last executing test programs: 4m45.286392945s ago: executing program 3 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@oldalloc}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") unshare(0x42000000) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='cgroup.events\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 4m45.053719409s ago: executing program 3 (id=217): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x9eff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000002480)={'syz', 0x3}, &(0x7f00000024c0)='\x00', 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r9, r8}, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000010401628e5a0a000000000001006be60a00000000000005000000000500f7ff010000000800034000000004"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) 4m44.823478624s ago: executing program 3 (id=218): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$pokeuser(0x6, 0x0, 0x9, 0x5) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x4}}]}}}]}, 0x60}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r8}, 0x10) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4m44.118630658s ago: executing program 3 (id=221): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000000)={'wg2\x00', {0x2, 0x0, @broadcast}}) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x26805c41, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000900000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffff80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r4 = dup2(r3, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000596421804240d23f18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) pidfd_send_signal(r9, 0x38, 0x0, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000007020007002f2e2c8ef72ce87ba2e935"], 0x14) 4m43.854309123s ago: executing program 3 (id=226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0xe8, 0x7fffffe, 0x0, {[{{@arp={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xfe, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8, 0xff030000}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast2, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 4m43.820831184s ago: executing program 3 (id=228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x9eff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000002480)={'syz', 0x3}, &(0x7f00000024c0)='\x00', 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r9, r8}, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000010401628e5a0a000000000001006be60a00000000000005000000000500f7ff010000000800034000000004"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) 4m43.762107945s ago: executing program 32 (id=228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x9eff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000002480)={'syz', 0x3}, &(0x7f00000024c0)='\x00', 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r9, r8}, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000010401628e5a0a000000000001006be60a00000000000005000000000500f7ff010000000800034000000004"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) 8.388559324s ago: executing program 2 (id=1369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0xf94c8efbd50bd257, 0x4, 0xe, 0x9}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x8c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0x12, 0x0, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040f304551a000000000001090224000100000000090400080103000300092100000001220700090581030000000001"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x40, 0x10, 0xa, {0xa, 0x4, "c46c32155d690f22"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r11, &(0x7f0000000b00)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r8, 0x5000940e, &(0x7f00000020c0)={{}, "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"}) socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000380)={0x24, &(0x7f0000000180)={0x20, 0x21, 0x48, {0x48, 0x4, "877f7ad1220e27129fbfd9efa971bc01a6346531b57009fd7102e8f029c34fb0b33f3165d26fba82d617a99eaebae1d6ff2b0c11834064bb43b2314659b355e2481d2d473da5"}}, &(0x7f0000000240)=ANY=[@ANYBLOB="00038e0000008e0339b8ddc6b9085b9d1a158fa4c1a323a2746a195422fd274aadd8054c6392daae746151995f2336aabaa17ba86a86c4dc45830a5ff2f44417eff7424478b8f9e62bab87b8c35f4b277ff51c10b29a06706155da861515725e85e818663c0eee0b7d5255de64f47969042ed1efed5daf67f06517945d9935d7b2f34231ac892f40359d6ca124712d67c67db130"], &(0x7f0000000300)={0x0, 0x22, 0x15, {[@global=@item_012={0x1, 0x1, 0x2, "d2"}, @main=@item_4={0x3, 0x0, 0x9, '7S[^'}, @global=@item_4={0x3, 0x1, 0x8, "04a1e67e"}, @global=@item_4={0x3, 0x1, 0xf, "f2eeeeea"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x2, 0x0, 0x8, "1306"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x217}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x40, 0x14, 0x47, "a468945d057898eea11129abf1f0b14ed2cf77ca4f1ebaf9a3458cec5d0e067a2cbf4282ecde9f1bfc0f35364db55fd0731893e2c37ad42490949ca7bb17594da61fd92959c41d"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f00000005c0)=ANY=[@ANYBLOB="2001af000000ebe00f3f0d53dc94b6ef0372cd6e338d092275bf70dcf1d874189909993da24f888e800cd719d41dac1691c9e5f4c5c1838b5cf9b8c2f26fc56708084e855b797e9355e4f85f6b24c089e51238d7a7ddbe8656caa75e2a7f442cf1e7fce04cf227ee0f5d70c6a13347641b45fdbbcf955f3adc6cba381b67d94f100ecd1168b01af0c431ed50578a8e07d4db2ef6abec9e3e0234a24d24c15050b9b6536273b28f6f267630ccdc0bf3c0c8f32f3b42"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0xf4}}) write$P9_RWRITE(r4, &(0x7f0000000740)={0xb, 0x77, 0x1, 0x69}, 0xb) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) 7.896509324s ago: executing program 4 (id=1375): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 7.605194549s ago: executing program 5 (id=1379): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyG3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5ILhxKQckfkSgBomDVzOepG5qN1GT2FH8+UijeW/e1N/vazrv1S+JXwBDazYi9iJiLCLuRMR0dj2XHfFJ+0jue7r/YPlg/8FyLlqtz/6VS9uTa9HxZxLXstcsRsSPvhfx09yLcRs7u+tL1WplK6vPNWubc42d3ZtrtaXVymplo1xeXFic/+jWh+Vz6+s7tbGs9NUnf9z71s+TtKayK539OE/trheO4iRGI+IHFxFsAEay/owNOhFeST4i3oyId9PnfzpG0q8mAHCVtVrT0ZrurAMAV10+XQPL5UvZWsBU5POlUnsN762YzFfrjeaNu/XtjZX2WtlMFPJ316qV+WytcCYKuaS+kJaf1cvH6rci4o2I+OX4RFovLderK4P8jw8ADLFrx+b//463538A4IorDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GgdZJ9/vXJvZ3u9fu/mSqWxXqptL5eW61ubpdV6fTX9zJ7aSa9Xrdc3Fz6I7fsz395sNOcaO7u3a/Xtjebt9HO9b1cK6V17fegZANDLG+88/ksumZE/nkiP6NjLoTDQzICLNjvoBICBGRl0AsDA2O0LhtcZ3uNbHoArossWvc8pdvsFoVar1bq4lIALdv1L1v9hWOWfFf0UMAwZ6/8wvKz/w/BqtXKn3fM/TnsjAHC5WeMHenz//83s/LvsmwM/WTl+x6OLzAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAut8P9f0vZXuBTkc+XShGvRcRMFHJ316qV+Yh4PSL+PF4YT+oLA84ZADir/N9z2f5f16ffn3qu6e1rR8WxiPjZrz/71f2lZnPrTxFjuX+PH15vPsqul/ufPQBwssN5Oj13vJF/uv9g+fDoZz7/+G5EFNvxD/bH4uAo/miMpudiFCJi8j+5rN6W61i7OIu9hxHxxW79z8VUugbS3vn0ePwk9mt9jZ9/Ln4+bWufk7+LL5xDLjBsHifjzyfdnr98zKbn7s9/MR2hzi4b/5KXWj5Ix8Bn8Q/Hv5Ee49/saWN88Ifvt0sTL7Y9jPjyaMRh7IOO8ecwfq5H/PdPGf+vX3n73V5trd9EXI/u8TtjzTVrm3ONnd2ba7Wl1cpqZaNcXlxYnP/o1ofluXSNeq73bPDPj2+83qst6f9kj/jFE/r/9VP2/7f/v/Pjr70k/jff6xY/H2+9JH4yJ37jlPGXJn9f7NWWxF/p0f+Tvv43Thn/yd92X9g2HAAYnMbO7vpStVrZUlC4/IXkn+wlSKNr4Tv9ijUW3Zt+8V77mT7W1Gq9UqxeI8Z5rLoBl8HRQx8R/xt0MgAAAAAAAAAAAAAAQFf9+I2lQfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAq+vzAAAA//+9ts9B") 7.604501409s ago: executing program 4 (id=1380): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) clock_adjtime(0x41, &(0x7f0000000240)={0xfffffffffffffffc}) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") 6.008847121s ago: executing program 1 (id=1382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000580)=ANY=[], 0x1, 0x553e, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000240)='./file0\x00', 0x8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) 3.473760941s ago: executing program 5 (id=1383): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getresuid(0x0, &(0x7f0000000740), &(0x7f0000000780)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff00000000800c0008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x2, 0x4, 0xa, 0x8, 0x9, "5a251f287f44448a3140e2764267626cec23a7", 0x3, 0x2}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="1a000000080000", @ANYRES32=r5, @ANYBLOB="d2c97ee4b7ab4b9547031390bcb8ecada80aa06b", @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) 3.448884201s ago: executing program 0 (id=1384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x80002, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) epoll_create(0x3ff) (rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="0f20c035080000000fa2c0470fc75e82b9f60b0000b843d80000ba000000000f302e4263e6c4018859f7654a0fc71f660f38818c4b73745ade66baa100400f00d9ee6665660f50fbc4e35178ab0000000050", 0x52}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getrlimit(0x4, &(0x7f0000000100)) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="696e6f64650800000000000000eb46fb1c107bb4bb4be388b6b5867cca175c7b"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x5, 0x0, 0xf9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) 3.382190643s ago: executing program 4 (id=1385): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000300)={0x10000, 0x8000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r3, 0x20, &(0x7f0000000480)={&(0x7f00000005c0)=""/201, 0xc9, 0x0, &(0x7f0000000400)=""/111, 0x6f}}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x7dd, 0x4) 3.381378953s ago: executing program 0 (id=1386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000007c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x2, 0x1c}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x42, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 3.329815254s ago: executing program 0 (id=1387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') (async) dup2(r0, r0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) 3.232812176s ago: executing program 1 (id=1388): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfae21000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000200200020000", 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 3.229487446s ago: executing program 2 (id=1389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x4, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) syz_open_dev$ptys(0xc, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="696e6f64650800000000000000eb46fb1c107bb4bb4be388b6b5867cca175c7b"]) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0xd0a, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x5, 0x0, 0xf9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) 3.145267687s ago: executing program 0 (id=1390): syz_open_dev$tty1(0xc, 0x4, 0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r3, 0x0, 0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x796}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.706569696s ago: executing program 0 (id=1391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x2000000}, 0x0) 2.615515748s ago: executing program 0 (id=1392): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xb, {[@global=@item_012={0x0, 0x1, 0xa}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_012={0x1, 0x1, 0x0, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @local=@item_4={0x3, 0x2, 0x7, "e9d1fead"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000080)={0x3, 0x0, 0xffff}) 2.390407112s ago: executing program 1 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 2.300153764s ago: executing program 5 (id=1394): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.274385934s ago: executing program 4 (id=1395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0000002000010000000000030000000a801400000000070700000014000200fc020000000000000000000000000001050016002c000000140001002001000000000000000000000000000184cf802c202dda4014e435cef0ebcdbe52cdcf47b37cc3e9694a4dcf2c0d5b5e66231a93b1"], 0x4c}}, 0x40000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r0, 0x0, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x208000, &(0x7f0000000180), 0x11, 0x547, &(0x7f00000011c0)="$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") 2.222523206s ago: executing program 4 (id=1396): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) clock_adjtime(0x41, &(0x7f0000000240)={0xfffffffffffffffc}) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") 2.222324386s ago: executing program 2 (id=1397): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000ffb00000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.215421116s ago: executing program 2 (id=1398): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.199572026s ago: executing program 2 (id=1399): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x68f}, 0x18) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x731a80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x4a8, &(0x7f0000000c00)="$eJzs3M9vFGUfAPDvbH/QvvxoX15e3hcEraCR+KOlBZWDBzWaeNDERA94rG1BZKGG1gRII8UYPBoS78ajiX+BNy9GPRgTr5p4NCREGxOKpzWzM0O3293SlrYr3c8n2e7zzI99nu/MPLvPzNOZANrWQPonidgRET9HRF+WXbzAQPY2PzczdntuZiyJSuWN35PqcrfmZsaKRYv1tueZI6WI0kdJPJ8sLXfq0uWzo+XyxIU8PzR97r2hqUuXnzpzbvT0xOmJ8yMnThw/NvzsMyNPr0ucaVy39n8weWDfK29df23s5PW3v/syrdbeg9n82jju6naDgBoYSLfaH5Wq+nmPrqLu94OdNemks4UVYVU6IiLdXV3V9t8XHbGw8/ri5Q9bWjlgQ6W/Tduaz56tAFtYEq2uAdAaxQ99ev5bvDap6/GPcPOFiO48PT83MzZ/J/7OKOXTuzaw/IGIODn712fpK1Z7HQIAYA2qfZsnG/X/SrG3+p6NdezKx1D6I+LfEbE7Iv4TEXsi4r8R1WX/FxH/z1au9K2w/IG6/NL+T+lGwzqvk7T/91xN32++Jv78rb8jz+2sxt+VnDpTnjiab5Mj0bUtzQ8vU8bXL/30SbN5tf2/9JWWX/QF8wrc6Ky7QDc+Oj26Xhvh5tWI/Z2N4k/ujASkR8C+iNi/uo/eVSTOPP7FgWYL3T3+ZazDOFPl84jHsv0/G3XxF5LlxyeHeqI8cXSoOCqW+v7Ha683K/+e4l8HNw89kCUW9n/dEn1/Jr15slyeuDC1+jKu/fJx03OatR7/3cmb1THrH97Jpl0cnZ6+MBzRnbxazRfndNXpIwvrXhyd7k3zxfLp8X/kcOP2vztfJ93/6VZKD+KDEfFgRDyU1/3hiDgUEYeXif/bFx95d5n4k0iidfv/asR4w++/O8d/f1I7Xr+GRMfZb75qNmK+sv1/PGar37WZ6vffXay0gve4+QAAAOC+UIqIHZGUBrP0wI4olQYHs//h3xP/KpUnp6afODX5/vnx7B6B/ugqFVe6+mquhw4ns/knZvmR/FpxMf9Yft34047ean5wbLI83uLYod1tX9z+o2j/qd86Wl07YMO5XwvaV337L7WoHsDmW8nvv3MB2JoWt/+e9E9vq+oCbC7n/9C+GrX/K3V5/X/Ympa2/18bPLIO2Ir0/6F9af/QvrR/aEv3cl//QqInIprMqlzJHjS4aFZxs8DaC+1Z8R3+7ZIonnixkWX1xuWz3fmUKLUo0o7mB9vWTaQtZnMLXXiGCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP3s7wAAAP//9aPj/g==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000010000000000000f04000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000d00)) 1.666493517s ago: executing program 2 (id=1400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c0022000000000400130000050024000100000006000800a8880000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x0) 1.611127237s ago: executing program 5 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x8000) 1.48264175s ago: executing program 1 (id=1402): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec8341206001f0000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000", @ANYRES32=0x0], 0xa5, 0x55bc, &(0x7f0000006a80)="$eJzs3EtvG2UXAOAzSdP71y9CLNh1pAopkWorTpsKVhRoxUW0qrgsWIETu5Zb2xPFrhu66oIlYsE/QSCxYslvYAFL2CEWIHZIRXMJNGkLvTgONM8jzZyZk3fOvDOyIp0ZywHsW/Ppb78kcSKORMRsRBxPothOqiXidsT5cuxzEXEyImbuWpIq/2fiYEQcjYgTefGyZlL96bPT41MrP7/569ffHjpw7POvvtvTCwf21PMR0V8vt2/2Yy6PWafcv1blm+NuEftnx1Vc31ajn5X5m+3VfhGbW+OaRTzTKcdn6zeGebzaa67lsdO9WuTXB+UJh+POVp38gPRac6PYb7VXi9gdZkXs3CrPu3mr/N92azgq67Sqeh8V5WM02oplvr3ZLq9n/XoR1wajKl/WzVrtzTyOq1idLtayXquYx+pj3+Z/vbe6gxub6bi9Mexmg3Sl3nih3jhXa2xkrfaofbbW7LfOnU0XOr18WG3UbvbPd7Ks02vX17L+YrrQWVurNRrpwoX2arc5SBuN+pn6Um1lsdo6nb52+b2010oX8vhKd3Bj1O0N06vZRloesZgu18+8uJieaqTvXLqSXnn74sVLV9794ML7l1++9Mar1aB7ppUuLC8tL9caS7XlxuI+uv6Pq0k/wvUn90//8P2T3TYoPeADBsCD3dP/x87+P/T/wMTt6P8LD9v/969X+7vT/8fD9P8xyf4/b6n0///c/848Uv97YiL971zo/1fqjWSXrj+WnvB49rfH6/8PTnweAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM3Y9zX7xebMyX+8eq/P+q1DPVfhIRMxFx5z5m4+C2mrNVnbkHjJ/bMYdvkigq5Oc4VC1HI+J8tfz+/92+CwAAAPD0+vL2yU/Lbr1cze/1hJim8qHNzPEPJ1QviYi5+Z8mVG0mXz07oWLF5/tAbE6oWvEA6/CEipWP3A5MqtpDmd0WDt8VkjLMTHU6AADAVGzvBKbbhQAAADBNn/ztX1+a2jyYsiS2XmVuvQsuvnn/1wvBI/nqzo4v9wMAAAD/JcleTwAAAADYdUX/7/f/AAAA4OlW/v4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zcQU7qQBgA4GmhwHtqJMa9V3EHx/AILl0KB/ASHAGv4AU4AyYuPIIBQztGq5AAbUMg35e040ybf2aEzT9DBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCa9ZtPh8+PNU9U4i2U19cwGAAAAWGeeTYf5H/2ifhbbL2LTVawnIYQ0hLAud2+FTilmK8bJNryf/RrDSwh5hFV7N17/Qwi38fq4bPq/AAAAAKdrNp4Mimy9uMUlgLfDjoq9JTu9XSzapOd3Nfae9d9ripaubtdVo/Riufp+t8ND5VEVsp+hK8uX3Nrrn3Xq6qSsVSq+ZjLKP8S8ljbTLwAAcEjlTGBDFgIAAMAJuD/0AKhqm926v6l9Er63jOM+Y7co4obgv1INAAAAOEK7/VocAAAAOEZ5/t/M+X+9vc7/S5z/BwAAALUrzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgSfNsOpyNJ4NNz0dbxlksq6lvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW8HP3FUYQDAv91hF6g2IhoSUdOYHvRi6ba29mqMhnjwTzAhdKno1mrLwTbEysWb4dyL0YuJMSYavPE/9FwSLvXWAwfOHjAzO0NnYVuQ0llKf7/k7fv27fDem7ebDd+8WQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgsPFBvFHP4yR9GOvGRdu9zcXZtF7bUadWl9cn05LGteGi9eRb1c3+SHuz/OTUxOAmAgAAwHFxcs8jkiK/j4j7jZXptK6PZfl/ozgmzfl/zruq5W078/61zcWR/KXJIv//+68Hr24PNJZk46Sdzs132md3T2XowKf5jHtpzyOGspXPrr0k2RtS/2TplY1Gtp61H+/e/aiZhcNVzBYAOIgzRZ0Hxf9Dad0a5MQAeG4MlRLvIv9PxgY7JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAqbCzFC0Vci4jJoYdxam1zcbZf/f3y+uRqXi7eubNc7jPtohERc/Od9tkKz+XoKlbz1pcznU77+o2bVQenIqLPS7f39+dJPv1HHtOMiJ6W06/16eezfYy1o59dQf7xjGrXcDQ9vz0PrvW01HYt+IdbXYP4ABx6MNb/pXr+/jyNQUcrf997g+Kzd/g9/5/vkuHD+UoCAOBYa+QlzUTvN1am07baeMTWL735/9ulOHry/q3b3Zbu89VS/v/g84v3ymOV8/9WRef3LJhauPr11I2bt96dvzpzpX2l/dV751rvt85funDh0lR2rWRqLuqumAAAAPAEmnkp5/+jffb/T5TieMz+f3dLeH0kltcnv/mp9V15rET+39fDTb9BzwQAAOB51NyOXm72P6LWbMa3MwsL11vdx+3n57qP1c314IbzUs7/k/FBzwoAAACowsZSrWf//3Ipjsfs/5fv/3/xt9f/KPeZdO8tuBYR7TOz1zqXqzudI633R7+/Jk/jh8rZQI+4jgUAAMDxN5qX8v5/YzzN/+tFqh/1iHjndMS/+W/4Y5/5f/LxD7+Xxyrf/3++0rM8euoT3fXI6omIoYlBzwgAAIDjbCQvabL/T2Nl+os/T3zadP8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNX+CwAA//+bhCne") 