 0 descriptor?? [ 168.733425][ T287] EXT4-fs (loop2): unmounting filesystem. [ 168.801271][ T2723] loop4: detected capacity change from 0 to 1024 [ 168.840082][ T2723] EXT4-fs: Ignoring removed nobh option [ 168.845876][ T2723] ext4: Unknown parameter 'fsmagic' [ 168.872587][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 168.872601][ T28] audit: type=1400 audit(1756376526.493:412): avc: denied { mounton } for pid=2725 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 168.904298][ T2703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.937513][ T2703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.006410][ T2730] loop2: detected capacity change from 0 to 16 [ 169.075039][ T2730] erofs: (device loop2): mounted with root inode @ nid 36. [ 169.093445][ T2730] x_tables: duplicate underflow at hook 1 [ 169.282947][ T549] usbhid 4-1:0.0: can't add hid device: -71 [ 169.296142][ T549] usbhid: probe of 4-1:0.0 failed with error -71 [ 169.309492][ T2725] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.321458][ T549] usb 4-1: USB disconnect, device number 12 [ 169.329107][ T2725] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.336852][ T2725] device bridge_slave_0 entered promiscuous mode [ 169.343841][ T2725] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.350896][ T2725] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.358434][ T2725] device bridge_slave_1 entered promiscuous mode [ 169.428544][ T2725] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.435638][ T2725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.442930][ T2725] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.449994][ T2725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.464917][ T43] device bridge_slave_1 left promiscuous mode [ 169.471254][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.479365][ T43] device bridge_slave_0 left promiscuous mode [ 169.485894][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.551774][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.559453][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.566794][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.581033][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.589488][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.597660][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.604700][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.612120][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.620642][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.629067][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.636130][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.650774][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.659255][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.667443][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.675838][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.687690][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.696159][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.706753][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.715294][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.723965][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.731509][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.753824][ T2725] device veth0_vlan entered promiscuous mode [ 169.764311][ T28] audit: type=1400 audit(1756376527.394:413): avc: denied { setopt } for pid=2744 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.789262][ T2725] device veth1_macvtap entered promiscuous mode [ 169.796611][ T28] audit: type=1400 audit(1756376527.424:414): avc: denied { read write } for pid=2742 comm="syz.4.594" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 169.797410][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.828760][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.837130][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.845094][ T28] audit: type=1400 audit(1756376527.444:415): avc: denied { open } for pid=2742 comm="syz.4.594" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 169.881492][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.893549][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.912109][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.928921][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.954737][ T2747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 169.971583][ T28] audit: type=1400 audit(1756376527.594:416): avc: denied { mounton } for pid=2725 