last executing test programs: 2m17.403171089s ago: executing program 32 (id=3021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m9.705499812s ago: executing program 4 (id=3108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000dc0)=""/87, &(0x7f0000000e40)=""/94}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m9.664761424s ago: executing program 4 (id=3110): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r3], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) syz_create_resource$binfmt(0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x5b, &(0x7f0000000480)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1d2000", 0x21, 0x2c, 0x0, @remote, @local, {[@routing={0x33, 0x0, 0x0, 0xe}], {{0x8000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"3a21e2bc9f"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x4000, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000240)=r7, 0x4) socket$tipc(0x1e, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) dup2(0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2m9.614199816s ago: executing program 4 (id=3111): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@numtail}, {@utf8}, {@fat=@nfs}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x200000000000081}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@utf8no}]}, 0x1, 0x371, &(0x7f0000002980)="$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") (async) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x5, 0x5547, &(0x7f0000005e40)="$eJzs3L1vW1UUAPDzkqZNPygRYmDrkyqkRKqjOv0QbAVavkSrqsDABI7tWm5tvyh23dCpAyNi4D9BIDEx8jcwMLMhBhAbEsjvvrRNSwEpLk6b3096Pu/dd33uvVYU+VxbDmDfWsp//zWL43E4IuYj4ljEvfNsu9OFFF6KiBMRMffAkVXt9xoORsSRiDg+SX4/z+TWl6fGJ8/98u5v3/1w6MDRr779cXarBmbt5Yjob6Tz2/0Ui06KN6r2xrhbxv7ZcRXTjd5iut8vUvvt9nqZ4XZju1+jjGc6qX+xcWs4idd7jeYkdrrXy/aNQRpwOO5s5ymfcKOxWV632utl7A6LMnbupHG37qT/bXeGo5SnVeX7tEwfo9F2TO3trXZaz8bNMjYHo6o95S1a7a1JHFexGi6aRa9VzmN9Fy/0Hvded3BrKx+3N4fdYpCfW62/slo/X6tvFq32qH221ui3zp/Nlzu9SbfaqN3oX+gURafXXm0W/ZV8udNs1ur1fPlie73bGOT1+uqZ1dO1cyvV2an8rSsf5r1WvjyJr3cHt0bd3jC/Xmzm6Rkr+drqmVdX8pP1/P3LV/Or1y5dunz1g48vfnTltcvvvFF1emRa+fLa6bW1Wv10ba2+8gytfzHurX/yPuCR9X9WTXqK64ddyWY9AYCnz+Pq/0z9DzxB/1b/Z/9Q//dvVtfFON489nD9v3kt4snX/6H+n4o9Vf+m+n8u9mv9P4P9D9gV9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL7108LXb5cnS+n6aNX+XNX0QnWdRcRcRPz5N+bj4I6c81Wehcf0X3hoDt9nUWaYjHGoOo5ExIXq+OP5J/0qAAAAwLPrm7snvkjVenpYmvWE2LXs7n/umjZt5o59Mq2hI2Jh6ecpZZubPLw4pWTl3/eB2JpStnIDa3FKydKW24EpJHp4X+3x5neExQdClsLcFKYDAADsMTsrgWlUIQAAAOxNn896AsxGFvc/M6y+wH8oheoDwcM7rgAAAICnxv3vh2cznQcAAADwfyjrf7//BwAAAM+29Pt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MXO/dwmDkRxAH42eGH/adFq79vK3qCMLSHHHCMKSBMUkAM1pAFqILeUEEGExyGQcEjE2Fai75PMYGN+vEFwmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2nRXLau4+nt9bs5me548vQEAAABOWVfLWf1kks6/N9d/Npd+N+dFRJQRcWrsPogvR5mDJqd6vv/m8P7qRQ23EXXC7jNGzfEtIv41x8Ovtr8FAAAA+LxW88U0jdbTw6TvguhSmrQpf/zPlFdERDW5z5RW7vL+ZAqrf9/DuMyUVk9gjTOFpSm3Ya60N6n/7vtZu/FBU6SmPPm2fZHZ+g4AAHRocNR0OwoBAACgSxd9F0A/inhaytwvBY5S0yzvfT06AwAAAD6gou8CAAAAgNbV4/+O9v/b2v8PAAAA+pH2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBN62o5W80X01cvDN+Xs9meJ1+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR/bnHQVCIAzCYO/6zmTuf1hp0NDYpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf1ziqOADgb2Z2trYqrlH2EBEFD3qx221t7U08KMGDf4IQ0m2N3fqjzcGWIubiTXLuRfQoIijx1v+h5xZ6qbce9lBBPK7M7Ex22gTdCM5Mks8H3rzvDsO875uFkO+8lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUJu/O4yQ79GZxXJy7++jmWtbfe6LP3N66v5y1LI7qTPpgeLn6Ieo3lwgAAABHR1LW9yGEB+n2StbHvbz+T8trspr/+2dncVnPP1n3l31Z+2ftt18fvrgzUG82TnbTi+vj0andqXT+v1m223P/ekUnf/L5u5ck/0LiDzZfmKT584y+vXPnvW4eHqsjWwDgvzhZ9kVQ/j6U9cMmEwPgyOhUCu+y/k96zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfJZni6jKMQwnJnHmfuPbq5tld/e+v+ctnO3bq1Fb6e3zO7RRpCuLg+Hp2qdTbtdu36jcur4/Hoav3BKyGEpkZ/p5j+5Y8WuDiERp7P/oO/2pFG24K4+LLbks/BCBr8oQQAwKGUFi2r6x+k2yvZuWgphOkPj9f/r1fisGD9//Djc3erY1Xr/2FtM2y/wcaVzwfXrt94c/3K6qXRpdGnb50evj08c/7s2fOD/F3JwBsTAAAA9m06nU53PnSLVq3/46Xd6/8nKnFYsP7/4rvhV9WBE/X/nuaLfk1nAgAAcLQ9/+qff0R7nI+63U5Y3di4OvwyP0bdbsij07NjA6nu27GiVev/ZKnprAAAAIA6TDajx9b/L1TisOD6/zM/vvRz9Z5JCOF4sf5/cu2z8YX6ptNqdfw5cdNzBAAAoFnHi1Zd/0/z/f/xzpaHOITwxmuzuPg3gP9Y/6dF/Z+8/81P1bGq+//P1DfFVor7s+eR9/0QOv2mMwIAAOAwe6poWbH/e7q98skvJz7s2v8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULe/AwAA//8OOz9J") 2m8.697271342s ago: executing program 4 (id=3115): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x6) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff, 0x6031}) r3 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='+\x00', &(0x7f0000000340)='^\'}!,/\xe2-[\x00', 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000400)={"2d44918feb8bdf5c54069e607a74f859", 0x0, 0x0, {0xa972, 0x80}, {0x7, 0xffff}, 0x0, [0x8, 0x6, 0xfffffffffffffffb, 0x8, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x400, 0xc, 0x1, 0x7, 0xc9, 0x79, 0x8, 0x979, 0xc275]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000001380)={{r0}, r4, 0x16, @inherit={0x60, &(0x7f0000000200)={0x0, 0x3, 0x100000001, 0x2, {0xa, 0xfff, 0xa9, 0x4, 0x7}, [0x3ff, 0x981e, 0x6]}}, @name="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"}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYBLOB="00000000fdfffffffffffffff65f5f"], 0x50) 2m8.692897613s ago: executing program 4 (id=3117): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') munlockall() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') (async) munlockall() (async) 2m8.630845366s ago: executing program 4 (id=3118): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) fcntl$setflags(r0, 0x2, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0xb, 0x10}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x800, 0x100000, 0x2}, 0x5, 0x1, 0x8, 0xfffffffa, 0xffffffff, 0x8, 0x18, 0x1, 0x6, 0xe, {0xe389, 0x5, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004090}, 0xc044) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000000)={0xa6}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x10000, 0x0, 0x81010000000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() prlimit64(r4, 0x4, 0x0, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000380)={'mangle\x00', 0x0, [0x4, 0xeb39, 0x1d, 0xd, 0xfffffffe]}, &(0x7f0000000440)=0x54) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r7 = open(&(0x7f0000000140)='./file0\x00', 0x153402, 0x42) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x0) write$cgroup_pid(r8, &(0x7f0000000480)=r4, 0x12) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r8) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x91) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000540)=0x1000000) 1m56.004906364s ago: executing program 33 (id=3195): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x800000005, 0x9) 1m54.429959463s ago: executing program 34 (id=3211): dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$pptp(0x18, 0x1, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)="1eca5e52a51d8527737cb05edb0a045f5e106166d3ea5402f8fcbe03cd285b034c290887970fd0e7313f266a8e9b595b70a3df392a891d938ec1f01aae84eb04f208e9efaf4cadd38030b968e31b5297fcbb9ce3d2962d03f67da7253662bbde418e9ddf3b1853e5da9937fa4279c52a668a2100340d310508fd8f89d118d5f1f156df329a858b328c2f3d75010309b2c2e2d06fd1dfa614f8be", &(0x7f00000001c0)="b91a091d3093b70c", 0x101, r3}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m53.605890004s ago: executing program 35 (id=3118): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) fcntl$setflags(r0, 0x2, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0xb, 0x10}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x800, 0x100000, 0x2}, 0x5, 0x1, 0x8, 0xfffffffa, 0xffffffff, 0x8, 0x18, 0x1, 0x6, 0xe, {0xe389, 0x5, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004090}, 0xc044) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000000)={0xa6}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x10000, 0x0, 0x81010000000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() prlimit64(r4, 0x4, 0x0, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000380)={'mangle\x00', 0x0, [0x4, 0xeb39, 0x1d, 0xd, 0xfffffffe]}, &(0x7f0000000440)=0x54) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r7 = open(&(0x7f0000000140)='./file0\x00', 0x153402, 0x42) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x0) write$cgroup_pid(r8, &(0x7f0000000480)=r4, 0x12) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r8) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x91) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000540)=0x1000000) 1m48.587553934s ago: executing program 7 (id=3248): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x2, 0x1, 0x0, 0xf, 0x4, [{}]}, @struct]}, {0x0, [0x61, 0x5f, 0x2e]}}, 0x0, 0x3d}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000001030000000000000000000a000000300002802c000180140003000000000000000000000000000000000014000400ff020000000000000000000002000001"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000200000017000000440006"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file1\x00', 0x208c2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) eventfd(0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090327bd7000fedbdf2516000000140001800d000100fbbb61"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x23) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0xff0f) 1m46.785302743s ago: executing program 7 (id=3258): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x6) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff, 0x6031}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) socket$key(0xf, 0x3, 0x2) 1m46.736413456s ago: executing program 7 (id=3259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000dc0)=""/87, &(0x7f0000000e40)=""/94}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m46.352433795s ago: executing program 7 (id=3260): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x5, 0x0, &(0x7f0000000240)) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f00000002c0)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x48, &(0x7f00000001c0)={[{@nouid32}, {@errors_remount}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") setgroups(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) read$FUSE(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc000, &(0x7f0000000440)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'dioread_nolock'}}, {@smackfsroot={'smackfsroot', 0x3d, 'hugetlb.1GB.usage_in_bytes\x00'}}]}, 0x2, 0x24d, &(0x7f0000000a40)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x5c, r2, 0x300, 0x70bd2c, 0x1, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x18015) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f00000002c0)=ANY=[], 0x381, 0x0) 1m45.995217733s ago: executing program 7 (id=3264): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRESHEX, @ANYBLOB="2e01"], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8000023b, r2}) r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x0, 0x98, 0x268, 0x98, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xb, 0x3, @broadcast, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}, {{@ip={@rand_addr, @dev, 0xffffffff, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) 1m45.604376712s ago: executing program 7 (id=3268): syz_emit_ethernet(0x6e, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x1, 0x9, 0x60, 0x64, 0x0, 0xa0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x4, "f15e"}, @timestamp={0x44, 0x4, 0xb3, 0x0, 0xf}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x8, 0x3, 0x1, 0x2, 0x7}, 0x1, {0xf0}}}, {0x8, 0x22eb, 0x1, {{0xd, 0x2, 0x4, 0x3, 0x1, 0x0, 0x7, 0x2}, 0x2, {0x2, 0x3, 0x1, 0xb, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'netdevsim0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe0002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x7) wait4(r4, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) close(0x3) 1m45.602244282s ago: executing program 36 (id=3268): syz_emit_ethernet(0x6e, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x1, 0x9, 0x60, 0x64, 0x0, 0xa0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x4, "f15e"}, @timestamp={0x44, 0x4, 0xb3, 0x0, 0xf}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x8, 0x3, 0x1, 0x2, 0x7}, 0x1, {0xf0}}}, {0x8, 0x22eb, 0x1, {{0xd, 0x2, 0x4, 0x3, 0x1, 0x0, 0x7, 0x2}, 0x2, {0x2, 0x3, 0x1, 0xb, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'netdevsim0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe0002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x7) wait4(r4, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) close(0x3) 1m22.297046093s ago: executing program 9 (id=3339): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) r0 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r4, 0x0, 0x0, 0x4fed0) r5 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf2) prlimit64(0x0, 0x6, &(0x7f0000000000)={0x5, 0x100}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x20, 0xb, 0x76, {0x76, 0x2, "286e260466b0dbd04444407ace15166ac7101487744db61ac07bd4890709cad9d86400dc5fa0d070be5cef8fd6e9b5e401919b18ce072603260f19e59e13fb748c1de445b8125f75e86bc6715efc2e34e76ac873160598d285befb2caff6293d600fc15973374c15fbb1cda57dd8014509663636"}}, &(0x7f00000001c0)={0x0, 0x3, 0x52, @string={0x52, 0x3, "ba50ddd376ba1914af3d61588d96b7851b47e13e24f15c52fdf858633caa919727b67b8c198ffff6ec70aa33745ebf924d6ffbd8b387c4c0d810949fecfccf906a1c2b8a778fee4bdcf74fbf064fe96b"}}, &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa, 0x7b, 0x1, {0x22, 0x3f5}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000340)={0x40, 0x17, 0x49, "a009196d242100e8d861605652fbe698dbe11af9a9040a78f7902dacf81a13891c455005c9ef6aa35290ebe7959fd866ceed410564572e47b1a118a017c12020cb1bd1b414d2e8be49"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000008c0)={0x20, 0x1, 0xe1, "32dba758cac5d74855e50e28d8b1d3ac4cf707f10e4a4c08a7abd410a92ac79bf0411f135e5b346a3bb5694e0ee12f568e35ac07a39c59951ef04ae6baa537e027860fc70eea8766d3c35b9e2b5b052a1d2710e3e90831305a7303d7f1a49e69d5e2a1ef3ffdceffed4fe58512fb0b6b496ff98e6e7c59295ea02265926f795f822b48a32206908d9f1252a6976225376917d248853e78721780447d29992635260ffab3d336c99a7b70cc22ab92e1acc85d7fb22d15a18d265a94a7c9f665ef755770cd9aa46fa970f0f7c6b182f61237a325b60ad830850cbaebf48405c8383b"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x3}}) sendfile(r5, r5, 0x0, 0x7a680000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES16, @ANYRESHEX, @ANYBLOB="2e01"], 0x50) syz_emit_ethernet(0x32, 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r7, 0x540a, 0x2) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x3, "7a58beca3900001e00000000000000000200"}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x102) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) fstat(r9, &(0x7f00000006c0)) 1m17.963829158s ago: executing program 9 (id=3356): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000240)="adda866b5cb6c64295a8589a28bf161a454109dbad4e4015795018714940e55f0b70388680619913157af2dff36248199418ad2a4fd7cd8d9a172aa5a1fdd4e43da3013632853db30c8ccf4c2f010e", 0x4f}, {&(0x7f0000000440)="db035f2f9fb6d129ea8a54906d721314ddb21dc5a3a8163d2e443702b118a749815cd18c4bd0c554bf019b335e97cf5710b1a1c2a545936005a18cada6d17b29530698c28fe2c2f1115cd6cd75666d5d3606af92abe42930ea536ada83a127d6149429640811e69fa3fa3ed7e7ed88111fa023a063d05675f4bef7bd404d5756a62236a125bfd468e1c1fe74", 0x8c}, {&(0x7f0000000500)="03e0c0e628838b1603d11e7267197aaa41749df88862adbd2937e475bc3fe2b183ad956876a7c4375e62413d3571701115887c17acb17f5e264a7d5e738e68ab309620dc9f5c8d856f76f0c8b3a9264dec7fb3245ebc50d7488c3e68c156efa31fed301de99ba6f4e649eaaeb310a429bf50bb0def9d8d65cbbdde736c86261c8bdc88526f978ffe06", 0x89}, {&(0x7f00000005c0)="b07e2e85fb1270ac145bcc1c501497a22653c2faabff14259ac7048667c021d47af5e4e35a367851f655f8fc003ad597084e58297850d2e39d1ec717ccf7c576b5a12ea880cf77a94804da351ef93b13893bef61d10332", 0x57}, {&(0x7f00000001c0)="c8df58db951272f03a8dd0cf55fe0d772a2d363d76651ab9ec55c41a2b62669024e0b7a2b3ac", 0x26}, {&(0x7f0000000640)="bbaef09c43328339cd6bf77b0bc67a09ec65c9b7ae5018125514ab5c609e89a6f4fbbd76a0651eed9d2511e375360e6ffcc08eba84cb79ce777bb476173c5863d5ff36e3745714428e7abb6285eb4bc8e0af85eb50b2148c7411722aa752202f86b1efedf95cdcb8912066f9cd2102be7eaf2bac72d4313336be66e69d8986cc6826668ad6938411e0167785543d0f899fbe8192d1462870460e2f07f9ea3fe7dba7d64eebf227611bb10d611fa95e3388e59169fe8ea96185cb4c69d7a6ce00e5057bb0028353f0f002574c56e427b4438533ec3d4df01a176462303ec4a2e338", 0xe1}, {&(0x7f0000000740)="beeff4ec1c9f5977c97109bf929e827017a4530b8a33d7c9230beb3415a9cbb2edf1485315f2147881221b343ef2b4a02eef16ac6ab8be62568f68a2e000faf21cb662ffb2f80fe934478c11b8149ce1160435746391e309a1b68365c5a2e2c45baa8a4d37593db3eb8a29e166b6bf1d0cf8e32b4660982eca9f65f50a544c7d74b35fd2b6acf6e7e6e734d2b233475864a1211316f362a42f3f9113d3072c435823539059803bc5592cf132fcfe4642293320098057074039fd645c751f72a5f18e9600b9d34c98c94fdae307c8d7f43886991b", 0xd4}], 0x7, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x240640c0) 1m17.894939822s ago: executing program 9 (id=3358): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r0, &(0x7f0000000040)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'fuse\x00'}, 0x1b, r1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x6, 0x0, 0x2, "0a08cf30c194"}}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, r5, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc840) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e0"], 0x3c}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000980), 0xfdef) splice(r9, 0x0, r11, 0x0, 0x2, 0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r10, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d5, 0x848010, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x802, 0x4, 0x7}) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x800, 0xbafd, 0x2, 0x8, {0x0, 0xf, 0x5, 0xfffffffffffffff5, 0x9, 0x4, 0x2, 0x6, 0xfffffbff, 0x8000, 0xfff, r5, 0x0, 0x0, 0x2}}, {0x0, 0x1}}}, 0x0, 0x0}) 1m17.557226748s ago: executing program 6 (id=3361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) request_key(0x0, &(0x7f0000001e80)={'syz', 0x1}, &(0x7f0000000080)='blake2b-256-generic\x00\v\xe5\xa1\"\x05<\x99\xd3U\xf8\x9cb\xfa\xb5\xd8\x1et\x05s\x95\xd9\xbd>\x97\x90\xde#\xb1&b\fy\x96b\xecc\xdbr\x94\x0e+?