1.371435512s ago: executing program 4 (id=1403): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) clock_adjtime(0x41, &(0x7f0000000240)={0xfffffffffffffffc}) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") 1.206432626s ago: executing program 1 (id=1404): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6b01000000000000008a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055940055cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb5397b99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404aa4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f821d657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dcb829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d674fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fcf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae00", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x78, 0x0, 0x100000000, {0x6, 0xffffea97, 0x0, {0x5, 0x3, 0x200000003, 0x6c, 0x7, 0x40000000000d, 0x3, 0xfffff2df, 0x101, 0x1000, 0xfffffffe, 0xffffffffffffffff, 0xee01, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100) llistxattr(&(0x7f0000000a00)='./file0\x00', 0x0, 0x8c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000009d6d4d5b02ee93b80818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff2413200ec5cb42f08d5528c5fca03eb0ffffb703000008000000b70414000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 735.196095ms ago: executing program 5 (id=1405): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000020000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 716.650985ms ago: executing program 5 (id=1406): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x1080000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0xfffc, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x17c}}, 0x0) 0s ago: executing program 1 (id=1407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@generic={0x0}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f00000002c0)={0x67f, 0x3ff, 0x4d79, 0x7, 0x1, "172299963054f3ae3ee8c88b42719b892a1410", 0x8, 0x8}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) (async) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_getoverrun(r7) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r10, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000300)="ca00d1c403d921b1000000000041ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) kernel console output (not intermixed with test programs): 156.278964][ T353] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.483569][ T353] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.520660][ T353] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 156.564568][ T353] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.688826][ T353] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 156.697912][ T353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.716849][ T353] usb 5-1: config 0 descriptor?? [ 157.094348][ T2362] loop2: detected capacity change from 0 to 4096 [ 157.129917][ T2362] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.205643][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 157.377807][ T2367] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 157.390435][ T2367] fuse: Bad value for 'fd' [ 158.037547][ T353] a4tech 0003:09DA:000A.0002: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.4-1/input0 [ 158.277596][ T353] usb 5-1: USB disconnect, device number 6 [ 158.361962][ T2370] fido_id[2370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 162.349290][ T286] EXT4-fs (loop2): unmounting filesystem. [ 163.423994][ T2379] loop5: detected capacity change from 0 to 131072 [ 163.448131][ T2379] F2FS-fs (loop5): Invalid segment/section count (31, 24 x 150994945) [ 163.456369][ T2379] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 163.466126][ T2379] F2FS-fs (loop5): invalid crc value [ 163.471734][ T2379] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 163.671561][ T2403] loop2: detected capacity change from 0 to 1024 [ 164.710222][ T2403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.086479][ T2427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.146902][ T286] EXT4-fs (loop2): unmounting filesystem. [ 166.192382][ T2430] loop2: detected capacity change from 0 to 512 [ 166.387142][ T2430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.397446][ T2430] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.415344][ T2436] loop5: detected capacity change from 0 to 4096 [ 166.439631][ T2430] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 166.487548][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 166.487564][ T28] audit: type=1400 audit(1759101553.831:442): avc: denied { watch watch_reads } for pid=2429 comm="syz.2.553" path="/94/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.535751][ T2436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 168.397417][ T2444] fuse: Bad value for 'fd' [ 169.223133][ T2193] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.925582][ T2450] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.197397][ T2458] xt_policy: neither incoming nor outgoing policy selected [ 170.420766][ T286] EXT4-fs (loop2): unmounting filesystem. [ 170.475233][ T2463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 170.515996][ T2467] loop2: detected capacity change from 0 to 1024 [ 170.624281][ T2467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 170.649964][ T286] EXT4-fs (loop2): unmounting filesystem. [ 171.570600][ T2477] loop4: detected capacity change from 0 to 512 [ 172.340277][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 172.451021][ T28] audit: type=1400 audit(1759101559.789:443): avc: denied { watch } for pid=2486 comm="syz.0.570" path="/112/file0" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.462338][ T2489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2489 comm=syz.5.568 [ 172.488247][ T2477] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.567: casefold flag without casefold feature [ 172.568078][ T2477] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.567: couldn't read orphan inode 15 (err -117) [ 172.587169][ T2489] netlink: 'syz.5.568': attribute type 16 has an invalid length. [ 172.594943][ T2489] netlink: 64126 bytes leftover after parsing attributes in process `syz.5.568'. [ 172.596326][ T2487] netlink: 100 bytes leftover after parsing attributes in process `syz.0.570'. [ 172.613449][ T2477] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.115578][ T285] EXT4-fs (loop4): unmounting filesystem. [ 173.203385][ T2489] loop5: detected capacity change from 0 to 40427 [ 173.210606][ T2489] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 173.217281][ T2489] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 173.279144][ T2489] F2FS-fs (loop5): Found nat_bits in checkpoint [ 173.338888][ T2510] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.430732][ T2508] netlink: 'syz.2.573': attribute type 3 has an invalid length. [ 173.549467][ T2508] netlink: 'syz.2.573': attribute type 3 has an invalid length. [ 173.572313][ T2489] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 173.586921][ T2489] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 173.684817][ T2518] loop4: detected capacity change from 0 to 4096 [ 173.716974][ T2518] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.850797][ T718] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.869906][ T28] audit: type=1400 audit(1759101561.209:444): avc: denied { map } for pid=2488 comm="syz.5.568" path="/63/file2/cgroup.controllers" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.002798][ T2531] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.010979][ T2531] fuse: Bad value for 'fd' [ 175.153651][ T28] audit: type=1400 audit(1759101562.489:445): avc: denied { mount } for pid=2536 comm="syz.1.582" name="/" dev="configfs" ino=13468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 175.773810][ T1234] syz-executor: attempt to access beyond end of device [ 175.773810][ T1234] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 175.937472][ T1331] Bluetooth: hci0: command 0x1003 tx timeout [ 175.943568][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 176.221548][ T2559] loop5: detected capacity change from 0 to 512 [ 176.281250][ T2560] loop2: detected capacity change from 0 to 512 [ 176.291948][ T2560] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 176.407183][ T2560] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 176.421499][ T2560] EXT4-fs (loop2): 1 truncate cleaned up [ 176.427345][ T2560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 176.488498][ T2559] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 176.539584][ T2559] EXT4-fs (loop5): 1 truncate cleaned up [ 176.548550][ T2559] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 176.653463][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 176.832092][ T28] audit: type=1400 audit(1759101564.159:446): avc: denied { remount } for pid=2550 comm="syz.1.586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.833424][ T285] EXT4-fs (loop4): unmounting filesystem. [ 177.554153][ T2569] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.610784][ T286] EXT4-fs (loop2): unmounting filesystem. [ 177.738923][ T2576] loop4: detected capacity change from 0 to 512 [ 177.785317][ T2582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2582 comm=syz.1.595 [ 177.808883][ T718] Bluetooth: hci0: Frame reassembly failed (-84) [ 177.816348][ T2576] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 177.825858][ T2576] EXT4-fs (loop4): orphan cleanup on readonly fs [ 177.845005][ T2576] EXT4-fs warning (device loop4): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 177.860028][ T2588] netlink: 'syz.1.595': attribute type 16 has an invalid length. [ 177.874917][ T2576] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 177.893651][ T2576] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.592: iget: immutable or append flags not allowed on symlinks [ 177.905168][ T2588] netlink: 64126 bytes leftover after parsing attributes in process `syz.1.595'. [ 177.929100][ T2576] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.592: couldn't read orphan inode 16 (err -117) [ 177.947341][ T2586] loop2: detected capacity change from 0 to 1024 [ 177.957725][ T2576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.003516][ T2586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 178.022710][ T285] EXT4-fs (loop4): unmounting filesystem. [ 178.543650][ T2600] loop4: detected capacity change from 0 to 1024 [ 178.586177][ T2600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 178.792729][ T286] EXT4-fs (loop2): unmounting filesystem. [ 179.148517][ T2617] loop2: detected capacity change from 0 to 1024 [ 179.230423][ T2617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 179.432936][ T285] EXT4-fs (loop4): unmounting filesystem. [ 179.679458][ T2626] loop4: detected capacity change from 0 to 512 [ 179.687774][ T2626] EXT4-fs: Ignoring removed bh option [ 179.747172][ T2626] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 179.876228][ T1331] Bluetooth: hci0: command 0x1003 tx timeout [ 179.876260][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 179.985633][ T2626] EXT4-fs (loop4): 1 truncate cleaned up [ 179.995976][ T2626] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.020434][ T2630] block device autoloading is deprecated and will be removed. [ 180.053266][ T2630] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.062686][ T2630] FAT-fs (loop1): unable to read boot sector [ 180.238329][ T286] EXT4-fs (loop2): unmounting filesystem. [ 180.262630][ T2632] overlayfs: failed to clone upperpath [ 180.269860][ T2632] overlayfs: failed to clone upperpath [ 180.405924][ T2193] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.623750][ T285] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 180.651346][ T285] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 180.667201][ T285] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 180.691073][ T285] EXT4-fs (loop4): unmounting filesystem. [ 180.762697][ T2659] loop4: detected capacity change from 0 to 1024 [ 180.787590][ T2659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.795968][ T2193] usb 1-1: Using ep0 maxpacket: 32 [ 180.812210][ T2193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.823607][ T2193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.834969][ T2193] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.844282][ T2192] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 180.852282][ T2193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.863899][ T2193] usb 1-1: config 0 descriptor?? [ 180.876684][ T2193] hub 1-1:0.0: USB hub found [ 181.021819][ T285] EXT4-fs (loop4): unmounting filesystem. [ 181.035846][ T2192] usb 6-1: Using ep0 maxpacket: 32 [ 181.042200][ T2192] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 181.050459][ T2192] usb 6-1: config 0 has no interface number 0 [ 181.058309][ T2192] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 181.067918][ T2192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.077235][ T28] audit: type=1400 audit(1759101568.420:447): avc: denied { append } for pid=2636 comm="syz.0.609" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.100603][ T2192] usb 6-1: Product: syz [ 181.104806][ T2192] usb 6-1: Manufacturer: syz [ 181.109504][ T2192] usb 6-1: SerialNumber: syz [ 181.122562][ T2192] usb 6-1: config 0 descriptor?? [ 181.128568][ T2193] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 181.137977][ T2192] smsc95xx v2.0.0 [ 181.152489][ T28] audit: type=1400 audit(1759101568.490:448): avc: denied { accept } for pid=2664 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 181.349881][ T2193] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 181.358713][ T2193] hid-generic: probe of 0003:046D:C31C.0003 failed with error -22 [ 181.900527][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.907247][ T2192] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 181.919220][ T2192] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 182.704319][ T2192] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 182.722100][ T2192] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 182.733952][ T2192] usb 6-1: USB disconnect, device number 2 [ 182.798282][ T28] audit: type=1326 audit(1759101570.140:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2700 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 182.821632][ T28] audit: type=1326 audit(1759101570.140:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2700 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 182.848248][ T28] audit: type=1326 audit(1759101570.140:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2700 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 182.872728][ T28] audit: type=1326 audit(1759101570.140:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2700 