comm="syz-executor" path="/root/syzkaller.HX2SEk/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 169.991822][ T2756] loop3: detected capacity change from 0 to 8192 [ 170.003060][ T28] audit: type=1400 audit(1756376527.594:417): avc: denied { mount } for pid=2725 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 170.027819][ T28] audit: type=1400 audit(1756376527.594:418): avc: denied { mount } for pid=2725 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 170.050023][ T28] audit: type=1400 audit(1756376527.594:419): avc: denied { mounton } for pid=2725 comm="syz-executor" path="/root/syzkaller.HX2SEk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 170.077357][ T28] audit: type=1400 audit(1756376527.594:420): avc: denied { mounton } for pid=2725 comm="syz-executor" path="/root/syzkaller.HX2SEk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 170.110735][ T28] audit: type=1400 audit(1756376527.624:421): avc: denied { mounton } for pid=2725 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 170.113409][ T1360] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.372123][ T2765] loop5: detected capacity change from 0 to 512 [ 170.399056][ T2765] EXT4-fs (loop5): Test dummy encryption mode enabled [ 170.406004][ T2765] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.418252][ T2765] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.598: bad orphan inode 131083 [ 170.428866][ T2765] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 170.491197][ T2765] overlayfs: upper fs needs to support d_type. [ 170.539687][ T2725] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /1/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 170.618131][ T2725] EXT4-fs (loop5): unmounting filesystem. [ 170.652875][ T547] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.771622][ T2775] loop2: detected capacity change from 0 to 1024 [ 170.799059][ T2775] EXT4-fs: Ignoring removed nobh option [ 170.807506][ T2775] ext4: Unknown parameter 'fsmagic' [ 170.899000][ T547] usb 1-1: Using ep0 maxpacket: 16 [ 170.906005][ T547] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.916181][ T547] usb 1-1: config 0 has no interfaces? [ 170.933438][ T547] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 170.942507][ T547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.950847][ T547] usb 1-1: Product: syz [ 170.955214][ T547] usb 1-1: Manufacturer: syz [ 170.959936][ T547] usb 1-1: SerialNumber: syz [ 170.967330][ T547] r8152-cfgselector 1-1: config 0 descriptor?? [ 170.989433][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.996544][ T2776] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.004405][ T2776] device bridge_slave_0 entered promiscuous mode [ 171.012670][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.019739][ T2776] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.027968][ T2776] device bridge_slave_1 entered promiscuous mode [ 171.068901][ T2778] loop3: detected capacity change from 0 to 40427 [ 171.081516][ T2778] F2FS-fs (loop3): invalid crc value [ 171.095092][ T2778] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.118215][ T43] device bridge_slave_1 left promiscuous mode [ 171.124981][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.132919][ T43] device bridge_slave_0 left promiscuous mode [ 171.139060][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.146619][ T2778] F2FS-fs (loop3): Start checkpoint disabled! [ 171.153750][ T2778] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 171.161397][ T43] device veth1_macvtap left promiscuous mode [ 171.178466][ T43] device veth0_vlan left promiscuous mode [ 171.260064][ T2785] futex_wake_op: syz.3.605 tries to shift op by -1; fix this program [ 171.289963][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.297017][ T2776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.304289][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.311307][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.329766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.337547][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.345339][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.354501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.363060][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.370099][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.386191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.394563][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.401607][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.409539][ T288] usb 