\xea\x1ey\x1a\xa4@\xb3\bV\xb7\xc3k\x9113,', 0xfffffffffffffffd) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20000080) request_key(0x0, &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x20008080) 1m17.049283084s ago: executing program 9 (id=3363): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x5, 0x0, &(0x7f0000000240)) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f00000002c0)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x48, &(0x7f00000001c0)={[{@nouid32}, {@errors_remount}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") setgroups(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) read$FUSE(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc000, &(0x7f0000000440)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'dioread_nolock'}}, {@smackfsroot={'smackfsroot', 0x3d, 'hugetlb.1GB.usage_in_bytes\x00'}}]}, 0x2, 0x24d, &(0x7f0000000a40)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x5c, 0x0, 0x300, 0x70bd2c, 0x1, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x18015) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f00000002c0)=ANY=[], 0x381, 0x0) 1m16.840960065s ago: executing program 9 (id=3364): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) eventfd(0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1m16.685379992s ago: executing program 6 (id=3365): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) 1m16.684880852s ago: executing program 6 (id=3366): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, 0x0, r1) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) open(0x0, 0x0, 0x10) truncate(0x0, 0x9471) r3 = timerfd_create(0x4, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, &(0x7f0000000080)=0xfffffffffffffd1a) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 1m16.676841692s ago: executing program 9 (id=3367): ftruncate(0xffffffffffffffff, 0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000880)={[{@debug}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4000000004}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_clone(0x2000000, &(0x7f0000000400)="c3ba6536eadd1be27347162b3e2ab5c88340c958f11f52314f9621cbe1caf8c354cbe0f7783ae48bf74bccca31b408f28c0f2a06d9389d5ebde7e1d3891a333644d2e456f55ea02af2e1dabfb199ee535a64dd86b9fa189168ed52ce63cbaf0104df1e1348b5c6c766c1eb76c2a54f43c1aaca0801029c45b201e95747a8ec09521b45b7543883d8b60d8151434f817b7923e829cb3f61d69df2b6701551d829e164c71aefef9da7da0c035527", 0xad, &(0x7f0000000240), &(0x7f0000000380), &(0x7f00000005c0)="329122b6ca1580dcdf348f8279d2cd7c175ae7387a826e52fa0c200a5d07868710a4aa05b6f70a9535f04d64de6255ae65f425078293398bb73bb13e785be7d2cd9d9e4dfb42f7a70215d1a3b403b2534e8600f861d0fc791a0e9a450c5c7f683e886075") sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0xffffffffffffff01) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',msize=0']) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711817000000000095"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000780)="baf80c66b868f9cc8066efbafc0c66b8bda5000066ef0f01b7876f26d0d2663ef30f09ba420066b81600000066ef660fdfe30f01c866b9800000c00f326635000400000f30660f3814ad00006766c7442400f0ffffff6766c7442402ea1700006766c744240600000000670f011424", 0x6f}], 0x1, 0x12, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x109400, 0x20) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x107000}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m16.645138374s ago: executing program 37 (id=3367): ftruncate(0xffffffffffffffff, 0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000880)={[{@debug}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4000000004}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_clone(0x2000000, &(0x7f0000000400)="c3ba6536eadd1be27347162b3e2ab5c88340c958f11f52314f9621cbe1caf8c354cbe0f7783ae48bf74bccca31b408f28c0f2a06d9389d5ebde7e1d3891a333644d2e456f55ea02af2e1dabfb199ee535a64dd86b9fa189168ed52ce63cbaf0104df1e1348b5c6c766c1eb76c2a54f43c1aaca0801029c45b201e95747a8ec09521b45b7543883d8b60d8151434f817b7923e829cb3f61d69df2b6701551d829e164c71aefef9da7da0c035527", 0xad, &(0x7f0000000240), &(0x7f0000000380), &(0x7f00000005c0)="329122b6ca1580dcdf348f8279d2cd7c175ae7387a826e52fa0c200a5d07868710a4aa05b6f70a9535f04d64de6255ae65f425078293398bb73bb13e785be7d2cd9d9e4dfb42f7a70215d1a3b403b2534e8600f861d0fc791a0e9a450c5c7f683e886075") sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0xffffffffffffff01) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',msize=0']) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711817000000000095"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000780)="baf80c66b868f9cc8066efbafc0c66b8bda5000066ef0f01b7876f26d0d2663ef30f09ba420066b81600000066ef660fdfe30f01c866b9800000c00f326635000400000f30660f3814ad00006766c7442400f0ffffff6766c7442402ea1700006766c744240600000000670f011424", 0x6f}], 0x1, 0x12, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x109400, 0x20) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x107000}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m15.825330615s ago: executing program 6 (id=3374): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x5, 0x0, &(0x7f0000000240)) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f00000002c0)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x48, &(0x7f00000001c0)={[{@nouid32}, {@errors_remount}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") setgroups(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) read$FUSE(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc000, &(0x7f0000000440)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'dioread_nolock'}}, {@smackfsroot={'smackfsroot', 0x3d, 'hugetlb.1GB.usage_in_bytes\x00'}}]}, 0x2, 0x24d, &(0x7f0000000a40)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x5c, 0x0, 0x300, 0x70bd2c, 0x1, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x18015) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f00000002c0)=ANY=[], 0x381, 0x0) 1m15.467900243s ago: executing program 6 (id=3377): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) eventfd(0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1m15.177328547s ago: executing program 6 (id=3381): capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000240)="adda866b5cb6c64295a8589a28bf161a454109dbad4e4015795018714940e55f0b70388680619913157af2dff36248199418ad2a4fd7cd8d9a172aa5a1fdd4e43da3013632853db30c8ccf4c2f010e", 0x4f}, {&(0x7f0000000440)="db035f2f9fb6d129ea8a54906d721314ddb21dc5a3a8163d2e443702b118a749815cd18c4bd0c554bf019b335e97cf5710b1a1c2a545936005a18cada6d17b29530698c28fe2c2f1115cd6cd75666d5d3606af92abe42930ea536ada83a127d6149429640811e69fa3fa3ed7e7ed88111fa023a063d05675f4bef7bd404d5756a62236a125bfd468e1c1fe74", 0x8c}, {&(0x7f0000000500)="03e0c0e628838b1603d11e7267197aaa41749df88862adbd2937e475bc3fe2b183ad956876a7c4375e62413d3571701115887c17acb17f5e264a7d5e738e68ab309620dc9f5c8d856f76f0c8b3a9264dec7fb3245ebc50d7488c3e68c156efa31fed301de99ba6f4e649eaaeb310a429bf50bb0def9d8d65cbbdde736c86261c8bdc88526f978ffe06", 0x89}, {&(0x7f00000005c0)="b07e2e85fb1270ac145bcc1c501497a22653c2faabff14259ac7048667c021d47af5e4e35a367851f655f8fc003ad597084e58297850d2e39d1ec717ccf7c576b5a12ea880cf77a94804da351ef93b13893bef61d10332", 0x57}, {&(0x7f00000001c0)="c8df58db951272f03a8dd0cf55fe0d772a2d363d76651ab9ec55c41a2b62669024e0b7a2b3ac", 0x26}, {&(0x7f0000000640)="bbaef09c43328339cd6bf77b0bc67a09ec65c9b7ae5018125514ab5c609e89a6f4fbbd76a0651eed9d2511e375360e6ffcc08eba84cb79ce777bb476173c5863d5ff36e3745714428e7abb6285eb4bc8e0af85eb50b2148c7411722aa752202f86b1efedf95cdcb8912066f9cd2102be7eaf2bac72d4313336be66e69d8986cc6826668ad6938411e0167785543d0f899fbe8192d1462870460e2f07f9ea3fe7dba7d64eebf227611bb10d611fa95e3388e59169fe8ea96185cb4c69d7a6ce00e5057bb0028353f0f002574c56e427b4438533ec3d4df01a176462303ec4a2e338", 0xe1}, {&(0x7f0000000740)="beeff4ec1c9f5977c97109bf929e827017a4530b8a33d7c9230beb3415a9cbb2edf1485315f2147881221b343ef2b4a02eef16ac6ab8be62568f68a2e000faf21cb662ffb2f80fe934478c11b8149ce1160435746391e309a1b68365c5a2e2c45baa8a4d37593db3eb8a29e166b6bf1d0cf8e32b4660982eca9f65f50a544c7d74b35fd2b6acf6e7e6e734d2b233475864a1211316f362a42f3f9113d3072c435823539059803bc5592cf132fcfe4642293320098057074039fd645c751f72a5f18e9600b9d34c98c94fdae307c8d7f43886991b", 0xd4}], 0x7, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="1351f62d16aefcd413adaf55f5df0198190c6a2bfb055791869d8f37f6526f85f37a54ddc02ef1be56ed1ac917d3666d9c500bc5086fd2726415ac657bae4f0cb9601f0cb88b2e2251c3b40e6a5ee833c94cca63f3d2eb927eca73e4339d15437f41578d8e225c24821ae287699bef8e2f63aaa00748245aa2d92adfce452becce6b05d90de968b16ce590575203508f32b1963edba4f545a952", 0x9a}, {&(0x7f0000000980)="fbce8dc5b4e66108568670", 0xb}, {&(0x7f00000009c0)="70a9e7bd828fbe3828d7d7da3dae8ed461c1b10ed2f2cb0b0df75301b18fc73133e2bb9a3e76af833bb98d2b84c6440cfb0bc358051b0b122bfef4eaea7e6194f6b6d150143e2b3caf5e69dd16edcb371e8613738acf52cc932947495c293411f24c6462a3abf3686eb36beb0b5eb26c30e7c7252909601b9a33f4f0967961456586e24596e70e2b623edfd74ff2dfd2ac3215620fcf221b582fdf15a0734a1a28157e32a3fcaa6377580e6f55d79449e8faa8acd94ee1b02d9432968e75b6aca0b9f18c0a2f9ce1b104579366e4", 0xce}], 0x3, &(0x7f0000000c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_retopts={{0x50, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xd2, [@multicast1, @broadcast, @multicast2]}, @end, @timestamp_addr={0x44, 0x1c, 0x5, 0x1, 0x9, [{@rand_addr=0x64010102, 0x4}, {@private=0xa010102, 0x3}, {@remote, 0xd746}]}, @generic={0x44, 0x11, "5b991f292448c1e2de2b93f67ef151"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xd2, 0x1, 0x9, [{@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x110}}], 0x2, 0x240640c0) 1m15.132106909s ago: executing program 38 (id=3381): capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000240)="adda866b5cb6c64295a8589a28bf161a454109dbad4e4015795018714940e55f0b70388680619913157af2dff36248199418ad2a4fd7cd8d9a172aa5a1fdd4e43da3013632853db30c8ccf4c2f010e", 0x4f}, {&(0x7f0000000440)="db035f2f9fb6d129ea8a54906d721314ddb21dc5a3a8163d2e443702b118a749815cd18c4bd0c554bf019b335e97cf5710b1a1c2a545936005a18cada6d17b29530698c28fe2c2f1115cd6cd75666d5d3606af92abe42930ea536ada83a127d6149429640811e69fa3fa3ed7e7ed88111fa023a063d05675f4bef7bd404d5756a62236a125bfd468e1c1fe74", 0x8c}, {&(0x7f0000000500)="03e0c0e628838b1603d11e7267197aaa41749df88862adbd2937e475bc3fe2b183ad956876a7c4375e62413d3571701115887c17acb17f5e264a7d5e738e68ab309620dc9f5c8d856f76f0c8b3a9264dec7fb3245ebc50d7488c3e68c156efa31fed301de99ba6f4e649eaaeb310a429bf50bb0def9d8d65cbbdde736c86261c8bdc88526f978ffe06", 0x89}, {&(0x7f00000005c0)="b07e2e85fb1270ac145bcc1c501497a22653c2faabff14259ac7048667c021d47af5e4e35a367851f655f8fc003ad597084e58297850d2e39d1ec717ccf7c576b5a12ea880cf77a94804da351ef93b13893bef61d10332", 0x57}, {&(0x7f00000001c0)="c8df58db951272f03a8dd0cf55fe0d772a2d363d76651ab9ec55c41a2b62669024e0b7a2b3ac", 0x26}, {&(0x7f0000000640)="bbaef09c43328339cd6bf77b0bc67a09ec65c9b7ae5018125514ab5c609e89a6f4fbbd76a0651eed9d2511e375360e6ffcc08eba84cb79ce777bb476173c5863d5ff36e3745714428e7abb6285eb4bc8e0af85eb50b2148c7411722aa752202f86b1efedf95cdcb8912066f9cd2102be7eaf2bac72d4313336be66e69d8986cc6826668ad6938411e0167785543d0f899fbe8192d1462870460e2f07f9ea3fe7dba7d64eebf227611bb10d611fa95e3388e59169fe8ea96185cb4c69d7a6ce00e5057bb0028353f0f002574c56e427b4438533ec3d4df01a176462303ec4a2e338", 0xe1}, {&(0x7f0000000740)="beeff4ec1c9f5977c97109bf929e827017a4530b8a33d7c9230beb3415a9cbb2edf1485315f2147881221b343ef2b4a02eef16ac6ab8be62568f68a2e000faf21cb662ffb2f80fe934478c11b8149ce1160435746391e309a1b68365c5a2e2c45baa8a4d37593db3eb8a29e166b6bf1d0cf8e32b4660982eca9f65f50a544c7d74b35fd2b6acf6e7e6e734d2b233475864a1211316f362a42f3f9113d3072c435823539059803bc5592cf132fcfe4642293320098057074039fd645c751f72a5f18e9600b9d34c98c94fdae307c8d7f43886991b", 0xd4}], 0x7, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="1351f62d16aefcd413adaf55f5df0198190c6a2bfb055791869d8f37f6526f85f37a54ddc02ef1be56ed1ac917d3666d9c500bc5086fd2726415ac657bae4f0cb9601f0cb88b2e2251c3b40e6a5ee833c94cca63f3d2eb927eca73e4339d15437f41578d8e225c24821ae287699bef8e2f63aaa00748245aa2d92adfce452becce6b05d90de968b16ce590575203508f32b1963edba4f545a952", 0x9a}, {&(0x7f0000000980)="fbce8dc5b4e66108568670", 0xb}, {&(0x7f00000009c0)="70a9e7bd828fbe3828d7d7da3dae8ed461c1b10ed2f2cb0b0df75301b18fc73133e2bb9a3e76af833bb98d2b84c6440cfb0bc358051b0b122bfef4eaea7e6194f6b6d150143e2b3caf5e69dd16edcb371e8613738acf52cc932947495c293411f24c6462a3abf3686eb36beb0b5eb26c30e7c7252909601b9a33f4f0967961456586e24596e70e2b623edfd74ff2dfd2ac3215620fcf221b582fdf15a0734a1a28157e32a3fcaa6377580e6f55d79449e8faa8acd94ee1b02d9432968e75b6aca0b9f18c0a2f9ce1b104579366e4", 0xce}], 0x3, &(0x7f0000000c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_retopts={{0x50, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xd2, [@multicast1, @broadcast, @multicast2]}, @end, @timestamp_addr={0x44, 0x1c, 0x5, 0x1, 0x9, [{@rand_addr=0x64010102, 0x4}, {@private=0xa010102, 0x3}, {@remote, 0xd746}]}, @generic={0x44, 0x11, "5b991f292448c1e2de2b93f67ef151"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xd2, 0x1, 0x9, [{@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x110}}], 0x2, 0x240640c0) 11.369992854s ago: executing program 2 (id=3966): write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0x0, 0xf9}, @void, @x25={0x1, 0xfa, 0x27}}, 0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/29, 0x1d}, 0x42}], 0x1, 0x221, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000140300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 10.286383138s ago: executing program 2 (id=3977): r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) close_range(r0, 0xffffffffffffffff, 0x0) 9.927445356s ago: executing program 2 (id=3979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x77774002, 0x11b000, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x8000000, 0x10000}) 9.781513924s ago: executing program 2 (id=3981): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 9.701950577s ago: executing program 2 (id=3982): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x0) listen(r1, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) 9.548845495s ago: executing program 2 (id=3985): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) 9.378500064s ago: executing program 39 (id=3985): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) 4.737494745s ago: executing program 1 (id=4010): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 4.732540075s ago: executing program 1 (id=4013): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 4.637499749s ago: executing program 1 (id=4015): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.736474134s ago: executing program 8 (id=4027): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.706514176s ago: executing program 8 (id=4028): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r0], 0x38}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000240)=0xfffff800) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x1, 0x2}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 2.282701417s ago: executing program 1 (id=4033): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.225441669s ago: executing program 1 (id=4037): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004893a710fd03beeb639a010203010902340001fb0000000904"], 0x0) 2.21945727s ago: executing program 5 (id=4039): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc9, &(0x7f00000002c0)=""/201}, 0x94) 2.20510617s ago: executing program 5 (id=4040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 2.145300443s ago: executing program 5 (id=4041): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.800000691s ago: executing program 8 (id=4043): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1.738771493s ago: executing program 8 (id=4045): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 1.664145178s ago: executing program 8 (id=4047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r2, @ANYBLOB="080002007f0000010800"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 1.663776848s ago: executing program 0 (id=4049): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xb0) 1.60533678s ago: executing program 0 (id=4050): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x129242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x3, 0x4}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) 1.60514982s ago: executing program 8 (id=4051): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, 0x0, 0x0) 1.341158823s ago: executing program 5 (id=4052): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x1a79}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 839.817948ms ago: executing program 3 (id=4054): eventfd2(0x0, 0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xe, 0x30000, &(0x7f0000000480)="b9fb0307683a060000000037888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a70fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 705.470435ms ago: executing program 0 (id=4055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000001bc0)=ANY=[], 0x0) 705.345435ms ago: executing program 0 (id=4056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 705.133535ms ago: executing program 0 (id=4057): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 515.363995ms ago: executing program 0 (id=4058): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0x6, &(0x7f0000000380), 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000280)=0x420a, 0x4) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r7, 0x400, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) 472.053377ms ago: executing program 5 (id=4059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000580)) 418.565169ms ago: executing program 3 (id=4060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 405.12751ms ago: executing program 3 (id=4061): socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 297.452836ms ago: executing program 3 (id=4062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'pim6reg\x00', {0x2, 0x4e23, @loopback}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1, &(0x7f0000000b40)}}], 0x2, 0x20000004) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) write$cgroup_pressure(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 236.551619ms ago: executing program 1 (id=4063): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700000409"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {0xc, 0x3}, {0x10, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d0090000060011000700000008000100706369001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 217.209879ms ago: executing program 5 (id=4064): getdents64(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x1, 0x104) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700"], 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0xa, 0x0, &(0x7f0000000080)) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 388.43µs ago: executing program 3 (id=4065): sendto(0xffffffffffffffff, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042", 0x2e, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 3 (id=4066): syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x1, 0x80, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x22}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x403, 0x3, 0x3, 0xfffd, 0x2, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x404, 0x2, 0x9, 0x50, 0x80, 0x4d}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0x8, "", 'V/'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x1, 0x2, {0x7, 0x25, 0x1, 0x0, 0x8, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x59, {0x7, 0x25, 0x1, 0x8, 0x6, 0xdbd7}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=4067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): urnal. Opts: grpquota,jqfmt=vfsv1,quota,,errors=continue [ 1045.862511][T13697] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.924713][T13701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.953638][T13701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.961521][T13701] device bridge_slave_0 entered promiscuous mode [ 1045.970829][T13701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.977926][T13701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.999395][T13701] device bridge_slave_1 entered