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 182.895712][ T335] usb 1-1: USB disconnect, device number 5 [ 182.896871][ T28] audit: type=1326 audit(1759101570.140:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2700 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 182.925696][ T28] audit: type=1326 audit(1759101570.140:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2700 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 182.949304][ T28] audit: type=1326 audit(1759101570.140:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2700 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 182.973260][ T28] audit: type=1326 audit(1759101570.140:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2700 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 183.267869][ T2710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 183.310980][ T2710] device gretap0 entered promiscuous mode [ 183.317245][ T2710] device macsec2 entered promiscuous mode [ 183.747330][ T2710] device gretap0 left promiscuous mode [ 183.850170][ T2712] loop5: detected capacity change from 0 to 256 [ 183.864739][ T2712] exfat: Deprecated parameter 'utf8' [ 183.872679][ T2712] exfat: Deprecated parameter 'namecase' [ 183.881604][ T2712] exfat: Deprecated parameter 'utf8' [ 183.967928][ T2712] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 184.604338][ T2726] xt_CONNSECMARK: invalid mode: 66 [ 184.928233][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.064586][ T2759] tipc: Started in network mode [ 185.069785][ T2193] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 185.078713][ T2759] tipc: Node identity ac1414aa, cluster identity 4711 [ 185.086202][ T2759] tipc: Enabled bearer , priority 10 [ 185.265326][ T2193] usb 1-1: Using ep0 maxpacket: 16 [ 185.272387][ T2193] usb 1-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 185.282997][ T2193] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.293787][ T2193] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.303103][ T2193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.311317][ T2193] usb 1-1: Product: syz [ 185.315725][ T2193] usb 1-1: Manufacturer: syz [ 185.320388][ T2193] usb 1-1: SerialNumber: syz [ 185.538722][ T2193] usb 1-1: 0:2 : does not exist [ 185.549979][ T2193] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 185.576645][ T2193] usb 1-1: USB disconnect, device number 6 [ 185.801392][ T2772] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.993324][ T2778] loop5: detected capacity change from 0 to 512 [ 186.023564][ T2778] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 186.032704][ T2778] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.437554][ T2188] tipc: Node number set to 2886997162 [ 186.529951][ T28] kauditd_printk_skb: 358 callbacks suppressed [ 186.529980][ T28] audit: type=1326 audit(1759101573.870:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 186.560761][ T28] audit: type=1326 audit(1759101573.880:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 186.570099][ T2799] loop2: detected capacity change from 0 to 128 [ 186.584291][ T28] audit: type=1326 audit(1759101573.880:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0aa7d8ef03 code=0x7ffc0000 [ 186.620945][ T28] audit: type=1326 audit(1759101573.880:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0aa7d8d97f code=0x7ffc0000 [ 186.652291][ T28] audit: type=1326 audit(1759101573.880:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0aa7d8ef57 code=0x7ffc0000 [ 186.681428][ T28] audit: type=1326 audit(1759101573.910:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0aa7d8d710 code=0x7ffc0000 [ 186.706841][ T28] audit: type=1326 audit(1759101573.910:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0aa7d8eacb code=0x7ffc0000 [ 186.730125][ T28] audit: type=1326 audit(1759101573.930:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0aa7d8db2a code=0x7ffc0000 [ 186.762237][ T28] audit: type=1326 audit(1759101573.930:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0aa7d8db2a code=0x7ffc0000 [ 186.786823][ T28] audit: type=1326 audit(1759101573.930:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0aa7d8d617 code=0x7ffc0000 [ 186.864974][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.908481][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 188.018997][ T2822] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.231508][ T2828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.663'. [ 190.256384][ T2834] loop4: detected capacity change from 0 to 512 [ 190.305767][ T2834] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.669: casefold flag without casefold feature [ 190.327889][ T2834] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.669: couldn't read orphan inode 15 (err -117) [ 190.402338][ T2834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.601132][ T2843] loop5: detected capacity change from 0 to 1024 [ 190.620871][ T2843] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 190.634933][ T2836] syz.0.670 uses obsolete (PF_INET,SOCK_PACKET) [ 190.717622][ T2852] netlink: 96 bytes leftover after parsing attributes in process `syz.4.669'. [ 191.116552][ T285] EXT4-fs (loop4): unmounting filesystem. [ 195.230169][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 195.230186][ T28] audit: type=1107 audit(1759101579.601:895): pid=2859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 195.324214][ T2880] netlink: 64 bytes leftover after parsing attributes in process `syz.1.682'. [ 195.338861][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 196.900885][ T2904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 196.910167][ T2904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 197.031562][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.016972][ T2919] loop5: detected capacity change from 0 to 512 [ 198.088421][ T2919] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #16: comm syz.5.693: corrupted inode contents [ 198.418126][ T2932] loop4: detected capacity change from 0 to 4096 [ 198.426032][ T2932] EXT4-fs (loop4): Test dummy encryption mode enabled [ 198.536473][ T2932] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 198.544697][ T2932] System zones: 0-5 [ 198.567471][ T2932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.576672][ T2919] EXT4-fs (loop5): Remounting filesystem read-only [ 198.583381][ T2919] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #16: comm syz.5.693: mark_inode_dirty error [ 198.596276][ T28] audit: type=1400 audit(1759101585.942:896): avc: denied { append } for pid=2930 comm="syz.4.698" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 198.619802][ T2919] EXT4-fs (loop5): Remounting filesystem read-only [ 198.628504][ T2919] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #16: comm syz.5.693: corrupted inode contents [ 198.706452][ T2919] EXT4-fs (loop5): Remounting filesystem read-only [ 198.738641][ T28] audit: type=1400 audit(1759101585.962:897): avc: denied { ioctl } for pid=2930 comm="syz.4.698" path="/138/file0/file0/file0" dev="loop4" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 198.751804][ T2919] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.693: mark_inode_dirty error [ 198.775343][ T2919] EXT4-fs (loop5): Remounting filesystem read-only [ 198.782151][ T2919] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #16: comm syz.5.693: corrupted inode contents [ 198.795618][ T2919] EXT4-fs (loop5): Remounting filesystem read-only [ 198.802177][ T2919] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 198.811499][ T2919] EXT4-fs (loop5): Remounting filesystem read-only [ 198.820821][ T285] EXT4-fs (loop4): unmounting filesystem. [ 198.843316][ T2919] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #16: comm syz.5.693: corrupted inode contents [ 198.899789][ T28] audit: type=1400 audit(1759101586.242:898): avc: denied { write } for pid=2939 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.919083][ T2919] EXT4-fs (loop5): Remounting filesystem read-only [ 198.925669][ T2919] EXT4-fs error (device loop5): ext4_truncate:4314: inode #16: comm syz.5.693: mark_inode_dirty error [ 198.943840][ T2919] EXT4-fs (loop5): Remounting filesystem read-only [ 198.960558][ T2919] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 198.983982][ T2919] EXT4-fs (loop5): Remounting filesystem read-only [ 199.011974][ T2919] EXT4-fs (loop5): 1 truncate cleaned up [ 199.024840][ T2919] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 199.034124][ T732] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 199.062173][ T732] EXT4-fs error (device loop5): ext4_release_dquot:6839: comm kworker/u4:34: Failed to release dquot type 1 [ 199.083667][ T2919] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.094973][ T732] EXT4-fs (loop5): Remounting filesystem read-only [ 200.322360][ T2954] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 200.334001][ T2954] netlink: 'syz.2.703': attribute type 2 has an invalid length. [ 200.606295][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 201.562311][ T2966] netlink: 'syz.0.705': attribute type 4 has an invalid length. [ 201.570758][ T2966] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.705'. [ 201.941078][ T2976] loop4: detected capacity change from 0 to 256 [ 202.010181][ T2976] FAT-fs (loop4): Directory bread(block 64) failed [ 202.040999][ T2976] FAT-fs (loop4): Directory bread(block 65) failed [ 202.070381][ T2976] FAT-fs (loop4): Directory bread(block 66) failed [ 202.098772][ T2976] FAT-fs (loop4): Directory bread(block 67) failed [ 202.129368][ T2976] FAT-fs (loop4): Directory bread(block 68) failed [ 202.159772][ T2976] FAT-fs (loop4): Directory bread(block 69) failed [ 202.193483][ T2976] FAT-fs (loop4): Directory bread(block 70) failed [ 202.224704][ T2976] FAT-fs (loop4): Directory bread(block 71) failed [ 202.254269][ T2976] FAT-fs (loop4): Directory bread(block 72) failed [ 202.260998][ T2976] FAT-fs (loop4): Directory bread(block 73) failed [ 202.399169][ T2990] loop4: detected capacity change from 0 to 512 [ 202.635949][ T2990] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.280141][ T2998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 204.580442][ T2999] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 206.008197][ T3014] 9pnet_fd: Insufficient options for proto=fd [ 206.231870][ T3003] netlink: 64 bytes leftover after parsing attributes in process `syz.1.716'. [ 206.305173][ T3019] loop4: detected capacity change from 0 to 16 [ 206.345792][ T3019] erofs: (device loop4): mounted with root inode @ nid 36. [ 206.400348][ T2399] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.671631][ T3028] syz.0.722[3028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.672151][ T3028] syz.0.722[3028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.616730][ T3029] tipc: Enabling of bearer rejected, failed to enable media [ 207.728009][ T3033] loop4: detected capacity change from 0 to 1024 [ 207.826672][ T3033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.180890][ T285] EXT4-fs (loop4): unmounting filesystem. [ 208.502953][ T28] audit: type=1400 audit(1759101595.853:899): avc: denied { read } for pid=3052 comm="syz.5.731" path="socket:[24726]" dev="sockfs" ino=24726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.586634][ T3065] loop5: detected capacity change from 0 to 512 [ 208.614107][ T3065] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 208.624707][ T3065] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 208.636316][ T3065] EXT4-fs (loop5): group descriptors corrupted! [ 208.743054][ T3069] xt_bpf: check failed: parse error [ 210.012902][ T2192] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 212.007658][ T2192] usb 1-1: device descriptor read/64, error -71 [ 212.077505][ T353] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 212.162059][ T2191] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 212.184751][ T3090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 212.273087][ T353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.290772][ T353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.312230][ T353] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 212.331070][ T353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.352104][ T353] usb 5-1: config 0 descriptor?? [ 212.361980][ T2191] usb 6-1: Using ep0 maxpacket: 32 [ 212.369387][ T2191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.380466][ T2191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.390406][ T2191] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 212.399660][ T2191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.420185][ T2191] usb 6-1: config 0 descriptor?? [ 212.788117][ T3105] netlink: 'syz.2.746': attribute type 4 has an invalid length. [ 212.799271][ T3105] netlink: 'syz.2.746': attribute type 4 has an invalid length. [ 212.859782][ T2191] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 212.975821][ T353] logitech 0003:046D:C29C.0005: unknown main item tag 0x3 [ 212.993799][ T353] logitech 0003:046D:C29C.0005: hidraw1: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 214.002148][ T3112] xt_policy: neither incoming nor outgoing policy selected [ 214.294025][ T3111] block device autoloading is deprecated and will be removed. [ 214.302138][ T3111] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 214.311300][ T3111] FAT-fs (loop3): unable to read boot sector [ 214.514256][ T3122] 9pnet_fd: Insufficient options for proto=fd [ 214.633168][ T353] logitech 0003:046D:C29C.0005: no inputs found [ 214.645763][ T353] usb 5-1: USB disconnect, device number 7 [ 214.647135][ T2192] usb 6-1: USB disconnect, device number 3 [ 214.687187][ T28] audit: type=1400 audit(1759101602.034:900): avc: denied { create } for pid=3128 comm="syz.0.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 214.702812][ T3127] fido_id[3127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 214.726218][ T28] audit: type=1400 audit(1759101602.074:901): avc: denied { connect } for pid=3128 comm="syz.0.