1-1: USB disconnect, device number 9 [ 171.417197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.425567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.437079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.448352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.456263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.463732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.471719][ T2776] device veth0_vlan entered promiscuous mode [ 171.484418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.493537][ T2776] device veth1_macvtap entered promiscuous mode [ 171.503121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.512735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.540364][ T2793] loop6: detected capacity change from 0 to 1024 [ 171.547181][ T2793] EXT4-fs: dax option not supported [ 171.682688][ T2797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57344 sclass=netlink_route_socket pid=2797 comm=syz.6.607 [ 171.682811][ T2798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57344 sclass=netlink_route_socket pid=2798 comm=syz.6.607 [ 171.755731][ T354] kworker/u4:5: attempt to access beyond end of device [ 171.755731][ T354] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 171.857334][ T2804] loop3: detected capacity change from 0 to 128 [ 171.875738][ T2804] general protection fault, probably for non-canonical address 0xdffffc0000000037: 0000 [#1] PREEMPT SMP KASAN [ 171.887484][ T2804] KASAN: null-ptr-deref in range [0x00000000000001b8-0x00000000000001bf] [ 171.895877][ T2804] CPU: 1 PID: 2804 Comm: syz.3.608 Not tainted syzkaller #0 [ 171.903140][ T2804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.913186][ T2804] RIP: 0010:htb_qlen_notify+0x30/0xc0 [ 171.918549][ T2804] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 6e 21 6c fd 4d 8d ae b8 01 00 00 4c 89 eb 48 c1 eb 03 <42> 0f b6 04 23 84 c0 75 56 45 8b 65 00 31 ff 44 89 e6 e8 69 25 6c [ 171.932370][ T372] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 171.938136][ T2804] RSP: 0018:ffffc90000e16e30 EFLAGS: 00010202 [ 171.938159][ T2804] RAX: ffffffff8403e5f2 RBX: 0000000000000037 RCX: 0000000000080000 [ 171.938173][ T2804] RDX: ffffc90003712000 RSI: 0000000000000176 RDI: 0000000000000177 [ 171.967662][ T2804] RBP: ffffc90000e16e58 R08: ffff88811d941440 R09: 0000000000000002 [ 171.975612][ T2804] R10: 0000000000000000 R11: ffffffff8403e5d0 R12: dffffc0000000000 [ 171.983563][ T2804] R13: 00000000000001b8 R14: 0000000000000000 R15: ffff88811ac2e000 [ 171.991521][ T2804] FS: 00007f75db6586c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 172.000470][ T2804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.007044][ T2804] CR2: 0000001b2eb1dff8 CR3: 0000000129253000 CR4: 00000000003506a0 [ 172.015002][ T2804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.022958][ T2804] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.030913][ T2804] Call Trace: [ 172.034170][ T2804] [ 172.037084][ T2804] qdisc_tree_reduce_backlog+0x20a/0x360 [ 172.042706][ T2804] codel_change+0x8b8/0xbf0 [ 172.047213][ T2804] ? qdisc_alloc+0x588/0x780 [ 172.051784][ T2804] ? qdisc_create+0x170/0x1040 [ 172.056532][ T2804] ? rtnetlink_rcv_msg+0x9f4/0xcf0 [ 172.061621][ T2804] ? netlink_rcv_skb+0x1f2/0x440 [ 172.066537][ T2804] ? rtnetlink_rcv+0x1c/0x20 [ 172.071104][ T2804] ? netlink_unicast+0x8b1/0xa30 [ 172.076018][ T2804] ? netlink_sendmsg+0x8aa/0xbc0 [ 172.080937][ T2804] ? ____sys_sendmsg+0x5a9/0x990 [ 172.085851][ T2804] ? ___sys_sendmsg+0x21c/0x290 [ 172.090678][ T2804] ? __x64_sys_sendmsg+0x1f0/0x2c0 [ 172.095767][ T2804] ? __cfi_codel_change+0x10/0x10 [ 172.100770][ T2804] ? __kasan_check_write+0x14/0x20 [ 172.105861][ T2804] codel_init+0x1ea/0x410 [ 172.110184][ T2804] ? __cfi_codel_init+0x10/0x10 [ 172.115027][ T2804] qdisc_create+0x7f3/0x1040 [ 172.119597][ T2804] ? qdisc_notify+0x360/0x360 [ 172.124260][ T2804] tc_modify_qdisc+0x8ea/0x1900 [ 172.129096][ T2804] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 172.134359][ T2804] ? __kasan_check_write+0x14/0x20 [ 172.139450][ T2804] ? mutex_lock+0x8d/0x1a0 [ 172.143841][ T2804] ? __cfi_mutex_lock+0x10/0x10 [ 172.148666][ T2804] ? ns_capable+0x8c/0xf0 [ 172.152973][ T2804] ? netlink_net_capable+0x125/0x160 [ 172.158235][ T2804] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 172.163497][ T2804] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 172.168411][ T2804] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 172.173843][ T2804] ? kernel_text_address+0xa0/0xd0 [ 172.178960][ T2804] ? __kernel_text_address+0xd/0x30 [ 172.183308][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.184134][ T2804] ? unwind_get_return_address+0x4d/0x90 [ 172.184158][ T2804] ? memcpy+0x56/0x70 [ 172.195098][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.200584][ T2804] ? avc_has_perm_noaudit+0x2f4/0x460 [ 172.206462][ T372] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 172.214290][ T2804] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 172.214316][ T2804] ? slab_post_alloc_hook+0x4f/0x2d0 [ 172.214336][ T2804] ? kmem_cache_alloc_node+0x181/0x340 [ 172.220027][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.228677][ T2804] ? __alloc_skb+0xea/0x4b0 [ 172.228706][ T2804] ? avc_has_perm+0x158/0x240 [ 172.228724][ T2804] ? __alloc_skb+0x236/0x4b0 [ 172.238280][ T372] usb 3-1: config 0 descriptor?? [ 172.239673][ T2804] ? netlink_sendmsg+0x626/0xbc0 [ 172.276604][ T2804] ? __cfi_avc_has_perm+0x10/0x10 [ 172.281623][ T2804] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 172.287002][ T2804] netlink_rcv_skb+0x1f2/0x440 [ 172.291764][ T2804] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 172.297209][ T2804] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 172.302497][ T2804] ? __netlink_lookup+0x387/0x3b0 [ 172.307515][ T2804] rtnetlink_rcv+0x1c/0x20 [ 172.311920][ T2804] netlink_unicast+0x8b1/0xa30 [ 172.316684][ T2804] netlink_sendmsg+0x8aa/0xbc0 [ 172.321478][ T2804] ? __cfi_netlink_sendmsg+0x10/0x10 [ 172.326774][ T2804] ? security_socket_sendmsg+0x93/0xb0 [ 172.332244][ T2804] ? __cfi_netlink_sendmsg+0x10/0x10 [ 172.337534][ T2804] ____sys_sendmsg+0x5a9/0x990 [ 172.342307][ T2804] ? __sys_sendmsg_sock+0x40/0x40 [ 172.342327][ T2804] ? import_iovec+0x7c/0xb0 [ 172.342347][ T2804] ___sys_sendmsg+0x21c/0x290 [ 172.342361][ T2804] ? __sys_sendmsg+0x270/0x270 [ 172.342379][ T2804] ? __fdget+0x19c/0x220 [ 172.342398][ T2804] __x64_sys_sendmsg+0x1f0/0x2c0 [ 172.342411][ T2804] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 172.342426][ T2804] ? __kasan_check_write+0x14/0x20 [ 172.342444][ T2804] ? fpregs_restore_userregs+0x128/0x260 [ 172.342461][ T2804] ? switch_fpu_return+0xe/0x10 [ 172.342478][ T2804] x64_sys_call+0x171/0x9a0 [ 172.342494][ T2804] do_syscall_64+0x4c/0xa0 [ 172.342512][ T2804] ? clear_bhb_loop+0x30/0x80 [ 172.342527][ T2804] ? clear_bhb_loop+0x30/0x80 [ 172.342540][ T2804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.342555][ T2804] RIP: 0033:0x7f75da78ebe9 [ 172.342569][ T2804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.342581][ T2804] RSP: 002b:00007f75db658038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.342598][ T2804] RAX: ffffffffffffffda RBX: 00007f75da9b5fa0 RCX: 00007f75da78ebe9 [ 172.342612][ T2804] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000005 [ 172.342621][ T2804] RBP: 00007f75da811e19 R08: 0000000000000000 R09: 0000000000000000 [ 172.342630][ T2804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.342639][ T2804] R13: 00007f75da9b6038 R14: 00007f75da9b5fa0 R15: 00007ffe5f25f6c8 [ 172.342652][ T2804] [ 172.342670][ T2804] Modules linked in: [ 172.342737][ T2804] ---[ end trace 0000000000000000 ]--- [ 172.342745][ T2804] RIP: 0010:htb_qlen_notify+0x30/0xc0 [ 172.342771][ T2804] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 6e 21 6c fd 4d 8d ae b8 01 00 00 4c 89 eb 48 c1 eb 03 <42> 0f b6 04 23 84 c0 75 56 45 8b 65 00 31 ff 44 89 e6 e8 69 25 6c [ 172.342787][ T2804] RSP: 0018:ffffc90000e16e30 EFLAGS: 00010202 [ 172.342802][ T2804] RAX: ffffffff8403e5f2 RBX: 0000000000000037 RCX: 0000000000080000 [ 172.342815][ T2804] RDX: ffffc90003712000 RSI: 0000000000000176 RDI: 0000000000000177 [ 172.342828][ T2804] RBP: ffffc90000e16e58 R08: ffff88811d941440 R09: 0000000000000002 [ 172.342842][ T2804] R10: 0000000000000000 R11: ffffffff8403e5d0 R12: dffffc0000000000 [ 172.342855][ T2804] R13: 00000000000001b8 R14: 0000000000000000 R15: ffff88811ac2e000 [ 172.342867][ T2804] FS: 00007f75db6586c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 172.342884][ T2804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.342898][ T2804] CR2: 0000001b2eb1dff8 CR3: 0000000129253000 CR4: 00000000003506a0 [ 172.342914][ T2804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.342924][ T2804] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.342934][ T2804] Kernel panic - not syncing: Fatal exception in interrupt [ 172.343155][ T2804] Kernel Offset: disabled [ 172.621591][ T2804] Rebooting in 86400 seconds..