promiscuous mode [ 1046.253547][T13711] tipc: Enabling of bearer rejected, already enabled [ 1046.354622][T13701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.361739][T13701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.369069][T13701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.376112][T13701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.476873][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1046.487980][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.517471][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.547313][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1046.564467][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.571660][ T5051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.595660][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1046.615994][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.623106][ T5051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.667506][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1046.747697][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1046.772519][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1046.798264][T13701] device veth0_vlan entered promiscuous mode [ 1046.806921][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1046.866892][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1046.905040][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1046.946469][T11818] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1046.955630][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1046.988059][ T9108] device bridge_slave_1 left promiscuous mode [ 1046.996699][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.036932][ T9108] device bridge_slave_0 left promiscuous mode [ 1047.043116][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.069161][ T9108] device veth1_macvtap left promiscuous mode [ 1047.075246][ T9108] device veth0_vlan left promiscuous mode [ 1047.186607][T11818] usb 1-1: Using ep0 maxpacket: 32 [ 1047.195829][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1047.204323][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1047.207141][T13732] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1047.219077][T13701] device veth1_macvtap entered promiscuous mode [ 1047.234208][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.241710][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.249657][T13725] device bridge_slave_0 entered promiscuous mode [ 1047.260242][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1047.268619][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1047.277235][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1047.289581][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.298292][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.305781][T13725] device bridge_slave_1 entered promiscuous mode [ 1047.312851][T11818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.325251][T11818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.335160][T11818] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1047.344520][T11818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.356636][T11818] usb 1-1: config 0 descriptor?? [ 1047.362990][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1047.371801][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1047.397186][T11818] hub 1-1:0.0: USB hub found [ 1047.492086][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.499209][T13725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.506533][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.513582][T13725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.539905][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1047.548546][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.556171][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.573875][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1047.582298][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.589388][ T8535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.616829][T11818] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1047.649780][T13739] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1047.659469][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1047.686738][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.693810][ T8535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.710947][T13740] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1047.736790][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1047.745028][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1047.761385][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1047.770471][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1047.778959][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1047.786784][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1047.808866][T13725] device veth0_vlan entered promiscuous mode [ 1047.821072][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1047.846730][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1047.856328][T13725] device veth1_macvtap entered promiscuous mode [ 1047.960084][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1047.968235][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1047.976602][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1047.996952][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1048.043705][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1048.075993][T13754] tipc: Enabling of bearer rejected, already enabled [ 1048.400674][T13767] FAULT_INJECTION: forcing a failure. [ 1048.400674][T13767] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.413471][T13767] CPU: 1 PID: 13767 Comm: syz.6.3230 Tainted: G W syzkaller #0 [ 1048.422455][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1048.432523][T13767] Call Trace: [ 1048.435839][T13767] __dump_stack+0x21/0x24 [ 1048.440226][T13767] dump_stack_lvl+0x1a7/0x208 [ 1048.444919][T13767] ? show_regs_print_info+0x18/0x18 [ 1048.450131][T13767] dump_stack+0x15/0x1c [ 1048.454307][T13767] should_fail+0x3c1/0x510 [ 1048.458743][T13767] ? __anon_vma_prepare+0x51/0x420 [ 1048.463895][T13767] __should_failslab+0xa4/0xe0 [ 1048.468671][T13767] should_failslab+0x9/0x20 [ 1048.473216][T13767] kmem_cache_alloc+0x3d/0x2d0 [ 1048.478017][T13767] __anon_vma_prepare+0x51/0x420 [ 1048.482971][T13767] wp_page_copy+0xfff/0x15f0 [ 1048.487577][T13767] ? __alloc_pages_nodemask+0x290/0x620 [ 1048.493159][T13767] ? trace_spf_pte_lock+0x110/0x110 [ 1048.498379][T13767] ? __kasan_check_write+0x14/0x20 [ 1048.503529][T13767] do_wp_page+0x9a6/0xc80 [ 1048.507883][T13767] handle_pte_fault+0xac1/0x3750 [ 1048.512839][T13767] handle_mm_fault+0xf81/0x1710 [ 1048.517707][T13767] ? can_reuse_spf_vma+0xe0/0xe0 [ 1048.522662][T13767] ? __kasan_check_write+0x14/0x20 [ 1048.527789][T13767] ? down_read_trylock+0x106/0x160 [ 1048.532929][T13767] ? __kasan_check_write+0x14/0x20 [ 1048.538070][T13767] ? can_reuse_spf_vma+0xc8/0xe0 [ 1048.543130][T13767] do_user_addr_fault+0x5a8/0xc90 [ 1048.548173][T13767] ? do_kern_addr_fault+0x80/0x80 [ 1048.553218][T13767] ? __kasan_check_read+0x11/0x20 [ 1048.558258][T13767] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 1048.563911][T13767] exc_page_fault+0x5a/0xc0 [ 1048.568429][T13767] ? asm_exc_page_fault+0x8/0x30 [ 1048.573376][T13767] asm_exc_page_fault+0x1e/0x30 [ 1048.578250][T13767] RIP: 0033:0x7ffa3068ba63 [ 1048.582699][T13767] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1048.602316][T13767] RSP: 002b:00007ffa2f22e470 EFLAGS: 00010202 [ 1048.608391][T13767] RAX: 0000000000000400 RBX: 00007ffa2f22e530 RCX: 00007ffa26e0f000 [ 1048.616376][T13767] RDX: 00007ffa2f22e6d0 RSI: 0000000000000009 RDI: 00007ffa2f22e5d0 [ 1048.624357][T13767] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001af [ 1048.632334][T13767] R10: 00000000000001c4 R11: 00007ffa2f22e530 R12: 0000000000000001 [ 1048.640323][T13767] R13: 00007ffa3088a620 R14: 0000000000000020 R15: 00007ffa2f22e5d0 [ 1048.661355][T13762] tipc: Started in network mode [ 1048.666431][T13762] tipc: Own node identity ac14140f, cluster identity 4711 [ 1048.673641][T13762] tipc: New replicast peer: 255.255.255.255 [ 1048.680180][T13762] tipc: Enabled bearer , priority 10 [ 1048.742508][T13767] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1048.751728][T11818] usbhid 1-1:0.0: can't add hid device: -71 [ 1048.759875][T11818] usbhid: probe of 1-1:0.0 failed with error -71 [ 1048.783070][T13767] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1048.792617][T13767] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.803568][T11818] usb 1-1: USB disconnect, device number 30 [ 1048.901126][T13777] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1049.043048][T13780] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1049.068125][T13780] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1049.090448][T13780] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 1049.133321][T13780] EXT4-fs warning (device loop7): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 1049.167626][T13780] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 1049.210542][T13780] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3234: bg 0: block 64: padding at end of block bitmap is not set [ 1049.225138][T13780] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 1049.236332][T13780] EXT4-fs (loop7): 1 truncate cleaned up [ 1049.242178][T13780] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1049.401919][T13790] erofs: (device loop6): mounted with root inode @ nid 36. [ 1049.453228][T13790] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 1049.496482][T11819] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1049.522467][T13790] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 1049.528646][T13793] F2FS-fs (loop8): fault_injection options not supported [ 1049.538868][T13793] F2FS-fs (loop8): invalid crc value [ 1049.553108][T13793] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1049.676510][T13793] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1049.686495][T11818] tipc: 32-bit node address hash set to f1414ac [ 1049.876859][T11819] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1049.920609][T11819] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1050.068885][T11819] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1050.089290][T13725] attempt to access beyond end of device [ 1050.089290][T13725] loop8: rw=2049, want=45104, limit=40427 [ 1050.320209][T11819] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1050.342824][T11819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.351749][T11819] usb 1-1: Product: syz [ 1050.355977][T11819] usb 1-1: Manufacturer: syz [ 1050.361085][T11819] usb 1-1: SerialNumber: syz [ 1050.872104][T13816] tipc: Started in network mode [ 1050.877453][T13816] tipc: Own node identity ac14140f, cluster identity 4711 [ 1050.885712][T13816] tipc: New replicast peer: 255.255.255.255 [ 1050.891892][T13816] tipc: Enabled bearer , priority 10 [ 1050.937454][T13789] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1050.972459][T13789] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1050.980958][T13814] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1051.073954][T13821] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1051.118288][T13821] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv1,quota,,errors=continue [ 1051.130286][T13821] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.188136][T13831] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000000400, [ 1051.207700][T13831] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.379284][T13836] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3247: bg 0: block 345: padding at end of block bitmap is not set [ 1051.414284][T13836] EXT4-fs (loop7): Remounting filesystem read-only [ 1051.647379][T13789] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1051.698102][T13839] netlink: 'syz.7.3248': attribute type 1 has an invalid length. [ 1052.016555][T11818] tipc: 32-bit node address hash set to f1414ac [ 1053.101083][T13861] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1053.164219][T13859] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000000400, [ 1053.187269][T13859] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.430079][T13877] tipc: Enabling of bearer rejected, already enabled [ 1053.737667][T13880] exfat: Deprecated parameter 'utf8' [ 1053.743129][T13880] exfat: Deprecated parameter 'utf8' [ 1053.754781][T13880] exfat: Deprecated parameter 'utf8' [ 1053.845939][T13880] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1053.875762][T13874] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3255: bg 0: block 345: padding at end of block bitmap is not set [ 1053.893417][T13883] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1053.902305][T13874] EXT4-fs (loop8): Remounting filesystem read-only [ 1053.917699][ T7] tipc: Disabling bearer [ 1053.923304][ T7] tipc: Left network mode [ 1053.932095][T13883] incfs: ino conflict with backing FS 2 [ 1054.023916][T13883] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1054.047350][T13701] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1054.062642][T13701] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 1054.085042][T13701] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1054.099925][T13701] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1054.129153][T13891] FAULT_INJECTION: forcing a failure. [ 1054.129153][T13891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.142478][T13891] CPU: 1 PID: 13891 Comm: syz.8.3263 Tainted: G W syzkaller #0 [ 1054.151342][T13891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1054.161509][T13891] Call Trace: [ 1054.164809][T13891] __dump_stack+0x21/0x24 [ 1054.169151][T13891] dump_stack_lvl+0x1a7/0x208 [ 1054.173857][T13891] ? show_regs_print_info+0x18/0x18 [ 1054.179112][T13891] ? kasan_set_track+0x5b/0x70 [ 1054.183898][T13891] ? __kasan_slab_free+0x11/0x20 [ 1054.188858][T13891] ? do_sys_openat2+0x68e/0x750 [ 1054.193813][T13891] ? do_syscall_64+0x31/0x40 [ 1054.198415][T13891] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1054.204492][T13891] dump_stack+0x15/0x1c [ 1054.208649][T13891] should_fail+0x3c1/0x510 [ 1054.213072][T13891] should_fail_usercopy+0x1a/0x20 [ 1054.218096][T13891] _copy_to_user+0x20/0x90 [ 1054.222548][T13891] inet_gifconf+0x1d7/0x300 [ 1054.227047][T13891] ? inet_abc_len+0xf0/0xf0 [ 1054.231557][T13891] ? __kasan_check_write+0x14/0x20 [ 1054.236678][T13891] ? mutex_lock+0x92/0xf0 [ 1054.241022][T13891] ? mutex_trylock+0xa0/0xa0 [ 1054.245611][T13891] ? do_vfs_ioctl+0x1302/0x14c0 [ 1054.250528][T13891] dev_ifconf+0xd7/0x160 [ 1054.254778][T13891] sock_do_ioctl+0x237/0x380 [ 1054.259372][T13891] ? sock_show_fdinfo+0xa0/0xa0 [ 1054.264227][T13891] ? kernel_write+0x3c0/0x3c0 [ 1054.268905][T13891] ? selinux_file_ioctl+0x3a0/0x4d0 [ 1054.274104][T13891] ? mutex_trylock+0xa0/0xa0 [ 1054.278699][T13891] ? __fget_files+0x2c4/0x320 [ 1054.283382][T13891] sock_ioctl+0x4bd/0x760 [ 1054.287711][T13891] ? sock_poll+0x350/0x350 [ 1054.292128][T13891] ? __fget_files+0x2c4/0x320 [ 1054.296812][T13891] ? security_file_ioctl+0x84/0xa0 [ 1054.301935][T13891] ? sock_poll+0x350/0x350 [ 1054.306352][T13891] __se_sys_ioctl+0x121/0x1a0 [ 1054.311041][T13891] __x64_sys_ioctl+0x7b/0x90 [ 1054.315647][T13891] do_syscall_64+0x31/0x40 [ 1054.320069][T13891] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1054.325964][T13891] RIP: 0033:0x7f69bf147799 [ 1054.330385][T13891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.349992][T13891] RSP: 002b:00007f69bdba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1054.358425][T13891] RAX: ffffffffffffffda RBX: 00007f69bf3c0fa0 RCX: 00007f69bf147799 [ 1054.366588][T13891] RDX: 0000200000000140 RSI: 0000000000008912 RDI: 0000000000000003 [ 1054.374587][T13891] RBP: 00007f69bdba2090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.382584][T13891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.390581][T13891] R13: 00007f69bf3c1038 R14: 00007f69bf3c0fa0 R15: 00007ffe4a672668 [ 1054.466497][ T675] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1054.540440][T13904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.547710][T13904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.555253][T13904] device bridge_slave_0 entered promiscuous mode [ 1054.562845][T13904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.570147][T13904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.582585][T13904] device bridge_slave_1 entered promiscuous mode [ 1054.647470][T13904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.654586][T13904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.661903][T13904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.668965][T13904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.695795][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1054.703850][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.712303][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.726460][ T675] usb 7-1: Using ep0 maxpacket: 8 [ 1054.732089][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1054.740679][ T9108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.747788][ T9108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.755784][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1054.764711][ T9108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.771819][ T9108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.788513][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1054.796725][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1054.808813][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1054.817296][T11819] rtl8150 1-1:1.0: couldn't reset the device [ 1054.823382][T11819] rtl8150: probe of 1-1:1.0 failed with error -5 [ 1054.832805][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1054.842027][T11819] usb 1-1: USB disconnect, device number 31 [ 1054.843573][T13909] F2FS-fs (loop8): fault_injection options not supported [ 1054.848837][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1054.855969][ T675] usb 7-1: config 0 has no interfaces? [ 1054.868264][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1054.879166][ T675] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1054.884077][T13909] F2FS-fs (loop8): invalid crc value [ 1054.889038][ T675] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.903695][ T675] usb 7-1: config 0 descriptor?? [ 1054.909390][T13904] device veth0_vlan entered promiscuous mode [ 1054.916143][T13909] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1054.926854][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1054.942956][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1054.955178][T13904] device veth1_macvtap entered promiscuous mode [ 1054.963320][ T7] device veth1_macvtap left promiscuous mode [ 1054.982409][T13909] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1055.034180][T13725] attempt to access beyond end of device [ 1055.034180][T13725] loop8: rw=2049, want=45104, limit=40427 [ 1055.051204][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1055.059204][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1055.067917][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1055.085778][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1055.098178][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1055.153858][T13889] udc-core: couldn't find an available UDC or it's busy [ 1055.171156][T13889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1055.247990][ T24] audit: type=1326 audit(1773956162.042:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1055.276939][ T24] audit: type=1326 audit(1773956162.042:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69bf107fce code=0x7ffc0000 [ 1055.301098][ T24] audit: type=1326 audit(1773956162.042:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69bf107fce code=0x7ffc0000 [ 1055.325273][ T24] audit: type=1326 audit(1773956162.042:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1055.349336][ T24] audit: type=1326 audit(1773956162.042:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1055.393451][ T24] audit: type=1326 audit(1773956162.042:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1055.432922][ T24] audit: type=1326 audit(1773956162.042:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1055.457135][ T24] audit: type=1326 audit(1773956162.042:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1055.481687][ T7] tipc: Disabling bearer [ 1055.485956][ T24] audit: type=1326 audit(1773956162.042:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1055.487800][ T7] tipc: Left network mode [ 1055.511289][ T24] audit: type=1326 audit(1773956162.042:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1055.538457][T11819] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1055.926541][T11819] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1055.937620][T11819] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1056.007696][T13935] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1056.106995][T11819] usb 9-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1056.116083][T11819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.124455][T11818] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1056.132276][T11819] usb 9-1: Product: syz [ 1056.132673][ T7] device bridge_slave_1 left promiscuous mode [ 1056.136526][T11819] usb 9-1: Manufacturer: syz [ 1056.147364][T11819] usb 9-1: SerialNumber: syz [ 1056.149571][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.161778][ T7] device bridge_slave_0 left promiscuous mode [ 1056.168139][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.176339][ T7] device veth1_macvtap left promiscuous mode [ 1056.182842][ T7] device veth0_vlan left promiscuous mode [ 1056.300552][T13937] F2FS-fs (loop0): invalid crc value [ 1056.307115][T13937] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1056.338881][T13937] F2FS-fs (loop0): Start checkpoint disabled! [ 1056.345747][T13937] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1056.511744][T11818] usb 10-1: config 0 interface 0 altsetting 44 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.524448][T11818] usb 10-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1056.538955][T11819] usb 9-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 1056.546686][T11818] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1056.554088][T11818] usb 10-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00 [ 1056.610718][T11819] usb 9-1: incorrect wMaxPacketSize 0x20 for BADD profile [ 1056.625323][T11818] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.635176][T11819] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 1056.705320][T11818] usb 10-1: config 0 descriptor?? [ 1056.741182][T11819] usb 9-1: USB disconnect, device number 2 [ 1057.014895][ T9822] usb 7-1: USB disconnect, device number 2 [ 1057.058470][T13949] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000000400, [ 1057.078159][T13949] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.106556][T11823] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1057.150255][T13957] EXT4-fs (loop8): Ignoring removed bh option [ 1057.157288][T13957] EXT4-fs (loop8): Unrecognized mount option "ro" or missing value [ 1057.246164][T13959] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3283: bg 0: block 345: padding at end of block bitmap is not set [ 1057.260900][T13959] EXT4-fs (loop6): Remounting filesystem read-only [ 1057.346698][T11818] usbhid 10-1:0.0: can't add hid device: -71 [ 1057.353476][T11818] usbhid: probe of 10-1:0.0 failed with error -71 [ 1057.360023][T11823] usb 1-1: Using ep0 maxpacket: 32 [ 1057.377440][T11818] usb 10-1: USB disconnect, device number 2 [ 1057.411169][T13962] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 1057.476505][T11823] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1057.486506][T13962] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1057.498039][T13962] EXT4-fs (loop8): 1 truncate cleaned up [ 1057.501078][T11823] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1057.503715][T13962] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x000000000000ee01,norecovery,noinit_itable,barrier,mblk_io_submit,nogrpid, [ 1057.587364][T11823] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1057.596811][T11823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1057.606565][T11823] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1057.616816][T11823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1032, setting to 64 [ 1057.627966][T11823] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1057.641106][T11823] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1057.651270][T11823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.682120][T11823] usb 1-1: config 0 descriptor?? [ 1058.381696][T13978] tipc: Started in network mode [ 1058.386788][T13978] tipc: Own node identity ac14140f, cluster identity 4711 [ 1058.394449][T13978] tipc: New replicast peer: 255.255.255.255 [ 1058.400865][T13978] tipc: Enabled bearer , priority 10 [ 1058.673486][T13980] fuse: Bad value for 'fd' [ 1058.766545][T11823] usb 1-1: USB disconnect, device number 32 [ 1058.792305][ T8535] attempt to access beyond end of device [ 1058.792305][ T8535] loop0: rw=2049, want=40968, limit=40427 [ 1058.803768][ T8535] attempt to access beyond end of device [ 1058.803768][ T8535] loop0: rw=2049, want=41008, limit=40427 [ 1058.917449][T13986] F2FS-fs (loop9): fault_injection options not supported [ 1058.943067][T13986] F2FS-fs (loop9): invalid crc value [ 1058.996019][T13986] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1059.025536][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3297'. [ 1059.047839][T13986] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1059.202111][T11818] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1059.527825][T11823] tipc: 32-bit node address hash set to f1414ac [ 1059.654686][T14010] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache, [ 1059.666894][T14010] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.767119][T11818] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1059.797006][T11818] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1059.818506][T11818] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1060.052635][T11818] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1060.095390][T11818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.149404][T14017] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1060.157255][T11818] usb 9-1: Product: syz [ 1060.161482][T11818] usb 9-1: Manufacturer: syz [ 1060.166114][T11818] usb 9-1: SerialNumber: syz [ 1060.216733][T13988] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1060.224095][T13988] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1060.718697][T14024] xt_bpf: check failed: parse error [ 1060.864659][T14042] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1060.878509][T13988] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1061.046526][ T9822] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1061.394991][T14061] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache, [ 1061.407002][T14061] ext4 filesystem being mounted at /619/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.467245][ T9822] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1080, setting to 1024 [ 1061.526202][ T9822] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1061.727313][ T9822] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1061.905060][ T9822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1061.943633][ T9822] usb 7-1: SerialNumber: syz [ 1062.006531][T14032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1062.021792][T14075] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1062.206503][ T675] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1062.230451][T14032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1062.446484][ T675] usb 10-1: Using ep0 maxpacket: 32 [ 1062.656519][ T675] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1062.687934][ T9822] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1062.818268][T14084] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1062.836553][ T675] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1062.857780][ T675] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.866277][ T675] usb 10-1: Product: syz [ 1062.871373][ T675] usb 10-1: Manufacturer: syz [ 1062.876091][ T675] usb 10-1: SerialNumber: syz [ 1062.892450][ T9787] usb 7-1: USB disconnect, device number 3 [ 1062.911834][ T9787] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 1063.108172][T14097] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1063.117965][T14097] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1063.124718][T14097] __quota_error: 41 callbacks suppressed [ 1063.124730][T14097] Quota error (device loop8): v2_read_file_info: Can't read info structure [ 1063.139358][T14097] EXT4-fs warning (device loop8): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 1063.143590][ T24] audit: type=1400 audit(1773956169.932:1614): avc: denied { remount } for pid=14027 comm="syz.9.3307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1063.154142][T14097] EXT4-fs (loop8): Cannot turn on quotas: error -5 [ 1063.155316][T14097] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3326: bg 0: block 64: padding at end of block bitmap is not set [ 1063.196197][T14097] EXT4-fs error (device loop8) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 1063.205679][T14097] EXT4-fs (loop8): 1 truncate cleaned up [ 1063.217544][T14097] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 1063.340060][ T675] usb 10-1: USB disconnect, device number 3 [ 1063.576513][T11818] rtl8150 9-1:1.0: couldn't reset the device [ 1063.582655][T11818] rtl8150: probe of 9-1:1.0 failed with error -5 [ 1063.632877][T11818] usb 9-1: USB disconnect, device number 3 [ 1064.219387][T14141] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache, [ 1064.231257][T14141] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.776042][ T24] audit: type=1400 audit(1773956172.562:1615): avc: denied { read } for pid=14078 comm="syz.0.3324" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=63593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1065.881260][T14150] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1065.890315][T14150] ext4 filesystem being mounted at /620/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.078040][ T24] audit: type=1400 audit(1773956172.872:1616): avc: denied { create } for pid=14078 comm="syz.0.3324" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1066.173388][ T24] audit: type=1400 audit(1773956172.962:1617): avc: denied { unlink } for pid=14078 comm="syz.0.3324" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1077.799938][ T24] audit: type=1400 audit(1773956184.592:1618): avc: denied { nlmsg_write } for pid=14155 comm="syz.1.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1077.867874][T14158] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1077.904938][T14158] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue [ 1077.918062][T14158] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.961569][T14158] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 1078.127780][T14169] erofs: (device loop8): mounted with root inode @ nid 36. [ 1078.136141][T14169] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 1078.149746][T14169] erofs: (device loop8): z_erofs_readpage: failed to read, err [-117] [ 1078.209961][T14168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.217163][T14168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.224701][T14168] device bridge_slave_0 entered promiscuous mode [ 1078.232016][T14168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.239327][T14168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.246880][T14168] device bridge_slave_1 entered promiscuous mode [ 1078.324134][T14168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.331250][T14168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.338578][T14168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.345616][T14168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.373281][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1078.381624][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.390416][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.403265][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1078.412085][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.419263][ T5051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.428980][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1078.444484][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.451618][ T5051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.469330][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1078.482391][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1078.491816][T14159] EXT4-fs (loop9): Ignoring removed orlov option [ 1078.499435][T14159] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1078.522909][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1078.535546][T14159] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1078.560603][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1078.582444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1078.605788][T14159] EXT4-fs (loop9): 1 truncate cleaned up [ 1078.612422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1078.619812][T14159] EXT4-fs (loop9): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue [ 1078.643994][T14168] device veth0_vlan entered promiscuous mode [ 1078.667383][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1078.694436][T14168] device veth1_macvtap entered promiscuous mode [ 1078.727087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1078.752016][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1078.775081][ T8535] tipc: Disabling bearer [ 1078.792936][ T8535] tipc: Left network mode [ 1078.906589][ T9822] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1079.156887][ T9822] usb 7-1: Using ep0 maxpacket: 32 [ 1079.316701][ T9822] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1079.336383][ T9822] usb 7-1: config 0 has no interface number 0 [ 1079.343749][ T9822] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1079.708232][ T8535] device veth1_macvtap left promiscuous mode [ 1079.816517][ T9822] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1079.825632][ T9822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.880016][ T9822] usb 7-1: Product: syz [ 1079.889796][ T9822] usb 7-1: Manufacturer: syz [ 1079.894420][ T9822] usb 7-1: SerialNumber: syz [ 1079.937262][ T9822] usb 7-1: config 0 descriptor?? [ 1079.977808][ T9822] smsc75xx v1.0.0 [ 1080.155065][T14196] F2FS-fs (loop0): invalid crc value [ 1080.199964][T14196] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1080.214683][T14200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.256210][T14196] F2FS-fs (loop0): Start checkpoint disabled! [ 1080.263089][T14196] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1080.272115][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.312382][T14200] device bridge_slave_0 entered promiscuous mode [ 1080.331846][T14200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.338978][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.346763][T14200] device bridge_slave_1 entered promiscuous mode [ 1080.475464][ T8535] tipc: Disabling bearer [ 1080.487647][ T8535] tipc: Left network mode [ 1080.522972][T14200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.530071][T14200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.537370][T14200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.544407][T14200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.552172][ T7] attempt to access beyond end of device [ 1080.552172][ T7] loop0: rw=2049, want=41000, limit=40427 [ 1080.636493][ T9822] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1080.658556][ T9822] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1080.694787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1080.705670][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1080.730918][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1080.778318][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1080.802974][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1080.837335][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1080.875906][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1080.891097][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1080.909872][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1080.941205][T14200] device veth0_vlan entered promiscuous mode [ 1080.947647][ T9822] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1080.976453][ T9822] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1080.986128][ T9822] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1080.995918][ T9822] smsc75xx: probe of 7-1:0.184 failed with error -61 [ 1081.003623][T14212] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 1081.022090][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1081.026958][T14212] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.071479][T14200] device veth1_macvtap entered promiscuous mode [ 1081.120306][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1081.138280][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1081.158468][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1081.176719][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1081.348771][ T8535] device veth1_macvtap left promiscuous mode [ 1081.466458][ T9822] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1081.506440][T11821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1081.690195][T14225] netlink: 'syz.8.3352': attribute type 1 has an invalid length. [ 1081.836857][ T9822] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1081.853289][ T9822] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1081.866654][T11821] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1081.896482][ T9822] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1081.964253][T14233] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3354'. [ 1081.976554][T11821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1081.985914][T11821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1082.006516][T14233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1082.013815][T14233] IPv6: NLM_F_CREATE should be set when creating new route [ 1082.021094][T14233] IPv6: NLM_F_CREATE should be set when creating new route [ 1082.046545][T11821] usb 2-1: SerialNumber: syz [ 1082.066542][ T9822] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1082.075945][ T9822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.084904][ T9822] usb 1-1: Product: syz [ 1082.099242][ T9822] usb 1-1: Manufacturer: syz [ 1082.103938][ T9822] usb 1-1: SerialNumber: syz [ 1082.126578][T14218] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1082.133582][T14218] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1082.276172][ T9787] usb 7-1: USB disconnect, device number 4 [ 1082.337904][T14250] EXT4-fs (loop6): mounted filesystem without journal. Opts: prjquota,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 1082.360755][T14250] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.673699][T14221] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.3347: EA inode hash validation failed [ 1082.686592][T14221] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2797: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1082.700528][T14221] EXT4-fs (loop1): 1 orphan inode deleted [ 1082.706299][T14221] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000040000fe,debug_want_extra_isize=0x000000000000005c,nouid32,sb=0x0000000000000001,acl,nodiscard,,errors=continue [ 1082.790034][T14218] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1082.804085][T14221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1083.013677][T14264] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 1083.022983][T14264] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1083.037183][T11821] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1083.045130][T14264] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,data=ordered,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 1083.103913][T14268] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 1083.125312][T14268] incfs: ino conflict with backing FS 2 [ 1083.165247][T14266] udevd[14266]: incorrect ext4 checksum on /dev/loop9 [ 1083.173610][T14268] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1083.199641][T13904] EXT4-fs error (device loop9): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1083.218972][T13904] EXT4-fs warning (device loop9): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 1083.260541][ T9788] usb 2-1: USB disconnect, device number 2 [ 1083.265759][T13904] EXT4-fs error (device loop9): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1083.270230][ T9788] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 1083.286973][T13904] EXT4-fs error (device loop9): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1083.495216][T14307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.502534][T14307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.510243][T14307] device bridge_slave_0 entered promiscuous mode [ 1083.519420][T14307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.526615][T14307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.534344][T14307] device bridge_slave_1 entered promiscuous mode [ 1083.598448][T14314] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 1083.616792][T14314] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.618848][T14307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.634240][T14307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.641576][T14307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.648659][T14307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.675142][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1083.682872][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.690488][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.708249][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1083.716766][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.723878][ T5051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.731526][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1083.739751][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.746833][ T5051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.760600][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1083.775589][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1083.790503][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1083.807692][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1083.816290][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1083.824965][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1083.833586][T14307] device veth0_vlan entered promiscuous mode [ 1083.849574][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1083.859737][T14307] device veth1_macvtap entered promiscuous mode [ 1083.872399][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1083.882621][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1083.905409][ T303] device bridge_slave_1 left promiscuous mode [ 1083.915247][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.924733][ T303] device bridge_slave_0 left promiscuous mode [ 1083.932709][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.942084][ T303] device veth1_macvtap left promiscuous mode [ 1083.948534][ T303] device veth0_vlan left promiscuous mode [ 1084.323016][T14328] F2FS-fs (loop8): invalid crc value [ 1084.336946][T14333] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1084.375995][T14328] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1084.413863][T14333] incfs: ino conflict with backing FS 2 [ 1084.425654][T14328] F2FS-fs (loop8): Start checkpoint disabled! [ 1084.432672][T14328] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1084.502711][T14333] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1084.505992][T14163] udevd[14163]: incorrect ext4 checksum on /dev/loop6 [ 1084.535875][T14340] kvm: emulating exchange as write [ 1084.571907][T13655] EXT4-fs error (device loop6): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1084.630835][T13655] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 1084.699151][T13655] EXT4-fs error (device loop6): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1084.745769][T13655] EXT4-fs error (device loop6): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1084.821912][ T8535] attempt to access beyond end of device [ 1084.821912][ T8535] loop8: rw=2049, want=41000, limit=40427 [ 1084.836494][ T7] tipc: Disabling bearer [ 1084.841940][ T7] tipc: Left network mode [ 1084.996511][T11821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1085.156580][ T9822] rtl8150 1-1:1.0: couldn't reset the device [ 1085.169417][ T9822] rtl8150: probe of 1-1:1.0 failed with error -5 [ 1085.209307][ T9822] usb 1-1: USB disconnect, device number 33 [ 1085.426774][T11821] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1085.478395][T11821] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1085.564927][T14361] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache, [ 1085.576829][T14361] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.727334][T11821] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1085.776418][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.989347][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.997410][T14356] device bridge_slave_0 entered promiscuous mode [ 1086.019960][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.029804][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.037246][T11821] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1086.047042][T14356] device bridge_slave_1 entered promiscuous mode [ 1086.057253][T11821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.065283][T11821] usb 2-1: Product: syz [ 1086.076920][T11821] usb 2-1: Manufacturer: syz [ 1086.086558][T11821] usb 2-1: SerialNumber: syz [ 1086.116598][T14346] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1086.126608][T14346] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1086.149448][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.156559][T14356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.163846][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.170911][T14356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.180016][ T7] device bridge_slave_1 left promiscuous mode [ 1086.186255][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.208266][ T7] device bridge_slave_0 left promiscuous mode [ 1086.214531][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.222913][ T7] device veth1_macvtap left promiscuous mode [ 1086.229045][ T7] device veth0_vlan left promiscuous mode [ 1086.361271][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.371328][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.382434][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1086.390299][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1086.408510][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1086.417535][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.424618][ T8535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.433032][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1086.441689][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.448803][ T8535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.467594][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1086.475805][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1086.484193][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1086.492771][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1086.504694][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1086.513628][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1086.527576][T14356] device veth0_vlan entered promiscuous mode [ 1086.533885][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1086.542506][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1086.565476][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1086.575757][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1086.584014][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1086.592725][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1086.601940][T14356] device veth1_macvtap entered promiscuous mode [ 1086.620385][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1086.629064][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1086.637671][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1086.671392][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1086.716751][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1086.759598][T14377] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1086.774078][T14346] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1087.236960][T11823] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1087.636678][T11823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1080, setting to 1024 [ 1087.691241][T11823] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1087.724794][T14398] exfat: Deprecated parameter 'utf8' [ 1087.748350][T14398] exfat: Deprecated parameter 'utf8' [ 1087.753869][T14398] exfat: Deprecated parameter 'utf8' [ 1091.128226][T14408] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache, [ 1091.140037][T14408] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.150474][T11823] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1091.159547][T11823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1091.181278][T14398] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1091.193551][T11823] usb 1-1: can't set config #1, error -71 [ 1091.201182][T11823] usb 1-1: USB disconnect, device number 34 [ 1091.399512][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3400'. [ 1091.687399][T14436] erofs: (device loop8): mounted with root inode @ nid 36. [ 1091.733156][T14433] EXT4-fs (loop1): Ignoring removed bh option [ 1091.739881][T14436] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 1091.753127][T14436] erofs: (device loop8): z_erofs_readpage: failed to read, err [-117] [ 1091.766502][ T9790] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1091.791099][T14433] EXT4-fs (loop1): Unrecognized mount option "ro" or missing value [ 1092.047252][T14440] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1092.054475][T14440] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1092.091752][T14440] EXT4-fs (loop1): 1 truncate cleaned up [ 1092.098040][T14440] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x000000000000ee01,norecovery,noinit_itable,barrier,mblk_io_submit,nogrpid, [ 1092.136528][ T9790] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1092.181000][ T9790] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1092.230681][ T9790] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1092.370847][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3410'. [ 1092.436579][ T9790] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1092.467662][ T9790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.475699][ T9790] usb 1-1: Product: syz [ 1092.486639][T11821] rtl8150 2-1:1.0: couldn't reset the device [ 1092.498449][T11821] rtl8150: probe of 2-1:1.0 failed with error -5 [ 1092.514117][ T9790] usb 1-1: Manufacturer: syz [ 1092.534868][ T9790] usb 1-1: SerialNumber: syz [ 1092.543201][T11821] usb 2-1: USB disconnect, device number 3 [ 1092.566503][T14432] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1092.576647][T14432] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1093.249488][T14432] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1093.376455][T11821] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1093.686459][T11821] usb 4-1: Using ep0 maxpacket: 8 [ 1093.857386][T14506] SELinux: Context system_u:object_r:su_ is not valid (left unmapped). [ 1093.868391][ T24] audit: type=1400 audit(1773956200.662:1619): avc: denied { relabelto } for pid=14505 comm="syz.8.3429" name="44" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:su_" [ 1093.906490][ T9785] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1093.936436][ T24] audit: type=1400 audit(1773956200.662:1620): avc: denied { associate } for pid=14505 comm="syz.8.3429" name="44" dev="tmpfs" ino=255 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:su_" [ 1093.966503][T11821] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1093.981817][T11821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.005958][T11821] usb 4-1: Product: syz [ 1094.019249][T11821] usb 4-1: Manufacturer: syz [ 1094.033614][T11821] usb 4-1: SerialNumber: syz [ 1094.046827][T14508] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1094.063499][T11821] usb 4-1: config 0 descriptor?? [ 1094.103666][T14508] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv1,quota,,errors=continue [ 1094.125483][T14508] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.196535][ T9785] usb 2-1: device descriptor read/64, error -71 [ 1094.436672][ T24] audit: type=1400 audit(1773956201.232:1621): avc: denied { write } for pid=14505 comm="syz.8.3429" name="44" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:su_" [ 1094.462068][ T24] audit: type=1400 audit(1773956201.232:1622): avc: denied { add_name } for pid=14505 comm="syz.8.3429" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:su_" [ 1094.486175][ T24] audit: type=1400 audit(1773956201.232:1623): avc: denied { associate } for pid=14505 comm="syz.8.3429" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1094.606538][ T9785] usb 2-1: device descriptor read/64, error -71 [ 1094.659638][ T24] audit: type=1400 audit(1773956201.452:1624): avc: denied { map } for pid=14519 comm="syz.2.3432" path="socket:[65378]" dev="sockfs" ino=65378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1094.713919][T14523] binder: 14522:14523 ioctl c0306201 200000000680 returned -14 [ 1094.728425][ T24] audit: type=1400 audit(1773956201.502:1625): avc: denied { call } for pid=14522 comm="syz.2.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1094.860335][T14516] F2FS-fs (loop8): invalid crc value [ 1094.875219][T14516] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1094.876601][ T9785] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1094.922118][T14516] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0 [ 1094.930593][T14516] F2FS-fs (loop8): Start checkpoint disabled! [ 1094.937269][T14516] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1095.136291][ T24] audit: type=1400 audit(1773956201.922:1626): avc: denied { remove_name } for pid=13725 comm="syz-executor" name="bus" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:su_" [ 1095.176437][ T9785] usb 2-1: device descriptor read/64, error -71 [ 1095.189293][ T24] audit: type=1400 audit(1773956201.962:1627): avc: denied { rmdir } for pid=13725 comm="syz-executor" name="44" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:su_" [ 1095.416478][T14411] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1095.576440][ T9785] usb 2-1: device descriptor read/64, error -71 [ 1095.606691][ T9790] rtl8150 1-1:1.0: couldn't reset the device [ 1095.612831][ T9790] rtl8150: probe of 1-1:1.0 failed with error -5 [ 1095.620599][ T9790] usb 1-1: USB disconnect, device number 35 [ 1095.656430][T14411] usb 3-1: Using ep0 maxpacket: 32 [ 1095.696564][ T9785] usb usb2-port1: attempt power cycle [ 1095.776528][T14411] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1095.784839][T14411] usb 3-1: config 0 has no interface number 0 [ 1095.791446][T14411] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1096.186332][T11818] usb 4-1: USB disconnect, device number 37 [ 1096.533135][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3459'. [ 1096.562018][T14411] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1096.571313][T14411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.579546][T14411] usb 3-1: Product: syz [ 1096.583723][T14411] usb 3-1: Manufacturer: syz [ 1096.588403][T14411] usb 3-1: SerialNumber: syz [ 1096.593860][T14411] usb 3-1: config 0 descriptor?? [ 1096.616492][T14543] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1096.639968][ T9785] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1096.764281][T14599] kvm [14598]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1096.775863][T14599] kvm [14598]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1096.787363][T14599] kvm [14598]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1096.798625][T14599] kvm [14598]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1096.809786][T14599] kvm [14598]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1096.821036][T14599] kvm [14598]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1096.832209][T14599] kvm [14598]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1096.842427][T14543] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1096.847077][T14599] kvm [14598]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1096.860762][T14599] kvm [14598]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1096.872268][T14599] kvm [14598]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1097.026507][T11818] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1097.126440][ T9785] usb 2-1: device not accepting address 6, error -71 [ 1097.276454][T11818] usb 4-1: Using ep0 maxpacket: 32 [ 1097.406503][T11818] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1097.422243][T11818] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1097.441934][T11818] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1097.461622][T11818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1097.481683][T11818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1097.492275][T11818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1097.505452][T11818] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1097.514569][T11818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.526484][T11818] usb 4-1: config 0 descriptor?? [ 1097.546938][T14411] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1097.557200][T14411] asix: probe of 3-1:0.188 failed with error -71 [ 1097.564435][T14411] usb 3-1: USB disconnect, device number 27 [ 1097.818206][T11818] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1097.830437][T11818] usb 4-1: USB disconnect, device number 38 [ 1097.838025][T11818] usblp0: removed [ 1098.066467][ T9785] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1098.084350][T14646] pim6reg: tun_chr_ioctl cmd 21731 [ 1098.156517][ T9785] usb 2-1: Using ep0 maxpacket: 16 [ 1098.336527][ T9785] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1098.396487][T11818] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1098.496574][T14411] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1098.513592][ T24] audit: type=1400 audit(1773956205.302:1628): avc: denied { create } for pid=14664 comm="syz.0.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1098.576571][ T9785] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1098.586288][ T9785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.594710][ T9785] usb 2-1: Product: syz [ 1098.599132][ T9785] usb 2-1: Manufacturer: syz [ 1098.603735][ T9785] usb 2-1: SerialNumber: syz [ 1098.656497][T11818] usb 4-1: Using ep0 maxpacket: 32 [ 1098.776588][T11818] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1098.785558][T11818] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1098.795353][T11818] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1098.805970][T11818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1098.816943][T11818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1098.827619][T11818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1098.860439][T11818] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1098.907438][T11818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.992097][T11818] usb 4-1: config 0 descriptor?? [ 1099.066641][ T9785] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1099.086500][ T9785] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1099.108872][ T9785] usb 2-1: USB disconnect, device number 7 [ 1099.126464][T14411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.141152][T14411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.151719][T14411] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1099.160932][T14411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.172222][T14411] usb 3-1: config 0 descriptor?? [ 1099.247821][T11818] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1099.347318][T14179] udevd[14179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1099.707701][T14411] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1099.716220][T14411] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1099.725485][T14411] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1099.736211][T14411] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1099.744201][T14411] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1099.753129][T14411] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1099.760515][T14411] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1099.768520][T14411] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1099.819981][T14713] input: syz0 as /devices/virtual/input/input16 [ 1099.902279][T11823] usb 4-1: USB disconnect, device number 39 [ 1099.909212][T11823] usblp0: removed [ 1099.926518][T14411] cp2112 0003:10C4:EA90.000D: Part Number: 0x82 Device Version: 0xFE [ 1100.156488][T11821] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1100.199790][ T24] audit: type=1400 audit(1773956206.992:1629): avc: denied { unmount } for pid=13725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1100.248227][T14726] EXT4-fs (loop8): Ignoring removed bh option [ 1100.254599][T14726] EXT4-fs (loop8): Unrecognized mount option "ro" or missing value [ 1100.482193][T14731] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 1100.489411][T14731] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1100.504266][T14731] EXT4-fs (loop8): 1 truncate cleaned up [ 1100.510869][T14731] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x000000000000ee01,norecovery,noinit_itable,barrier,mblk_io_submit,nogrpid, [ 1100.551241][T14736] netlink: 'syz.3.3514': attribute type 1 has an invalid length. [ 1100.567566][T14411] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 1100.581968][T14411] usb 3-1: USB disconnect, device number 28 [ 1100.598549][T14738] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3515'. [ 1100.615974][T14739] fido_id[14739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1100.646560][T11821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1100.658417][T11821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1100.669340][T11821] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1100.680325][T11821] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1100.887643][T11821] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1100.897184][T11821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.905299][T11821] usb 1-1: Product: syz [ 1100.909970][T11821] usb 1-1: Manufacturer: syz [ 1100.914640][T11821] usb 1-1: SerialNumber: syz [ 1100.946549][T14720] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1100.966487][T11823] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1100.980552][T11821] cdc_mbim 1-1:1.0: skipping garbage [ 1101.206484][T11821] cdc_mbim 1-1:1.0: bind() failure [ 1101.219913][T11821] cdc_ncm 1-1:1.1: bind() failure [ 1101.249882][T11821] usb 1-1: USB disconnect, device number 36 [ 1101.356742][T11823] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 1101.365764][T11823] usb 4-1: config 0 has no interface number 0 [ 1101.372328][T11823] usb 4-1: config 0 interface 122 has no altsetting 0 [ 1101.567248][T11823] usb 4-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice=e0.1b [ 1101.711092][T11823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.723121][T11823] usb 4-1: Product: syz [ 1101.728626][T11823] usb 4-1: Manufacturer: syz [ 1101.786189][T11823] usb 4-1: SerialNumber: syz [ 1101.791945][T11823] usb 4-1: config 0 descriptor?? [ 1102.305214][T11823] usb 4-1: USB disconnect, device number 40 [ 1102.807003][ T24] audit: type=1400 audit(1773956209.352:1630): avc: denied { mount } for pid=14774 comm="syz.8.3530" name="/" dev="ramfs" ino=67733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1104.253580][T14825] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3547'. [ 1104.486661][T11821] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1105.696817][T11821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.717593][T11821] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1105.866728][T14411] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1105.946788][T11821] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1105.955907][T11821] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1105.964023][T11821] usb 4-1: Product: syz [ 1105.968248][T11821] usb 4-1: Manufacturer: syz [ 1105.972854][T11821] usb 4-1: SerialNumber: syz [ 1105.978306][T11821] usb 4-1: config 0 descriptor?? [ 1105.996517][T14820] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1106.006477][T11818] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1106.106475][T14411] usb 3-1: Using ep0 maxpacket: 32 [ 1106.166456][T11822] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1106.218517][T11821] usb 4-1: USB disconnect, device number 41 [ 1106.226669][T14411] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.236901][T14411] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.248016][T14411] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.256557][T11818] usb 1-1: Using ep0 maxpacket: 16 [ 1106.258065][T14411] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1106.276166][T14411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1106.282820][T14411] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1106.291925][T14411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.300649][T14411] usb 3-1: config 0 descriptor?? [ 1106.386496][T11818] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1106.394938][T11818] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1106.403206][T11818] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1106.411478][T11818] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1106.419890][T11818] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1106.428993][T11818] usb 1-1: config 0 has no interface number 0 [ 1106.435123][T11818] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1106.446195][T11818] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1106.456188][T11818] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1106.466080][T11818] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1106.479196][T11818] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1106.486010][T11818] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1106.536557][T11822] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1106.545736][T11822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.554705][T11822] usb 9-1: config 0 descriptor?? [ 1106.676863][T11818] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1106.686185][T11818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.694451][T11818] usb 1-1: Product: syz [ 1106.698723][T11818] usb 1-1: Manufacturer: syz [ 1106.703388][T11818] usb 1-1: SerialNumber: syz [ 1106.705770][T14870] overlayfs: missing 'lowerdir' [ 1106.714794][T11818] usb 1-1: config 0 descriptor?? [ 1106.856048][T14411] hid-generic 0003:1B1C:1C09.000E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 1107.024077][ T9790] usb 3-1: USB disconnect, device number 29 [ 1107.266475][T14411] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1107.286455][T11818] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1107.506485][T14411] usb 4-1: Using ep0 maxpacket: 8 [ 1107.646536][T11818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1107.656433][T11818] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1107.666086][T11818] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.786500][T14411] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1107.795852][T14411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.804119][T14411] usb 4-1: Product: syz [ 1107.808470][T14411] usb 4-1: Manufacturer: syz [ 1107.813247][T14411] usb 4-1: SerialNumber: syz [ 1107.822530][T14411] usb 4-1: config 0 descriptor?? [ 1107.856522][T11818] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1107.865680][T11818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1107.874078][T11818] usb 2-1: Product: syz [ 1107.878429][T11818] usb 2-1: Manufacturer: syz [ 1107.883209][T11818] usb 2-1: SerialNumber: syz [ 1108.137512][T11818] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1108.255684][T14887] udc-core: couldn't find an available UDC or it's busy [ 1108.262875][T14887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1108.341460][T14411] usb 2-1: USB disconnect, device number 8 [ 1108.350301][T14411] usblp0: removed [ 1108.913757][ T9790] usb 9-1: USB disconnect, device number 4 [ 1109.293306][ T9785] usb 4-1: USB disconnect, device number 42 [ 1109.301667][T11818] usb 1-1: USB disconnect, device number 37 [ 1109.596422][ T298] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1109.966475][ T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1109.991493][ T298] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1110.031779][ T298] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 200 [ 1110.206551][ T298] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1110.221183][ T298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.544845][ T298] usb 3-1: Product: syz [ 1110.549239][ T298] usb 3-1: Manufacturer: syz [ 1110.553847][ T298] usb 3-1: SerialNumber: syz [ 1110.576918][ T298] usb 3-1: config 0 descriptor?? [ 1110.596561][T14915] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1110.616900][ T298] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1110.689321][T14935] kvm: MWAIT instruction emulated as NOP! [ 1110.951658][ T298] scsi host1: usb-storage 3-1:0.0 [ 1110.967075][ T298] usb 3-1: USB disconnect, device number 30 [ 1111.575180][ T24] audit: type=1400 audit(1773956218.362:1631): avc: denied { create } for pid=14956 comm="syz.1.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1112.289137][T14967] hub 9-0:1.0: USB hub found [ 1112.294591][T14967] hub 9-0:1.0: 1 port detected [ 1112.667940][T14973] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 1112.694732][ T24] audit: type=1400 audit(1773956219.482:1632): avc: denied { lock } for pid=14974 comm="syz.3.3598" path="socket:[68054]" dev="sockfs" ino=68054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1112.851010][ T24] audit: type=1326 audit(1773956219.642:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.8.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1112.855952][T15003] netlink: 'syz.2.3610': attribute type 9 has an invalid length. [ 1112.936919][ T24] audit: type=1326 audit(1773956219.672:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.8.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1112.962188][ T9629] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1112.982928][T15003] netlink: 'syz.2.3610': attribute type 6 has an invalid length. [ 1113.016672][ T24] audit: type=1326 audit(1773956219.682:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.8.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1113.070698][ T24] audit: type=1326 audit(1773956219.682:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.8.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1113.096318][T15023] binder_alloc: 15022: pid 15022 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1113.217389][ T24] audit: type=1326 audit(1773956219.682:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.8.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1113.217402][T15028] usb usb7: usbfs: process 15028 (syz.1.3617) did not claim interface 0 before use [ 1113.373703][T15039] binder: 15037:15039 ioctl c00c6211 200000000100 returned -22 [ 1113.401998][ T24] audit: type=1326 audit(1773956219.682:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.8.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1113.425878][ T24] audit: type=1326 audit(1773956219.682:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.8.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1113.452990][T15042] device bridge1 entered promiscuous mode [ 1113.461165][ T24] audit: type=1326 audit(1773956219.682:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.8.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f69bf147799 code=0x7ffc0000 [ 1113.515669][T15027] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1113.546493][ T9629] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1113.558902][ T9629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.583369][ T9629] usb 1-1: Product: syz [ 1113.593060][ T9629] usb 1-1: Manufacturer: syz [ 1113.604295][ T9629] usb 1-1: SerialNumber: syz [ 1113.615252][ T9629] usb 1-1: config 0 descriptor?? [ 1115.009917][T11818] usb 1-1: USB disconnect, device number 38 [ 1115.507364][ T8535] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1115.555789][ T8535] Bluetooth: hci1: Frame reassembly failed (-84) [ 1117.345796][T15151] xt_CT: No such helper "pptp" [ 1117.546489][ T9790] Bluetooth: hci1: command 0x1003 tx timeout [ 1117.552629][T15108] Bluetooth: hci1: sending frame failed (-49) [ 1117.713623][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 1117.713638][ T24] audit: type=1400 audit(1773956224.502:1645): avc: denied { read } for pid=15156 comm="syz.2.3664" name="file0" dev="fuse" ino=9223372036854775872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1117.743863][ T24] audit: type=1400 audit(1773956224.502:1646): avc: denied { open } for pid=15156 comm="syz.2.3664" path="/70/file0/file0" dev="fuse" ino=9223372036854775872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1117.844146][ T24] audit: type=1400 audit(1773956224.632:1647): avc: denied { ioctl } for pid=15164 comm="syz.8.3667" path="socket:[68655]" dev="sockfs" ino=68655 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1119.315758][ T24] audit: type=1400 audit(1773956226.102:1648): avc: denied { map } for pid=15185 comm="syz.1.3673" path="socket:[68561]" dev="sockfs" ino=68561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1119.626582][ T9790] Bluetooth: hci1: command 0x1001 tx timeout [ 1119.632783][T15108] Bluetooth: hci1: sending frame failed (-49) [ 1119.638037][ T24] audit: type=1400 audit(1773956226.422:1649): avc: denied { setopt } for pid=15193 comm="syz.8.3676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1119.866619][T11818] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1119.940846][T15209] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1119.948471][T15209] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1120.146620][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1120.185949][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1120.194336][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1120.206566][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1120.214917][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1120.223309][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1120.232037][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1120.241326][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1120.286639][T11818] usb 3-1: Using ep0 maxpacket: 16 [ 1120.436889][T11818] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 1120.445529][T11818] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 1120.455081][T11818] usb 3-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.466539][T11818] usb 3-1: config 166 has no interface number 0 [ 1120.472976][T11818] usb 3-1: config 166 has no interface number 1 [ 1120.480579][T11818] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1120.492443][T11818] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1120.504174][T11818] usb 3-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1120.518504][T11818] usb 3-1: config 166 interface 177 has no altsetting 0 [ 1120.525629][T11818] usb 3-1: config 166 interface 34 has no altsetting 0 [ 1120.664111][ T24] audit: type=1400 audit(1773956227.452:1650): avc: denied { setopt } for pid=15217 comm="syz.8.