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.201039][ T3143] loop4: detected capacity change from 0 to 512 [ 215.277147][ T3143] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.755: casefold flag without casefold feature [ 215.290264][ T3143] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.755: couldn't read orphan inode 15 (err -117) [ 215.307172][ T3143] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 216.428079][ T285] EXT4-fs (loop4): unmounting filesystem. [ 216.463731][ T3169] netlink: 52 bytes leftover after parsing attributes in process `syz.4.763'. [ 216.563541][ T3176] loop4: detected capacity change from 0 to 4096 [ 216.785414][ T3184] netlink: 56 bytes leftover after parsing attributes in process `syz.4.764'. [ 216.815776][ T3184] loop4: detected capacity change from 0 to 512 [ 217.010786][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.091316][ T3184] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 217.101145][ T3184] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 217.110912][ T3184] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 217.123590][ T3184] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 217.131565][ T3184] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 217.139813][ T3184] EXT4-fs (loop4): orphan cleanup on readonly fs [ 217.151342][ T3184] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.764: bg 0: block 34: padding at end of block bitmap is not set [ 217.166657][ T3184] Quota error (device loop4): write_blk: dquota write failed [ 217.174184][ T3184] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 217.184194][ T3184] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.764: Failed to acquire dquot type 1 [ 217.195865][ T3184] EXT4-fs (loop4): 1 truncate cleaned up [ 217.203675][ T3184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.252916][ T285] EXT4-fs (loop4): unmounting filesystem. [ 218.766017][ T28] audit: type=1400 audit(1759101606.104:902): avc: denied { watch_reads } for pid=3207 comm="syz.0.773" path="/153/file1" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 219.541456][ T3206] netlink: 124 bytes leftover after parsing attributes in process `syz.2.769'. [ 219.566161][ T28] audit: type=1326 audit(1759101606.904:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65f8eec9 code=0x7ffc0000 [ 219.658990][ T28] audit: type=1326 audit(1759101606.934:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c65f8eec9 code=0x7ffc0000 [ 219.905255][ T28] audit: type=1326 audit(1759101606.934:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65f8eec9 code=0x7ffc0000 [ 220.058432][ T28] audit: type=1326 audit(1759101606.934:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c65f8eec9 code=0x7ffc0000 [ 220.179520][ T28] audit: type=1400 audit(1759101606.934:907): avc: denied { create } for pid=3213 comm="kmem_cache_free" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 220.429024][ T28] audit: type=1326 audit(1759101606.934:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65f8eec9 code=0x7ffc0000 [ 220.497799][ T3209] fuseblk: Bad value for 'group_id' [ 220.632207][ T28] audit: type=1326 audit(1759101606.944:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c65f8eec9 code=0x7ffc0000 [ 220.907367][ T28] audit: type=1326 audit(1759101606.944:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65f8eec9 code=0x7ffc0000 [ 220.950968][ T28] audit: type=1326 audit(1759101606.944:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5c65f8eec9 code=0x7ffc0000 [ 221.001545][ T3229] netlink: 44 bytes leftover after parsing attributes in process `syz.5.778'. [ 221.095911][ T28] audit: type=1326 audit(1759101606.944:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c65f8ef03 code=0x7ffc0000 [ 221.138076][ T28] audit: type=1326 audit(1759101608.324:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c65f8d97f code=0x7ffc0000 [ 221.188598][ T3240] loop5: detected capacity change from 0 to 4096 [ 221.210476][ T3214] loop4: detected capacity change from 0 to 40427 [ 221.214423][ T28] audit: type=1326 audit(1759101608.545:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5c65f8ef57 code=0x7ffc0000 [ 221.267100][ T3214] F2FS-fs (loop4): invalid crc value [ 221.351653][ T3240] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 221.365193][ T3214] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.074821][ T3253] xt_policy: neither incoming nor outgoing policy selected [ 222.285104][ T3256] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 222.296310][ T3256] fuse: Bad value for 'fd' [ 222.404109][ T3214] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 223.056961][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.076806][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.084010][ T3264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.273766][ T3275] loop4: detected capacity change from 0 to 512 [ 225.286600][ T3275] EXT4-fs: Ignoring removed bh option [ 225.292139][ T3275] ext3: Unknown parameter 'dont_hash' [ 226.913673][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 226.972646][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 226.972661][ T28] audit: type=1400 audit(1759101614.295:926): avc: denied { read write } for pid=3295 comm="syz.5.794" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 227.004408][ T28] audit: type=1400 audit(1759101614.295:927): avc: denied { open } for pid=3295 comm="syz.5.794" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 227.030131][ T3300] netlink: 'syz.2.795': attribute type 13 has an invalid length. [ 227.038251][ T3300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.795'. [ 227.057778][ T3305] loop5: detected capacity change from 0 to 512 [ 227.076251][ T3305] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 227.100286][ T3305] EXT4-fs (loop5): orphan cleanup on readonly fs [ 227.113416][ T3305] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.797: Block bitmap for bg 0 marked uninitialized [ 227.127324][ T3305] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 227.153098][ T3305] EXT4-fs (loop5): 1 orphan inode deleted [ 227.166869][ T3305] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 227.632581][ T28] audit: type=1400 audit(1759101614.965:928): avc: denied { read } for pid=3308 comm="syz.2.798" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 227.723281][ T28] audit: type=1400 audit(1759101615.025:929): avc: denied { open } for pid=3308 comm="syz.2.798" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 227.926196][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 227.949547][ T3333] loop5: detected capacity change from 0 to 512 [ 227.991553][ T2399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.367504][ T3344] xt_policy: neither incoming nor outgoing policy selected [ 228.588224][ T3343] block device autoloading is deprecated and will be removed. [ 228.596153][ T3343] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 228.605402][ T3343] FAT-fs (loop1): unable to read boot sector [ 229.762629][ T3366] FAULT_INJECTION: forcing a failure. [ 229.762629][ T3366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.783082][ T3366] CPU: 0 PID: 3366 Comm: syz.5.813 Not tainted syzkaller #0 [ 229.790417][ T3366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.800480][ T3366] Call Trace: [ 229.803758][ T3366] [ 229.806682][ T3366] __dump_stack+0x21/0x24 [ 229.811010][ T3366] dump_stack_lvl+0xee/0x150 [ 229.815590][ T3366] ? __cfi_dump_stack_lvl+0x8/0x8 [ 229.820622][ T3366] ? memcpy+0x56/0x70 [ 229.824599][ T3366] dump_stack+0x15/0x24 [ 229.828748][ T3366] should_fail_ex+0x3d4/0x520 [ 229.833429][ T3366] should_fail+0xb/0x10 [ 229.837589][ T3366] should_fail_usercopy+0x1a/0x20 [ 229.842630][ T3366] strncpy_from_user+0x24/0x2d0 [ 229.847505][ T3366] bpf_prog_load+0x1bb/0x15a0 [ 229.852185][ T3366] ? map_freeze+0x390/0x390 [ 229.856687][ T3366] ? selinux_bpf+0xc7/0xf0 [ 229.861137][ T3366] ? security_bpf+0x93/0xb0 [ 229.865637][ T3366] __sys_bpf+0x504/0x780 [ 229.869882][ T3366] ? bpf_link_show_fdinfo+0x320/0x320 [ 229.875249][ T3366] ? __cfi_ksys_write+0x10/0x10 [ 229.880101][ T3366] ? debug_smp_processor_id+0x17/0x20 [ 229.885475][ T3366] __x64_sys_bpf+0x7c/0x90 [ 229.889889][ T3366] x64_sys_call+0x488/0x9a0 [ 229.894385][ T3366] do_syscall_64+0x4c/0xa0 [ 229.898791][ T3366] ? clear_bhb_loop+0x30/0x80 [ 229.903463][ T3366] ? clear_bhb_loop+0x30/0x80 [ 229.908153][ T3366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.914063][ T3366] RIP: 0033:0x7fed2238eec9 [ 229.918485][ T3366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.938092][ T3366] RSP: 002b:00007fed232e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.946517][ T3366] RAX: ffffffffffffffda RBX: 00007fed225e5fa0 RCX: 00007fed2238eec9 [ 229.954482][ T3366] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 229.962445][ T3366] RBP: 00007fed232e5090 R08: 0000000000000000 R09: 0000000000000000 [ 229.970408][ T3366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.978394][ T3366] R13: 00007fed225e6038 R14: 00007fed225e5fa0 R15: 00007ffd8e0114d8 [ 229.986362][ T3366] [ 231.040883][ T3379] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.690772][ T3380] syz.1.816[3380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.690860][ T3380] syz.1.816[3380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.430375][ T3386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.819'. [ 233.231370][ T3396] FAULT_INJECTION: forcing a failure. [ 233.231370][ T3396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.263758][ T28] audit: type=1400 audit(1759101620.606:930): avc: denied { ioctl } for pid=3398 comm="syz.2.823" path="socket:[25307]" dev="sockfs" ino=25307 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.356938][ T3400] bridge: RTM_NEWNEIGH with invalid ether address [ 233.363498][ T3396] CPU: 1 PID: 3396 Comm: syz.5.822 Not tainted syzkaller #0 [ 233.370794][ T3396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.380850][ T3396] Call Trace: [ 233.384141][ T3396] [ 233.387080][ T3396] __dump_stack+0x21/0x24 [ 233.391430][ T3396] dump_stack_lvl+0xee/0x150 [ 233.396020][ T3396] ? __cfi_dump_stack_lvl+0x8/0x8 [ 233.401046][ T3396] ? lock_sock_nested+0x1ec/0x280 [ 233.406113][ T3396] dump_stack+0x15/0x24 [ 233.410273][ T3396] should_fail_ex+0x3d4/0x520 [ 233.414971][ T3396] should_fail+0xb/0x10 [ 233.419157][ T3396] should_fail_usercopy+0x1a/0x20 [ 233.424186][ T3396] _copy_from_user+0x1e/0xc0 [ 233.428780][ T3396] nfc_llcp_setsockopt+0x3bc/0x640 [ 233.433892][ T3396] ? __fget_files+0x2d5/0x330 [ 233.438574][ T3396] ? __cfi_nfc_llcp_setsockopt+0x10/0x10 [ 233.444213][ T3396] ? security_socket_setsockopt+0x93/0xb0 [ 233.449941][ T3396] ? __cfi_nfc_llcp_setsockopt+0x10/0x10 [ 233.455576][ T3396] __sys_setsockopt+0x306/0x4e0 [ 233.460437][ T3396] ? __cfi___sys_setsockopt+0x10/0x10 [ 233.465814][ T3396] ? ksys_write+0x1eb/0x240 [ 233.470338][ T3396] ? __cfi_ksys_write+0x10/0x10 [ 233.475216][ T3396] __x64_sys_setsockopt+0xbf/0xd0 [ 233.480254][ T3396] x64_sys_call+0x124/0x9a0 [ 233.484795][ T3396] do_syscall_64+0x4c/0xa0 [ 233.489217][ T3396] ? clear_bhb_loop+0x30/0x80 [ 233.493893][ T3396] ? clear_bhb_loop+0x30/0x80 [ 233.498567][ T3396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.504454][ T3396] RIP: 0033:0x7fed2238eec9 [ 233.508857][ T3396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.528459][ T3396] RSP: 002b:00007fed232e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 233.536867][ T3396] RAX: ffffffffffffffda RBX: 00007fed225e5fa0 RCX: 00007fed2238eec9 [ 233.544851][ T3396] RDX: 0000000000000001 RSI: 0000000000000118 RDI: 0000000000000004 [ 233.552816][ T3396] RBP: 00007fed232e5090 R08: 0000000000000004 R09: 0000000000000000 [ 233.560782][ T3396] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.568745][ T3396] R13: 00007fed225e6038 R14: 00007fed225e5fa0 R15: 00007ffd8e0114d8 [ 233.576730][ T3396] [ 235.937179][ T3445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 236.223987][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.231344][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.323056][ T3452] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 240.154374][ T3487] overlayfs: failed to clone upperpath [ 240.185679][ T3490] netlink: 56 bytes leftover after parsing attributes in process `syz.2.847'. [ 240.430197][ T3494] netlink: 'syz.2.847': attribute type 4 has an invalid length. [ 240.437999][ T3494] netlink: 17 bytes leftover after parsing attributes in process `syz.2.847'. [ 240.660300][ T28] audit: type=1400 audit(1759101628.007:931): avc: denied { getopt } for pid=3495 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.715241][ T28] audit: type=1400 audit(1759101628.057:932): avc: denied { ioctl } for pid=3495 comm="syz.0.848" path="socket:[25587]" dev="sockfs" ino=25587 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.478561][ T3526] xt_policy: neither incoming nor outgoing policy selected [ 243.544523][ T3526] block device autoloading is deprecated and will be removed. [ 243.553173][ T3526] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 243.562448][ T3526] FAT-fs (loop3): unable to read boot sector [ 243.645356][ T3529] xt_policy: neither incoming nor outgoing policy selected [ 243.944274][ T3529] block device autoloading is deprecated and will be removed. [ 243.953523][ T3529] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 243.963072][ T3529] FAT-fs (loop5): unable to read boot sector [ 245.142487][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.068304][ T726] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.340558][ T3588] xt_policy: neither incoming nor outgoing policy selected [ 248.641074][ T3585] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 248.650320][ T3585] FAT-fs (loop3): unable to read boot sector [ 248.664527][ T3591] xt_hashlimit: Unknown mode mask 40000000, kernel too old? [ 249.229437][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.323038][ T1331] Bluetooth: hci0: command 0x1003 tx timeout [ 250.326079][ T1255] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 250.402403][ T3618] tipc: Invalid UDP bearer configuration [ 250.402428][ T3618] tipc: Enabling of bearer rejected, failed to enable media [ 251.723325][ T3626] loop5: detected capacity change from 0 to 8192 [ 252.369271][ T3640] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value [ 252.738435][ T3648] xt_policy: neither incoming nor outgoing policy selected [ 253.088126][ T3645] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 253.097425][ T3645] FAT-fs (loop11): unable to read boot sector [ 254.001993][ T3653] loop5: detected capacity change from 0 to 16 [ 254.068235][ T3653] erofs: (device loop5): mounted with root inode @ nid 36. [ 256.289872][ T3681] xt_policy: neither incoming nor outgoing policy selected [ 256.622346][ T3681] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 256.631958][ T3681] FAT-fs (loop11): unable to read boot sector [ 258.073054][ T3722] incfs: Backing dir is not set, filesystem can't be mounted. [ 258.081232][ T3722] incfs: mount failed -2 [ 258.430429][ T28] audit: type=1400 audit(1759625933.779:933): avc: denied { write } for pid=3717 comm="syz.4.899" path="socket:[27792]" dev="sockfs" ino=27792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.654626][ T3765] loop5: detected capacity change from 0 to 512 [ 259.668882][ T3765] EXT4-fs: Ignoring removed oldalloc option [ 259.696162][ T3763] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 259.706032][ T3765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.719945][ T3765] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 259.821039][ T3765] EXT4-fs (loop5): 1 truncate cleaned up [ 259.828852][ T3765] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 261.792176][ T28] audit: type=1400 audit(1759625937.139:934): avc: denied { rename } for pid=3764 comm="syz.5.910" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 261.851500][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 262.397839][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.671519][ T3811] block device autoloading is deprecated and will be removed. [ 263.679308][ T3811] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 263.688578][ T3811] FAT-fs (loop1): unable to read boot sector [ 263.872841][ T3816] xt_policy: neither incoming nor outgoing policy selected [ 266.631709][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.252595][ T3839] loop5: detected capacity change from 0 to 40427 [ 267.270737][ T3839] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 267.279963][ T3839] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 267.289453][ T3839] F2FS-fs (loop5): invalid crc value [ 267.296060][ T3839] F2FS-fs (loop5): Found nat_bits in checkpoint [ 267.323562][ T3839] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 267.330666][ T3839] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 267.361685][ T28] audit: type=1400 audit(1759625942.710:935): avc: denied { remount } for pid=3838 comm="syz.5.928" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 267.482690][ T3849] loop5: detected capacity change from 0 to 512 [ 267.506822][ T3849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.521112][ T3849] EXT4-fs (loop5): orphan cleanup on readonly fs [ 267.529132][ T3849] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 267.540020][ T3849] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 267.555306][ T3849] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.929: Failed to acquire dquot type 1 [ 267.567307][ T3849] EXT4-fs (loop5): 1 truncate cleaned up [ 267.573100][ T3849] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 267.641707][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 267.764096][ T3864] FAULT_INJECTION: forcing a failure. [ 267.764096][ T3864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.777545][ T3864] CPU: 1 PID: 3864 Comm: syz.2.936 Not tainted syzkaller #0 [ 267.784947][ T3864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.795049][ T3864] Call Trace: [ 267.798338][ T3864] [ 267.801274][ T3864] __dump_stack+0x21/0x24 [ 267.805625][ T3864] dump_stack_lvl+0xee/0x150 [ 267.807284][ T28] audit: type=1400 audit(1759625943.160:936): avc: denied { getopt } for pid=3867 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.810240][ T3864] ? __cfi_dump_stack_lvl+0x8/0x8 [ 267.810265][ T3864] ? _parse_integer+0x2a/0x40 [ 267.839967][ T3864] dump_stack+0x15/0x24 [ 267.844140][ T3864] should_fail_ex+0x3d4/0x520 [ 267.848838][ T3864] should_fail+0xb/0x10 [ 267.852988][ T3864] should_fail_usercopy+0x1a/0x20 [ 267.858017][ T3864] _copy_from_user+0x1e/0xc0 [ 267.862629][ T3864] ___sys_sendmsg+0x155/0x290 [ 267.867313][ T3864] ? __sys_sendmsg+0x270/0x270 [ 267.872073][ T3864] ? __kasan_check_write+0x14/0x20 [ 267.877175][ T3864] ? proc_fail_nth_write+0x17a/0x1f0 [ 267.882465][ T3864] ? vfs_write+0x9d6/0xca0 [ 267.886591][ T3869] block device autoloading is deprecated and will be removed. [ 267.886902][ T3864] ? __fdget+0x19c/0x220 [ 267.894604][ T3869] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 267.898567][ T3864] __x64_sys_sendmsg+0x1f0/0x2c0 [ 267.898592][ T3864] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 267.907747][ T3869] FAT-fs (loop3): unable to read boot sector [ 267.912625][ T3864] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 267.930081][ T3864] x64_sys_call+0x171/0x9a0 [ 267.934591][ T3864] do_syscall_64+0x4c/0xa0 [ 267.939001][ T3864] ? clear_bhb_loop+0x30/0x80 [ 267.943676][ T3864] ? clear_bhb_loop+0x30/0x80 [ 267.948350][ T3864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.954258][ T3864] RIP: 0033:0x7f0aa7d8eec9 [ 267.958661][ T3864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.978258][ T3864] RSP: 002b:00007f0aa8bec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.986678][ T3864] RAX: ffffffffffffffda RBX: 00007f0aa7fe5fa0 RCX: 00007f0aa7d8eec9 [ 267.994654][ T3864] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 268.002611][ T3864] RBP: 00007f0aa8bec090 R08: 0000000000000000 R09: 0000000000000000 [ 268.010569][ T3864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.018531][ T3864] R13: 00007f0aa7fe6038 R14: 00007f0aa7fe5fa0 R15: 00007fffc7d4f9d8 [ 268.026520][ T3864] [ 268.252048][ T3878] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.449493][ T3886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'. [ 271.544145][ T3888] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3888 comm=syz.0.943 [ 271.566003][ T3891] loop5: detected capacity change from 0 to 1024 [ 271.569913][ T3888] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3888 comm=syz.0.943 [ 271.582221][ T3891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.602096][ T3891] EXT4-fs (loop5): INFO: recovery required on readonly filesystem [ 271.610752][ T3891] EXT4-fs (loop5): write access will be enabled during recovery [ 271.619329][ T3891] EXT4-fs (loop5): barriers disabled [ 271.625666][ T3891] JBD2: no valid journal superblock found [ 271.640021][ T3891] EXT4-fs (loop5): error loading journal [ 273.609338][ T3922] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 273.618741][ T3922] FAT-fs (loop11): unable to read boot sector [ 273.923451][ T28] audit: type=1400 audit(1759625949.270:937): avc: denied { setopt } for pid=3928 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.944490][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 274.065112][ T3937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 274.184416][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 274.191573][ T24] usb 5-1: config index 0 descriptor too short (expected 546, got 34) [ 274.414893][ T24] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 274.455747][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.466132][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 274.475184][ T24] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 274.484546][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.501981][ T24] usb 5-1: config 0 descriptor?? [ 274.506511][ T28] audit: type=1400 audit(1759625949.860:938): avc: denied { associate } for pid=3945 comm="syz.5.964" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 274.839535][ T3921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.848941][ T3921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.949285][ T2188] usb 5-1: USB disconnect, device number 8 [ 274.999451][ T28] audit: type=1326 audit(1759625950.350:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 275.022924][ T28] audit: type=1326 audit(1759625950.350:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 275.046494][ T28] audit: type=1326 audit(1759625950.350:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 275.073407][ T28] audit: type=1326 audit(1759625950.350:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 275.097040][ T28] audit: type=1326 audit(1759625950.350:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 275.120760][ T28] audit: type=1326 audit(1759625950.350:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 275.144964][ T28] audit: type=1326 audit(1759625950.350:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 275.168516][ T28] audit: type=1326 audit(1759625950.350:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa7d8eec9 code=0x7ffc0000 [ 275.437240][ T3966] netlink: 'syz.5.969': attribute type 12 has an invalid length. [ 275.643900][ T3969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 275.654459][ T3969] device macsec1 entered promiscuous mode [ 276.128227][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.973'. [ 276.254741][ T3979] loop5: detected capacity change from 0 to 1024 [ 276.277724][ T3979] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 276.710498][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 277.544399][ T3999] netlink: 'syz.5.979': attribute type 4 has an invalid length. [ 277.566990][ T3999] netlink: 'syz.5.979': attribute type 4 has an invalid length. [ 277.834094][ T1331] Bluetooth: hci0: command 0x1003 tx timeout [ 278.243961][ T1255] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 278.743920][ T2188] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 278.924892][ T2188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.966137][ T2188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.996537][ T2188] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 279.023596][ T2188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.077362][ T2188] usb 3-1: config 0 descriptor?? [ 279.111662][ T4023] loop5: detected capacity change from 0 to 40427 [ 279.118942][ T4023] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 279.125938][ T4023] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 279.134882][ T4023] F2FS-fs (loop5): invalid crc value [ 279.141740][ T4023] F2FS-fs (loop5): Found nat_bits in checkpoint [ 279.259894][ T4023] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 279.287458][ T4023] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 279.692585][ T2188] usb 3-1: string descriptor 0 read error: -71 [ 279.699992][ T2188] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 279.709120][ T2188] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 279.717534][ T2188] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 279.726525][ T2188] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 279.734222][ T2188] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 279.751191][ T2188] usb 3-1: USB disconnect, device number 6 [ 280.299386][ T4049] xt_hashlimit: max too large, truncated to 1048576 [ 280.314814][ T4049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 280.537649][ T4052] xt_bpf: check failed: parse error [ 280.628268][ T4067] netlink: 'syz.2.998': attribute type 12 has an invalid length. [ 280.640887][ T4069] FAULT_INJECTION: forcing a failure. [ 280.640887][ T4069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.643662][ T712] Bluetooth: hci0: Frame reassembly failed (-84) [ 280.665432][ T4069] CPU: 0 PID: 4069 Comm: syz.4.999 Not tainted syzkaller #0 [ 280.672745][ T4069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.682804][ T4069] Call Trace: [ 280.686085][ T4069] [ 280.689032][ T4069] __dump_stack+0x21/0x24 [ 280.693388][ T4069] dump_stack_lvl+0xee/0x150 [ 280.697993][ T4069] ? __cfi_dump_stack_lvl+0x8/0x8 [ 280.703039][ T4069] dump_stack+0x15/0x24 [ 280.707215][ T4069] should_fail_ex+0x3d4/0x520 [ 280.712013][ T4069] should_fail+0xb/0x10 [ 280.716183][ T4069] should_fail_usercopy+0x1a/0x20 [ 280.721220][ T4069] _copy_to_user+0x1e/0x90 [ 280.725651][ T4069] simple_read_from_buffer+0xe9/0x160 [ 280.731034][ T4069] proc_fail_nth_read+0x19a/0x210 [ 280.736065][ T4069] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 280.741620][ T4069] ? security_file_permission+0x94/0xb0 [ 280.747189][ T4069] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 280.752745][ T4069] vfs_read+0x26e/0x8c0 [ 280.756912][ T4069] ? __cfi_vfs_read+0x10/0x10 [ 280.761601][ T4069] ? __kasan_check_write+0x14/0x20 [ 280.766722][ T4069] ? mutex_lock+0x8d/0x1a0 [ 280.771181][ T4069] ? __cfi_mutex_lock+0x10/0x10 [ 280.772533][ T4053] loop5: detected capacity change from 0 to 40427 [ 280.776041][ T4069] ? __fdget_pos+0x2cd/0x380 [ 280.776059][ T4069] ? ksys_read+0x71/0x240 [ 280.791476][ T4069] ksys_read+0x140/0x240 [ 280.795739][ T4069] ? __cfi_ksys_read+0x10/0x10 [ 280.798498][ T4053] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 280.800530][ T4069] ? fput+0x154/0x1a0 [ 280.812242][ T4069] ? debug_smp_processor_id+0x17/0x20 [ 280.817646][ T4069] __x64_sys_read+0x7b/0x90 [ 280.818895][ T4053] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 280.822175][ T4069] x64_sys_call+0x2f/0x9a0 [ 280.834720][ T4069] do_syscall_64+0x4c/0xa0 [ 280.839154][ T4069] ? clear_bhb_loop+0x30/0x80 [ 280.843896][ T4069] ? clear_bhb_loop+0x30/0x80 [ 280.845918][ T4053] F2FS-fs (loop5): invalid crc value [ 280.848604][ T4069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.859782][ T4069] RIP: 0033:0x7f5c65f8d8dc [ 280.864207][ T4069] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 280.883806][ T4069] RSP: 002b:00007f5c66e9a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.892213][ T4069] RAX: ffffffffffffffda RBX: 00007f5c661e5fa0 RCX: 00007f5c65f8d8dc [ 280.900185][ T4069] RDX: 000000000000000f RSI: 00007f5c66e9a0a0 RDI: 0000000000000005 [ 280.908156][ T4069] RBP: 00007f5c66e9a090 R08: 0000000000000000 R09: 0000000000000000 [ 280.916128][ T4069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.924091][ T4069] R13: 00007f5c661e6038 R14: 00007f5c661e5fa0 R15: 00007ffca27f5248 [ 280.932059][ T4069] [ 281.063215][ T4053] F2FS-fs (loop5): Found nat_bits in checkpoint [ 282.133992][ T4053] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 282.141060][ T4053] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 282.586422][ T4053] syz.5.993: attempt to access beyond end of device [ 282.586422][ T4053] loop5: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 282.713359][ T1331] Bluetooth: hci0: command 0x1003 tx timeout [ 282.719438][ T1255] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 286.279104][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 286.279120][ T28] audit: type=1400 audit(1759625961.631:982): avc: denied { mounton } for pid=4100 comm="syz.2.1008" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 286.310929][ T4118] tmpfs: Unknown parameter 'inode' [ 286.312968][ T2188] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 286.325735][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.213957][ T2188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.233192][ T2188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.246630][ T2188] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 287.255879][ T2188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.283514][ T2188] usb 5-1: config 0 descriptor?? [ 287.302515][ T4144] bridge0: port 3(syz_tun) entered blocking state [ 287.313027][ T4144] bridge0: port 3(syz_tun) entered disabled state [ 287.320121][ T4144] device syz_tun entered promiscuous mode [ 287.518747][ T4144] bridge0: port 3(syz_tun) entered blocking state [ 287.525350][ T4144] bridge0: port 3(syz_tun) entered forwarding state [ 287.642647][ T4116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.693469][ T4116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.745021][ T2188] usbhid 5-1:0.0: can't add hid device: -71 [ 287.751145][ T2188] usbhid: probe of 5-1:0.0 failed with error -71 [ 287.762408][ T2188] usb 5-1: USB disconnect, device number 9 [ 288.203904][ T4157] loop5: detected capacity change from 0 to 1024 [ 288.210656][ T4157] ext4: Unknown parameter 'noacl' [ 288.375138][ T4164] tipc: Started in network mode [ 288.380089][ T4164] tipc: Node identity ac1414aa, cluster identity 4711 [ 288.453166][ T4164] tipc: Enabled bearer , priority 10 [ 288.596204][ T4173] capability: warning: `syz.4.1027' uses 32-bit capabilities (legacy support in use) [ 288.619205][ T28] audit: type=1400 audit(1759625963.972:983): avc: denied { ioctl } for pid=4171 comm="syz.4.1027" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 288.706814][ T28] audit: type=1400 audit(1759625964.052:984): avc: denied { bind } for pid=4174 comm="syz.1.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.933099][ T4179] overlayfs: failed to clone upperpath [ 288.940036][ T28] audit: type=1400 audit(1759625964.292:985): avc: denied { search } for pid=4178 comm="syz.1.1030" name="/" dev="configfs" ino=13468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 288.976243][ T28] audit: type=1400 audit(1759625964.322:986): avc: denied { read } for pid=4178 comm="syz.1.1030" name="/" dev="configfs" ino=13468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 289.017475][ T28] audit: type=1400 audit(1759625964.322:987): avc: denied { open } for pid=4178 comm="syz.1.1030" path="/" dev="configfs" ino=13468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 289.321036][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1031'. [ 289.355973][ T4196] loop5: detected capacity change from 0 to 512 [ 289.409021][ T4196] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1035: casefold flag without casefold feature [ 289.424553][ T4196] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1035: couldn't read orphan inode 15 (err -117) [ 289.438189][ T4196] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 289.572546][ T24] tipc: Node number set to 2886997162 [ 289.749445][ T4212] xt_policy: neither incoming nor outgoing policy selected [ 291.035328][ T4228] xt_policy: neither incoming nor outgoing policy selected [ 291.190631][ T4228] block device autoloading is deprecated and will be removed. [ 291.201386][ T4228] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 291.210866][ T4228] FAT-fs (loop3): unable to read boot sector [ 291.522644][ T28] audit: type=1400 audit(1759625966.882:988): avc: denied { sys_module } for pid=4235 comm="syz.2.1045" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.127638][ T4247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 292.174334][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 292.239831][ T4251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1049'. [ 292.319261][ T1234] EXT4-fs (loop5): unmounting filesystem. [ 292.782682][ T4272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1054'. [ 294.098329][ T4292] xt_policy: neither incoming nor outgoing policy selected [ 294.108986][ T4292] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 294.118303][ T4292] FAT-fs (loop11): unable to read boot sector [ 294.519116][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 294.538097][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 294.586732][ T4300] loop5: detected capacity change from 0 to 256 [ 294.634833][ T4300] FAT-fs (loop5): Directory bread(block 64) failed [ 294.641653][ T4300] FAT-fs (loop5): Directory bread(block 65) failed [ 294.661988][ T4300] FAT-fs (loop5): Directory bread(block 66) failed [ 294.668585][ T4300] FAT-fs (loop5): Directory bread(block 67) failed [ 294.675265][ T4300] FAT-fs (loop5): Directory bread(block 68) failed [ 294.681782][ T4300] FAT-fs (loop5): Directory bread(block 69) failed [ 294.711813][ T4300] FAT-fs (loop5): Directory bread(block 70) failed [ 294.721658][ T4300] FAT-fs (loop5): Directory bread(block 71) failed [ 294.749223][ T4300] FAT-fs (loop5): Directory bread(block 72) failed [ 294.764317][ T4300] FAT-fs (loop5): Directory bread(block 73) failed [ 295.153631][ T4321] netlink: 'syz.1.1067': attribute type 4 has an invalid length. [ 295.183343][ T4321] netlink: 'syz.1.1067': attribute type 4 has an invalid length. [ 296.609375][ T4341] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 296.950433][ T28] audit: type=1107 audit(1759625972.283:989): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 298.224125][ T4368] Unsupported ieee802154 address type: 0 [ 298.248504][ T28] audit: type=1400 audit(1759625973.583:990): avc: denied { bind } for pid=4367 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.610610][ T4372] tipc: Enabling of bearer rejected, already enabled [ 298.964115][ T4378] netlink: 'syz.5.1086': attribute type 2 has an invalid length. [ 299.076833][ T4383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.085467][ T4383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.094777][ T28] audit: type=1326 audit(1759625974.453:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2238eec9 code=0x7ffc0000 [ 301.036168][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 301.075807][ T28] audit: type=1326 audit(1759625974.473:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed2238eec9 code=0x7ffc0000 [ 301.268642][ T4395] FAULT_INJECTION: forcing a failure. [ 301.268642][ T4395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.284713][ T28] audit: type=1326 audit(1759625974.473:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2238eec9 code=0x7ffc0000 [ 301.308159][ T28] audit: type=1326 audit(1759625974.473:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fed2238eec9 code=0x7ffc0000 [ 301.331987][ T4395] CPU: 0 PID: 4395 Comm: syz.2.1090 Not tainted syzkaller #0 [ 301.339377][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.341242][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 301.349433][ T4395] Call Trace: [ 301.349441][ T4395] [ 301.349448][ T4395] __dump_stack+0x21/0x24 [ 301.349471][ T4395] dump_stack_lvl+0xee/0x150 [ 301.349487][ T4395] ? __cfi_dump_stack_lvl+0x8/0x8 [ 301.349507][ T4395] dump_stack+0x15/0x24 [ 301.349524][ T4395] should_fail_ex+0x3d4/0x520 [ 301.349548][ T4395] should_fail+0xb/0x10 [ 301.349570][ T4395] should_fail_usercopy+0x1a/0x20 [ 301.349593][ T4395] copyin+0x20/0xa0 [ 301.349613][ T4395] _copy_from_iter+0x3e2/0xfd0 [ 301.349636][ T4395] ? __cfi__copy_from_iter+0x10/0x10 [ 301.349657][ T4395] ? __kasan_check_write+0x14/0x20 [ 301.349674][ T4395] ? __build_skb_around+0x24f/0x470 [ 301.349700][ T4395] ? check_stack_object+0x81/0x140 [ 301.349733][ T4395] ? __check_object_size+0x45a/0x600 [ 301.349760][ T4395] netlink_sendmsg+0x72c/0xbc0 [ 301.349779][ T4395] ? __cfi_netlink_sendmsg+0x10/0x10 [ 301.349798][ T4395] ? security_socket_sendmsg+0x93/0xb0 [ 301.349817][ T4395] ? __cfi_netlink_sendmsg+0x10/0x10 [ 301.349832][ T4395] ____sys_sendmsg+0x5a9/0x990 [ 301.349855][ T4395] ? __sys_sendmsg_sock+0x40/0x40 [ 301.349877][ T4395] ? import_iovec+0x7c/0xb0 [ 301.349901][ T4395] ___sys_sendmsg+0x21c/0x290 [ 301.349921][ T4395] ? __sys_sendmsg+0x270/0x270 [ 301.349942][ T4395] ? __kasan_check_write+0x14/0x20 [ 301.349958][ T4395] ? proc_fail_nth_write+0x17a/0x1f0 [ 301.349980][ T4395] ? vfs_write+0x9d6/0xca0 [ 301.350011][ T4395] ? __fdget+0x19c/0x220 [ 301.350028][ T4395] __x64_sys_sendmsg+0x1f0/0x2c0 [ 301.350049][ T4395] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 301.350073][ T4395] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 301.509931][ T4395] x64_sys_call+0x171/0x9a0 [ 301.514442][ T4395] do_syscall_64+0x4c/0xa0 [ 301.518856][ T4395] ? clear_bhb_loop+0x30/0x80 [ 301.523547][ T4395] ? clear_bhb_loop+0x30/0x80 [ 301.528222][ T4395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.534131][ T4395] RIP: 0033:0x7f0aa7d8eec9 [ 301.538535][ T4395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.558133][ T4395] RSP: 002b:00007f0aa8bec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.566556][ T4395] RAX: ffffffffffffffda RBX: 00007f0aa7fe5fa0 RCX: 00007f0aa7d8eec9 [ 301.574525][ T4395] RDX: 0000000000040080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 301.582491][ T4395] RBP: 00007f0aa8bec090 R08: 0000000000000000 R09: 0000000000000000 [ 301.590457][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.598425][ T4395] R13: 00007f0aa7fe6038 R14: 00007f0aa7fe5fa0 R15: 00007fffc7d4f9d8 [ 301.606397][ T4395] [ 301.662946][ T4402] tipc: Started in network mode [ 301.667945][ T4402] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 301.681150][ T4402] tipc: Enabling of bearer rejected, failed to enable media [ 301.752548][ T4407] netlink: 'syz.5.1095': attribute type 3 has an invalid length. [ 301.779972][ T4407] netlink: 'syz.5.1095': attribute type 3 has an invalid length. [ 301.803413][ T4408] netlink: 'syz.2.1092': attribute type 4 has an invalid length. [ 302.012204][ T28] audit: type=1400 audit(1759625977.373:995): avc: denied { execute } for pid=4414 comm="syz.4.1097" path="/dev/loop4" dev="devtmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 302.926137][ T4455] input: syz1 as /devices/virtual/input/input5 [ 302.935744][ T28] audit: type=1400 audit(1759625978.293:996): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1107 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 302.959327][ T28] audit: type=1400 audit(1759625978.293:997): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1107 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 302.986859][ T28] audit: type=1400 audit(1759625978.293:998): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1107 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.034182][ T4464] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 303.042551][ T4464] netlink: 'syz.2.1108': attribute type 2 has an invalid length. [ 303.590581][ T4475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1111'. [ 304.670765][ T2193] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 305.005908][ T4513] netlink: 'syz.4.1121': attribute type 4 has an invalid length. [ 305.035964][ T4513] netlink: 'syz.4.1121': attribute type 4 has an invalid length. [ 305.991616][ T2193] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 305.999818][ T2193] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.020564][ T2193] usb 3-1: config 0 has no interface number 0 [ 306.044886][ T2193] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 306.055345][ T2193] usb 3-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 306.080503][ T2193] usb 3-1: Product: syz [ 306.084716][ T2193] usb 3-1: Manufacturer: syz [ 306.089318][ T2193] usb 3-1: SerialNumber: syz [ 306.100835][ T2193] usb 3-1: config 0 descriptor?? [ 306.230590][ T24] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 306.309308][ T4504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.323674][ T4504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.339652][ T2193] usb 3-1: USB disconnect, device number 7 [ 306.432278][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.460406][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 306.480226][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0219, bcdDevice= 0.f7 [ 306.489541][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.498655][ T24] usb 6-1: config 0 descriptor?? [ 306.935584][ T24] wacom 0003:056A:0219.0007: Unknown device_type for 'HID 056a:0219'. Ignoring. [ 306.974945][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 309.111280][ T28] audit: type=1400 audit(1759625982.804:999): avc: denied { mount } for pid=4546 comm="syz.0.1134" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 309.222712][ T28] audit: type=1400 audit(1759625982.824:1000): avc: denied { remount } for pid=4546 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 309.246023][ T24] usb 6-1: USB disconnect, device number 5 [ 309.990700][ T3705] Bluetooth: hci0: Frame reassembly failed (-84) [ 310.312572][ T4584] netlink: 'syz.4.1141': attribute type 3 has an invalid length. [ 310.322019][ T4584] netlink: 'syz.4.1141': attribute type 3 has an invalid length. [ 310.475987][ T4583] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 310.519975][ T28] audit: type=1400 audit(1759625985.844:1001): avc: denied { relabelto } for pid=4581 comm="syz.5.1142" name="165" dev="tmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:login_exec_t:s0" [ 310.552582][ T28] audit: type=1400 audit(1759625985.844:1002): avc: denied { associate } for pid=4581 comm="syz.5.1142" name="165" dev="tmpfs" ino=913 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:login_exec_t:s0" [ 310.855277][ T4593] syz.0.1144[4593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.855356][ T4593] syz.0.1144[4593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.389082][ T4595] syz.5.1145[4595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.402501][ T4595] syz.5.1145[4595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.236237][ T1255] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 312.253781][ T1331] Bluetooth: hci0: command 0x1003 tx timeout [ 312.949758][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 312.999753][ T335] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 313.151904][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.175495][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 313.188738][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.198321][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.212439][ T24] usb 5-1: config 0 descriptor?? [ 313.217611][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.227950][ T335] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 313.237437][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.251059][ T335] usb 3-1: config 0 descriptor?? [ 313.503994][ T4603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.520051][ T4603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.538863][ T335] usbhid 3-1:0.0: can't add hid device: -71 [ 313.544920][ T335] usbhid: probe of 3-1:0.0 failed with error -71 [ 313.555299][ T335] usb 3-1: USB disconnect, device number 8 [ 314.508354][ T28] audit: type=1400 audit(1759625989.855:1003): avc: denied { setattr } for pid=4614 comm="syz.0.1151" name="netlink" dev="proc" ino=4026532554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 315.062822][ T4638] xt_policy: neither incoming nor outgoing policy selected [ 315.084973][ T4640] xt_policy: neither incoming nor outgoing policy selected [ 315.154921][ T4638] block device autoloading is deprecated and will be removed. [ 315.166275][ T4638] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.175852][ T4638] FAT-fs (loop3): unable to read boot sector [ 315.602473][ T4640] block device autoloading is deprecated and will be removed. [ 315.610180][ T4640] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.615469][ T4562] udevd[4562]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 315.619381][ T4640] FAT-fs (loop1): unable to read boot sector [ 315.635539][ T4148] udevd[4148]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 315.719605][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 315.725593][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 315.822206][ T24] usb 5-1: USB disconnect, device number 10 [ 316.726191][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1168'. [ 316.755002][ T4667] bridge0: port 3(syz_tun) entered disabled state [ 316.761541][ T4667] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.768695][ T4667] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.039249][ T28] audit: type=1400 audit(1759625992.365:1004): avc: denied { accept } for pid=4672 comm="syz.0.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.401191][ T4693] xt_policy: neither incoming nor outgoing policy selected [ 318.410328][ T4693] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 318.419494][ T4693] FAT-fs (loop3): unable to read boot sector [ 318.552097][ T4697] xt_policy: neither incoming nor outgoing policy selected [ 318.623857][ T4697] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 318.633306][ T4697] FAT-fs (loop11): unable to read boot sector [ 319.354813][ T4703] xt_policy: neither incoming nor outgoing policy selected [ 319.376675][ T4703] block device autoloading is deprecated and will be removed. [ 319.385065][ T4703] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 319.394472][ T4703] FAT-fs (loop1): unable to read boot sector [ 319.618134][ T3956] udevd[3956]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 321.564301][ T28] audit: type=1400 audit(1759625996.916:1005): avc: denied { write } for pid=4729 comm="syz.4.1184" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 321.799695][ T4740] x_tables: duplicate underflow at hook 1 [ 322.145573][ T4753] FAULT_INJECTION: forcing a failure. [ 322.145573][ T4753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.158984][ T4753] CPU: 1 PID: 4753 Comm: syz.4.1189 Not tainted syzkaller #0 [ 322.166371][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.176435][ T4753] Call Trace: [ 322.179723][ T4753] [ 322.182671][ T4753] __dump_stack+0x21/0x24 [ 322.187011][ T4753] dump_stack_lvl+0xee/0x150 [ 322.191612][ T4753] ? __cfi_dump_stack_lvl+0x8/0x8 [ 322.196649][ T4753] dump_stack+0x15/0x24 [ 322.200817][ T4753] should_fail_ex+0x3d4/0x520 [ 322.205509][ T4753] should_fail+0xb/0x10 [ 322.209672][ T4753] should_fail_usercopy+0x1a/0x20 [ 322.214703][ T4753] _copy_from_user+0x1e/0xc0 [ 322.219319][ T4753] __sys_bpf+0x277/0x780 [ 322.223567][ T4753] ? bpf_link_show_fdinfo+0x320/0x320 [ 322.228949][ T4753] ? __cfi_ksys_write+0x10/0x10 [ 322.233811][ T4753] ? debug_smp_processor_id+0x17/0x20 [ 322.239198][ T4753] __x64_sys_bpf+0x7c/0x90 [ 322.243629][ T4753] x64_sys_call+0x488/0x9a0 [ 322.248144][ T4753] do_syscall_64+0x4c/0xa0 [ 322.252577][ T4753] ? clear_bhb_loop+0x30/0x80 [ 322.257357][ T4753] ? clear_bhb_loop+0x30/0x80 [ 322.262057][ T4753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.267960][ T4753] RIP: 0033:0x7f5c65f8eec9 [ 322.272385][ T4753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.291996][ T4753] RSP: 002b:00007f5c66e58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.300416][ T4753] RAX: ffffffffffffffda RBX: 00007f5c661e6180 RCX: 00007f5c65f8eec9 [ 322.308390][ T4753] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 322.316366][ T4753] RBP: 00007f5c66e58090 R08: 0000000000000000 R09: 0000000000000000 [ 322.324344][ T4753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.332385][ T4753] R13: 00007f5c661e6218 R14: 00007f5c661e6180 R15: 00007ffca27f5248 [ 322.340379][ T4753] [ 323.168964][ T4754] xt_policy: neither incoming nor outgoing policy selected [ 323.217192][ T4754] block device autoloading is deprecated and will be removed. [ 323.225123][ T4754] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 323.234360][ T4754] FAT-fs (loop1): unable to read boot sector [ 323.264529][ T3956] udevd[3956]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 323.756212][ T4775] input: syz1 as /devices/virtual/input/input9 [ 325.874457][ T4800] xt_policy: neither incoming nor outgoing policy selected [ 326.130073][ T4801] xt_policy: neither incoming nor outgoing policy selected [ 326.226005][ T4801] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 326.235582][ T4801] FAT-fs (loop3): unable to read boot sector [ 326.605986][ T4800] block device autoloading is deprecated and will be removed. [ 326.613959][ T4800] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 326.623152][ T4800] FAT-fs (loop9): unable to read boot sector [ 326.727592][ T3889] udevd[3889]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 326.932744][ T4818] netlink: 'syz.2.1207': attribute type 11 has an invalid length. [ 326.940746][ T4818] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1207'. [ 327.218052][ T4817] syz.4.1205 (4817) used greatest stack depth: 19696 bytes left [ 327.308552][ T2193] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 327.417559][ T4830] overlayfs: failed to clone upperpath [ 327.507931][ T2193] usb 1-1: Using ep0 maxpacket: 16 [ 327.514930][ T2193] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 327.534681][ T2193] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.555549][ T2193] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.567021][ T2193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.576371][ T2193] usb 1-1: Product: syz [ 327.613964][ T2193] usb 1-1: Manufacturer: syz [ 327.631206][ T2193] usb 1-1: SerialNumber: syz [ 327.905769][ T4842] x_tables: duplicate underflow at hook 1 [ 328.145897][ T2193] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 328.155525][ T2193] usb 1-1: USB disconnect, device number 8 [ 328.208765][ T4845] xt_policy: neither incoming nor outgoing policy selected [ 328.218051][ T4845] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 328.227283][ T4845] FAT-fs (loop11): unable to read boot sector [ 328.716104][ T3956] udevd[3956]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 328.808050][ T4863] FAULT_INJECTION: forcing a failure. [ 328.808050][ T4863] name failslab, interval 1, probability 0, space 0, times 0 [ 328.835964][ T4863] CPU: 1 PID: 4863 Comm: syz.2.1225 Not tainted syzkaller #0 [ 328.843385][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 328.853453][ T4863] Call Trace: [ 328.856745][ T4863] [ 328.859687][ T4863] __dump_stack+0x21/0x24 [ 328.864029][ T4863] dump_stack_lvl+0xee/0x150 [ 328.868628][ T4863] ? __cfi_dump_stack_lvl+0x8/0x8 [ 328.873663][ T4863] ? avc_has_perm+0x158/0x240 [ 328.878357][ T4863] dump_stack+0x15/0x24 [ 328.882696][ T4863] should_fail_ex+0x3d4/0x520 [ 328.887413][ T4863] __should_failslab+0xac/0xf0 [ 328.892196][ T4863] ? __get_vm_area_node+0x12c/0x360 [ 328.897403][ T4863] should_failslab+0x9/0x20 [ 328.901923][ T4863] __kmem_cache_alloc_node+0x3d/0x2c0 [ 328.907315][ T4863] ? __get_vm_area_node+0x12c/0x360 [ 328.912576][ T4863] kmalloc_node_trace+0x26/0xb0 [ 328.917441][ T4863] __get_vm_area_node+0x12c/0x360 [ 328.922483][ T4863] __vmalloc_node_range+0x326/0x13d0 [ 328.927783][ T4863] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 328.933364][ T4863] ? arch_stack_walk+0xfc/0x150 [ 328.938246][ T4863] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 328.944010][ T4863] ? stack_trace_save+0x98/0xe0 [ 328.948877][ T4863] ? __cfi___vmalloc_node_range+0x10/0x10 [ 328.954606][ T4863] ? __cfi_selinux_capable+0x10/0x10 [ 328.959909][ T4863] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 328.965472][ T4863] __vmalloc+0x79/0x90 [ 328.969544][ T4863] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 328.975112][ T4863] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 328.980268][ T4867] x_tables: duplicate underflow at hook 3 [ 328.980494][ T4863] bpf_prog_alloc+0x22/0x1c0 [ 328.988839][ T28] audit: type=1400 audit(1759626004.337:1006): avc: denied { setopt } for pid=4866 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.990823][ T4863] bpf_prog_load+0x7c6/0x15a0 [ 329.015901][ T4863] ? map_freeze+0x390/0x390 [ 329.020432][ T4863] ? selinux_bpf+0xc7/0xf0 [ 329.024868][ T4863] ? security_bpf+0x93/0xb0 [ 329.029414][ T4863] __sys_bpf+0x504/0x780 [ 329.033675][ T4863] ? bpf_link_show_fdinfo+0x320/0x320 [ 329.039084][ T4863] ? __cfi_ksys_write+0x10/0x10 [ 329.043966][ T4863] ? debug_smp_processor_id+0x17/0x20 [ 329.049424][ T4863] __x64_sys_bpf+0x7c/0x90 [ 329.053865][ T4863] x64_sys_call+0x488/0x9a0 [ 329.058392][ T4863] do_syscall_64+0x4c/0xa0 [ 329.062825][ T4863] ? clear_bhb_loop+0x30/0x80 [ 329.067524][ T4863] ? clear_bhb_loop+0x30/0x80 [ 329.072233][ T4863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.078170][ T4863] RIP: 0033:0x7f0aa7d8eec9 [ 329.082610][ T4863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.102229][ T4863] RSP: 002b:00007f0aa8bec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.110657][ T4863] RAX: ffffffffffffffda RBX: 00007f0aa7fe5fa0 RCX: 00007f0aa7d8eec9 [ 329.118626][ T4863] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 329.126592][ T4863] RBP: 00007f0aa8bec090 R08: 0000000000000000 R09: 0000000000000000 [ 329.134553][ T4863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.142513][ T4863] R13: 00007f0aa7fe6038 R14: 00007f0aa7fe5fa0 R15: 00007fffc7d4f9d8 [ 329.150502][ T4863] [ 329.177788][ T4863] syz.2.1225: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 329.217748][ T4863] CPU: 0 PID: 4863 Comm: syz.2.1225 Not tainted syzkaller #0 [ 329.225279][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 329.235337][ T4863] Call Trace: [ 329.238646][ T4863] [ 329.241583][ T4863] __dump_stack+0x21/0x24 [ 329.245932][ T4863] dump_stack_lvl+0xee/0x150 [ 329.250536][ T4863] ? __cfi_dump_stack_lvl+0x8/0x8 [ 329.255565][ T4863] ? pr_cont_kernfs_name+0x133/0x160 [ 329.260866][ T4863] dump_stack+0x15/0x24 [ 329.265030][ T4863] warn_alloc+0x1b0/0x1d0 [ 329.269375][ T4863] ? should_failslab+0x9/0x20 [ 329.274062][ T4863] ? __cfi_warn_alloc+0x10/0x10 [ 329.278926][ T4863] ? kmalloc_node_trace+0x3d/0xb0 [ 329.283950][ T4863] ? __get_vm_area_node+0x353/0x360 [ 329.289156][ T4863] __vmalloc_node_range+0x34b/0x13d0 [ 329.294441][ T4863] ? arch_stack_walk+0xfc/0x150 [ 329.299288][ T4863] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 329.305007][ T4863] ? stack_trace_save+0x98/0xe0 [ 329.309857][ T4863] ? __cfi___vmalloc_node_range+0x10/0x10 [ 329.315571][ T4863] ? __cfi_selinux_capable+0x10/0x10 [ 329.320855][ T4863] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 329.326414][ T4863] __vmalloc+0x79/0x90 [ 329.330475][ T4863] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 329.336014][ T4863] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 329.341388][ T4863] bpf_prog_alloc+0x22/0x1c0 [ 329.345973][ T4863] bpf_prog_load+0x7c6/0x15a0 [ 329.350642][ T4863] ? map_freeze+0x390/0x390 [ 329.355136][ T4863] ? selinux_bpf+0xc7/0xf0 [ 329.359542][ T4863] ? security_bpf+0x93/0xb0 [ 329.364041][ T4863] __sys_bpf+0x504/0x780 [ 329.368281][ T4863] ? bpf_link_show_fdinfo+0x320/0x320 [ 329.373665][ T4863] ? __cfi_ksys_write+0x10/0x10 [ 329.378517][ T4863] ? debug_smp_processor_id+0x17/0x20 [ 329.383884][ T4863] __x64_sys_bpf+0x7c/0x90 [ 329.388317][ T4863] x64_sys_call+0x488/0x9a0 [ 329.392854][ T4863] do_syscall_64+0x4c/0xa0 [ 329.397260][ T4863] ? clear_bhb_loop+0x30/0x80 [ 329.401936][ T4863] ? clear_bhb_loop+0x30/0x80 [ 329.406613][ T4863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.412502][ T4863] RIP: 0033:0x7f0aa7d8eec9 [ 329.416907][ T4863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.436508][ T4863] RSP: 002b:00007f0aa8bec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.444945][ T4863] RAX: ffffffffffffffda RBX: 00007f0aa7fe5fa0 RCX: 00007f0aa7d8eec9 [ 329.452917][ T4863] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 329.460883][ T4863] RBP: 00007f0aa8bec090 R08: 0000000000000000 R09: 0000000000000000 [ 329.468846][ T4863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.476898][ T4863] R13: 00007f0aa7fe6038 R14: 00007f0aa7fe5fa0 R15: 00007fffc7d4f9d8 [ 329.484887][ T4863] [ 329.506315][ T4863] Mem-Info: [ 329.511216][ T4863] active_anon:29625 inactive_anon:585 isolated_anon:0 [ 329.511216][ T4863] active_file:26172 inactive_file:2380 isolated_file:0 [ 329.511216][ T4863] unevictable:0 dirty:371 writeback:0 [ 329.511216][ T4863] slab_reclaimable:10247 slab_unreclaimable:71061 [ 329.511216][ T4863] mapped:36938 shmem:23805 pagetables:665 [ 329.511216][ T4863] sec_pagetables:0 bounce:0 [ 329.511216][ T4863] kernel_misc_reclaimable:0 [ 329.511216][ T4863] free:1489670 free_pcp:3241 free_cma:0 [ 329.585920][ T4863] Node 0 active_anon:118100kB inactive_anon:2340kB active_file:104688kB inactive_file:9520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147452kB dirty:1484kB writeback:2600kB shmem:94120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:7744kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no [ 329.686807][ T4863] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974192kB mlocked:0kB bounce:0kB free_pcp:5660kB local_pcp:5660kB free_cma:0kB [ 329.748791][ T4863] lowmem_reserve[]: 0 3932 3932 3932 [ 329.754140][ T4863] Normal free:2988384kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:109032kB inactive_anon:6420kB active_file:104688kB inactive_file:9520kB unevictable:0kB writepending:1488kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:14812kB local_pcp:2736kB free_cma:0kB [ 329.793231][ T4863] lowmem_reserve[]: 0 0 0 0 [ 329.797863][ T4863] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 329.835667][ T4863] Normal: 18*4kB (UM) 202*8kB (UME) 71*16kB (UM) 269*32kB (UME) 1732*64kB (UME) 1121*128kB (UM) 151*256kB (UME) 29*512kB (UME) 12*1024kB (UME) 3*2048kB (UM) 648*4096kB (UM) = 2991912kB [ 329.859121][ T4863] 46163 total pagecache pages [ 329.878109][ T4863] 1639 pages in swap cache [ 329.889671][ T4863] Free swap = 118056kB [ 329.957257][ T4863] Total swap = 124996kB [ 329.971731][ T4863] 2097051 pages RAM [ 329.975560][ T4863] 0 pages HighMem/MovableOnly [ 329.984023][ T4863] 346839 pages reserved [ 330.154269][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 330.171787][ T4896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1235'. [ 330.183005][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'. [ 331.008688][ T4863] 0 pages cma reserved [ 332.417364][ T335] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 332.418408][ T4911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1239'. [ 332.917345][ T4911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1239'. [ 332.931740][ T4911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1239'. [ 333.119298][ T4923] FAULT_INJECTION: forcing a failure. [ 333.119298][ T4923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.137296][ T4923] CPU: 0 PID: 4923 Comm: syz.0.1244 Not tainted syzkaller #0 [ 333.144707][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 333.154776][ T4923] Call Trace: [ 333.158068][ T4923] [ 333.161016][ T4923] __dump_stack+0x21/0x24 [ 333.165354][ T4923] dump_stack_lvl+0xee/0x150 [ 333.169952][ T4923] ? __cfi_dump_stack_lvl+0x8/0x8 [ 333.174983][ T4923] dump_stack+0x15/0x24 [ 333.179148][ T4923] should_fail_ex+0x3d4/0x520 [ 333.183839][ T4923] should_fail+0xb/0x10 [ 333.188007][ T4923] should_fail_usercopy+0x1a/0x20 [ 333.193050][ T4923] _copy_to_user+0x1e/0x90 [ 333.197480][ T4923] simple_read_from_buffer+0xe9/0x160 [ 333.202866][ T4923] proc_fail_nth_read+0x19a/0x210 [ 333.207902][ T4923] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 333.213478][ T4923] ? security_file_permission+0x94/0xb0 [ 333.219028][ T4923] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 333.224585][ T4923] vfs_read+0x26e/0x8c0 [ 333.228754][ T4923] ? __cfi_vfs_read+0x10/0x10 [ 333.233452][ T4923] ? __kasan_check_write+0x14/0x20 [ 333.238568][ T4923] ? mutex_lock+0x8d/0x1a0 [ 333.242992][ T4923] ? __cfi_mutex_lock+0x10/0x10 [ 333.247861][ T4923] ? __fdget_pos+0x2cd/0x380 [ 333.252468][ T4923] ? ksys_read+0x71/0x240 [ 333.256819][ T4923] ksys_read+0x140/0x240 [ 333.261085][ T4923] ? __cfi_ksys_read+0x10/0x10 [ 333.265863][ T4923] ? debug_smp_processor_id+0x17/0x20 [ 333.271252][ T4923] __x64_sys_read+0x7b/0x90 [ 333.275774][ T4923] x64_sys_call+0x2f/0x9a0 [ 333.280212][ T4923] do_syscall_64+0x4c/0xa0 [ 333.284644][ T4923] ? clear_bhb_loop+0x30/0x80 [ 333.289339][ T4923] ? clear_bhb_loop+0x30/0x80 [ 333.294032][ T4923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.299935][ T4923] RIP: 0033:0x7fcd2c78d8dc [ 333.304351][ T4923] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 333.323962][ T4923] RSP: 002b:00007fcd2d714030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.332388][ T4923] RAX: ffffffffffffffda RBX: 00007fcd2c9e5fa0 RCX: 00007fcd2c78d8dc [ 333.340365][ T4923] RDX: 000000000000000f RSI: 00007fcd2d7140a0 RDI: 0000000000000003 [ 333.348347][ T4923] RBP: 00007fcd2d714090 R08: 0000000000000000 R09: 0000000000000000 [ 333.356320][ T4923] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.364293][ T4923] R13: 00007fcd2c9e6038 R14: 00007fcd2c9e5fa0 R15: 00007ffc191bb1f8 [ 333.372270][ T4923] [ 333.756935][ T28] audit: type=1400 audit(1759626009.107:1007): avc: denied { mount } for pid=4933 comm="syz.0.1246" name="/" dev="ramfs" ino=31567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 333.821540][ T28] audit: type=1400 audit(1759626009.177:1008): avc: denied { mount } for pid=4918 comm="syz.5.1242" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 333.940259][ T28] audit: type=1400 audit(1759626009.297:1009): avc: denied { unmount } for pid=1234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 334.518504][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 334.554657][ T4961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1255'. [ 334.982583][ T4955] overlayfs: failed to verify origin (/syz4, ino=24, err=-116) [ 334.990215][ T4955] overlayfs: failed to verify upper root origin [ 335.670401][ T4973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1257'. [ 337.410649][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 337.420144][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'. [ 337.702831][ T4994] binder: BINDER_SET_CONTEXT_MGR already set [ 337.727563][ T4994] binder: 4991:4994 ioctl 4018620d 2000000002c0 returned -16 [ 341.654592][ T5030] udevd[5030]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 341.676312][ T5027] block device autoloading is deprecated and will be removed. [ 341.723034][ T5027] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 342.449137][ T5027] FAT-fs (loop5): unable to read boot sector [ 342.645506][ T5046] overlayfs: failed to clone upperpath [ 342.668456][ T5046] overlayfs: failed to clone upperpath [ 342.790879][ T5056] device gre1 entered promiscuous mode [ 344.698519][ T5087] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 345.498105][ T5102] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value [ 345.883527][ T5117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1301'. [ 346.044722][ T5122] syz.1.1300[5122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.045101][ T5122] syz.1.1300[5122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.095989][ T5130] incfs: Backing dir is not set, filesystem can't be mounted. [ 347.114981][ T5130] incfs: mount failed -2 [ 347.921114][ T5146] device bridge_slave_1 left promiscuous mode [ 347.931745][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.957609][ T5147] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 348.235210][ T2193] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 348.285209][ T2188] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 348.426185][ T2193] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.445221][ T2193] usb 6-1: config 0 has no interface number 0 [ 348.451383][ T2193] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 348.486980][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.590944][ T2188] usb 3-1: Using ep0 maxpacket: 8 [ 348.596150][ T2193] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.606015][ T2193] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 348.615255][ T2193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.625899][ T2188] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 348.633819][ T2188] usb 3-1: can't read configurations, error -22 [ 348.646050][ T2193] usb 6-1: config 0 descriptor?? [ 348.795153][ T2188] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 348.985112][ T2188] usb 3-1: Using ep0 maxpacket: 8 [ 348.991593][ T2188] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 349.016850][ T2188] usb 3-1: can't read configurations, error -22 [ 349.023210][ T2188] usb usb3-port1: attempt power cycle [ 349.253582][ T2193] uclogic 0003:28BD:0094.0008: pen parameters not found [ 349.260675][ T2193] uclogic 0003:28BD:0094.0008: interface is invalid, ignoring [ 349.445045][ T2188] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 349.459617][ T335] usb 6-1: USB disconnect, device number 6 [ 349.475407][ T2188] usb 3-1: Using ep0 maxpacket: 8 [ 349.481973][ T2188] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 349.495118][ T2188] usb 3-1: can't read configurations, error -22 [ 349.665032][ T2188] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 349.705356][ T2188] usb 3-1: Using ep0 maxpacket: 8 [ 349.711833][ T2188] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 349.719889][ T2188] usb 3-1: can't read configurations, error -22 [ 349.726251][ T2188] usb usb3-port1: unable to enumerate USB device [ 351.477018][ T5194] device wireguard0 entered promiscuous mode [ 352.153724][ T5204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1325'. [ 352.221716][ T2188] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 352.410764][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 352.435745][ T2188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.472853][ T2188] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 352.504257][ T2188] usb 1-1: New USB device found, idVendor=0bb4, idProduct=2875, bcdDevice=10.cf [ 352.530171][ T2188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.542845][ T2188] usb 1-1: Product: syz [ 352.552838][ T2188] usb 1-1: Manufacturer: syz [ 352.557568][ T2188] usb 1-1: SerialNumber: syz [ 352.575749][ T2188] usb 1-1: config 0 descriptor?? [ 352.990323][ T5218] syz.0.1322[5218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.990767][ T5218] syz.0.1322[5218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.285704][ T2193] usb 1-1: USB disconnect, device number 10 [ 355.616135][ T5256] xt_policy: neither incoming nor outgoing policy selected [ 355.627676][ T2188] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 355.637490][ T5256] block device autoloading is deprecated and will be removed. [ 355.645172][ T5256] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 355.654392][ T5256] FAT-fs (loop3): unable to read boot sector [ 355.743064][ T5242] udevd[5242]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 356.124183][ T2188] usb 5-1: Using ep0 maxpacket: 16 [ 356.131106][ T2188] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.558568][ T2188] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.575083][ T2188] usb 5-1: config 0 interface 0 has no altsetting 0 [ 356.628493][ T2188] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 356.637847][ T2188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.657193][ T2188] usb 5-1: config 0 descriptor?? [ 357.075651][ T2188] hid (null): unknown global tag 0xc [ 357.091245][ T2188] hid (null): unknown global tag 0xd [ 357.102162][ T2188] hid (null): unknown global tag 0xe [ 357.113743][ T2188] hid (null): usage index exceeded [ 357.161219][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1349'. [ 357.171721][ T5282] device gretap0 entered promiscuous mode [ 357.177515][ T5282] device macsec0 entered promiscuous mode [ 357.184459][ T5282] device gretap0 left promiscuous mode [ 357.264042][ T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 357.445123][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 357.453317][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 357.462753][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.470832][ T24] usb 1-1: Product: syz [ 357.475101][ T24] usb 1-1: Manufacturer: syz [ 357.479722][ T24] usb 1-1: SerialNumber: syz [ 357.886619][ T5269] xt_hashlimit: size too large, truncated to 1048576 [ 358.324008][ T1331] Bluetooth: hci0: sending frame failed (-49) [ 358.330451][ T1255] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 358.475458][ T353] usb 5-1: USB disconnect, device number 11 [ 358.495447][ T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 358.602341][ T24] usb 1-1: USB disconnect, device number 11 [ 358.618583][ T24] usblp0: removed [ 359.273876][ T28] audit: type=1400 audit(1760152900.612:1010): avc: denied { bind } for pid=5326 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 359.423694][ T28] audit: type=1400 audit(1760152900.612:1011): avc: denied { name_bind } for pid=5326 comm="syz.0.1364" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 359.479750][ T28] audit: type=1400 audit(1760152900.612:1012): avc: denied { node_bind } for pid=5326 comm="syz.0.1364" saddr=::ffff:224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 360.084932][ T5351] netlink: 'syz.0.1370': attribute type 12 has an invalid length. [ 360.246496][ T28] audit: type=1400 audit(1760152901.613:1013): avc: denied { getopt } for pid=5346 comm="syz.2.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 360.657341][ T5368] xt_policy: neither incoming nor outgoing policy selected [ 360.674287][ T5368] block device autoloading is deprecated and will be removed. [ 360.681949][ T5368] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 360.691144][ T5368] FAT-fs (loop3): unable to read boot sector [ 360.699885][ T5028] udevd[5028]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 360.739273][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 362.355402][ T24] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.980007][ T28] audit: type=1326 audit(1760152906.343:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c438eec9 code=0x7ffc0000 [ 364.992289][ T24] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.004061][ T28] audit: type=1326 audit(1760152906.343:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c438eec9 code=0x7ffc0000 [ 365.039340][ T28] audit: type=1326 audit(1760152906.343:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f39c438eec9 code=0x7ffc0000 [ 365.080554][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 365.096617][ T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=1a55, bcdDevice= 0.00 [ 365.179534][ T28] audit: type=1326 audit(1760152906.343:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c438eec9 code=0x7ffc0000 [ 365.192930][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.256207][ T28] audit: type=1326 audit(1760152906.343:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c438eec9 code=0x7ffc0000 [ 365.296409][ T24] usb 3-1: config 0 descriptor?? [ 365.310411][ T28] audit: type=1326 audit(1760152906.383:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39c438eec9 code=0x7ffc0000 [ 365.322909][ T24] usb 3-1: can't set config #0, error -71 [ 365.512342][ T24] usb 3-1: USB disconnect, device number 13 [ 365.589492][ T5425] 8021q: VLANs not supported on ip_vti0 [ 365.634103][ T28] audit: type=1326 audit(1760152906.383:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c438eec9 code=0x7ffc0000 [ 365.657719][ T28] audit: type=1326 audit(1760152906.383:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c438eec9 code=0x7ffc0000 [ 365.681272][ T28] audit: type=1326 audit(1760152906.403:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f39c438eec9 code=0x7ffc0000 [ 365.704747][ T28] audit: type=1326 audit(1760152906.403:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c438eec9 code=0x7ffc0000 [ 365.731494][ T5431] tipc: Enabling of bearer rejected, already enabled [ 365.793197][ T5430] xt_NFQUEUE: number of total queues is 0 [ 366.054724][ T5436] tmpfs: Unknown parameter 'inode' [ 366.252752][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 366.391057][ T5454] device veth5 entered promiscuous mode [ 366.713851][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.726112][ T5453] SELinux: failed to load policy [ 366.729182][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.747035][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.760014][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.792738][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.804403][ T24] usb 1-1: config 0 descriptor?? [ 367.025134][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1401'. [ 367.035971][ T5462] device gretap0 entered promiscuous mode [ 367.041753][ T5462] device macsec0 entered promiscuous mode [ 367.048697][ T5462] device gretap0 left promiscuous mode [ 367.533825][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 367.585471][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 367.620180][ T24] usb 1-1: USB disconnect, device number 12 [ 468.238829][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 468.245931][ C1] (detected by 1, t=10002 jiffies, g=27033, q=199 ncpus=2) [ 468.253221][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294984051-4294974049), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 468.266600][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g27033 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 468.277806][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 468.287777][ C1] rcu: RCU grace-period kthread stack dump: [ 468.293666][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 468.304444][ C1] Call Trace: [ 468.307721][ C1] [ 468.310704][ C1] __schedule+0xb87/0x14e0 [ 468.315135][ C1] ? release_firmware_map_entry+0x194/0x194 [ 468.321028][ C1] ? __mod_timer+0x7ae/0xb30 [ 468.325623][ C1] schedule+0xbd/0x170 [ 468.329716][ C1] schedule_timeout+0x12c/0x2e0 [ 468.334582][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 468.339961][ C1] ? preempt_schedule+0xa7/0xb0 [ 468.344818][ C1] ? __cfi_process_timeout+0x10/0x10 [ 468.350109][ C1] ? prepare_to_swait_event+0x308/0x320 [ 468.355674][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 468.360532][ C1] ? rcu_gp_init+0xf10/0xf10 [ 468.365126][ C1] rcu_gp_kthread+0x95/0x370 [ 468.369719][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 468.374934][ C1] ? __kasan_check_read+0x11/0x20 [ 468.379961][ C1] ? __kthread_parkme+0x142/0x180 [ 468.384991][ C1] kthread+0x281/0x320 [ 468.389067][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 468.394280][ C1] ? __cfi_kthread+0x10/0x10 [ 468.398882][ C1] ret_from_fork+0x1f/0x30 [ 468.403312][ C1] [ 468.406333][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 468.412652][ C1] CPU: 1 PID: 5483 Comm: syz.1.1407 Not tainted syzkaller #0 [ 468.420022][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.430079][ C1] RIP: 0010:should_fail_ex+0x51/0x520 [ 468.435466][ C1] Code: 1d a1 7b 7d a9 00 01 ff 00 0f 84 fa 00 00 00 4c 89 f3 48 c1 eb 03 80 3c 13 00 74 0e 4c 89 f7 49 89 d4 e8 92 ba 2d ff 4c 89 e2 <49> 83 3e 00 0f 84 20 01 00 00 4d 8d 66 20 4c 89 e0 48 c1 e8 03 0f [ 468.455076][ C1] RSP: 0018:ffffc90003ee7a88 EFLAGS: 00000246 [ 468.461148][ C1] RAX: 0000000000000000 RBX: 1ffffffff0e38de4 RCX: ffff888116735100 [ 468.469124][ C1] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff871c6f20 [ 468.477100][ C1] RBP: ffffc90003ee7ad0 R08: dffffc0000000000 R09: fffff520007dcf88 [ 468.485095][ C1] R10: fffff520007dcf88 R11: 1ffff920007dcf82 R12: ffff888116735c0c [ 468.493067][ C1] R13: 0000000000000000 R14: ffffffff871c6f20 R15: 0000000000000001 [ 468.501043][ C1] FS: 00007f39c52fc6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 468.509977][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.516568][ C1] CR2: 0000000000000000 CR3: 0000000115978000 CR4: 00000000003526a0 [ 468.524542][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 468.532510][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 468.540487][ C1] Call Trace: [ 468.543763][ C1] [ 468.546698][ C1] ? __kasan_check_write+0x14/0x20 [ 468.551813][ C1] should_fail+0xb/0x10 [ 468.555980][ C1] should_fail_usercopy+0x1a/0x20 [ 468.561008][ C1] fpu__restore_sig+0x194/0xf40 [ 468.565867][ C1] ? irqentry_exit+0x37/0x40 [ 468.570465][ C1] ? sysvec_irq_work+0x61/0xc0 [ 468.575233][ C1] ? __cfi_fpu__restore_sig+0x10/0x10 [ 468.580615][ C1] ? __kasan_check_write+0x14/0x20 [ 468.585730][ C1] ? recalc_sigpending+0x180/0x1c0 [ 468.590855][ C1] ? __kasan_check_write+0x14/0x20 [ 468.595975][ C1] __ia32_sys_rt_sigreturn+0x5d0/0x6c0 [ 468.601441][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 468.607357][ C1] ? __bpf_trace_sys_enter+0x62/0x70 [ 468.612666][ C1] ? trace_sys_enter+0x3d/0x50 [ 468.617437][ C1] x64_sys_call+0x832/0x9a0 [ 468.621953][ C1] do_syscall_64+0x4c/0xa0 [ 468.626381][ C1] ? clear_bhb_loop+0x30/0x80 [ 468.631068][ C1] ? clear_bhb_loop+0x30/0x80 [ 468.635755][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.641657][ C1] RIP: 0033:0x7f39c438eec9 [ 468.646083][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.665722][ C1] RSP: 002b:00007f39c52fc0e8 EFLAGS: 00000246 [ 468.671806][ C1] RAX: fffffffffffffffc RBX: 00007f39c45e5fa8 RCX: 00007f39c438eec9 [ 468.679779][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f39c45e5fa8 [ 468.687753][ C1] RBP: 00007f39c45e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 468.695749][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.703725][ C1] R13: 00007f39c45e6038 R14: 00007ffe088ba200 R15: 00007ffe088ba2e8 [ 468.711710][ C1] [ 572.035136][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 203s! [ 572.044080][ C0] Showing busy workqueues and worker pools: [ 572.049980][ C0] workqueue events: flags=0x0 [ 572.054666][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 572.054707][ C0] pending: psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker [ 572.054764][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 572.054797][ C0] pending: vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 572.054871][ C0] workqueue events_long: flags=0x0 [ 572.093454][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 572.093497][ C0] pending: br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 572.093647][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 572.093681][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work [ 572.093743][ C0] workqueue events_unbound: flags=0x2 [ 572.137054][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 572.137101][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 572.137149][ C0] workqueue events_power_efficient: flags=0x80 [ 572.158119][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 572.158176][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, check_lifetime [ 572.158290][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 572.158322][ C0] pending: gc_worker, reg_check_chans_work [ 572.158368][ C0] workqueue rcu_gp: flags=0x8 [ 572.198760][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.198799][ C0] pending: srcu_invoke_callbacks [ 572.198828][ C0] workqueue mm_percpu_wq: flags=0x8 [ 572.216941][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.216978][ C0] pending: vmstat_update [ 572.217007][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.217038][ C0] pending: vmstat_update [ 572.217064][ C0] workqueue writeback: flags=0x4a [ 572.246507][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.246544][ C0] pending: wb_workfn [ 572.246569][ C0] workqueue kblockd: flags=0x18 [ 572.262834][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 572.262870][ C0] pending: blk_mq_timeout_work [ 572.262904][ C0] workqueue dm_bufio_cache: flags=0x8 [ 572.281177][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.281216][ C0] pending: work_fn [ 572.281249][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 572.298655][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 572.298691][ C0] pending: addrconf_verify_work [ 572.298712][ C0] inactive: addrconf_verify_work [ 572.298731][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 572.298762][ C0] pending: addrconf_verify_work [ 572.298781][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 572.298828][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.343486][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.343523][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.343567][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.364789][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.364824][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.364870][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.386143][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.386179][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.386222][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.407462][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.407497][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.407542][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.428769][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.428803][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.428846][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.450066][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.450098][ C0] pending: wg_packet_handshake_send_worker [ 572.450125][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.468476][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.468513][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.468555][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.489788][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.489822][ C0] pending: wg_packet_handshake_send_worker [ 572.489848][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.508203][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.508238][ C0] pending: wg_packet_handshake_send_worker [ 572.508268][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.526670][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.526702][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.526742][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.547965][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.547996][ C0] pending: wg_packet_handshake_send_worker [ 572.548022][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.566395][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.566426][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker