last executing test programs: 49.545344715s ago: executing program 3 (id=90): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xff}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) 49.544819644s ago: executing program 3 (id=91): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f00000003c0)=""/29, 0x1d, 0x0, &(0x7f0000000400)=""/148, 0x94}}, 0x10) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @generic={0x6, 0xb, 0x4, 0xb, 0x8}]}, &(0x7f00000002c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x5}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0x1, r3], &(0x7f00000005c0), 0x10, 0x5}, 0x94) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 49.184150929s ago: executing program 3 (id=96): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x14028, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000080)="61df71e82b3300c81bce5e961ff5", 0x0, 0xee1f, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1301009, &(0x7f0000000140)={[{@index_off}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r4) 49.047776142s ago: executing program 3 (id=97): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {}]}, 0x1, 0x515, &(0x7f00000010c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@noacl}, {@stripe={'stripe', 0x3d, 0x80}}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c69666163650000090002"], 0x60}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f000019c000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00003e9000/0x3000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e00000"], 0x120}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x58}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r9, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) execveat(r0, &(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)={[&(0x7f0000000240)='\x00', &(0x7f0000000280)='&+}\':[].\x00']}, &(0x7f0000000640)={[&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)='syzkaller\x00', &(0x7f0000000380)='ethtool\x00', &(0x7f00000004c0)='./\x00', &(0x7f0000000500)=')&\x00', &(0x7f0000000600)='stripe']}, 0x1000) 47.112880488s ago: executing program 3 (id=98): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x54}}, 0x24008844) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x2400c000) 46.760823511s ago: executing program 3 (id=101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f0000009700000050"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000019240)={0xe0003, 0x0, {[0x8, 0x2, 0x81, 0xffffffffefffff15, 0x3, 0x5, 0x3, 0xb37f]}}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000019200)=@x86={0x8c, 0xff, 0xf9, 0x0, 0x3, 0x5, 0x6, 0xe6, 0x8, 0x9, 0xa, 0x1, 0x0, 0x7, 0x400, 0x1, 0x9, 0xa, 0x81, '\x00', 0x4, 0xe}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) (async) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) 46.757400042s ago: executing program 32 (id=101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f0000009700000050"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000019240)={0xe0003, 0x0, {[0x8, 0x2, 0x81, 0xffffffffefffff15, 0x3, 0x5, 0x3, 0xb37f]}}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000019200)=@x86={0x8c, 0xff, 0xf9, 0x0, 0x3, 0x5, 0x6, 0xe6, 0x8, 0x9, 0xa, 0x1, 0x0, 0x7, 0x400, 0x1, 0x9, 0xa, 0x81, '\x00', 0x4, 0xe}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) (async) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) 11.204808654s ago: executing program 2 (id=278): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) r1 = syz_usb_connect(0x3, 0x9d1, &(0x7f00000011c0)={{0x12, 0x1, 0x0, 0x86, 0x35, 0xd1, 0x40, 0x4ca, 0x3004, 0x2533, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9bf, 0x2, 0x2, 0xa, 0x0, 0x0, [{{0x9, 0x4, 0xb7, 0xd, 0x9, 0x27, 0xa7, 0xd9, 0x9, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x100, 0x0, 0x2, "1f90d45557"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x1, 0xd9, "1db8d50de4a164"}]}], [{{0x9, 0x5, 0xa, 0x3, 0x40, 0x9, 0x7, 0x3}}, {{0x9, 0x5, 0x84, 0x4, 0x20, 0x7, 0x6, 0x5, [@generic={0x32, 0x8, "a8cd2574db8f0d2ff621935fc86e18983cf5e237281e73b3c8e729a49a7f18837e4b778bf0652174571fe529630a55b9"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x4, 0x8, 0xac, [@uac_iso={0x7, 0x25, 0x1, 0xf37e3a0eac0e9d21, 0x4, 0xfffd}, @generic={0xe4, 0x3, "a8780a4e98c4bfe83c0f800b312b6713f31ae34cbc99f145aacda1fb35e1c6f0d59ca3a42ffc99c3edc057a642c19015f171f7ea7c9faa577462286b2e717718ffd483ef3790a9dc2227778504636e193325522e23219503d028321be37fdf7ccf2a975704897eb7abad4fb163ddd877628ad0774ff610ca659d16ca6dc958d128554534139b58a90b176d0ffd2e9198a501686810ef7669169583d24928cc2cb88e6e584fc8596177cac1fe8365645572b3861806c4ded465084c8f5e061b6000b91107bab487846d3746bdbf445506fa82b9ed8a7bc0280f1d3af206ed4ec987bb"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0xff, 0x81, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xca}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x1, 0x9, 0x29, [@generic={0x98, 0x23, "bc7bf2cdaffb7f882bcfc97c79baa4485a0e394c8ec5b41e7f8effec3a1febae6fb14d6c8fae85167a27d19d0ed3aa14f00c6514a2e9944067e564e41e127861fdab9c4b4a77a60da900653414afce78cafce2023c0d2e3e247925372537c16128d5440a86f57e03936fc865e55c471d91cf611a7f6b57739ec955c59bd57def5a0b2e217ffc10c155d9ce30a2b2ca479988f66ed22e"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x7, 0xf, 0x7}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x9, 0xf, 0x10}}, {{0x9, 0x5, 0x83, 0x10, 0x200, 0xff, 0xad, 0x40, [@generic={0xc8, 0x21, "f61b010a13b78d97388f083700f4e38cadbf2ba6cad23dd36f82bf7ac3e0b22af5875114e04a06539b456e2169922e24c51b0bda8805bef95df668d214d55b37124ce5ede22df5269acd852f04c9a32ee2f4cbf81f049740dd56713f5da517a207ecf87fdace893ea12b5345d3a63d5cbfd2ed081e582a49d0f58a68371e1d6cfed2348e1fca7a2908272e64d7fcc23a57ccb00299e6e53b454101a8a54a73a0b7ceab39950f8e8fcf83022ea2a97cf4dcd6f6a48facaee3bdb8b6dbaa79a7729612764159c9"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x2, 0x0, 0x0, [@generic={0x62, 0x21, "1386f50f5f7bd39407ee86ea4e6994ed464367f0613292217b6aaac5e42e5bf06774fe67a8b837d96f06e3776d847708625f5020f062b78b2dfe843d7402f611dbe3534ceff8ce8181efb68dff0a2b57ed13f27f619f2f957c8e00a1de7305a7"}]}}]}}, {{0x9, 0x4, 0x62, 0x4, 0x10, 0xb8, 0xd5, 0xa2, 0xf7, [], [{{0x9, 0x5, 0xe, 0x8, 0x8, 0xc, 0x4, 0x7, [@generic={0x6c, 0xc, "24e3e27ae770b0de531dc141be8938daee4c563196cdfb7dd1da69422036b1279498ebab90b321c89204d5f3137a69bb26e0cb823502e0a4f0441b040c9263f3ca938705c4116da558be0e1706575b820ba1454f2561f01ea562d9c5d75fa826f89190deaf99f146a2aa"}, @generic={0xf5, 0x10, "e8366e7d4d8e2cb093211253b61452781b3db776790fd21e78ec9db090b464ed43287ae0a449da254941064a172b4f380394156153f348321ec0839b33bd6acfd99c1807f61d68efb78137dcd3fedbd56cc18cb365315d9bb0918a0224095e62dd7f14e0fbfc405c91558f898324b7f577061a192fd8dc8f48286104b7fd9d42900a3107a2e3cdd7828139ce1dd8a950dfc2ba89a18b7e90f2bd1754c33cbdb611063f027b8b6759dcbb9fb4f20befc3a88d43e3b3e85ffecf8fdceebbe12b5d3b1a8e847e1ae8979c15d16aeba918ccf76d8a21fb5f7ebece59a538e6a8c671d1e4c596ff76c3b0e857e8fbe1c4b92abfb14d"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x5, 0x2, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x3, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x401}, @generic={0xd7, 0x6, "547578197b1d56ebd30c8e8c94b7df181c0df931a1fe190860ed71833148ca072deb337aaf6a73af139db49af189f6d5f2f3863bf08359eabea6e02b9c4cf9c98ef12cdcefcfe60cfe919c5d5397ab88b125a75f55cebd09b64517e6c4e95e658d1b0dd078d261b27116a195aae7dfd00ad424dbed4c8d9540a45afe6c0062a70c1abe14d6e7a6bb11ab8ba3f027443ea28b0a8ea9e18391cb87835f9560e8742f505cd6b091f9bd01bf414be83bddadc18c0a8ba8ebb8547575539485f2a6e120d6cf100f5b557f49756859a6b3fd397f2622a5ea"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xe, 0x89, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1e, 0x850a}, @generic={0x1d, 0x4, "7b6e09a959cdf0dd19ae38f80fe81f4511a36619d86c9756ef1a22"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xfd, 0x4, 0x4, [@generic={0xc7, 0x9, "e1ba4065e083e44760f1d9cf7b131b46bb6e8f7739f1e6c4ffd4ad069d46203a398bf7e23d395e1417a2743d453b72e2f5143286b96c606e903ce4b790c290ec2b30d2b48cdc01c0eae9871aeb198949f59f294d1eb3128b34ae555be2179ab79107f9adb5724b835f8c3dd13ea5523271fe4ac19daf2abbd000dcac7140925bd32bc593b89d9e383231d56629368fecf5615180e1042f69fd712c7394cb4e0d0ed34734aed3ed37872e61d89a98e6849cfd4e914a23c75021fff676c4047ece95c9929ccc"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x80, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x7}]}}, {{0x9, 0x5, 0xd, 0xc, 0x448, 0x0, 0xed, 0x1}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x0, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x4cf}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x0, 0xfc, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x0, 0x20, 0x7, [@generic={0xa5, 0x8, "a810a688f77d02773cc574937b686be59ea564daa1f722d5c32715888d2022b9b6e9f9f1630341f3e68d17c8aeb46bc3f989c9d212e65c2f958cdaaa5296acf09978951c373c5bc68fe11c226e8574228d5480dea962c34b86348ebc278db6a5b12327637d1651274cd10328777d6e7a7148f71bb909e2e95037cc936f32aa860c8f64199b936e9b1194229e4f44ece3760c2eeece3b084ce6279576dd5e57cd6dd81e"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x8, 0x1, 0xc1}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x0, 0x3, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xff}]}}, {{0x9, 0x5, 0xf, 0x12, 0x3ff, 0x9c, 0x10, 0xc, [@generic={0xdc, 0x5, "43b756e71dabffdc75f9b51cfbe0a7c4797bfd9c8ac0f2a59a611dca3bf0184dc9db8df47b625dd08daa2e4a22f4aa779afaaf879fbb409a1cf25856113fbfcb69f1471163f7021292dd5ad3b9683ad10087c6acda4123b41f0f386f98dc1d19053013492f8a8b6a4a532ef55da19aafb3a122b870cec69350dd079c7405a33491d8e7c15d25a7fb8eae470fc4e61a975b9e6cdb09c93f607b70cbe0468b5782522507d21f68e96c3ec1163e6121f3559607705dc897768fcec5f39b1b53d666c4b24c81927650ed121d733cebcdd9a59a3c4b0b0571f297453e"}, @generic={0x32, 0x30, "dc37fe2d9c71287b5fdab980d63c77c8c32878c28a7e3d37c7bd312441331ebfa469d23f715b2253fb5259a2e81c3188"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x9, 0x9, 0xfc, [@generic={0x3, 0xf, "9a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x8ea}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0xff, [@generic={0xbc, 0x21, "811fc164904b21bc42063b54033c62a4e500a6ebb9f287aa9d06d68f982df3e2b643bdec223ee80434bc2ac84d31faaa6c9b21a2345934e0fc231c0b8f6b8a29db406871c2866e0a49d2f1737275a2cb2dd432023f7fd8d235ec681536e5eac3b96155cdf60a9ab9698492d87ded12dbdfaa9f8aa322d6a2b527fb16e65128c8d6e34ddb54ce0f8a052d54d732d454693cbd19f5272d69e8cb9c9c44664b271a7c147c2710f718126d5213c4c7ab28dc959a8bf06dcc110f949e"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x5, 0x4, 0x9}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x0, 0x6, 0x8, 0x7}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x8, &(0x7f00000000c0)=@string={0x8, 0x3, "09fa1fe8cb42"}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x40, 0x21, 0xa2, {0xa2, 0x23, "89fc2526f43e6fcbe0966ceb02500ae3db34febf4e5f65f34553a697f9b5dd57d09e0a0c723a102c0142bf3905c67fd3c94937a67410b0b9f6498ebc3273990ac8253be78e663826448d5c18de6882a6bff02be22574fca9884764005290eade15446fcea96417fb62f6eb4ec1a2195dd8d96dcc8df11b354c2f1295535d458eb9ff4900b591555e795885b75ff166a2605e960fa5b098be9cd4cbf867ee4947"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f00000004c0)={0x0, 0xf, 0x103, {0x5, 0xf, 0x103, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "dbb859135bc6985b9cec1e354ada299d"}, @generic={0xb8, 0x10, 0x1, "9d8f43cf568d8d84fb0286f9cf6ec1c6ed0221552403333eadd9aa69197949064fec6e14a4c167fa57a919f8ac3889810d9bc757647801a8988cdd19eb176a3089e045873c538443430577621ef50a87003602401d44c14a4a57d9ae8d22498c140cb436fd19352e562d2e7c17675646fc9baaab7f7ab5022a2d1faeb69086e1bcb01429dcc7b54879d0939bf4510ddb8d1389d41ec86224841606701fc593d6d08b7c6b2a478707f63db3ade9ecd56961f08dd0ee"}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x9, 0x1e000, 0x101, [0x30, 0xf, 0xf]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "24b0f70bffa7c4079a49c6013994cca4"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x0, 0x61, '\'F&0', "8dbc5a37"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x15, 0x80, 0x9, 0x5, 0x1, 0x4, 0x6}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000680)={0x20, 0x13, 0xe1, "1c2de120fa6b95bfad5fcbf2f131b2aa950e2c9d023fd044373c499a46bd5eebe355f0a7e6915f608785a6115d215e198d7c8151b3d9ecdc3db8405e7c8bbdf8dddd1d6cb052c62173e47bfab6736c2ad08569d43cc8519379304de0af2cac0f6f2770619937c7818dfd54191e502c1e986b1821e0cc1f6f85bad3943f674d69b4dc4ce190016dcd272de2f1ee071fb30dac0c0edb7104b55a944632dbcf2ab1e0de772c0d744727f21f5fd671df0aa053040a9554480f02ee2622032489505c55422c0e39c8798ea001a5d1b66c89289176e32011938a65d3a32d724a7923659c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xcd}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1e0, 0x40}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xfa}, &(0x7f0000000880)={0x40, 0xb, 0x2, "35f5"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000980)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @random="649f9228c851"}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "bea5"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xc}}) syz_usb_disconnect(r0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'batadv0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000080)) syz_usb_disconnect(r3) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000900)="49b6bfa140", 0x5}, {&(0x7f00000001c0)}], 0x2) 10.640717258s ago: executing program 4 (id=283): r0 = io_uring_setup(0x1694, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000e9070000f00a00000004000006040000000100000008000000070002000000fbffffff010000004a0900000b049f000000000e04000000180000000c0000000400000481ac00000000000003000002ffffff7f0400000005000000040000001000000005000000020000000100000005000000ffffffff010000000300000f0100000004000000920300000000001802000000050000000a0000000400000000000000710d00006f0200000000005f00612e00000000000000"], &(0x7f0000000000)=""/7, 0xcc, 0x7, 0x0, 0x27, 0x10000}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x21, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000009000000000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000085100000f8ffffff18100000", @ANYRESDEC=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007027c262927ffffb703000008000000b7998bdb41a2b3a2bd1e0400000200000085000000820000009500599c5cc30000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {0xff}, 0x6, 0x0, 0x6, 0x20}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r6 = socket$netlink(0x10, 0x3, 0x7) close_range(r6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4dcd6fe000000000433ae700"/34], 0x50) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) socket$inet6(0xa, 0x3, 0x8) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/125, 0x7d) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 8.555328079s ago: executing program 4 (id=286): r0 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f00000000c0)="97bbd15df8ce1952ef160ce522c7a51bc3feab90133db67691d8b3caee5df83871fb852d9135cea862096d36df692669"}}, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0xfffffffffffffc01, 0x0) tee(r2, r5, 0x60000000000, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xd, 0x8000, 0x8, 0x40020, r9, 0xfd, '\x00', r10, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0xc}, 0x50) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000013a000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="64660f388110651bfe6466d19b0000640f1f4000f30fc7737e66b9260900000f32baa000b8c905ef0f350f01cbf4", 0x2e}], 0x1, 0x69, &(0x7f0000000140)=[@cr0={0x0, 0x10}, @dstype3={0x7, 0xf}], 0x2) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 7.372757572s ago: executing program 4 (id=289): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xc4fffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x0, &(0x7f0000000080)) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000003c0)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x10, 0xf}, {0xfff2, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @lirc_mode2, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r8}, 0x18) socket$inet6(0xa, 0x80800, 0xe) 6.848824132s ago: executing program 5 (id=293): socket$inet6(0xa, 0x3, 0x8000000003c) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1008004, &(0x7f00000002c0)={[{@redirect_dir_nofollow}, {@metacopy_on}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1008004, &(0x7f00000002c0)={[{@redirect_dir_nofollow}, {@metacopy_on}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000340)={0x4, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0), 0x0, 0x20008800) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea5, 0x0, @mcast1, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2c10", 0x2}, {&(0x7f0000000040)="2ea04ec3defc2e12660d2b2d4b55197426ca110396f4a5e181b07d2b4730dbef06724a507318976abfaeb746b550f5c3890ae27fb8ee6d621dc10e25b045f7c578ee11a00b712a6321", 0x49}, {&(0x7f0000000140)="af2613c87c8355fe826d1da1d5f519723d17c5b82d29dec057550897699006379472f1774db562dc94bbc832939dec9ef6e0a065a5a2378cbeaad08ed423844b69d7d5a9260e", 0x46}], 0x3, 0x0, 0x0, 0x2c}, 0x200440c0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x517, &(0x7f0000001180)="$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") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x517, &(0x7f0000001180)="$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") umount2(&(0x7f0000000000)='./file1\x00', 0x1) 6.739160673s ago: executing program 1 (id=295): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) syz_clone(0x90800000, &(0x7f0000000000)="aebdc421c6318f465c6f649652a1", 0xe, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)="30f4c2c0516f765008a834474979d1cce800e1546167ff29f9933fe4b3094c289233f9d54e08e9a9d2adaa58f45d7310abdd96252e36334ece33948376be8881cbdd0467da365b198b77830f4e8890c71359a6e91dd5485e2e4a1ed342e1cbb4c6a05296740f46e11d6246932aface280332d553ed58a69a8c96efeac8a3cb043e8f897e2b3c2e27589ef3c707c53eede0383a1e8496852261b865343bde3af36aebb2c32fd868ad8a65356ab135f355ae") fchdir(r5) open(&(0x7f00000000c0)='.\x00', 0x0, 0xc8) close_range(r1, 0xffffffffffffffff, 0x0) 6.628868854s ago: executing program 1 (id=296): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000008d188212d8593c990511fe3816a2b1d72f9b15a04a9cc4e19e25462acb118b8fb6735aeaad2ed1ccffd068d3b2046010b3d957efd5ab602ee34472dd086aff1993325ef5cfbf85207ba895d8672dc545c6073ac92e6f4989d10e8301b23a9ac21a9c1547dec19298518a24413d8ed", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rpcb_setport\x00', r6, 0x0, 0x6}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_io_uring_setup(0x5c11, &(0x7f0000000500)={0x0, 0x72de, 0x400, 0x0, 0x16c}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r0, 0x0, 0x0) fchdir(r8) setresuid(0x0, 0xee00, 0x0) 6.628386364s ago: executing program 1 (id=297): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {'\x00', "0040000937e31abced6b7d8f00"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r2, &(0x7f0000000080)={0x18, 0x0, r3, {0x7}}, 0x18) chmod(&(0x7f0000000080)='./file0\x00', 0x104) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (async) userfaultfd(0x80001) (async) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {'\x00', "0040000937e31abced6b7d8f00"}}}}}}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_LSEEK(r2, &(0x7f0000000080)={0x18, 0x0, r3, {0x7}}, 0x18) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x104) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x9) (async) 6.329073012s ago: executing program 5 (id=299): mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x88fd537e5c114b68, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) close_range(r1, r3, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2762], &(0x7f00000001c0)='GPL\x00'}, 0x48) 6.152875109s ago: executing program 2 (id=300): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = creat(0x0, 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8080108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x49}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7df}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x771d}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8b}, {0x6, 0x11, 0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48800}, 0x40001) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 6.010143823s ago: executing program 1 (id=301): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x88, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) getresgid(&(0x7f0000000040)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_open_dev$usbfs(&(0x7f0000000200), 0x9, 0x129000) setresgid(r1, r4, 0xee01) read$FUSE(r0, &(0x7f0000001e00)={0x2020}, 0x2020) 5.540076278s ago: executing program 1 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r1, &(0x7f00000001c0)=""/36, 0x24) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f0000000180)={&(0x7f0000000080)="45d9c792f733b384d633727af09f8515619cae0655fbd2e5", 0x18, &(0x7f0000000100)=""/34, 0x22}) getdents64(r1, 0xffffffffffffffff, 0x43) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000140)=0x400030, 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') bind$inet(r4, &(0x7f0000000340)={0x2, 0xc624, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) dup2(r2, r4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100, 0x1}) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.929892716s ago: executing program 5 (id=304): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 4.929085927s ago: executing program 4 (id=305): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000880)={0x30, 0x5, 0x0, {0x0, 0x3, 0x401}}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001080)={@map=r6, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r6, &(0x7f0000000280)="4345f28cbf0beceb8a41420070431dbbe337172b5ff90ec6f06ed3027f052baee9d822f9a8e920a4335300f7a25fb8c54b56b18a31b5732d07a7c060f4c0e58a15f04216dbc8a5456d3e16a8f27eb04512802eb7e66b9831e3c1b45fd1b3846a46d9452d3ca0c6da44d6c75acfede295bcd5490f86d7e763b030b316d27474c1e0c7cf624d985de079e6a8fd18d75218c63791", &(0x7f00000001c0)=""/125, 0x4}, 0x20) r7 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) (async) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000840)={0x3, 0xffffffffffffffff, 0x1}) (async) r9 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000004c0)=[@in_dx={0x69, 0x20, {0x3be1, 0x4}}, @nested_load_code={0x12e, 0x61, {0x3, "0f5ce8c443a5406e0000c462f8f589f8c495dcc40108124574400f217565f3460f1efdc4c28dbff366470f3a443cf700c744240099000000c744240200000000ff1c2466b805018ec8"}}, @set_irq_handler={0xc8, 0x20, {0xf4, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x73, 0x3, 0xff, 0xa}}, @wr_drn={0x68, 0x20, {0x7, 0xda}}, @code={0xa, 0x50, {"360f7863004573003e650fc7710066ba430066b8640066ef42dbf40f3566ba420066edc4a2fd17d8c74424007f000000c7442402f105f90fff1c24470f01cb"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x9, @host_nat=0x6c02, 0xfffffffffffffffa, 0x5, 0x7d6}}, @nested_vmresume={0x130, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0x2764, 0x1, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x275, 0x2}}, @wrmsr={0x65, 0x20, {0x34c, 0x81}}, @set_irq_handler={0xc8, 0x20, {0xab, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x401e, 0x4, 0xffffffffffffbcdb, 0xd}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_load_code={0x12e, 0x50, {0x0, "b805000000b9000000000f01d9b9390a0000b800900000ba000000000f30c441bd6426d916450f323ef30f090f08400fa8668fc5430fb51e"}}, @cpuid={0x64, 0x18, {0x5, 0x5}}, @cpuid={0x64, 0x18, {0xe7e, 0x7f}}, @wr_crn={0x67, 0x20, {0x3}}, @nested_load_code={0x12e, 0x4c, {0x0, "0f07c4219df681270a00000f23d68f6978d7062e460f01cab805000000b9815900000f01c1c482c9bdc7c4c17950c10f01cb0f07"}}], 0x375}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0xb, 0xfffffff5, 0x3, 0x10001, 0x9, 0x2, 0x2}]}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) (async) r10 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) (async) creat(&(0x7f0000000180)='./file0\x00', 0x44) 4.927361417s ago: executing program 0 (id=306): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = creat(0x0, 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8080108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x49}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7df}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x771d}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8b}, {0x6, 0x11, 0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48800}, 0x40001) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 4.926616917s ago: executing program 4 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/70, 0x46, 0x2b) pread64(r1, &(0x7f0000000140)=""/101, 0x65, 0x1e69) waitid(0x0, r0, 0x0, 0x8, &(0x7f0000000c40)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket(0x10, 0x80002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x310, 0xffffffff, 0x110, 0x1a8, 0x1a8, 0x110, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0xb816d7efaabb7516]}, {0x0, [0x0, 0x2]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xffffff00, 'pimreg1\x00', 'veth0_to_bridge\x00', {}, {0x80}, 0x73, 0x0, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000200)={{}, {0x0, 0xfffffffc}}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.922006048s ago: executing program 2 (id=308): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) io_uring_enter(r0, 0x6c7f, 0x0, 0x0, 0x0, 0x0) 4.227046324s ago: executing program 2 (id=309): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) time(0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRESOCT=r4, @ANYRES8=r1, @ANYBLOB="fc5142b649f3ad24d460a2de0b60f6960a21c26f02fa0c8f3cf1e5d16a2bfeeae3e758fb2db6600a85d61ce364d616333c124d87b72a100dbd36d5004cd837851dd319f2325bebfa4f6851ad813b1b29b03412868590a074452350783a84cf9793b3ce2efb52f6f17b04f62ea5f8314f92a41e8e0f95e49eccf10c0bd1ea27ef4566e810954c7cc2772978a0d37e4c06a1fea4cdbff2c26811f3aa911a476a2ebbc1196a10159386b634c9843a0671242e8651bca4495913f72fbc3f9cd66083a6287730601bef3cd847f17bf97d1e67", @ANYRESHEX=r0, @ANYRESOCT=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x27}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='afs_cm_no_server\x00', r5, 0x0, 0x1}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.226221484s ago: executing program 5 (id=310): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x59, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/265, 0x109}, {&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/119, 0x77}], 0x4, &(0x7f0000000380)=""/135, 0x87}, 0x61) connect$netlink(r1, &(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4}, 0xc) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000ffdd00000000", @ANYRES32=0x0, @ANYBLOB="000000000025000008001b00000000001c001a8018000a8014000700"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) r8 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f0000000280)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000180100002020732500000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)) 3.735289821s ago: executing program 4 (id=311): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r5, 0x6a98047402e98331, 0x70bd2a, 0x2, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) unshare(0x62000000) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000380)={0x1, 0x1, {0x27, 0x34, 0xd, 0x1d, 0x2, 0xfffff050, 0x3, 0x152, 0x8000000000000000}}) r7 = open(&(0x7f00000000c0)='.\x00', 0x40000, 0x194) getdents(r7, &(0x7f0000000280)=""/176, 0xb0) r8 = accept$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) setsockopt$packet_int(r8, 0x107, 0x11, &(0x7f0000000300)=0x5, 0xffffffffffffff0d) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0xffff}) unshare(0x6020480) 3.496360254s ago: executing program 0 (id=312): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) wait4(r0, 0x0, 0x2, 0x0) tkill(r0, 0x3) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001040)={[&(0x7f0000001080)='+)\x00', &(0x7f0000001000)='+)\x00']}) 2.906919131s ago: executing program 0 (id=313): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)={[{@allow_utime}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@errors_continue}, {@gid}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}]}, 0x1, 0x152d, &(0x7f00000034c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc90, 0x0, 0x0, 0x0, 0x23, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) getitimer(0x2, &(0x7f0000000340)) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.906558301s ago: executing program 2 (id=314): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8080108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x49}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7df}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x771d}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8b}, {0x6, 0x11, 0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48800}, 0x40001) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 2.536518106s ago: executing program 0 (id=315): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) r1 = fsmount(0xffffffffffffffff, 0x1, 0xbd) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0xa469, 0x4) r2 = accept(r1, &(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0x80) lseek(r2, 0xffffffffffffffff, 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000002240)={0x18, 0xfffffffffffffffe, r4, {0xc}}, 0x18) write$FUSE_POLL(r1, &(0x7f0000002280)={0x18, 0x0, r4, {0x7}}, 0x18) fcntl$setown(r1, 0x8, r5) ppoll(&(0x7f00000022c0)=[{r2, 0x420}], 0x1, &(0x7f0000002300), &(0x7f0000002340)={[0x4]}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002380)={r0, 0x6, 0x8001, 0x9}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002400), r2) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000002600)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002440)={0x164, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xecd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7d32}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2c49}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r1) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000027c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0x9c, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x15b4c4903862897c}, 0x20048800) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x40, 0x0, 0x404, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) fchdir(r1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000002900), &(0x7f0000002940)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000029c0)={0x2, &(0x7f0000002980)=[{0x101, 0x6, 0x1, 0x8001}, {0xff, 0x6, 0x6e, 0x4}]}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x44, r9, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x18}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000002b80), 0x8) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000002bc0)={0x7}, 0x4) sendmsg$nl_route(r10, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)=@ipv4_newnexthop={0x38, 0x68, 0x10, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x4, 0x0, 0x19}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5}}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f00000033c0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003380)={&(0x7f0000002f80)={0x3f4, 0x0, 0xd1c24ff9010cc795, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x37c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2ef}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc160}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x138c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff7f}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!\x93e!!-\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg0\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xa9\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "494cb2a7c6e3b50ce38fc17655953e311e1a0dadf22b61262932eb2e64a38e3614c26bf18393e08c6878c2073067b41dc5cffd494ba54cec972cb89710195dacf943855b95388dd0a36b09cba54890d8f5ab4d13ba3678a60bb2cbe00426ff81afad0e8d51e01c49badce7858c39dcaa5ffc3a510126966c95c78170412f2d24ab05663cb1c147be04047ce12cfd6bb93274269698fa8def385e661e7e6102f5ddb87b93a130aaa1cafcf723629a0d79dcc7a445e511a1e3f6514639693b6efb7269c6dfcb6fa0d62f45a441581c9bc2b059daaf383441c6a23c3b"}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040000) 2.40085867s ago: executing program 0 (id=316): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000007000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) mkdir(0x0, 0xa5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xffffffffffffff0b, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) (async, rerun: 32) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000000f00000085000000bb00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x1) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) (rerun: 32) pipe2(0x0, 0x80000) (async, rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000200)) (async, rerun: 64) r6 = io_uring_setup(0x3348, &(0x7f00000001c0)={0x0, 0x48e8, 0x1, 0x3, 0x3cf}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000540)={0x1, 0x1, 0x0, &(0x7f0000000400)=[{0x0}], 0x0}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 2.316747297s ago: executing program 0 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x71, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x4) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) readahead(r4, 0x6, 0x1000009) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x1, 0x0, 0x7, 0x7fff0000}]}) r6 = getpid() syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000302, 0x0, 0x0) r8 = syz_pidfd_open(r6, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) setns(r8, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) r9 = inotify_init() inotify_add_watch(r9, &(0x7f00000001c0)='.\x00', 0x4000423) 2.259355233s ago: executing program 5 (id=318): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x52680, 0x150, 0x21}, 0x18) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='*^\x00', &(0x7f0000000040)='./file0\x00', r0) (async, rerun: 64) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'security.', '\x00'}) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x82440, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0xfffffffffffffff7) r2 = openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x40000, 0x35, 0x2}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x17) read$FUSE(r2, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_pidfd_open(r3, 0x0) r5 = open(&(0x7f00000022c0)='./file1\x00', 0x2000, 0x1) (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002300), 0x208c00, 0x0) sendfile(r1, r6, &(0x7f0000002340)=0xadd3, 0x4) (async, rerun: 32) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000002380)=""/41) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002680)={r5, 0xe0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000002400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000002480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000024c0), &(0x7f0000002500), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000002540)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r7, r2, 0x4, 0x5}, 0x50) rmdir(&(0x7f0000002740)='./file0\x00') (async) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000002780)=0xa5f) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000027c0)={0x40, 0x1, 0x3}, 0x10) (async, rerun: 64) read$FUSE(r5, &(0x7f0000002800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000201, r8, &(0x7f0000004840)='./file0\x00') (async) r9 = syz_open_dev$usbmon(&(0x7f0000004880), 0xfffffffffffffffc, 0x8001) (async) readlinkat(r0, &(0x7f00000048c0)='./file0\x00', &(0x7f0000004900)=""/133, 0x85) read$FUSE(r5, &(0x7f00000049c0)={0x2020}, 0x2020) (async) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000006b40)={0x0, &(0x7f0000006a00)=[@set_irq_handler={0xc8, 0x20, {0x1, 0x1}}, @nested_vmresume={0x130, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x3, 0x8000000000000000}}, @wr_drn={0x68, 0x20, {0x1, 0x7}}, @out_dx={0x6a, 0x28, {0x27b9, 0x0, 0x2}}, @out_dx={0x6a, 0x28, {0x4b28, 0x7, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x8}}, @in_dx={0x69, 0x20, {0x0, 0x3}}], 0x120}) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000006bc0)=@arm64_sys={0x603000000013e720, &(0x7f0000006b80)}) (async) chdir(&(0x7f0000006c00)='./file1\x00') setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000006c40)=0x4, 0x4) (async, rerun: 64) recvmsg(r2, &(0x7f0000007240)={0x0, 0x0, &(0x7f00000071c0)=[{&(0x7f0000006c80)=""/238, 0xee}, {&(0x7f0000006d80)=""/172, 0xac}, {&(0x7f0000006e40)=""/246, 0xf6}, {&(0x7f0000006f40)=""/191, 0xbf}, {0xfffffffffffffffc}, {&(0x7f0000007000)=""/182, 0xb6}, {&(0x7f00000070c0)=""/237, 0xed}], 0x7}, 0x120) (async, rerun: 64) r11 = signalfd4(r9, &(0x7f0000007280), 0x8, 0x80800) connect$unix(r11, &(0x7f00000072c0)=@file={0x1, './file1\x00'}, 0x6e) 7.342109ms ago: executing program 5 (id=319): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) (async) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) poll(0x0, 0x0, 0xffffffffffbffff8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) (async) io_setup(0x9, &(0x7f0000002340)=0x0) io_submit(r5, 0x3, &(0x7f0000002580)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r4, &(0x7f0000000100)='\x00', 0x1, 0x3}, 0x0, 0x0]) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4.219519ms ago: executing program 1 (id=320): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000340)={[{@grpid}, {@nodiscard}, {@resuid}, {@jqfmt_vfsv0}]}, 0x3, 0x45d, &(0x7f0000000cc0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000400)=@v2={0x2, @aes256, 0x2, '\x00', @auto="47181acc4af3c038b94f02ffdc7337d8"}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x2, 0x10004041) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) 0s ago: executing program 2 (id=321): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x803f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c757466383d312c726f6469722c636865636b3d7374726963742c756e695f786c6174653d312c73686f72746e616d653d77696e39352c696f636861727365743d63703935302c636f6465706167653d3835352c696f636861727365743d63703836322c73686f72746e616d653d6d697865642c646d61736b3d30303030303030303030303030303030303030303130302c757466383d312c756e695f786c6174653d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d6d008000002c6e6e6f6e75008361690400312c73686f72746e616d6577696e39352c726f6469722c757466383d302c696f636861727365743d6575632d6a702c757466383d312c757466383d302c726f6f74636f6e746578743d73746166665f752c009d54d2aaf6d06f18be776bb0ffac7a5551d56f69676c5a4b4e936050f5015a88410ba0676d48b0d307dfb550ec405bfcf6345121e4ef37982c969e2ff5915d729aa2982209cd4f06a1b6fa7ff4d2a7ce636cbde5339573fbd7c5ff9ff4481d415a136dba0a11246055ee1246a02b888f9aa72f3e876b621297de4e141d9700eee76208a6b62fc18d5dce7a798b1920830452b000dfc54ce2735b49179188ca936edb03581e240974fc368283677a20dc700c5f6d3995b3ea4611d52f2dafd6a9e8ad74e3b18058a210222bd6486148f7a294c215544f477f891c", @ANYRES64, @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$eJzs3b9rJHUUAPA3m9nZVYtNYSWCA1pYHZdrbRLkDsRUHilOCw3eHUh2ERKI+APXq8ROC0v/AkHwD7GxsxRsBTtPOBj5zs5kf9ywtye3Eb3Pp0jezve9nTc/kkyKvLz34uTkdhl37332awyHWfT2BxH3s9iNXrS+iCX7XwcA8F92v6rij2qmY/mXr5ZfZ4svelvuDQDYjkf8/G/k9cdbKePHy+sNANiOm7fefvPg8PD6W2U5jBuTL8+P0q/46fNs/eBufBDjuBNXYxQPIuoHhX7UTwspvFFV1TQvk914ZTI9P0qVk3d/at7/4PeIun4vRrFbb7p42qjr3zi8vlfOLNRPUx/PNvvfT/XXYhTPf9MWL9Vf66iPoyJefXmh/ysxip/fjw9jHLfrJub1n++V5evVt39++k5qL9Vn0/OjQZ03V+20O+9f8jUCAAAAAAAAAAAAAAAAAAAAAOD/50ozO2cQ9fyetKmZv7PzIL3oR9naXZ7PM6u/GAg8nw8UvaqqplV8187XuVqWZdUkzuvzeCFvBgsCAAAAAAAAAAAAAAAAAADAU+7s409OjsfjO6dPJGinAeQR8dfNiH/6PvsLW16K9cmDZp/H43GvCZdz8sUtsdPmZBFr20gH8YROy6OCZx7qOQW9OP3+h86qdERneXQtDVNQdC61Qb9jX48ffNSfncfOnPbuOjnOus/h4KLDYbpwsXrhiujeez9WthTt9VxNbm/FzQ6n6FwaPfZpKZ6rg+manMjWfV289tvS4WSxklzUEzc6y/tN0HU2ZvfGRvdzDGflD3+vyEzrAAAAAAAAAAAAAAAAAACArZr/9W/H4r21pb1qsLW2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSzf///yZBvly8QVURp2f/1rEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw9Pg7AAD//6ofUAA=") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468e33659d46182ffe71e00000000180002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") kernel console output (not intermixed with test programs): ount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.883265][ T28] audit: type=1400 audit(1766361048.213:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.883404][ T275] cgroup: Unknown subsys name 'devices' [ 20.006997][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.012599][ T275] cgroup: Unknown subsys name 'rlimit' [ 20.113245][ T28] audit: type=1400 audit(1766361048.443:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.136778][ T28] audit: type=1400 audit(1766361048.443:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.161706][ T28] audit: type=1400 audit(1766361048.443:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.170495][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.194278][ T28] audit: type=1400 audit(1766361048.523:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.220062][ T28] audit: type=1400 audit(1766361048.523:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.249301][ T28] audit: type=1400 audit(1766361048.583:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.249661][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.274847][ T28] audit: type=1400 audit(1766361048.583:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.778727][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.786117][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.793439][ T284] device bridge_slave_0 entered promiscuous mode [ 22.805628][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.812747][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.820456][ T284] device bridge_slave_1 entered promiscuous mode [ 22.849751][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.856801][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.864034][ T283] device bridge_slave_0 entered promiscuous mode [ 22.871993][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.879294][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.886914][ T283] device bridge_slave_1 entered promiscuous mode [ 22.932391][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.939486][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.946856][ T287] device bridge_slave_0 entered promiscuous mode [ 22.953408][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.960522][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.967876][ T286] device bridge_slave_0 entered promiscuous mode [ 22.980976][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.988132][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.995646][ T287] device bridge_slave_1 entered promiscuous mode [ 23.002173][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.009409][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.016801][ T286] device bridge_slave_1 entered promiscuous mode [ 23.066245][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.073271][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.080751][ T285] device bridge_slave_0 entered promiscuous mode [ 23.100492][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.107566][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.114816][ T285] device bridge_slave_1 entered promiscuous mode [ 23.233645][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.240727][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.248027][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.255333][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.275070][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.282220][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.289621][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.296730][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.320045][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.327106][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.334557][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.341614][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.351787][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.358961][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.366266][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.373300][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.401199][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.408727][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.416491][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.423656][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.431026][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.438240][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.445425][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.452582][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.461292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.468760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.489433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.497618][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.504690][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.512194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.520746][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.527775][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.549198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.557141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.578914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.597530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.605904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.614002][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.621122][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.628571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.636939][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.644121][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.651523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.659634][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.666665][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.674122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.682436][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.689467][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.699138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.713863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.729070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.737553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.748633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.770860][ T286] device veth0_vlan entered promiscuous mode [ 23.780302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.789587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.797588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.805163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.814698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.823361][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.830435][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.838804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.847100][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.854336][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.861716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.869765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.877957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.898698][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.905765][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.913422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.921566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.929989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.938065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.948454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.956156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.964554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.973070][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.980274][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.988838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.996811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.012552][ T286] device veth1_macvtap entered promiscuous mode [ 24.025989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.033574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.041238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.049818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.059145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.071419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.079899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.088940][ T284] device veth0_vlan entered promiscuous mode [ 24.097965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.106133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.123490][ T287] device veth0_vlan entered promiscuous mode [ 24.131171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.139705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.148247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.156929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.165700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.173968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.182361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.190456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.198985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.206637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.222544][ T284] device veth1_macvtap entered promiscuous mode [ 24.231733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.239814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.248292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.256888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.264823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.273395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.281788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.289718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.297761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.306078][ T283] device veth0_vlan entered promiscuous mode [ 24.319692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.328344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.328671][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.362847][ T285] device veth0_vlan entered promiscuous mode [ 24.373342][ T287] device veth1_macvtap entered promiscuous mode [ 24.381350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.391487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.399657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.407449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.426234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.446095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.461398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.471864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.490359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.507689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.543881][ T343] loop3: detected capacity change from 0 to 256 [ 24.694713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.749136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.897474][ T283] device veth1_macvtap entered promiscuous mode [ 25.016717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.073256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.191292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.209861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.294615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.302587][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 25.302602][ T28] audit: type=1400 audit(1766361053.633:118): avc: denied { map_write } for pid=347 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 25.315532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.337968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.347367][ T28] audit: type=1400 audit(1766361053.673:119): avc: denied { create } for pid=354 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.368880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.377226][ T28] audit: type=1400 audit(1766361053.683:120): avc: denied { write } for pid=354 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.480321][ T28] audit: type=1400 audit(1766361053.683:121): avc: denied { read } for pid=354 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.501892][ T28] audit: type=1400 audit(1766361053.783:122): avc: denied { prog_run } for pid=348 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 25.522398][ T28] audit: type=1400 audit(1766361053.813:123): avc: denied { create } for pid=354 comm="syz.1.8" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 25.556122][ T28] audit: type=1400 audit(1766361053.813:124): avc: denied { write } for pid=354 comm="syz.1.8" name="file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 25.579325][ T28] audit: type=1400 audit(1766361053.813:125): avc: denied { open } for pid=354 comm="syz.1.8" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 25.603537][ T28] audit: type=1400 audit(1766361053.863:126): avc: denied { read write } for pid=354 comm="syz.1.8" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.629892][ T28] audit: type=1400 audit(1766361053.863:127): avc: denied { open } for pid=354 comm="syz.1.8" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.635243][ T285] device veth1_macvtap entered promiscuous mode [ 25.699947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.711992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.722905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.084210][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.203568][ T359] syz.1.8 (359) used greatest stack depth: 21248 bytes left [ 26.262908][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.271435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.280274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.298216][ T365] loop1: detected capacity change from 0 to 128 [ 26.306109][ T365] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 26.331019][ T365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.339995][ T365] ext2 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.359120][ T365] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 20: comm syz.1.9: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 26.379734][ T365] EXT4-fs error (device loop1) in do_split:2095: Corrupt filesystem [ 26.440963][ T373] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9'. [ 26.459780][ T372] loop3: detected capacity change from 0 to 1024 [ 26.471463][ T372] EXT4-fs: Ignoring removed mblk_io_submit option [ 26.487656][ T372] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 26.498500][ T372] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 26.581700][ T58] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.166454][ T284] EXT4-fs (loop1): unmounting filesystem. [ 27.395946][ T286] EXT4-fs (loop3): unmounting filesystem. [ 27.424256][ T382] loop1: detected capacity change from 0 to 2048 [ 27.439829][ T386] loop3: detected capacity change from 0 to 256 [ 27.449368][ T386] exfat: Deprecated parameter 'namecase' [ 27.455527][ T6] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 27.458835][ T386] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 27.487744][ T386] process 'syz.3.11' launched './file1' with NULL argv: empty string added [ 27.496849][ T376] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 27.526951][ T388] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.546946][ T344] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.576570][ T58] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 27.584714][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.595954][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.605915][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.619004][ T58] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.625786][ T395] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 27.628850][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.645691][ T58] usb 3-1: config 0 descriptor?? [ 27.652462][ T6] usb 5-1: config 1 has an invalid interface number: 115 but max is 1 [ 27.660811][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 27.669530][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 27.678321][ T6] usb 5-1: config 1 has an invalid interface number: 109 but max is 1 [ 27.688623][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 27.697580][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 27.698483][ T388] kvm: pic: level sensitive irq not supported [ 27.706787][ T388] kvm: pic: non byte read [ 27.718369][ T6] usb 5-1: config 1 has no interface number 0 [ 27.724527][ T6] usb 5-1: config 1 has no interface number 1 [ 27.736603][ T344] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 27.749955][ T6] usb 5-1: config 1 interface 115 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 27.761235][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.775875][ T344] usb 1-1: config 0 descriptor?? [ 27.782199][ T6] usb 5-1: config 1 interface 115 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 27.794218][ T6] usb 5-1: config 1 interface 115 altsetting 64 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 27.806704][ T6] usb 5-1: config 1 interface 115 altsetting 64 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 27.817930][ T6] usb 5-1: config 1 interface 115 altsetting 64 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 27.828994][ T6] usb 5-1: config 1 interface 115 altsetting 64 has a duplicate endpoint with address 0x6, skipping [ 27.839849][ T6] usb 5-1: config 1 interface 109 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 27.850572][ T6] usb 5-1: config 1 interface 109 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 27.861309][ T6] usb 5-1: config 1 interface 109 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 27.872142][ T6] usb 5-1: config 1 interface 109 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 27.882915][ T6] usb 5-1: config 1 interface 109 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 27.893791][ T6] usb 5-1: config 1 interface 109 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 27.904658][ T6] usb 5-1: config 1 interface 109 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 27.915670][ T6] usb 5-1: config 1 interface 109 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 27.926431][ T6] usb 5-1: config 1 interface 115 has no altsetting 0 [ 28.002633][ T399] loop3: detected capacity change from 0 to 1024 [ 28.009483][ T399] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.027126][ T399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.124364][ T58] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 28.132485][ T58] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 28.141377][ T58] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 29.334784][ T411] usb 3-1: USB disconnect, device number 2 [ 29.357199][ T286] EXT4-fs (loop3): unmounting filesystem. [ 29.377780][ T415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 29.388171][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.397098][ T415] device bridge_slave_1 left promiscuous mode [ 29.403281][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.440744][ T6] usb 5-1: New USB device found, idVendor=145f, idProduct=010c, bcdDevice=b2.13 [ 29.454989][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.464612][ T6] usb 5-1: can't set config #1, error -71 [ 29.470674][ T341] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.479950][ T6] usb 5-1: USB disconnect, device number 2 [ 29.624665][ T422] loop3: detected capacity change from 0 to 1024 [ 29.631683][ T422] ======================================================= [ 29.631683][ T422] WARNING: The mand mount option has been deprecated and [ 29.631683][ T422] and is ignored by this kernel. Remove the mand [ 29.631683][ T422] option from the mount to silence this warning. [ 29.631683][ T422] ======================================================= [ 29.667401][ T422] EXT4-fs: Ignoring removed orlov option [ 29.816249][ T422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.857197][ T422] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.19: Allocating blocks 481-513 which overlap fs metadata [ 29.933926][ T344] usb 1-1: Cannot set autoneg [ 29.939550][ T344] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 29.948648][ T344] usb 1-1: USB disconnect, device number 2 [ 30.224851][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.624775][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.639526][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.662267][ T341] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.747543][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.786628][ T341] usb 2-1: config 0 descriptor?? [ 30.946652][ T286] EXT4-fs (loop3): unmounting filesystem. [ 30.991789][ T436] loop0: detected capacity change from 0 to 128 [ 30.992948][ T433] loop2: detected capacity change from 0 to 1024 [ 31.000898][ T437] loop3: detected capacity change from 0 to 512 [ 31.011742][ T433] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.015300][ T437] EXT4-fs: Ignoring removed oldalloc option [ 31.028514][ T437] journal_path: Lookup failure for './file1' [ 31.034822][ T437] EXT4-fs: error: could not find journal device path [ 31.045929][ T412] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.094404][ T341] usbhid 2-1:0.0: can't add hid device: -71 [ 31.101298][ T433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 31.114231][ T341] usbhid: probe of 2-1:0.0 failed with error -71 [ 31.129611][ T443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 31.149042][ T341] usb 2-1: USB disconnect, device number 2 [ 31.242568][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 31.242584][ T28] audit: type=1400 audit(1766361059.573:154): avc: denied { read } for pid=447 comm="syz.1.36" name="msr" dev="devtmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 31.675458][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.203345][ T28] audit: type=1400 audit(1766361059.573:155): avc: denied { open } for pid=447 comm="syz.1.36" path="/dev/cpu/1/msr" dev="devtmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 32.240174][ T28] audit: type=1400 audit(1766361060.043:156): avc: denied { ioctl } for pid=434 comm="syz.0.24" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16389 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.350464][ T28] audit: type=1400 audit(1766361060.053:157): avc: denied { read } for pid=434 comm="syz.0.24" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.439551][ T28] audit: type=1400 audit(1766361060.623:158): avc: denied { create } for pid=434 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.459054][ T28] audit: type=1400 audit(1766361060.623:159): avc: denied { write } for pid=434 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.460236][ T287] EXT4-fs (loop2): unmounting filesystem. [ 32.484161][ T28] audit: type=1400 audit(1766361060.623:160): avc: denied { getopt } for pid=434 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.505513][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.553533][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.564045][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.615441][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.625135][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.638642][ T24] usb 4-1: config 0 descriptor?? [ 32.663276][ T28] audit: type=1400 audit(1766361060.993:161): avc: denied { ioctl } for pid=471 comm="syz.2.30" path="socket:[16406]" dev="sockfs" ino=16406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.716856][ T28] audit: type=1400 audit(1766361061.043:162): avc: denied { name_bind } for pid=475 comm="syz.4.32" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 33.156580][ T24] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 33.681471][ T24] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 33.755386][ T28] audit: type=1400 audit(1766361062.083:163): avc: denied { execute } for pid=486 comm="syz.2.34" name="file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.782113][ T486] process '/newroot/4/file0' started with executable stack [ 34.175586][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 34.235430][ T363] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.309179][ T340] usb 4-1: USB disconnect, device number 2 [ 34.387663][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.435414][ T363] usb 3-1: Using ep0 maxpacket: 16 [ 34.442427][ T363] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 34.491677][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 34.530650][ T363] usb 3-1: config 0 has no interface number 0 [ 34.604183][ T363] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 34.628288][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.759596][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.770654][ T363] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 34.842723][ T24] usb 5-1: Product: syz [ 34.868168][ T363] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 34.921424][ T24] usb 5-1: Manufacturer: syz [ 34.955339][ C0] sched: RT throttling activated [ 34.964530][ T504] netlink: 600 bytes leftover after parsing attributes in process `syz.3.40'. [ 34.968963][ T24] usb 5-1: SerialNumber: syz [ 34.969628][ T504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.40'. [ 34.985348][ T363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.992718][ T504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.40'. [ 35.045899][ T504] netlink: 32 bytes leftover after parsing attributes in process `syz.3.40'. [ 35.089059][ T363] usb 3-1: Product: syz [ 35.093383][ T363] usb 3-1: Manufacturer: syz [ 35.145214][ T363] usb 3-1: SerialNumber: syz [ 35.215820][ T363] usb 3-1: config 0 descriptor?? [ 35.223919][ T501] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 35.260584][ T502] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 35.267916][ T502] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 35.485390][ T499] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 35.492580][ T499] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.258943][ T499] loop2: detected capacity change from 0 to 1024 [ 36.283044][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 36.283082][ T28] audit: type=1400 audit(1766361064.613:172): avc: denied { unlink } for pid=522 comm="syz.3.44" name="#1" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.321545][ T529] loop3: detected capacity change from 0 to 128 [ 36.332752][ T499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.391615][ T529] EXT4-fs: Ignoring removed nobh option [ 36.409074][ T28] audit: type=1400 audit(1766361064.613:173): avc: denied { mount } for pid=522 comm="syz.3.44" name="/" dev="overlay" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.417094][ T529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.446543][ T28] audit: type=1400 audit(1766361064.633:174): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.466441][ T28] audit: type=1400 audit(1766361064.653:175): avc: denied { create } for pid=528 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.487147][ T24] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 36.500178][ T28] audit: type=1400 audit(1766361064.653:176): avc: denied { ioctl } for pid=528 comm="syz.3.45" path="socket:[16522]" dev="sockfs" ino=16522 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.500764][ T529] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.555244][ T534] loop0: detected capacity change from 0 to 4096 [ 36.562961][ T24] cdc_ncm 5-1:1.0: bind() failure [ 36.570689][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 36.587936][ T286] EXT4-fs (loop3): unmounting filesystem. [ 36.594520][ T24] cdc_ncm 5-1:1.1: bind() failure [ 36.594933][ T534] EXT4-fs (loop0): Test dummy encryption mode enabled [ 36.603774][ T24] usb 5-1: USB disconnect, device number 3 [ 36.615877][ T534] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 36.625199][ T534] System zones: 0-5 [ 36.635497][ T534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.653551][ T28] audit: type=1400 audit(1766361064.983:177): avc: denied { add_name } for pid=531 comm="syz.1.46" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.683431][ T28] audit: type=1400 audit(1766361065.013:178): avc: denied { associate } for pid=531 comm="syz.1.46" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.740146][ T28] audit: type=1400 audit(1766361065.073:179): avc: denied { ioctl } for pid=542 comm="syz.3.48" path="socket:[16555]" dev="sockfs" ino=16555 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.809055][ T546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 36.913115][ T546] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.923237][ T546] device bridge_slave_1 left promiscuous mode [ 36.929790][ T546] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.942643][ T28] audit: type=1400 audit(1766361065.273:180): avc: denied { read } for pid=542 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.964375][ T28] audit: type=1326 audit(1766361065.303:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 37.147487][ T554] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 37.386925][ T565] overlayfs: missing 'lowerdir' [ 37.397928][ T565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 37.409177][ T565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 37.574447][ T363] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 37.590339][ T285] EXT4-fs (loop0): unmounting filesystem. [ 37.597104][ T287] EXT4-fs (loop2): unmounting filesystem. [ 37.624620][ T363] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 37.771672][ T363] asix: probe of 3-1:0.251 failed with error -71 [ 37.958067][ T563] syz.1.50 (563) used greatest stack depth: 20592 bytes left [ 38.180069][ T363] usb 3-1: USB disconnect, device number 3 [ 38.556610][ T583] loop0: detected capacity change from 0 to 512 [ 38.563852][ T581] loop4: detected capacity change from 0 to 1024 [ 38.605619][ T583] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.614998][ T583] EXT4-fs warning (device loop0): ext4_xattr_inode_get:495: inode #11: comm syz.0.53: ea_inode file size=4 entry size=6 [ 38.630040][ T583] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.649176][ T581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.650395][ T583] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #15: comm syz.0.53: corrupted inode contents [ 38.672786][ T583] EXT4-fs (loop0): Remounting filesystem read-only [ 38.675553][ T581] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.680158][ T583] EXT4-fs error (device loop0): ext4_dirty_inode:6135: inode #15: comm syz.0.53: mark_inode_dirty error [ 38.701207][ T583] EXT4-fs (loop0): Remounting filesystem read-only [ 38.707926][ T583] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #15: comm syz.0.53: corrupted inode contents [ 38.719771][ T583] EXT4-fs (loop0): Remounting filesystem read-only [ 38.726331][ T583] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2964: inode #15: comm syz.0.53: mark_inode_dirty error [ 38.743138][ T583] EXT4-fs (loop0): Remounting filesystem read-only [ 38.749776][ T583] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #15: comm syz.0.53: mark inode dirty (error -117) [ 38.762412][ T583] EXT4-fs (loop0): Remounting filesystem read-only [ 38.768798][ T581] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm syz.4.57: lblock 8 mapped to illegal pblock 8 (length 8) [ 38.769020][ T583] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 38.794495][ T583] EXT4-fs (loop0): 1 orphan inode deleted [ 38.800334][ T583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.809455][ T600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 38.810900][ T581] EXT4-fs error (device loop4): ext4_ext_remove_space:2930: inode #15: comm syz.4.57: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 38.857205][ T603] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.57: lblock 3 mapped to illegal pblock 3 (length 3) [ 38.881277][ T603] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 38.893921][ T603] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.893921][ T603] [ 38.948999][ T585] loop2: detected capacity change from 0 to 40427 [ 38.965231][ T581] EXT4-fs error (device loop4): ext4_ext_remove_space:2930: inode #15: comm syz.4.57: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 38.975824][ T585] F2FS-fs (loop2): fault_type options not supported [ 38.990797][ T581] EXT4-fs error (device loop4) in ext4_setattr:5674: Corrupt filesystem [ 39.000208][ T585] F2FS-fs (loop2): invalid crc value [ 39.007256][ T585] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.095692][ T291] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.152932][ T585] F2FS-fs (loop2): Start checkpoint disabled! [ 40.175596][ T585] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 40.212343][ T285] EXT4-fs (loop0): unmounting filesystem. [ 40.249349][ T616] netlink: 44 bytes leftover after parsing attributes in process `syz.0.64'. [ 40.436475][ T291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.447565][ T334] kworker/u4:3: attempt to access beyond end of device [ 40.447565][ T334] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 40.455373][ T291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 40.517075][ T291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.528569][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.543142][ T283] EXT4-fs (loop4): unmounting filesystem. [ 40.545355][ T291] usb 4-1: Product: syz [ 40.553071][ T291] usb 4-1: Manufacturer: syz [ 40.565514][ T291] usb 4-1: SerialNumber: syz [ 40.595527][ T632] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 40.675075][ T636] loop1: detected capacity change from 0 to 16 [ 40.744936][ T636] erofs: Unknown parameter '0xffffffffffffffff' [ 40.765424][ T341] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 40.774682][ T602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 40.800139][ T644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 40.810136][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.820323][ T644] device bridge_slave_1 left promiscuous mode [ 40.827053][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.902670][ T363] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 40.935373][ T341] usb 1-1: device descriptor read/64, error -71 [ 40.953548][ T648] loop2: detected capacity change from 0 to 1024 [ 40.964586][ T648] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.980971][ T648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.991149][ T648] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.086401][ T363] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.096776][ T363] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 4096, setting to 64 [ 41.108889][ T363] usb 5-1: config 0 interface 0 has no altsetting 0 [ 41.116310][ T363] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 41.126007][ T363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.171166][ T363] usb 5-1: config 0 descriptor?? [ 41.616812][ T291] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 41.660755][ T363] uclogic 0003:5543:0005.0003: unknown main item tag 0x3 [ 41.668599][ T291] cdc_ncm 4-1:1.0: bind() failure [ 41.683591][ T363] uclogic 0003:5543:0005.0003: item fetching failed at offset 4/5 [ 41.703955][ T291] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 41.738178][ T363] uclogic 0003:5543:0005.0003: parse failed [ 41.746690][ T291] cdc_ncm 4-1:1.1: bind() failure [ 41.780181][ T363] uclogic: probe of 0003:5543:0005.0003 failed with error -22 [ 41.865511][ T291] usb 4-1: USB disconnect, device number 3 [ 41.881032][ T363] usb 5-1: USB disconnect, device number 4 [ 41.926377][ T656] loop1: detected capacity change from 0 to 1024 [ 41.947409][ T287] EXT4-fs (loop2): unmounting filesystem. [ 41.953566][ T656] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.987063][ T656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.005464][ T341] usb 1-1: device descriptor read/64, error -71 [ 43.413834][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 43.413850][ T28] audit: type=1400 audit(1766361071.743:203): avc: denied { name_bind } for pid=667 comm="syz.2.77" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.450901][ T668] loop2: detected capacity change from 0 to 1024 [ 43.457628][ T668] EXT4-fs: Ignoring removed bh option [ 43.496434][ T668] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.522522][ T287] EXT4-fs (loop2): unmounting filesystem. [ 43.573945][ T28] audit: type=1400 audit(1766361071.773:204): avc: denied { node_bind } for pid=667 comm="syz.2.77" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.643716][ T28] audit: type=1400 audit(1766361071.843:205): avc: denied { setattr } for pid=667 comm="syz.2.77" path="/13/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.644068][ T284] EXT4-fs (loop1): unmounting filesystem. [ 43.667431][ T28] audit: type=1400 audit(1766361071.863:206): avc: denied { create } for pid=671 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.667456][ T28] audit: type=1400 audit(1766361071.863:207): avc: denied { bind } for pid=671 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.712556][ T28] audit: type=1400 audit(1766361071.863:208): avc: denied { name_bind } for pid=671 comm="syz.3.78" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 43.733290][ T28] audit: type=1400 audit(1766361071.863:209): avc: denied { node_bind } for pid=671 comm="syz.3.78" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 43.775382][ T28] audit: type=1400 audit(1766361071.863:210): avc: denied { connect } for pid=671 comm="syz.3.78" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.811499][ T28] audit: type=1400 audit(1766361071.863:211): avc: denied { ioctl } for pid=671 comm="syz.3.78" path="socket:[16691]" dev="sockfs" ino=16691 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.845439][ T291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.853838][ T682] loop4: detected capacity change from 0 to 256 [ 43.864923][ T28] audit: type=1400 audit(1766361072.113:212): avc: denied { write } for pid=673 comm="syz.2.79" name="udplite6" dev="proc" ino=4026532694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 43.925207][ T682] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 43.937477][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.981940][ T682] exFAT-fs (loop4): error, invalid size(size(24576) > aligned(9223372036854777344) [ 43.981940][ T682] [ 43.993075][ T676] loop0: detected capacity change from 0 to 40427 [ 44.000749][ T682] exFAT-fs (loop4): Filesystem has been set read-only [ 44.006255][ T676] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 44.014938][ T676] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.020129][ T682] exFAT-fs (loop4): error, invalid size(size(24576) > aligned(9223372036854777344) [ 44.020129][ T682] [ 44.035110][ T688] exFAT-fs (loop4): error, invalid size(size(24576) > aligned(9223372036854777344) [ 44.035110][ T688] [ 44.035697][ T687] loop1: detected capacity change from 0 to 512 [ 44.049992][ T291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.056582][ T687] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.068664][ T687] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.076270][ T687] EXT4-fs (loop1): Test dummy encryption mode enabled [ 44.076761][ T676] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.092921][ T687] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.095754][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.106456][ T687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.130652][ T291] usb 4-1: Product: syz [ 44.139022][ T291] usb 4-1: Manufacturer: syz [ 44.143837][ T291] usb 4-1: SerialNumber: syz [ 44.151528][ T687] EXT4-fs (loop1): 1 truncate cleaned up [ 44.159474][ T687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.166708][ T693] loop4: detected capacity change from 0 to 2048 [ 44.188400][ T676] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 44.200561][ T676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.236649][ T693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.545655][ T285] syz-executor: attempt to access beyond end of device [ 44.545655][ T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.663721][ T693] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.84: bg 0: block 234: padding at end of block bitmap is not set [ 44.695681][ T693] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 44.696518][ T698] loop0: detected capacity change from 0 to 512 [ 44.718312][ T698] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.725714][ T693] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.725714][ T693] [ 44.735948][ T698] EXT4-fs: Ignoring removed bh option [ 44.742094][ T693] EXT4-fs (loop4): Total free blocks count 0 [ 44.748429][ T698] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.760135][ T693] EXT4-fs (loop4): Free/Dirty block details [ 44.766273][ T693] EXT4-fs (loop4): free_blocks=0 [ 44.768652][ T699] overlayfs: failed to set xattr on upper [ 44.771345][ T698] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.786899][ T693] EXT4-fs (loop4): dirty_blocks=16 [ 44.792265][ T693] EXT4-fs (loop4): Block reservation details [ 44.793252][ T698] EXT4-fs (loop0): 1 truncate cleaned up [ 44.798867][ T693] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 44.805208][ T284] EXT4-fs (loop1): unmounting filesystem. [ 44.810093][ T698] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.856610][ T702] loop1: detected capacity change from 0 to 1024 [ 44.865710][ T702] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.869173][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.880075][ T698] Zero length message leads to an empty skb [ 44.888099][ T698] netlink: 'syz.0.85': attribute type 27 has an invalid length. [ 44.897089][ T283] EXT4-fs (loop4): unmounting filesystem. [ 44.898162][ T702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.939063][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.023041][ T285] EXT4-fs (loop0): unmounting filesystem. [ 47.237087][ T718] loop4: detected capacity change from 0 to 512 [ 47.244451][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.256332][ T718] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.511737][ T718] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.87: invalid indirect mapped block 4294967295 (level 1) [ 47.526922][ T718] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.87: invalid indirect mapped block 4294967295 (level 1) [ 47.542973][ T718] EXT4-fs (loop4): 2 truncates cleaned up [ 47.548992][ T718] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.657635][ T291] cdc_ncm 4-1:1.0: failed to get mac address [ 47.753178][ T291] cdc_ncm 4-1:1.0: bind() failure [ 47.778593][ T291] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 47.811477][ T291] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 47.824188][ T729] netlink: 9 bytes leftover after parsing attributes in process `syz.3.91'. [ 47.843686][ T291] usb 4-1: USB disconnect, device number 4 [ 47.852885][ T729] device gretap0 entered promiscuous mode [ 47.871198][ T729] netlink: 5 bytes leftover after parsing attributes in process `syz.3.91'. [ 47.880384][ T729] 0{X: renamed from gretap0 [ 47.886540][ T729] device 30{X left promiscuous mode [ 47.893089][ T729] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 47.912650][ T729] loop3: detected capacity change from 0 to 256 [ 47.930418][ T729] exfat: Unknown parameter '' [ 48.014689][ T283] EXT4-fs (loop4): unmounting filesystem. [ 48.015737][ T284] EXT4-fs (loop1): unmounting filesystem. [ 48.031066][ T404] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.161657][ T738] loop0: detected capacity change from 0 to 256 [ 48.172698][ T738] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 48.340039][ T740] loop2: detected capacity change from 0 to 128 [ 48.444338][ T740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.463361][ T748] loop3: detected capacity change from 0 to 512 [ 48.471355][ T748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.519129][ T740] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.575446][ T748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 48.599295][ T748] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.136749][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 50.136766][ T28] audit: type=1400 audit(1766361078.473:247): avc: denied { nlmsg_read } for pid=747 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.201956][ T733] loop4: detected capacity change from 0 to 40427 [ 50.223554][ T733] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 50.246562][ T733] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 50.300821][ T735] loop1: detected capacity change from 0 to 40427 [ 50.328388][ T286] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /27/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=2048 fake=0 [ 50.352204][ T735] F2FS-fs (loop1): Unrecognized mount option " " or missing value [ 50.428739][ T286] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 50.455565][ T286] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 50.465031][ T286] EXT4-fs error (device loop3): ext4_acquire_dquot:6796: comm syz-executor: Failed to acquire dquot type 1 [ 50.485250][ T28] audit: type=1400 audit(1766361078.813:248): avc: denied { create } for pid=756 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.527910][ T759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 50.534956][ T28] audit: type=1400 audit(1766361078.843:249): avc: denied { read write } for pid=756 comm="syz.0.99" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.537037][ T759] device bridge_slave_1 left promiscuous mode [ 50.566672][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.574480][ T759] device bridge_slave_0 left promiscuous mode [ 50.586073][ T286] EXT4-fs (loop3): unmounting filesystem. [ 50.592173][ T28] audit: type=1400 audit(1766361078.843:250): avc: denied { open } for pid=756 comm="syz.0.99" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.616916][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.725413][ T291] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 50.815527][ T762] loop1: detected capacity change from 0 to 256 [ 50.823133][ T762] exfat: Unknown parameter 'iochar' [ 50.937007][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.538568][ T287] EXT4-fs (loop2): unmounting filesystem. [ 51.553064][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.609094][ T291] usb 3-1: string descriptor 0 read error: -71 [ 51.620610][ T764] loop4: detected capacity change from 0 to 1024 [ 51.632886][ T291] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.646384][ T28] audit: type=1400 audit(1766361079.973:251): avc: denied { mounton } for pid=765 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.677149][ T764] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.685372][ T291] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 51.702306][ T291] usb 3-1: config 0 descriptor?? [ 51.708118][ T291] usb 3-1: can't set config #0, error -71 [ 51.714745][ T291] usb 3-1: USB disconnect, device number 4 [ 51.723729][ T764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 51.754162][ T58] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 52.381337][ T765] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.428022][ T765] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.526392][ T765] device bridge_slave_0 entered promiscuous mode [ 52.553277][ T786] loop2: detected capacity change from 0 to 256 [ 52.575685][ T786] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 52.759404][ T790] loop2: detected capacity change from 0 to 16 [ 52.785840][ T790] erofs: (device loop2): mounted with root inode @ nid 36. [ 52.799785][ T28] audit: type=1400 audit(1766361081.133:252): avc: denied { create } for pid=769 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.829681][ T58] usb 1-1: device descriptor read/64, error -71 [ 52.830718][ T283] EXT4-fs (loop4): unmounting filesystem. [ 52.836471][ T28] audit: type=1400 audit(1766361081.153:253): avc: denied { getopt } for pid=769 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.852679][ T790] overlayfs: unrecognized mount option "smackfsdef=-" or missing value [ 52.863053][ T28] audit: type=1400 audit(1766361081.203:254): avc: denied { bind } for pid=769 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.898085][ T765] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.918043][ T765] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.918820][ T793] loop4: detected capacity change from 0 to 128 [ 52.932589][ T765] device bridge_slave_1 entered promiscuous mode [ 52.945643][ T793] ext4: Unknown parameter '' [ 53.109703][ T58] usb 1-1: device descriptor read/64, error -71 [ 53.116966][ T809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48427 sclass=netlink_route_socket pid=809 comm=syz.4.112 [ 53.131421][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.145665][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.153204][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.162895][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.171397][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.178486][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.196704][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.206009][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.214650][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.223376][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.225949][ T817] syz.1.113 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.230448][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.265220][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.283292][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.343744][ T425] device bridge_slave_0 left promiscuous mode [ 53.355465][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.376821][ T425] device veth1_macvtap left promiscuous mode [ 53.387350][ T425] device veth0_vlan left promiscuous mode [ 53.395510][ T58] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 53.481042][ T819] loop4: detected capacity change from 0 to 1024 [ 53.494900][ T819] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.528597][ T765] device veth0_vlan entered promiscuous mode [ 53.539302][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.548624][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.556998][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.557387][ T819] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 53.564668][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.585637][ T58] usb 1-1: device descriptor read/64, error -71 [ 53.606576][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.630073][ T765] device veth1_macvtap entered promiscuous mode [ 53.645810][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.655727][ T819] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 53.667457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.812366][ T836] loop5: detected capacity change from 0 to 256 [ 53.836919][ T836] FAT-fs (loop5): Unrecognized mount option "utf8=0.shortname=winnt" or missing value [ 53.902481][ T840] loop2: detected capacity change from 0 to 256 [ 54.549094][ T283] EXT4-fs (loop4): unmounting filesystem. [ 55.489869][ T855] loop5: detected capacity change from 0 to 128 [ 55.536424][ T376] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.553070][ T847] loop2: detected capacity change from 0 to 40427 [ 55.564178][ T860] loop4: detected capacity change from 0 to 1024 [ 55.571542][ T847] F2FS-fs (loop2): invalid crc value [ 55.582084][ T847] F2FS-fs (loop2): Found nat_bits in checkpoint [ 55.624688][ T860] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.684419][ T860] capability: warning: `syz.4.122' uses deprecated v2 capabilities in a way that may be insecure [ 55.743540][ T847] F2FS-fs (loop2): Start checkpoint disabled! [ 57.528358][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 57.528376][ T28] audit: type=1400 audit(1766361085.863:263): avc: denied { read } for pid=851 comm="syz.1.123" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.559219][ T28] audit: type=1400 audit(1766361085.863:264): avc: denied { open } for pid=851 comm="syz.1.123" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.585880][ T28] audit: type=1400 audit(1766361085.863:265): avc: denied { ioctl } for pid=851 comm="syz.1.123" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.655388][ T341] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.764839][ T28] audit: type=1400 audit(1766361086.093:266): avc: denied { create } for pid=881 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.787432][ T882] loop2: detected capacity change from 0 to 512 [ 57.835433][ T882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.844392][ T882] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.845360][ T341] usb 5-1: Using ep0 maxpacket: 16 [ 57.871441][ T341] usb 5-1: config index 0 descriptor too short (expected 46642, got 72) [ 57.885445][ T341] usb 5-1: config 173 has too many interfaces: 131, using maximum allowed: 32 [ 57.894488][ T341] usb 5-1: config 173 contains an unexpected descriptor of type 0x1, skipping [ 57.903602][ T341] usb 5-1: config 173 has an invalid descriptor of length 0, skipping remainder of the config [ 57.914348][ T341] usb 5-1: config 173 has 0 interfaces, different from the descriptor's value: 131 [ 57.931970][ T287] EXT4-fs (loop2): unmounting filesystem. [ 57.939597][ T341] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 57.952268][ T341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.970904][ T341] usb 5-1: Product: syz [ 57.975450][ T341] usb 5-1: Manufacturer: syz [ 57.980070][ T341] usb 5-1: SerialNumber: syz [ 58.090121][ T896] futex_wake_op: syz.5.132 tries to shift op by -1; fix this program [ 58.109715][ T896] futex_wake_op: syz.5.132 tries to shift op by -1; fix this program [ 58.255274][ T899] EXT4-fs error (device loop4): __ext4_new_inode:1285: comm syz.4.122: failed to insert inode 16: doubly allocated? [ 58.276623][ T341] usb 5-1: USB disconnect, device number 5 [ 58.431784][ T901] input: syz1 as /devices/virtual/input/input5 [ 58.439837][ T721] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 58.535789][ T28] audit: type=1400 audit(1766361086.763:267): avc: denied { ioctl } for pid=888 comm="syz.1.131" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.662541][ T28] audit: type=1400 audit(1766361086.793:268): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=747 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.697681][ T28] audit: type=1400 audit(1766361086.793:269): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=747 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.726197][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.739525][ T28] audit: type=1400 audit(1766361086.793:270): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=747 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.766198][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.778632][ T721] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 58.789813][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.926287][ T283] EXT4-fs (loop4): unmounting filesystem. [ 58.937098][ T721] usb 3-1: config 0 descriptor?? [ 59.074255][ T28] audit: type=1400 audit(1766361087.403:271): avc: denied { read write } for pid=904 comm="syz.4.134" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.099074][ T28] audit: type=1400 audit(1766361087.403:272): avc: denied { open } for pid=904 comm="syz.4.134" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.126202][ T431] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.211194][ T911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 59.326482][ T431] usb 6-1: config 12 has an invalid interface number: 175 but max is 0 [ 59.338381][ T431] usb 6-1: config 12 has an invalid interface number: 5 but max is 0 [ 59.356539][ T431] usb 6-1: config 12 has 2 interfaces, different from the descriptor's value: 1 [ 59.376825][ T431] usb 6-1: config 12 has no interface number 0 [ 59.389283][ T431] usb 6-1: config 12 has no interface number 1 [ 59.402774][ T431] usb 6-1: config 12 interface 175 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 59.431692][ T431] usb 6-1: too many endpoints for config 12 interface 5 altsetting 43: 153, using maximum allowed: 30 [ 59.454171][ T431] usb 6-1: config 12 interface 5 altsetting 43 has a duplicate endpoint with address 0xD, skipping [ 59.477066][ T431] usb 6-1: config 12 interface 5 altsetting 43 endpoint 0x2 has an invalid bInterval 97, changing to 7 [ 59.500817][ T431] usb 6-1: config 12 interface 5 altsetting 43 endpoint 0x2 has invalid wMaxPacketSize 0 [ 59.521588][ T431] usb 6-1: config 12 interface 5 altsetting 43 has 3 endpoint descriptors, different from the interface descriptor's value: 153 [ 59.549002][ T431] usb 6-1: config 12 interface 175 has no altsetting 0 [ 59.563153][ T431] usb 6-1: config 12 interface 5 has no altsetting 0 [ 59.580051][ T431] usb 6-1: New USB device found, idVendor=03f0, idProduct=3016, bcdDevice=c7.bf [ 59.597967][ T431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.614878][ T431] usb 6-1: Product: syz [ 59.627921][ T431] usb 6-1: Manufacturer: syz [ 59.637811][ T431] usb 6-1: SerialNumber: syz [ 59.933814][ T431] usb 6-1: USB disconnect, device number 2 [ 60.121362][ T915] loop4: detected capacity change from 0 to 131072 [ 60.133042][ T721] savu 0003:1E7D:2D5A.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 60.144851][ T915] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 60.153088][ T915] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 60.161939][ T915] F2FS-fs (loop4): invalid crc value [ 60.168809][ T721] usb 3-1: USB disconnect, device number 5 [ 60.199467][ T918] fido_id[918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 60.226234][ T915] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.260605][ T915] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 60.267729][ T915] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 60.454007][ T927] bridge: RTM_NEWNEIGH with invalid ether address [ 60.581218][ T942] loop5: detected capacity change from 0 to 512 [ 60.621573][ T942] EXT4-fs: Ignoring removed nobh option [ 60.797989][ T942] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.903837][ T942] EXT4-fs (loop5): orphan cleanup on readonly fs [ 60.925650][ T942] EXT4-fs warning (device loop5): ext4_enable_quotas:7048: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.945513][ T942] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 60.954364][ T942] EXT4-fs (loop5): 1 truncate cleaned up [ 60.960457][ T942] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 61.026664][ T765] EXT4-fs (loop5): unmounting filesystem. [ 61.067064][ T955] loop5: detected capacity change from 0 to 256 [ 61.081997][ T955] FAT-fs (loop5): Directory bread(block 64) failed [ 61.088771][ T955] FAT-fs (loop5): Directory bread(block 65) failed [ 61.095374][ T955] FAT-fs (loop5): Directory bread(block 66) failed [ 61.101916][ T955] FAT-fs (loop5): Directory bread(block 67) failed [ 61.108504][ T955] FAT-fs (loop5): Directory bread(block 68) failed [ 61.115040][ T955] FAT-fs (loop5): Directory bread(block 69) failed [ 61.121657][ T955] FAT-fs (loop5): Directory bread(block 70) failed [ 61.128232][ T955] FAT-fs (loop5): Directory bread(block 71) failed [ 61.134798][ T955] FAT-fs (loop5): Directory bread(block 72) failed [ 61.141461][ T955] FAT-fs (loop5): Directory bread(block 73) failed [ 61.896965][ T963] loop4: detected capacity change from 0 to 256 [ 63.760883][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 63.760898][ T28] audit: type=1400 audit(1766361092.093:277): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.390803][ T28] audit: type=1400 audit(1766361092.723:278): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.444923][ T990] loop5: detected capacity change from 0 to 512 [ 64.585432][ T371] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.624749][ T990] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 64.645374][ T990] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 64.665354][ T990] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.156: Corrupt directory, running e2fsck is recommended [ 64.695584][ T990] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 64.714176][ T990] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2196: inode #15: comm syz.5.156: corrupted in-inode xattr [ 64.775403][ T371] usb 5-1: Using ep0 maxpacket: 16 [ 64.782119][ T990] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.156: couldn't read orphan inode 15 (err -117) [ 64.794351][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.833357][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.853744][ T990] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 64.882346][ T371] usb 5-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 64.920624][ T28] audit: type=1400 audit(1766361093.253:279): avc: denied { sqpoll } for pid=1002 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.953370][ T989] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 64.965204][ T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.987919][ T371] usb 5-1: config 0 descriptor?? [ 64.995541][ T989] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 65.035363][ T989] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.156: Corrupt directory, running e2fsck is recommended [ 65.096041][ T990] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 65.113399][ T990] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 65.124590][ T990] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.156: Corrupt directory, running e2fsck is recommended [ 65.163650][ T765] EXT4-fs (loop5): unmounting filesystem. [ 65.194349][ T987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.210251][ T1012] loop2: detected capacity change from 0 to 128 [ 65.218574][ T1012] EXT4-fs: Ignoring removed nobh option [ 65.235585][ T987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.252607][ T1012] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.261887][ T1012] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.287501][ T987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.298415][ T987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.308500][ T987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.317964][ T987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.328174][ T987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.337910][ T987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.347585][ T987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.357265][ T987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.378163][ T371] usbhid 5-1:0.0: can't add hid device: -71 [ 65.384142][ T371] usbhid: probe of 5-1:0.0 failed with error -71 [ 65.403887][ T28] audit: type=1400 audit(1766361093.733:280): avc: denied { append } for pid=1017 comm="syz.4.164" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 65.433888][ T371] usb 5-1: USB disconnect, device number 6 [ 65.489007][ T1024] loop5: detected capacity change from 0 to 512 [ 65.490650][ T28] audit: type=1400 audit(1766361093.823:281): avc: denied { ioctl } for pid=1023 comm="syz.5.163" path="socket:[19482]" dev="sockfs" ino=19482 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.496440][ T1025] SELinux: Context [QHL,&=p;bIxUX+ps" [ 65.496440][ T1025] 01-xv/UEB6 is not valid (left unmapped). [ 65.534353][ T1025] SELinux: Context M qq!kW:IW/8g is not valid (left unmapped). [ 65.543552][ T1025] SELinux: Context ? zQqX:^O1f:NAv^|7Ϥ,] C [ 65.543552][ T1025] E-f [ 65.543552][ T1025] =%4g-Zy&(Ev9 is not valid (left unmapped). [ 65.563278][ T1024] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 65.574967][ T1025] SELinux: Context +x9ljGFjK&[ZF`QZ /i4[Yl$6R is not valid (left unmapped). [ 65.593521][ T1025] SELinux: Context PaF Q-)M%UQNEyh:[=˓I is not valid (left unmapped). [ 65.593726][ T28] audit: type=1400 audit(1766361093.923:282): avc: denied { write } for pid=1022 comm="syz.4.166" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.628765][ T28] audit: type=1400 audit(1766361093.943:283): avc: denied { map } for pid=1022 comm="syz.4.166" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.656711][ T28] audit: type=1400 audit(1766361093.943:284): avc: denied { execute } for pid=1022 comm="syz.4.166" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.755572][ T341] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 66.042395][ T287] EXT4-fs (loop2): unmounting filesystem. [ 66.048719][ T341] usb 2-1: Using ep0 maxpacket: 16 [ 66.158226][ T341] usb 2-1: config 0 has no interfaces? [ 66.170612][ T341] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 66.180964][ T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.344246][ T341] usb 2-1: Product: syz [ 66.353225][ T341] usb 2-1: Manufacturer: syz [ 66.362980][ T341] usb 2-1: SerialNumber: syz [ 66.402616][ T1040] loop2: detected capacity change from 0 to 16 [ 66.532723][ T341] r8152-cfgselector 2-1: config 0 descriptor?? [ 66.542647][ T1040] erofs: (device loop2): mounted with root inode @ nid 36. [ 66.549560][ T1046] loop5: detected capacity change from 0 to 128 [ 66.577496][ T1046] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.678309][ T1049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.173'. [ 66.764259][ T341] r8152-cfgselector 2-1: Unknown version 0x0000 [ 66.818784][ T1049] loop2: detected capacity change from 0 to 1024 [ 66.827334][ T1049] EXT4-fs: test_dummy_encryption requires encrypt feature [ 67.717962][ T404] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.757523][ T1066] fuse: Bad value for 'fd' [ 67.810331][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.823320][ T371] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.844535][ T1068] device veth0_vlan left promiscuous mode [ 67.850910][ T1068] device veth0_vlan entered promiscuous mode [ 67.858814][ T1068] device veth1_macvtap left promiscuous mode [ 67.865953][ T1068] device veth1_macvtap entered promiscuous mode [ 67.874472][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.886121][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.896126][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.904446][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.911534][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.919018][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.927522][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.936066][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.943324][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.951586][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.969029][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 67.978195][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.006940][ T1078] loop4: detected capacity change from 0 to 1024 [ 68.014686][ T1078] EXT4-fs: Ignoring removed bh option [ 68.020821][ T371] usb 6-1: device descriptor read/64, error -71 [ 68.031756][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 68.041366][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.050985][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.060890][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.070320][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.079392][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.089356][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.098403][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.113388][ T1078] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.179: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.128047][ T1078] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 68.136322][ T1078] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.179: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.153297][ T1078] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 68.162283][ T1078] EXT4-fs error (device loop4): ext4_acquire_dquot:6796: comm syz.4.179: Failed to acquire dquot type 0 [ 68.175098][ T1078] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 68.185721][ T1078] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.179: mark_inode_dirty error [ 68.197520][ T1078] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 68.207886][ T1078] EXT4-fs (loop4): 1 orphan inode deleted [ 68.213745][ T1078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.239619][ T334] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.294135][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.313280][ T334] EXT4-fs error (device loop4): ext4_release_dquot:6832: comm kworker/u4:3: Failed to release dquot type 0 [ 68.325246][ T371] usb 6-1: device descriptor read/64, error -71 [ 68.335170][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.344775][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.355016][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.365164][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.375377][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.384124][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.394276][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.404078][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.414084][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.452269][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.461555][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.505645][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.538431][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.572577][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.625833][ T371] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.755565][ T721] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 68.932673][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.945883][ T371] usb 6-1: device descriptor read/64, error -71 [ 69.347455][ T371] usb 6-1: device descriptor read/64, error -71 [ 69.684520][ T371] usb usb6-port1: attempt power cycle [ 69.762683][ T283] EXT4-fs (loop4): unmounting filesystem. [ 69.769952][ T283] EXT4-fs error (device loop4): __ext4_get_inode_loc:4515: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 69.783266][ T283] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 69.784237][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 69.784249][ T28] audit: type=1400 audit(1766361098.123:285): avc: denied { create } for pid=1093 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.793366][ T283] EXT4-fs error (device loop4): ext4_quota_off:7102: inode #3: comm syz-executor: mark_inode_dirty error [ 69.834018][ T1096] loop5: detected capacity change from 0 to 512 [ 69.854151][ T1096] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 69.877978][ T1096] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.933640][ T1096] FAT-fs (loop5): FAT read failed (blocknr 128) [ 69.943392][ T28] audit: type=1400 audit(1766361098.273:286): avc: denied { mount } for pid=1099 comm="syz.1.188" name="/" dev="configfs" ino=12850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 70.070095][ T28] audit: type=1400 audit(1766361098.403:287): avc: denied { search } for pid=1099 comm="syz.1.188" name="/" dev="configfs" ino=12850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.986548][ T28] audit: type=1400 audit(1766361098.723:288): avc: denied { setattr } for pid=1099 comm="syz.1.188" name="/" dev="configfs" ino=12850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.163735][ T28] audit: type=1400 audit(1766361099.363:289): avc: denied { setopt } for pid=1119 comm="syz.5.