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1120.666934][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3685'. [ 1120.708718][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3686'. [ 1120.736567][T11818] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1120.747293][T11818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.755412][T11818] usb 3-1: Product: syz [ 1120.759931][T11818] usb 3-1: Manufacturer: syz [ 1120.764554][T11818] usb 3-1: SerialNumber: syz [ 1120.777943][T15226] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3689'. [ 1120.838311][T15227] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3689'. [ 1121.177971][T11818] uvcvideo: Found UVC 0.00 device syz (0bda:0138) [ 1121.184566][T11818] uvcvideo: No valid video chain found. [ 1121.191346][T11818] usb 3-1: USB disconnect, device number 31 [ 1121.556635][T11821] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1121.706805][ T9785] Bluetooth: hci1: command 0x1009 tx timeout [ 1121.729216][ T24] audit: type=1400 audit(1773956228.522:1651): avc: denied { append } for pid=15259 comm="syz.2.3702" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1121.828198][T15270] tipc: Started in network mode [ 1121.833118][T15270] tipc: Own node identity 7f000001, cluster identity 4711 [ 1121.840636][T15270] tipc: Enabling of bearer rejected, failed to enable media [ 1121.936835][T11821] usb 9-1: config 0 has no interfaces? [ 1121.942813][T11821] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1121.953580][T11821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.970829][T11821] usb 9-1: config 0 descriptor?? [ 1122.226658][T11821] usb 9-1: USB disconnect, device number 5 [ 1123.148424][ T24] audit: type=1400 audit(1773956229.942:1652): avc: denied { read } for pid=15282 comm="syz.8.3711" path="socket:[69760]" dev="sockfs" ino=69760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1123.515020][T15297] xt_CT: No such helper "pptp" [ 1127.196468][ T9790] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1127.409555][T11821] kernel read not supported for file /vcs (pid: 11821 comm: kworker/1:19) [ 1127.446449][ T9790] usb 3-1: Using ep0 maxpacket: 16 [ 1127.469666][T15382] binder: 15381:15382 ioctl 4018620d 0 returned -22 [ 1127.495786][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1127.507338][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1127.518258][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1127.526779][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1127.537719][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1127.546748][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1127.557681][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1127.565668][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1127.576559][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1127.584436][T15385] loop4: unable to read partition table [ 1127.584608][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1127.590501][ T9790] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1127.601022][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1127.611585][T15385] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 1127.618948][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1127.641513][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1127.649962][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1127.660860][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1127.677372][ T9790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.686167][ T9790] usb 3-1: config 0 descriptor?? [ 1129.620872][T11821] usb 3-1: USB disconnect, device number 32 [ 1129.670775][T15433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15433 comm=syz.1.3760 [ 1130.020111][T15452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15452 comm=syz.3.3768 [ 1130.418024][ T9629] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1130.426424][T11819] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1130.754325][T11819] usb 1-1: Using ep0 maxpacket: 8 [ 1130.796468][ T9629] usb 9-1: Using ep0 maxpacket: 8 [ 1130.877039][T11819] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1130.896519][T11819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1130.941870][T11819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1130.977462][T11819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1131.011825][T11819] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.026320][T11819] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1131.036461][T11819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.176566][ T9629] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1131.185001][ T9629] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1131.196262][ T9629] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1131.206323][ T9629] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1131.217576][ T9629] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1131.227749][ T9629] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.240770][ T9629] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1131.249860][T14411] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1131.257456][ T9629] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.406458][ T678] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1131.496428][T14411] usb 4-1: Using ep0 maxpacket: 16 [ 1131.616581][T14411] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1131.616596][T14411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.626813][T14411] usb 4-1: config 0 descriptor?? [ 1131.826578][ T678] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1131.906532][ T678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.916854][ T678] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1131.925997][ T678] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1132.296525][ T678] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1132.305880][ T678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.313909][ T678] usb 3-1: Product: syz [ 1132.318197][ T678] usb 3-1: Manufacturer: syz [ 1132.322808][ T678] usb 3-1: SerialNumber: syz [ 1132.691991][ T678] usb 3-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 1132.701497][ T678] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1132.716744][ T678] usb 3-1: USB disconnect, device number 33 [ 1132.973934][ T678] usb 9-1: USB disconnect, device number 6 [ 1132.998071][T11819] usb 4-1: USB disconnect, device number 43 [ 1133.069422][T11822] usb 1-1: USB disconnect, device number 39 [ 1133.439586][T15520] device bridge0 entered promiscuous mode [ 1133.771204][T11819] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1134.632596][T15548] Illegal XDP return value 4290940824, expect packet loss! [ 1134.691496][T15554] netem: invalid attributes len -8 [ 1134.696807][T15554] netem: change failed [ 1134.704669][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3805'. [ 1134.713820][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3805'. [ 1134.723479][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3805'. [ 1134.732482][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3805'. [ 1134.741610][T11819] usb 4-1: Using ep0 maxpacket: 32 [ 1134.876568][T11819] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1134.894663][T11819] usb 4-1: config 0 has no interface number 0 [ 1135.106631][T11819] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1135.119548][T11819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.128067][T11819] usb 4-1: Product: syz [ 1135.132323][T11819] usb 4-1: Manufacturer: syz [ 1135.137163][T11819] usb 4-1: SerialNumber: syz [ 1135.146576][T11819] usb 4-1: config 0 descriptor?? [ 1135.187782][T11819] smsc95xx v2.0.0 [ 1135.328684][T15599] device syzkaller0 entered promiscuous mode [ 1135.394906][T15604] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3823'. [ 1135.480497][T15608] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1135.494046][T15608] pit: kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 1135.503431][T15608] pit: kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 1135.512326][T15608] pit: kvm: requested 142476 ns i8254 timer period limited to 200000 ns [ 1135.521401][T15608] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 1135.530380][T15608] pit: kvm: requested 104761 ns i8254 timer period limited to 200000 ns [ 1135.539473][T15608] pit: kvm: requested 104761 ns i8254 timer period limited to 200000 ns [ 1135.561097][T15608] pit: kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 1135.572510][T15608] pit: kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 1135.581583][T15608] pit: kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 1135.666476][T11819] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1135.677979][T11819] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1136.277984][T15646] fuse: Bad value for 'user_id' [ 1136.877113][T11819] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 1136.952722][ T24] audit: type=1326 audit(1773956244.745:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.0.3841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fa7b71799 code=0x0 [ 1136.979841][T11819] smsc95xx: probe of 4-1:0.67 failed with error -32 [ 1137.754157][T15692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15692 comm=syz.1.3850 [ 1137.986771][T15693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59408 sclass=netlink_route_socket pid=15693 comm=syz.2.3853 [ 1138.035882][T11819] usb 4-1: USB disconnect, device number 44 [ 1138.577704][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1138.602976][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1138.629491][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1138.639230][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1138.647875][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1138.657275][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1138.666923][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1138.675127][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1138.816026][ T24] audit: type=1400 audit(1773956246.605:1654): avc: denied { setattr } for pid=15726 comm="syz.8.3867" name="" dev="pipefs" ino=70999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1139.108247][ T9629] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1139.115930][T14411] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1139.476536][ T9629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.487583][ T9629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.497380][ T9629] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1139.510345][ T9629] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1139.519435][ T9629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.528459][ T9629] usb 3-1: config 0 descriptor?? [ 1139.646543][T14411] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1139.655747][T14411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.664485][T14411] usb 4-1: Product: syz [ 1139.669291][T14411] usb 4-1: Manufacturer: syz [ 1139.673911][T14411] usb 4-1: SerialNumber: syz [ 1139.717709][ T24] audit: type=1400 audit(1773956247.505:1655): avc: denied { ioctl } for pid=15750 comm="syz.0.3874" path="socket:[71748]" dev="sockfs" ino=71748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1139.749627][T14411] usb 4-1: config 0 descriptor?? [ 1139.778043][T15759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3878'. [ 1139.906430][T11819] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1140.127972][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.135426][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.143242][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.150818][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.156679][T11819] usb 2-1: Using ep0 maxpacket: 8 [ 1140.158335][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.170847][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.178329][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.185765][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.193202][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.200632][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.208076][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.215566][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.222993][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.230417][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.237846][ T9629] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1140.245445][ T9629] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 1140.255261][ T9629] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1140.296538][T11819] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1140.304813][T11819] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1140.314995][T11819] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1140.326742][T11819] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1140.327852][ T9629] usb 3-1: USB disconnect, device number 34 [ 1140.337415][T11819] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1140.356034][T11819] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1140.365231][T11819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.876539][T14411] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1141.894228][ T9822] usb 4-1: USB disconnect, device number 45 [ 1141.971493][ T24] audit: type=1400 audit(1773956249.765:1656): avc: denied { shutdown } for pid=15815 comm="syz.0.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1142.407289][T14411] usb 3-1: Using ep0 maxpacket: 16 [ 1142.526521][T14411] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1142.652980][ T24] audit: type=1400 audit(1773956250.445:1657): avc: denied { bind } for pid=15834 comm="syz.0.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1142.703156][ T24] audit: type=1400 audit(1773956250.445:1658): avc: denied { connect } for pid=15834 comm="syz.0.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1142.734868][ T9822] usb 2-1: USB disconnect, device number 9 [ 1143.015877][T14411] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1143.025023][T14411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.033171][T14411] usb 3-1: Product: syz [ 1143.037387][T14411] usb 3-1: Manufacturer: syz [ 1143.042004][T14411] usb 3-1: SerialNumber: syz [ 1143.064365][T14411] usb 3-1: config 0 descriptor?? [ 1143.086811][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3905'. [ 1143.136846][T15847] create_pit_timer: 7 callbacks suppressed [ 1143.136857][T15847] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1143.152787][T15847] pit: kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 1143.161365][T15847] pit: kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 1143.170041][T15847] pit: kvm: requested 163428 ns i8254 timer period limited to 200000 ns [ 1143.178839][T15847] pit: kvm: requested 30171 ns i8254 timer period limited to 200000 ns [ 1143.193379][T15847] pit: kvm: requested 35200 ns i8254 timer period limited to 200000 ns [ 1143.437419][ T24] audit: type=1326 audit(1773956251.235:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15870 comm="syz.0.3918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fa7b71799 code=0x0 [ 1144.766103][ T9751] usb 3-1: USB disconnect, device number 35 [ 1146.297450][ T24] audit: type=1400 audit(1773956254.095:1660): avc: denied { create } for pid=15928 comm="syz.3.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1146.795837][T15950] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1146.886616][ T9751] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1147.246629][ T9751] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1147.254284][ T9751] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1147.265131][ T9751] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1147.341805][ T24] audit: type=1400 audit(1773956255.135:1661): avc: denied { write } for pid=15957 comm="syz.0.3946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1147.361577][ T9751] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1147.379716][ T9751] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1147.405624][ T9751] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1147.433496][T15968] binder: BINDER_SET_CONTEXT_MGR already set [ 1147.442690][T15968] binder: 15966:15968 ioctl 4018620d 200000004a80 returned -16 [ 1147.516588][ T9751] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1147.532699][ T9751] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1147.568690][ T9751] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1147.986456][ T9751] usb 4-1: string descriptor 0 read error: -22 [ 1147.993948][ T9751] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1148.003395][ T9751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.048592][T15995] capability: warning: `syz.8.3960' uses 32-bit capabilities (legacy support in use) [ 1148.118342][ T24] audit: type=1400 audit(1773956255.915:1662): avc: denied { wake_alarm } for pid=15998 comm="syz.8.3962" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1148.288949][ T9751] usb 4-1: USB disconnect, device number 46 [ 1150.166445][T14411] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1150.426454][T14411] usb 4-1: Using ep0 maxpacket: 16 [ 1150.463175][ T8535] tipc: Left network mode [ 1150.535579][ T24] audit: type=1400 audit(1773956258.325:1663): avc: denied { map } for pid=16055 comm="syz.0.3984" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1150.625530][T14411] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.682955][T14411] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1150.936743][T14411] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1150.946072][T14411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.955337][T14411] usb 4-1: Product: syz [ 1150.960287][T14411] usb 4-1: Manufacturer: syz [ 1150.965036][T14411] usb 4-1: SerialNumber: syz [ 1151.728618][ T24] audit: type=1400 audit(1773956259.525:1664): avc: denied { read write } for pid=16062 comm="syz.1.3990" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1151.753782][ T24] audit: type=1400 audit(1773956259.525:1665): avc: denied { open } for pid=16062 comm="syz.1.3990" path="/137/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1151.863764][T16073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.871133][T16073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.879221][T16073] device bridge_slave_0 entered promiscuous mode [ 1151.886997][T16073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.894304][T16073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.913362][T16073] device bridge_slave_1 entered promiscuous mode [ 1152.270590][ T8535] device bridge_slave_1 left promiscuous mode [ 1152.278106][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.291598][ T8535] device bridge_slave_0 left promiscuous mode [ 1152.297981][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.306628][ T8535] device veth1_macvtap left promiscuous mode [ 1152.312848][ T8535] device veth0_vlan left promiscuous mode [ 1152.499532][T14411] usb 4-1: 0:2 : does not exist [ 1152.515235][T14411] usb 4-1: USB disconnect, device number 47 [ 1153.077949][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1153.099293][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1153.109608][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1154.116055][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1154.124541][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.131615][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.167540][T16073] device veth0_vlan entered promiscuous mode [ 1154.194576][T16073] device veth1_macvtap entered promiscuous mode [ 1154.344549][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'. [ 1154.365050][T16125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4007'. [ 1154.374555][T16125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4007'. [ 1154.676568][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1154.685341][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1154.693678][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1154.701883][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1154.719169][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1154.728988][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1154.737642][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1154.753496][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1154.765635][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.772750][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.022440][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1155.032708][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1155.044259][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1155.055235][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1155.065700][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1155.075470][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1155.119696][T16118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.127139][T16118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.656511][T11821] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1155.664644][ T9822] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1155.906512][T11821] usb 2-1: Using ep0 maxpacket: 16 [ 1155.911836][ T9822] usb 9-1: Using ep0 maxpacket: 16 [ 1156.036539][T11821] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1156.047208][ T9822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.058344][ T9822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.068374][T11819] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1156.075991][ T9822] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1156.088956][ T9822] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1156.098068][ T9822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.107185][ T9822] usb 9-1: config 0 descriptor?? [ 1156.226530][T11821] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1156.235702][T11821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.243869][T11821] usb 2-1: Product: syz [ 1156.251957][T11821] usb 2-1: Manufacturer: syz [ 1156.256654][T11821] usb 2-1: SerialNumber: syz [ 1156.272351][T11821] usb 2-1: config 0 descriptor?? [ 1156.446658][T11819] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1156.457674][T11819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1156.472144][T11819] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1156.482411][T11819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.495944][T11819] usb 4-1: config 0 descriptor?? [ 1156.542154][T11819] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1156.593801][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.603827][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.612597][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.620586][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.634562][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.643176][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.651321][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.663178][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.670802][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.678221][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.685531][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.692840][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.700165][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.707515][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.714883][ T9822] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1156.725123][ T9822] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0010/input/input19 [ 1156.739355][ T9822] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1156.799401][ T9822] usb 9-1: USB disconnect, device number 7 [ 1157.318736][T16184] netlink: 83 bytes leftover after parsing attributes in process `syz.8.4027'. [ 1157.733966][ T678] usb 2-1: USB disconnect, device number 10 [ 1158.243285][ T678] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1158.267343][ T24] audit: type=1400 audit(1773956266.060:1666): avc: denied { create } for pid=16220 comm="syz.8.4043" name="fuse" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1158.288365][ T24] audit: type=1400 audit(1773956266.060:1667): avc: denied { create } for pid=16220 comm="syz.8.4043" name="#25" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1158.310830][ T24] audit: type=1400 audit(1773956266.060:1668): avc: denied { associate } for pid=16220 comm="syz.8.4043" name="#25" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1158.347117][T16227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=16227 comm=syz.0.4046 [ 1158.377886][T16231] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4047'. [ 1158.486425][ T678] usb 2-1: Using ep0 maxpacket: 16 [ 1158.606563][ T678] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.676433][T11819] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 1158.776573][ T678] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 1158.785732][ T678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.793835][ T678] usb 2-1: Product: syz [ 1158.798207][ T678] usb 2-1: Manufacturer: syz [ 1158.803001][ T678] usb 2-1: SerialNumber: syz [ 1158.808799][T11821] usb 4-1: USB disconnect, device number 48 [ 1159.046592][T11819] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1159.054205][T11819] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1159.058967][ T678] usb 2-1: USB disconnect, device number 11 [ 1159.197156][T11819] usb 9-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1159.346508][T11819] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1159.354336][T11819] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1159.365661][T11819] usb 9-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1159.466997][T11819] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1159.538060][T11819] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1159.549588][T11819] usb 9-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1159.816744][T11819] usb 9-1: string descriptor 0 read error: -22 [ 1159.878688][T11819] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1159.971813][T16274] netlink: 'syz.1.4063': attribute type 12 has an invalid length. [ 1159.986951][T16274] netlink: 'syz.1.4063': attribute type 29 has an invalid length. [ 1159.994842][T16274] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1160.003975][T16274] netlink: 'syz.1.4063': attribute type 3 has an invalid length. [ 1160.030700][T16277] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4065'. [ 1160.079692][T11819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.092837][T16280] ================================================================== [ 1160.101077][T16280] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 1160.109291][T16280] Read of size 8 at addr ffff88810b072dc0 by task syz.1.4067/16280 [ 1160.117196][T16280] [ 1160.119549][T16280] CPU: 1 PID: 16280 Comm: syz.1.4067 Tainted: G W syzkaller #0 [ 1160.128529][T16280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1160.138607][T16280] Call Trace: [ 1160.141929][T16280] __dump_stack+0x21/0x24 [ 1160.146283][T16280] dump_stack_lvl+0x1a7/0x208 [ 1160.150984][T16280] ? show_regs_print_info+0x18/0x18 [ 1160.156230][T16280] ? thaw_kernel_threads+0x220/0x220 [ 1160.161555][T16280] print_address_description+0x7f/0x2c0 [ 1160.167131][T16280] ? tc_setup_flow_action+0x842/0x3280 [ 1160.172699][T16280] kasan_report+0xe2/0x130 [ 1160.177108][T16280] ? flow_action_cookie_create+0x28/0x90 [ 1160.182739][T16280] ? tc_setup_flow_action+0x842/0x3280 [ 1160.188196][T16280] __asan_report_load8_noabort+0x14/0x20 [ 1160.193830][T16280] tc_setup_flow_action+0x842/0x3280 [ 1160.199145][T16280] ? __kmalloc+0x1a4/0x330 [ 1160.203556][T16280] ? flow_rule_alloc+0x32/0x2c0 [ 1160.208611][T16280] mall_replace_hw_filter+0x2cc/0x8a0 [ 1160.213986][T16280] ? pcpu_block_update_hint_alloc+0x8bf/0xc50 [ 1160.220079][T16280] ? mall_set_parms+0x410/0x410 [ 1160.224944][T16280] ? tcf_exts_destroy+0xb0/0xb0 [ 1160.229820][T16280] ? pcpu_alloc+0xf9b/0x16b0 [ 1160.234470][T16280] ? mall_set_parms+0x19d/0x410 [ 1160.239336][T16280] mall_change+0x546/0x760 [ 1160.243757][T16280] ? __kasan_check_write+0x14/0x20 [ 1160.248868][T16280] ? mall_get+0xa0/0xa0 [ 1160.253036][T16280] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 1160.258920][T16280] ? nla_strcmp+0xf4/0x140 [ 1160.263333][T16280] tc_new_tfilter+0x1452/0x1a90 [ 1160.268188][T16280] ? mall_get+0xa0/0xa0 [ 1160.272353][T16280] ? tcf_gate_entry_destructor+0x20/0x20 [ 1160.278090][T16280] ? security_capable+0x87/0xb0 [ 1160.283007][T16280] ? ns_capable+0x8c/0xf0 [ 1160.287340][T16280] ? netlink_net_capable+0x125/0x160 [ 1160.292628][T16280] ? tcf_gate_entry_destructor+0x20/0x20 [ 1160.298411][T16280] rtnetlink_rcv_msg+0x845/0xcc0 [ 1160.303355][T16280] ? rtnetlink_bind+0x80/0x80 [ 1160.308028][T16280] ? arch_stack_walk+0xee/0x140 [ 1160.312885][T16280] ? stack_trace_save+0xa6/0xf0 [ 1160.317727][T16280] ? stack_trace_snprint+0xf0/0xf0 [ 1160.322847][T16280] ? avc_has_perm+0x168/0x3d0 [ 1160.327546][T16280] ? memcpy+0x56/0x70 [ 1160.331546][T16280] ? avc_has_perm+0x27f/0x3d0 [ 1160.336245][T16280] ? __kasan_slab_alloc+0xbd/0xf0 [ 1160.341310][T16280] ? slab_post_alloc_hook+0x5d/0x2f0 [ 1160.346709][T16280] ? avc_has_perm_noaudit+0x260/0x260 [ 1160.352110][T16280] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 1160.357657][T16280] netlink_rcv_skb+0x1f5/0x440 [ 1160.362456][T16280] ? rtnetlink_bind+0x80/0x80 [ 1160.367177][T16280] ? netlink_ack+0xb70/0xb70 [ 1160.371796][T16280] ? __netlink_lookup+0x387/0x3b0 [ 1160.376842][T16280] rtnetlink_rcv+0x1c/0x20 [ 1160.381294][T16280] netlink_unicast+0x876/0xa40 [ 1160.386077][T16280] netlink_sendmsg+0x89c/0xb50 [ 1160.390841][T16280] ? netlink_getsockopt+0x530/0x530 [ 1160.396080][T16280] ? security_socket_sendmsg+0x82/0xa0 [ 1160.401540][T16280] ? netlink_getsockopt+0x530/0x530 [ 1160.406742][T16280] ____sys_sendmsg+0x5b7/0x8f0 [ 1160.411505][T16280] ? __sys_sendmsg_sock+0x40/0x40 [ 1160.416542][T16280] ? import_iovec+0x7c/0xb0 [ 1160.421042][T16280] ___sys_sendmsg+0x236/0x2e0 [ 1160.425722][T16280] ? __sys_sendmsg+0x280/0x280 [ 1160.430506][T16280] ? alloc_file+0x82/0x540 [ 1160.434921][T16280] ? __fdget+0x1a1/0x230 [ 1160.439170][T16280] __x64_sys_sendmsg+0x1f9/0x2c0 [ 1160.444220][T16280] ? __kasan_check_write+0x14/0x20 [ 1160.449340][T16280] ? ___sys_sendmsg+0x2e0/0x2e0 [ 1160.454202][T16280] ? __kasan_check_read+0x11/0x20 [ 1160.459233][T16280] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 1160.464887][T16280] do_syscall_64+0x31/0x40 [ 1160.469327][T16280] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1160.475215][T16280] RIP: 0033:0x7f1572bc2799 [ 1160.479628][T16280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.499233][T16280] RSP: 002b:00007f157161d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.507667][T16280] RAX: ffffffffffffffda RBX: 00007f1572e3bfa0 RCX: 00007f1572bc2799 [ 1160.515648][T16280] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1160.523617][T16280] RBP: 00007f1572c58c99 R08: 0000000000000000 R09: 0000000000000000 [ 1160.531586][T16280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.539610][T16280] R13: 00007f1572e3c038 R14: 00007f1572e3bfa0 R15: 00007fffca529b98 [ 1160.547578][T16280] [ 1160.549913][T16280] Allocated by task 16280: [ 1160.554379][T16280] __kasan_kmalloc+0xda/0x110 [ 1160.559077][T16280] __kmalloc+0x1a4/0x330 [ 1160.563346][T16280] tcf_idr_create+0x5f/0x790 [ 1160.567941][T16280] tcf_idr_create_from_flags+0x61/0x70 [ 1160.573411][T16280] tcf_gact_init+0x2e6/0x560 [ 1160.578161][T16280] tcf_action_init_1+0x443/0x6e0 [ 1160.583118][T16280] tcf_action_init+0x227/0x780 [ 1160.587892][T16280] tcf_exts_validate+0x248/0x570 [ 1160.592832][T16280] mall_set_parms+0x4b/0x410 [ 1160.597469][T16280] mall_change+0x47a/0x760 [ 1160.601887][T16280] tc_new_tfilter+0x1452/0x1a90 [ 1160.606740][T16280] rtnetlink_rcv_msg+0x845/0xcc0 [ 1160.611689][T16280] netlink_rcv_skb+0x1f5/0x440 [ 1160.616456][T16280] rtnetlink_rcv+0x1c/0x20 [ 1160.620872][T16280] netlink_unicast+0x876/0xa40 [ 1160.625637][T16280] netlink_sendmsg+0x89c/0xb50 [ 1160.630407][T16280] ____sys_sendmsg+0x5b7/0x8f0 [ 1160.635174][T16280] ___sys_sendmsg+0x236/0x2e0 [ 1160.639859][T16280] __x64_sys_sendmsg+0x1f9/0x2c0 [ 1160.644808][T16280] do_syscall_64+0x31/0x40 [ 1160.649240][T16280] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1160.655141][T16280] [ 1160.657471][T16280] Last potentially related work creation: [ 1160.663200][T16280] kasan_save_stack+0x3a/0x60 [ 1160.667886][T16280] __kasan_record_aux_stack+0xd2/0x100 [ 1160.673347][T16280] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1160.679249][T16280] call_rcu+0x11a/0x10b0 [ 1160.683503][T16280] neigh_parms_release+0x1c8/0x200 [ 1160.688621][T16280] addrconf_ifdown+0x1608/0x1850 [ 1160.693763][T16280] addrconf_notify+0x3bd/0xe90 [ 1160.698644][T16280] raw_notifier_call_chain+0x90/0x100 [ 1160.704093][T16280] unregister_netdevice_many+0x1074/0x1a80 [ 1160.709967][T16280] ip_tunnel_delete_nets+0x34b/0x3a0 [ 1160.715269][T16280] ipip_exit_batch_net+0x22/0x30 [ 1160.720212][T16280] cleanup_net+0x603/0xb80 [ 1160.724641][T16280] process_one_work+0x6e1/0xba0 [ 1160.729497][T16280] worker_thread+0xa6a/0x13c0 [ 1160.734325][T16280] kthread+0x346/0x3d0 [ 1160.738701][T16280] ret_from_fork+0x1f/0x30 [ 1160.743119][T16280] [ 1160.745457][T16280] The buggy address belongs to the object at ffff88810b072d00 [ 1160.745457][T16280] which belongs to the cache kmalloc-192 of size 192 [ 1160.759524][T16280] The buggy address is located 0 bytes to the right of [ 1160.759524][T16280] 192-byte region [ffff88810b072d00, ffff88810b072dc0) [ 1160.773166][T16280] The buggy address belongs to the page: [ 1160.778819][T16280] page:ffffea00042c1c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b072 [ 1160.789063][T16280] flags: 0x4000000000000200(slab) [ 1160.794189][T16280] raw: 4000000000000200 0000000000000000 0000000100000001 ffff888100043380 [ 1160.802782][T16280] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1160.811372][T16280] page dumped because: kasan: bad access detected [ 1160.817785][T16280] page_owner tracks the page as allocated [ 1160.823521][T16280] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2571644404, free_ts 0 [ 1160.838215][T16280] prep_new_page+0x179/0x180 [ 1160.842819][T16280] get_page_from_freelist+0x223b/0x23d0 [ 1160.848374][T16280] __alloc_pages_nodemask+0x290/0x620 [ 1160.853750][T16280] new_slab+0x84/0x3f0 [ 1160.857840][T16280] ___slab_alloc+0x2a6/0x450 [ 1160.862432][T16280] __slab_alloc+0x63/0xa0 [ 1160.866771][T16280] __kmalloc+0x1fe/0x330 [ 1160.871022][T16280] sbitmap_init_node+0x14f/0x3c0 [ 1160.876068][T16280] blk_mq_realloc_hw_ctxs+0x770/0x16c0 [ 1160.881535][T16280] blk_mq_init_allocated_queue+0x409/0x17c0 [ 1160.887452][T16280] blk_mq_init_queue+0x6e/0xd0 [ 1160.892327][T16280] scsi_mq_alloc_queue+0x42/0x140 [ 1160.897488][T16280] scsi_alloc_sdev+0x60d/0x920 [ 1160.902256][T16280] scsi_probe_and_add_lun+0x17d/0x33a0 [ 1160.907717][T16280] __scsi_scan_target+0x1d2/0xbf0 [ 1160.912743][T16280] scsi_scan_host_selected+0x343/0x5f0 [ 1160.918283][T16280] page_owner free stack trace missing [ 1160.923672][T16280] [ 1160.926017][T16280] Memory state around the buggy address: [ 1160.931655][T16280] ffff88810b072c80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 1160.939726][T16280] ffff88810b072d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1160.947809][T16280] >ffff88810b072d80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1160.955889][T16280] ^ [ 1160.962068][T16280] ffff88810b072e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1160.970135][T16280] ffff88810b072e80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1160.978221][T16280] ================================================================== [ 1160.986307][T16280] Disabling lock debugging due to kernel taint [ 1161.006711][ T24] audit: type=1400 audit(1773956268.790:1669): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[13606]" dev="pipefs" ino=13606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1161.056898][ T24] audit: type=1400 audit(1773956268.840:1670): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1161.079228][ T24] audit: type=1400 audit(1773956268.840:1671): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.102724][ T24] audit: type=1400 audit(1773956268.840:1672): avc: denied { write search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.131027][ T24] audit: type=1400 audit(1773956268.840:1673): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.152066][ T24] audit: type=1400 audit(1773956268.840:1674): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1161.172785][ T24] audit: type=1400 audit(1773956268.840:1675): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1161.202000][ T9822] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1161.286990][ T678] usb 9-1: USB disconnect, device number 8 [ 1161.456614][ T9822] usb 4-1: Using ep0 maxpacket: 16 [ 1161.596548][ T9822] usb 4-1: device descriptor read/all, error -71 [ 1162.277345][ T7] device bridge_slave_1 left promiscuous mode [ 1162.283487][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.290997][ T7] device bridge_slave_0 left promiscuous mode [ 1162.297157][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.748206][ T7] tipc: Disabling bearer [ 1162.753558][ T7] tipc: Left network mode [ 1163.628241][ T7] device bridge_slave_1 left promiscuous mode [ 1163.634371][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.642148][ T7] device bridge_slave_0 left promiscuous mode [ 1163.648595][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.656524][ T7] device bridge_slave_1 left promiscuous mode [ 1163.662762][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.670315][ T7] device bridge_slave_0 left promiscuous mode [ 1163.676516][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.684293][ T7] device bridge_slave_1 left promiscuous mode [ 1163.690561][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.698023][ T7] device bridge_slave_0 left promiscuous mode [ 1163.704153][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.712630][ T7] device bridge0 left promiscuous mode [ 1163.718214][ T7] device veth1_macvtap left promiscuous mode [ 1163.724207][ T7] device veth0_vlan left promiscuous mode [ 1163.730278][ T7] device veth1_macvtap left promiscuous mode [ 1163.736302][ T7] device veth0_vlan left promiscuous mode [ 1163.742397][ T7] device veth1_macvtap left promiscuous mode [ 1163.748493][ T7] device veth0_vlan left promiscuous mode