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.497948][ T28] audit: type=1400 audit(1766361099.383:290): avc: denied { ioctl } for pid=1119 comm="syz.5.191" path="socket:[18836]" dev="sockfs" ino=18836 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.653081][ T28] audit: type=1400 audit(1766361099.813:291): avc: denied { connect } for pid=1121 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.739806][ T28] audit: type=1400 audit(1766361099.823:292): avc: denied { unmount } for pid=1121 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.085733][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 72.412466][ T24] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 72.428747][ T24] usb 3-1: config 0 has no interface number 0 [ 72.434954][ T24] usb 3-1: config 0 interface 183 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 72.445798][ T24] usb 3-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94 [ 72.454850][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.464235][ T24] usb 3-1: config 0 descriptor?? [ 72.469999][ T1137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.555580][ T24] pl2303 3-1:0.183: required endpoints missing [ 72.605016][ T1159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.201'. [ 72.614964][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.624891][ T1159] device bridge_slave_1 left promiscuous mode [ 72.631113][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.764752][ T24] usb 3-1: USB disconnect, device number 6 [ 72.787717][ T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 72.985563][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 72.993460][ T19] usb 2-1: unable to get BOS descriptor or descriptor too short [ 73.004867][ T19] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 73.014725][ T19] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 73.026549][ T19] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 73.036619][ T19] usb 2-1: config 128 has no interface number 0 [ 73.043111][ T19] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 73.056094][ T19] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 73.068638][ T19] usb 2-1: config 128 interface 127 has no altsetting 0 [ 73.077909][ T19] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 73.087472][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.095536][ T19] usb 2-1: Product: 淇ﷁ騙칐䑗薰箽畭牾ꌹ蛛蒗죏枳ꍎ隺䷞塤ៅ㡗伉呼枔䍖젺㍈谭㩧㳞ᘧᯩꮟ氕廲뽢샨犑⚖渫道ﮰ㠖脺鱎쮖㳃襪툩ꥠ␕や젍跗ﯲ痟臼鎐㽽Ṓꏥਅꚨ꩙㳳鱄≰෿惖⨋㍒夰剥뚊㕽螅䳼툸箫礍鯃欢璣饙 [ 73.123161][ T19] usb 2-1: Manufacturer: ꀲ巨蛽㋖背椱ᖃև泩脦ﳅ迪ň邗䛸᪇㯣呄ힼ뗐㞭ឬ氅鮇淌뽃䯑꣨ꩄ쳧鐉娀浦､捥秇篂뮎荭駆䥄존굤䳟깼쁂䞑Ɀ꾂쏆ꁤ앣募㮲웉䭬帯脁誎䙟媡雭遟뵦⊮ [ 73.148353][ T19] usb 2-1: SerialNumber: 赬薅훨磛虢㜐稱淈聭훧몘껼沙헖킾维ힹဇ駗捈딚◖੿鄈쪰伏帄큉ꍉ뢣⥚ﯚ싟믟꯳⍩ϭ춱쮻須灂뱛䰄ㅪ鴚❎孓′屴绅茪䚗ﶾ椝讆ꌸ✰᳅꡼䲸爈⃲ŹᏃ᪲ﲇ얅稽츔灼慅㬽㮉鍜㾔↤뗞樛ꕹ嘓ꮍﴎ瀣䳥尰䬹ᶻﭜ谯ࣞ䘇★ [ 73.181474][ T1150] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 73.245358][ T371] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 73.285834][ T1176] 9pnet_fd: Insufficient options for proto=fd [ 73.398492][ T19] usb 2-1: USB disconnect, device number 4 [ 73.425468][ T371] usb 1-1: Using ep0 maxpacket: 16 [ 73.431801][ T371] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 73.450299][ T371] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.465352][ T371] usb 1-1: config 0 has no interface number 0 [ 73.476981][ T371] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 73.496517][ T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.504639][ T371] usb 1-1: Product: syz [ 73.516896][ T1181] loop2: detected capacity change from 0 to 40427 [ 73.516961][ T371] usb 1-1: Manufacturer: syz [ 73.531869][ T1181] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 73.542771][ T371] usb 1-1: SerialNumber: syz [ 73.545118][ T1181] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 73.560244][ T371] usb 1-1: config 0 descriptor?? [ 73.574317][ T1181] F2FS-fs (loop2): Found nat_bits in checkpoint [ 73.606676][ T404] udevd[404]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.618691][ T1181] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 73.630238][ T1181] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 73.778657][ T371] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 73.785139][ T371] usb 1-1: No valid video chain found. [ 73.920303][ T1194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.209'. [ 75.595129][ T371] usb 1-1: USB disconnect, device number 7 [ 75.820439][ T1224] loop2: detected capacity change from 0 to 512 [ 75.879690][ T1224] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.215: bg 0: block 5: invalid block bitmap [ 75.913993][ T1224] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 75.940628][ T1224] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.215: invalid indirect mapped block 3 (level 2) [ 75.971716][ T1224] EXT4-fs (loop2): 1 orphan inode deleted [ 75.981921][ T1224] EXT4-fs (loop2): 1 truncate cleaned up [ 75.987891][ T1224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.041272][ T1250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 77.125666][ T28] audit: type=1326 audit(1766361104.943:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1241 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 77.335649][ T28] audit: type=1326 audit(1766361104.943:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1241 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 77.363324][ T1254] loop5: detected capacity change from 0 to 512 [ 77.386493][ T28] audit: type=1326 audit(1766361105.043:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1241 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 77.415444][ T28] audit: type=1326 audit(1766361105.043:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1241 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 77.492723][ T28] audit: type=1326 audit(1766361105.043:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1241 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 77.516605][ T1254] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 77.544012][ T1254] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.222: bg 0: block 104: invalid block bitmap [ 77.565348][ T28] audit: type=1326 audit(1766361105.093:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1241 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 77.595850][ T1254] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 77.619487][ T1254] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.222: invalid indirect mapped block 1 (level 1) [ 77.634007][ T28] audit: type=1326 audit(1766361105.333:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1241 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 77.657707][ T28] audit: type=1326 audit(1766361105.333:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1241 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 77.658268][ T287] EXT4-fs (loop2): unmounting filesystem. [ 77.681159][ T28] audit: type=1326 audit(1766361105.363:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1241 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 77.695214][ T1254] EXT4-fs (loop5): 1 truncate cleaned up [ 77.710624][ T28] audit: type=1326 audit(1766361105.363:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1241 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed638f749 code=0x7ffc0000 [ 77.716687][ T1254] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 77.755449][ T340] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 77.798655][ T765] EXT4-fs (loop5): unmounting filesystem. [ 77.941015][ T1293] loop5: detected capacity change from 0 to 256 [ 77.968775][ T340] usb 1-1: config 0 has no interfaces? [ 77.976314][ T340] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 77.987199][ T340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.987255][ T1293] syz.5.234: attempt to access beyond end of device [ 77.987255][ T1293] loop5: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 77.995229][ T340] usb 1-1: Product: syz [ 77.995247][ T340] usb 1-1: Manufacturer: syz [ 77.995267][ T340] usb 1-1: SerialNumber: syz [ 77.998711][ T340] usb 1-1: config 0 descriptor?? [ 78.018952][ T1293] syz.5.234: attempt to access beyond end of device [ 78.018952][ T1293] loop5: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 78.045932][ T1299] syz.5.234: attempt to access beyond end of device [ 78.045932][ T1299] loop5: rw=34817, sector=261, nr_sectors = 27 limit=256 [ 78.059640][ T1299] syz.5.234: attempt to access beyond end of device [ 78.059640][ T1299] loop5: rw=34817, sector=352, nr_sectors = 5 limit=256 [ 78.075433][ T1091] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 78.155432][ T19] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 78.186308][ T1304] loop5: detected capacity change from 0 to 512 [ 78.242533][ T1259] netlink: 'syz.0.224': attribute type 16 has an invalid length. [ 78.250561][ T1259] netlink: 'syz.0.224': attribute type 17 has an invalid length. [ 78.261770][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.275656][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.291612][ T1259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.300149][ T1259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.315375][ T1091] usb 2-1: Using ep0 maxpacket: 16 [ 78.322235][ T1091] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 78.331561][ T1091] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.341967][ T1091] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.352871][ T1091] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.361984][ T1091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.377482][ T1091] usb 2-1: Product: syz [ 78.381773][ T1091] usb 2-1: Manufacturer: syz [ 78.386471][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 78.391678][ T1091] usb 2-1: SerialNumber: syz [ 78.397778][ T19] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 78.406047][ T19] usb 3-1: config 0 has no interface number 0 [ 78.414013][ T19] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.425935][ T19] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.436122][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 78.445234][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.454087][ T19] usb 3-1: config 0 descriptor?? [ 78.491297][ T1313] netlink: 124 bytes leftover after parsing attributes in process `syz.5.238'. [ 78.500484][ T1313] netlink: 40 bytes leftover after parsing attributes in process `syz.5.238'. [ 78.511976][ T1313] loop5: detected capacity change from 0 to 512 [ 78.519031][ T1313] EXT4-fs: Invalid want_extra_isize 1142 [ 78.526384][ T721] usb 1-1: USB disconnect, device number 8 [ 78.862975][ T19] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x3 [ 78.872424][ T19] logitech-djreceiver 0003:046D:C52B.0005: hidraw0: USB HID v0.00 Device [HID 046d:c52b] on usb-dummy_hcd.2-1/input46 [ 79.094765][ T721] usb 3-1: USB disconnect, device number 7 [ 79.632202][ T1340] loop5: detected capacity change from 0 to 512 [ 79.642853][ T1340] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.655963][ T1340] EXT4-fs (loop5): 1 truncate cleaned up [ 79.661668][ T1340] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 79.800704][ T765] EXT4-fs (loop5): unmounting filesystem. [ 80.064873][ T1348] loop5: detected capacity change from 0 to 256 [ 80.072037][ T1348] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.082823][ T1348] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 80.093017][ T1348] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 80.133864][ T1353] netlink: 'syz.0.249': attribute type 3 has an invalid length. [ 80.285587][ T19] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 80.790473][ T19] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 80.842409][ T1091] usb 2-1: 0:2 : does not exist [ 81.002144][ T1091] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 81.012267][ T19] usb 3-1: config 0 has no interface number 0 [ 81.391880][ T1369] tipc: Failed to remove unknown binding: 66,1,1/0:1129417432/1129417434 [ 81.401143][ T1369] tipc: Failed to remove unknown binding: 66,1,1/0:1129417432/1129417434 [ 81.404063][ T19] usb 3-1: config 0 interface 41 has no altsetting 0 [ 81.421234][ T19] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 81.431458][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.460026][ T19] usb 3-1: Product: syz [ 81.471732][ T1091] usb 2-1: USB disconnect, device number 5 [ 81.500655][ T19] usb 3-1: Manufacturer: syz [ 81.525508][ T19] usb 3-1: SerialNumber: syz [ 81.565632][ T19] usb 3-1: config 0 descriptor?? [ 81.596358][ T1378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 81.797262][ T1387] netlink: 'syz.0.254': attribute type 15 has an invalid length. [ 82.668524][ T39] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.760128][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 82.760154][ T28] audit: type=1400 audit(1766361111.093:359): avc: denied { create } for pid=1349 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.777493][ T404] udevd[404]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.826925][ T28] audit: type=1400 audit(1766361111.163:360): avc: denied { create } for pid=1399 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.977939][ T39] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 82.987305][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.996347][ T39] usb 6-1: Product: syz [ 83.000544][ T39] usb 6-1: Manufacturer: syz [ 83.005149][ T39] usb 6-1: SerialNumber: syz [ 83.010397][ T19] CoreChips: probe of 3-1:0.41 failed with error -71 [ 83.018551][ T28] audit: type=1400 audit(1766361111.353:361): avc: denied { bind } for pid=1399 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.040537][ T1402] fuse: Unknown parameter 'rootmodfx̱00000000000140000' [ 83.050013][ T19] usb 3-1: USB disconnect, device number 8 [ 83.058361][ T28] audit: type=1400 audit(1766361111.373:362): avc: denied { setopt } for pid=1399 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.081954][ T28] audit: type=1400 audit(1766361111.413:363): avc: denied { create } for pid=1403 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 83.104160][ T28] audit: type=1400 audit(1766361111.413:364): avc: denied { module_request } for pid=1403 comm="syz.1.263" kmod="net-pf-16-proto-21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 83.233585][ T39] usb 6-1: USB disconnect, device number 6 [ 83.275387][ T58] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 83.466996][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.478986][ T58] usb 1-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 83.493285][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.518954][ T58] usb 1-1: config 0 descriptor?? [ 83.555972][ T28] audit: type=1400 audit(1766361111.893:365): avc: denied { ioctl } for pid=1412 comm="syz.2.265" path="socket:[20625]" dev="sockfs" ino=20625 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.785400][ T28] audit: type=1400 audit(1766361112.113:366): avc: denied { write } for pid=1424 comm="syz.5.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.814630][ T28] audit: type=1400 audit(1766361112.113:367): avc: denied { read } for pid=1424 comm="syz.5.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.932813][ T58] hid-generic 0003:18D1:503C.0006: unbalanced collection at end of report description [ 83.951091][ T39] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 83.956618][ T58] hid-generic: probe of 0003:18D1:503C.0006 failed with error -22 [ 84.132032][ T1407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.141700][ T1407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.172705][ T58] usb 1-1: USB disconnect, device number 9 [ 84.822494][ T1441] loop5: detected capacity change from 0 to 40427 [ 84.841733][ T1441] F2FS-fs (loop5): invalid crc value [ 84.856368][ T39] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 84.864256][ T1441] F2FS-fs (loop5): Found nat_bits in checkpoint [ 84.876300][ T39] usb 3-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.889277][ T39] usb 3-1: config 1 interface 0 has no altsetting 0 [ 84.921876][ T39] usb 3-1: string descriptor 0 read error: -22 [ 84.929053][ T39] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 84.952379][ T1441] F2FS-fs (loop5): Start checkpoint disabled! [ 84.959535][ T1441] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 84.989979][ T340] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 84.997798][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.049950][ T28] audit: type=1400 audit(1766361113.373:368): avc: denied { write } for pid=1440 comm="syz.5.273" name="/" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.399403][ T1421] IPv6: sit2: Disabled Multicast RS [ 85.467243][ T340] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.519903][ T1441] syz.5.273: attempt to access beyond end of device [ 85.519903][ T1441] loop5: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 85.544581][ T340] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.587319][ T340] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.596730][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.604882][ T340] usb 2-1: Product: syz [ 85.609449][ T340] usb 2-1: Manufacturer: syz [ 85.614058][ T340] usb 2-1: SerialNumber: syz [ 85.621131][ T39] usbhid 3-1:1.0: can't add hid device: -71 [ 85.627360][ T39] usbhid: probe of 3-1:1.0 failed with error -71 [ 85.634567][ T340] cdc_ncm 2-1:1.0: skipping garbage [ 85.639879][ T340] usb 2-1: selecting invalid altsetting 1 [ 85.646701][ T39] usb 3-1: USB disconnect, device number 9 [ 85.914124][ T19] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 86.260229][ T340] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 86.266562][ T340] cdc_ncm 2-1:1.0: bind() failure [ 86.272693][ T340] usb 2-1: USB disconnect, device number 6 [ 86.316806][ T19] usb 6-1: unable to get BOS descriptor or descriptor too short [ 86.324854][ T19] usb 6-1: not running at top speed; connect to a high speed hub [ 86.333474][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.343714][ T19] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.352840][ T19] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.365824][ T19] usb 6-1: config 1 interface 0 has no altsetting 0 [ 86.374518][ T19] usb 6-1: string descriptor 0 read error: -22 [ 86.380762][ T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.389885][ T19] usb 6-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11 [ 86.515350][ T1091] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 86.603699][ T340] usb 6-1: USB disconnect, device number 7 [ 86.691733][ T1465] device ip6gre1 entered promiscuous mode [ 86.705498][ T1465] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 86.735915][ T1091] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.745829][ T1091] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.765247][ T1091] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.817016][ T1091] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.817031][ T1474] xt_TCPMSS: Only works on TCP SYN packets [ 86.832527][ T1091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.840815][ T1091] usb 3-1: Product: syz [ 86.845672][ T1091] usb 3-1: Manufacturer: syz [ 86.850384][ T1091] usb 3-1: SerialNumber: syz [ 88.891362][ T1091] hub 3-1:1.0: bad descriptor, ignoring hub [ 88.899714][ T1091] hub: probe of 3-1:1.0 failed with error -5 [ 88.918802][ T340] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.927607][ T425] kworker/u4:5: attempt to access beyond end of device [ 88.927607][ T425] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 88.932908][ T340] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.953372][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 89.093331][ T1463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.114464][ T1463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.126138][ T1091] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 89.275620][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 89.416954][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 89.416981][ T28] audit: type=1400 audit(1766361117.753:391): avc: denied { read write } for pid=1462 comm="syz.2.278" name="lp0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 89.496232][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 89.978676][ T28] audit: type=1400 audit(1766361117.783:392): avc: denied { open } for pid=1462 comm="syz.2.278" path="/dev/usb/lp0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 90.240390][ T28] audit: type=1400 audit(1766361118.573:393): avc: denied { ioctl } for pid=1504 comm="syz.4.289" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20778 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.285365][ T1091] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 90.429462][ T28] audit: type=1400 audit(1766361118.763:394): avc: denied { read } for pid=1517 comm="syz.1.292" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.470032][ T1518] device veth0_to_bond entered promiscuous mode [ 90.487410][ T1518] device veth0_to_bond left promiscuous mode [ 90.596471][ T1524] xt_hashlimit: size too large, truncated to 1048576 [ 90.596490][ T28] audit: type=1400 audit(1766361118.933:395): avc: denied { setopt } for pid=1523 comm="syz.5.293" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.649232][ T1525] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 90.668474][ T1526] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 90.696282][ T58] usb 3-1: USB disconnect, device number 10 [ 90.759354][ T28] audit: type=1400 audit(1766361119.093:396): avc: denied { mount } for pid=1529 comm="syz.1.295" name="/" dev="configfs" ino=12850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 90.822896][ T28] audit: type=1400 audit(1766361119.133:397): avc: denied { search } for pid=1529 comm="syz.1.295" name="/" dev="configfs" ino=12850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.880990][ T28] audit: type=1400 audit(1766361119.133:398): avc: denied { read } for pid=1529 comm="syz.1.295" name="/" dev="configfs" ino=12850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.906236][ T1462] usblp0: removed [ 90.915343][ T28] audit: type=1400 audit(1766361119.133:399): avc: denied { open } for pid=1529 comm="syz.1.295" path="/" dev="configfs" ino=12850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.959151][ T28] audit: type=1400 audit(1766361119.133:400): avc: denied { write } for pid=1523 comm="syz.5.293" laddr=fe80::ac14:140d lport=60 faddr=ff01::1 fport=20133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.304726][ T1550] loop2: detected capacity change from 0 to 1024 [ 91.336001][ T1550] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.383062][ T1550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.209881][ T1568] loop5: detected capacity change from 0 to 512 [ 92.258781][ T1568] EXT4-fs: Ignoring removed oldalloc option [ 92.304596][ T1568] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.555150][ T1568] EXT4-fs (loop5): 1 truncate cleaned up [ 92.561614][ T287] EXT4-fs (loop2): unmounting filesystem. [ 92.565426][ T1568] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 92.745756][ T1568] loop5: detected capacity change from 512 to 64 [ 92.765385][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.047875][ T765] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -12) [ 93.106782][ T1590] device bridge0 entered promiscuous mode [ 93.148105][ T1590] device macsec1 entered promiscuous mode [ 93.543521][ T765] EXT4-fs (loop5): unmounting filesystem. [ 93.616878][ T1590] bridge0: port 2(macsec1) entered blocking state [ 93.633660][ T1590] bridge0: port 2(macsec1) entered disabled state [ 93.647440][ T1590] device bridge0 left promiscuous mode [ 94.519087][ T1605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.644696][ T1607] loop2: detected capacity change from 0 to 1024 [ 94.754401][ T1607] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.808601][ T1608] loop5: detected capacity change from 0 to 128 [ 94.856243][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 94.856269][ T28] audit: type=1400 audit(1766361123.183:421): avc: denied { ioctl } for pid=1609 comm="syz.0.315" path="pid:[4026532293]" dev="nsfs" ino=4026532293 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 94.945726][ T28] audit: type=1400 audit(1766361123.223:422): avc: denied { read } for pid=1609 comm="syz.0.315" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.967975][ T1607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 94.969732][ T28] audit: type=1400 audit(1766361123.233:423): avc: denied { open } for pid=1609 comm="syz.0.315" path="/dev/ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.082935][ T28] audit: type=1400 audit(1766361123.233:424): avc: denied { ioctl } for pid=1609 comm="syz.0.315" path="/dev/ppp" dev="devtmpfs" ino=157 ioctlcmd=0x744d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.112456][ T28] audit: type=1400 audit(1766361123.283:425): avc: denied { mount } for pid=1601 comm="syz.5.310" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 95.135146][ T28] audit: type=1400 audit(1766361123.383:426): avc: denied { create } for pid=1601 comm="syz.5.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 95.222554][ T28] audit: type=1400 audit(1766361123.553:427): avc: denied { unmount } for pid=765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 97.050508][ T28] audit: type=1400 audit(1766361125.383:428): avc: denied { unmount } for pid=1619 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.088915][ T28] audit: type=1400 audit(1766361125.383:429): avc: denied { watch watch_reads } for pid=1619 comm="syz.0.317" path="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.255176][ T284] ------------[ cut here ]------------ [ 97.260924][ T284] WARNING: CPU: 0 PID: 284 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 97.268880][ T284] Modules linked in: [ 97.272791][ T284] CPU: 0 PID: 284 Comm: syz-executor Not tainted syzkaller #0 [ 97.280301][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.290409][ T284] RIP: 0010:drop_nlink+0xc5/0x110 [ 97.295479][ T284] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 83 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4b 67 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 97.315213][ T284] RSP: 0018:ffffc90000e97c38 EFLAGS: 00010293 [ 97.321359][ T284] RAX: ffffffff81c3c2b5 RBX: ffff888112708080 RCX: ffff88810e183cc0 [ 97.329544][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.337547][ T284] RBP: ffffc90000e97c60 R08: 0000000000000004 R09: 0000000000000003 [ 97.345553][ T284] R10: fffff520001d2f78 R11: 1ffff920001d2f78 R12: dffffc0000000000 [ 97.353543][ T284] R13: 1ffff110224e1019 R14: ffff8881127080c8 R15: 0000000000000000 [ 97.361552][ T284] FS: 00005555654d9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 97.370601][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.377214][ T284] CR2: 00005555654fc4e8 CR3: 00000001302c6000 CR4: 00000000003506b0 [ 97.385405][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.393393][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.401404][ T284] Call Trace: [ 97.404695][ T284] [ 97.407655][ T284] shmem_rmdir+0x5b/0x90 [ 97.411924][ T284] vfs_rmdir+0x393/0x500 [ 97.416222][ T284] incfs_kill_sb+0x105/0x220 [ 97.420830][ T284] deactivate_locked_super+0xb5/0x120 [ 97.426342][ T284] deactivate_super+0xaf/0xe0 [ 97.431038][ T284] cleanup_mnt+0x45f/0x4e0 [ 97.435487][ T284] __cleanup_mnt+0x19/0x20 [ 97.439919][ T284] task_work_run+0x1db/0x240 [ 97.444526][ T284] ? __cfi_task_work_run+0x10/0x10 [ 97.449700][ T284] ? __x64_sys_umount+0x125/0x160 [ 97.454937][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 97.460364][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 97.465599][ T284] exit_to_user_mode_prepare+0x87/0xd0 [ 97.471094][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 97.476967][ T284] do_syscall_64+0x58/0xa0 [ 97.482045][ T284] ? clear_bhb_loop+0x30/0x80 [ 97.486894][ T284] ? clear_bhb_loop+0x30/0x80 [ 97.491580][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.497588][ T284] RIP: 0033:0x7f2529d90a77 [ 97.502016][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 97.522187][ T284] RSP: 002b:00007ffed87d9968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 97.530721][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2529d90a77 [ 97.538870][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed87d9a20 [ 97.546881][ T284] RBP: 00007ffed87d9a20 R08: 0000000000000000 R09: 0000000000000000 [ 97.554887][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed87daab0 [ 97.563446][ T284] R13: 00007f2529e13d7d R14: 0000000000016b7c R15: 00007ffed87daaf0 [ 97.571667][ T284] [ 97.574796][ T284] ---[ end trace 0000000000000000 ]--- [ 97.580616][ T284] ================================================================== [ 97.588890][ T284] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 97.595144][ T284] Write of size 4 at addr 0000000000000170 by task syz-executor/284 [ 97.603113][ T284] [ 97.605560][ T284] CPU: 1 PID: 284 Comm: syz-executor Tainted: G W syzkaller #0 [ 97.614504][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.624652][ T284] Call Trace: [ 97.627940][ T284] [ 97.630872][ T284] __dump_stack+0x21/0x24 [ 97.635205][ T284] dump_stack_lvl+0xee/0x150 [ 97.639794][ T284] ? __cfi_dump_stack_lvl+0x8/0x8 [ 97.644820][ T284] ? ihold+0x20/0x60 [ 97.648711][ T284] ? ihold+0x20/0x60 [ 97.652605][ T284] print_report+0x3d/0x60 [ 97.656931][ T284] kasan_report+0x122/0x150 [ 97.661434][ T284] ? ihold+0x20/0x60 [ 97.665346][ T284] kasan_check_range+0x280/0x290 [ 97.670298][ T284] __kasan_check_write+0x14/0x20 [ 97.675320][ T284] ihold+0x20/0x60 [ 97.679055][ T284] vfs_rmdir+0x25f/0x500 [ 97.683319][ T284] incfs_kill_sb+0x105/0x220 [ 97.688014][ T284] deactivate_locked_super+0xb5/0x120 [ 97.693399][ T284] deactivate_super+0xaf/0xe0 [ 97.698083][ T284] cleanup_mnt+0x45f/0x4e0 [ 97.702763][ T284] __cleanup_mnt+0x19/0x20 [ 97.707353][ T284] task_work_run+0x1db/0x240 [ 97.712031][ T284] ? __cfi_task_work_run+0x10/0x10 [ 97.717147][ T284] ? __x64_sys_umount+0x125/0x160 [ 97.722181][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 97.728247][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 97.733471][ T284] exit_to_user_mode_prepare+0x87/0xd0 [ 97.738959][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 97.744429][ T284] do_syscall_64+0x58/0xa0 [ 97.748858][ T284] ? clear_bhb_loop+0x30/0x80 [ 97.753536][ T284] ? clear_bhb_loop+0x30/0x80 [ 97.758217][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.764122][ T284] RIP: 0033:0x7f2529d90a77 [ 97.768641][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 97.788371][ T284] RSP: 002b:00007ffed87d9968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 97.796783][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2529d90a77 [ 97.804751][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed87d9a20 [ 97.812718][ T284] RBP: 00007ffed87d9a20 R08: 0000000000000000 R09: 0000000000000000 [ 97.820689][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed87daab0 [ 97.828668][ T284] R13: 00007f2529e13d7d R14: 0000000000016b7c R15: 00007ffed87daaf0 [ 97.836647][ T284] [ 97.839660][ T284] ================================================================== [ 97.849862][ T287] EXT4-fs (loop2): unmounting filesystem. [ 97.857728][ T284] Disabling lock debugging due to kernel taint [ 97.864061][ T284] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 97.871972][ T284] #PF: supervisor write access in kernel mode [ 97.878051][ T284] #PF: error_code(0x0002) - not-present page [ 97.884127][ T284] PGD 132e98067 P4D 132e98067 PUD 0 [ 97.889450][ T284] Oops: 0002 [#1] PREEMPT SMP KASAN [ 97.894670][ T284] CPU: 0 PID: 284 Comm: syz-executor Tainted: G B W syzkaller #0 [ 97.903710][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.913783][ T284] RIP: 0010:ihold+0x26/0x60 [ 97.918297][ T284] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 b1 5e ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 c0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 a1 [ 97.938083][ T284] RSP: 0018:ffffc90000e97c78 EFLAGS: 00010246 [ 97.944168][ T284] RAX: ffff88810e183c00 RBX: 0000000000000000 RCX: ffff88810e183cc0 [ 97.952151][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.960125][ T284] RBP: ffffc90000e97c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 97.968093][ T284] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88811270808c [ 97.976071][ T284] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 97.984034][ T284] FS: 00005555654d9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 97.992960][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.999716][ T284] CR2: 0000000000000170 CR3: 00000001302c6000 CR4: 00000000003506b0 [ 98.007687][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.015840][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.023833][ T284] Call Trace: [ 98.027111][ T284] [ 98.030040][ T284] vfs_rmdir+0x25f/0x500 [ 98.034293][ T284] incfs_kill_sb+0x105/0x220 [ 98.038886][ T284] deactivate_locked_super+0xb5/0x120 [ 98.044345][ T284] deactivate_super+0xaf/0xe0 [ 98.049021][ T284] cleanup_mnt+0x45f/0x4e0 [ 98.053448][ T284] __cleanup_mnt+0x19/0x20 [ 98.057862][ T284] task_work_run+0x1db/0x240 [ 98.062454][ T284] ? __cfi_task_work_run+0x10/0x10 [ 98.067569][ T284] ? __x64_sys_umount+0x125/0x160 [ 98.072597][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 98.077970][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 98.083173][ T284] exit_to_user_mode_prepare+0x87/0xd0 [ 98.088651][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 98.094112][ T284] do_syscall_64+0x58/0xa0 [ 98.098701][ T284] ? clear_bhb_loop+0x30/0x80 [ 98.103379][ T284] ? clear_bhb_loop+0x30/0x80 [ 98.108057][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.114037][ T284] RIP: 0033:0x7f2529d90a77 [ 98.118452][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 98.138228][ T284] RSP: 002b:00007ffed87d9968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 98.146644][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2529d90a77 [ 98.154615][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed87d9a20 [ 98.162583][ T284] RBP: 00007ffed87d9a20 R08: 0000000000000000 R09: 0000000000000000 [ 98.170553][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed87daab0 [ 98.178523][ T284] R13: 00007f2529e13d7d R14: 0000000000016b7c R15: 00007ffed87daaf0 [ 98.186493][ T284] [ 98.189506][ T284] Modules linked in: [ 98.193500][ T284] CR2: 0000000000000170 [ 98.197645][ T284] ---[ end trace 0000000000000000 ]--- [ 98.203088][ T284] RIP: 0010:ihold+0x26/0x60 [ 98.207604][ T284] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 b1 5e ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 c0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 a1 [ 98.227469][ T284] RSP: 0018:ffffc90000e97c78 EFLAGS: 00010246 [ 98.233535][ T284] RAX: ffff88810e183c00 RBX: 0000000000000000 RCX: ffff88810e183cc0 [ 98.241676][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.249640][ T284] RBP: ffffc90000e97c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 98.257705][ T284] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88811270808c [ 98.265679][ T284] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 98.273736][ T284] FS: 00005555654d9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 98.282840][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.289422][ T284] CR2: 0000000000000170 CR3: 00000001302c6000 CR4: 00000000003506b0 [ 98.297397][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.305367][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.313339][ T284] Kernel panic - not syncing: Fatal exception [ 98.319724][ T284] Kernel Offset: disabled [ 98.324109][ T284] Rebooting in 86400 seconds..