last executing test programs: 38m51.948706922s ago: executing program 0 (id=1407): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r3}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 38m50.081106921s ago: executing program 0 (id=1413): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x2, 0x1df, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x84be, 0x73, 0x11, 0x22, 0x8}, [], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x1000, 0x10001, 0xffffff81, 0x2, 0x1, 0x0, '\x00', r0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r3, 0x1f, 0x1, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={'veth1_macvtap\x00', {0x2, 0x4e24, @multicast1}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) 38m47.075988428s ago: executing program 0 (id=1418): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x16) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 38m45.130934219s ago: executing program 0 (id=1420): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x40}}}]}, 0x78}}, 0x1040) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000004c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x3e00000000000000) 38m44.317205871s ago: executing program 0 (id=1424): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x40}}}]}, 0x78}}, 0x1040) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000004c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x3e00000000000000) 38m43.528179294s ago: executing program 0 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='svc_unregister\x00', r2, 0x0, 0x7e}, 0x18) io_setup(0x200, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @local, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', r4, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x40}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000880)={@private0, 0x0}, &(0x7f00000008c0)=0x14) write$char_usb(0xffffffffffffffff, &(0x7f0000000d00)="7bed10aad8c303f9f1fd3deaf1dd11cc0d0075b274802cd831d71149691846bb5bfeba093a1240983b3d2cb45bee224b8d97e0c95b5f8cd11f7ee78a5a29d7ea5d498914afa9dc66d632a88f5e53c7284b279c48b7b0a5d7e9a6cf346f9a1b295be36a80ae0e12ec", 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000900)={@private2, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf2515000000380001800800030000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="1400020077673100000000000000000000000000080003000400000068000180080003000100000008000100", @ANYRES32=r4, @ANYBLOB="080003000200000014000200626f6e645f736c6176655f3000000000140002006970366772657461703000000000000008000100", @ANYRES32=r4, @ANYBLOB="14000200776c616e31000000000000000000000008000300030000002000018008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468315f746f5f626f6e640000001c000180080003000200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="8800018014000200626f6e6430000000000000000000000008000300030000000800030002000000140002006970766c616e310000000000000000000800030003000000140002006c6f00000000000000000000000000001400020076657468305f766c616e00000000000008000300010000001400020070696d726567000000000000000000001c00018008000100", @ANYRES32=r4, @ANYBLOB="080003000700000008000300000000004c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="14000200736974300000000000000000000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="6400018008000100", @ANYRES32=r5, @ANYBLOB="140002006970766c616e300000000000000000001400020077673000000000000000000000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="090000009f32f60b08649e9daf4450046efdf889ad14ed7a70a8e9cafecfbf5ccff622b2d77e5df3b3ff771d34e59473e97f621019", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x250}, 0x1, 0x0, 0x0, 0x2000c010}, 0x90) openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) unshare(0x42000000) 38m28.43192292s ago: executing program 32 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='svc_unregister\x00', r2, 0x0, 0x7e}, 0x18) io_setup(0x200, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @local, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', r4, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x40}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000880)={@private0, 0x0}, &(0x7f00000008c0)=0x14) write$char_usb(0xffffffffffffffff, &(0x7f0000000d00)="7bed10aad8c303f9f1fd3deaf1dd11cc0d0075b274802cd831d71149691846bb5bfeba093a1240983b3d2cb45bee224b8d97e0c95b5f8cd11f7ee78a5a29d7ea5d498914afa9dc66d632a88f5e53c7284b279c48b7b0a5d7e9a6cf346f9a1b295be36a80ae0e12ec", 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000900)={@private2, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf2515000000380001800800030000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="1400020077673100000000000000000000000000080003000400000068000180080003000100000008000100", @ANYRES32=r4, @ANYBLOB="080003000200000014000200626f6e645f736c6176655f3000000000140002006970366772657461703000000000000008000100", @ANYRES32=r4, @ANYBLOB="14000200776c616e31000000000000000000000008000300030000002000018008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468315f746f5f626f6e640000001c000180080003000200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="8800018014000200626f6e6430000000000000000000000008000300030000000800030002000000140002006970766c616e310000000000000000000800030003000000140002006c6f00000000000000000000000000001400020076657468305f766c616e00000000000008000300010000001400020070696d726567000000000000000000001c00018008000100", @ANYRES32=r4, @ANYBLOB="080003000700000008000300000000004c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="14000200736974300000000000000000000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="6400018008000100", @ANYRES32=r5, @ANYBLOB="140002006970766c616e300000000000000000001400020077673000000000000000000000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="090000009f32f60b08649e9daf4450046efdf889ad14ed7a70a8e9cafecfbf5ccff622b2d77e5df3b3ff771d34e59473e97f621019", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x250}, 0x1, 0x0, 0x0, 0x2000c010}, 0x90) openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) unshare(0x42000000) 36m59.58898293s ago: executing program 5 (id=1686): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x2, 0x1df, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x84be, 0x73, 0x11, 0x22, 0x8}, [], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x1000, 0x10001, 0xffffff81, 0x2, 0x1, 0x0, '\x00', r0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r3, 0x1f, 0x1, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={'veth1_macvtap\x00', {0x2, 0x4e24, @multicast1}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) 36m59.388510023s ago: executing program 5 (id=1689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x1eae, &(0x7f0000000480)={0x0, 0x100000, 0x3800}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x1816, 0x0, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180300000000000000000000935137eff6da1df55b5add4600100006000000e2", @ANYRES32=r0, @ANYBLOB="00b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000ffff000085000000570000009500000002000000", @ANYRESDEC=r2, @ANYBLOB="f26a2a86e2492639"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00'}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x101) 36m57.077996069s ago: executing program 5 (id=1691): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setregid(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, 0x0, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000080)=ANY=[], 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x800) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 36m56.111482554s ago: executing program 5 (id=1694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x60142, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xfffffffe, 0x67}}}}, ["", ""]}, 0x20}}, 0x8040) mount$overlay(0x0, 0x0, 0x0, 0x20088, 0x0) 36m54.547760888s ago: executing program 5 (id=1701): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x40}}}]}, 0x78}}, 0x1040) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000004c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x3e00000000000000) 36m53.013671703s ago: executing program 5 (id=1703): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='svc_unregister\x00', r3, 0x0, 0x7e}, 0x18) io_setup(0x200, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @local, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', r6, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x40}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000880)={@private0, 0x0}, &(0x7f00000008c0)=0x14) write$char_usb(0xffffffffffffffff, &(0x7f0000000d00)="7bed10aad8c303f9f1fd3deaf1dd11cc0d0075b274802cd831d71149691846bb5bfeba093a1240983b3d2cb45bee224b8d97e0c95b5f8cd11f7ee78a5a29d7ea5d498914afa9dc66d632a88f5e53c7284b279c48b7b0a5d7e9a6cf346f9a1b295be36a80ae0e12ec", 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000900)={@private2, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="50020000", @ANYRES16=r8, @ANYBLOB="010025bd7000fbdbdf2515000000380001800800030000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="1400020077673100000000000000000000000000080003000400000068000180080003000100000008000100", @ANYRES32=r6, @ANYBLOB="080003000200000014000200626f6e645f736c6176655f3000000000140002006970366772657461703000000000000008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e31000000000000000000000008000300030000002000018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f746f5f626f6e640000001c000180080003000200000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="8800018014000200626f6e6430000000000000000000000008000300030000000800030002000000140002006970766c616e310000000000000000000800030003000000140002006c6f00000000000000000000000000001400020076657468305f766c616e00000000000008000300010000001400020070696d726567000000000000000000001c00018008000100", @ANYRES32=r6, @ANYBLOB="080003000700000008000300000000004c00018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="14000200736974300000000000000000000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="6400018008000100", @ANYRES32=r7, @ANYBLOB="140002006970766c616e300000000000000000001400020077673000000000000000000000000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="090000009f32f60b08649e9daf4450046efdf889ad14ed7a70a8e9cafecfbf5ccff622b2d77e5df3b3ff771d34e59473e97f621019", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x250}, 0x1, 0x0, 0x0, 0x2000c010}, 0x90) openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) unshare(0x42000000) 36m36.919614864s ago: executing program 33 (id=1703): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='svc_unregister\x00', r3, 0x0, 0x7e}, 0x18) io_setup(0x200, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @local, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', r6, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x40}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000880)={@private0, 0x0}, &(0x7f00000008c0)=0x14) write$char_usb(0xffffffffffffffff, &(0x7f0000000d00)="7bed10aad8c303f9f1fd3deaf1dd11cc0d0075b274802cd831d71149691846bb5bfeba093a1240983b3d2cb45bee224b8d97e0c95b5f8cd11f7ee78a5a29d7ea5d498914afa9dc66d632a88f5e53c7284b279c48b7b0a5d7e9a6cf346f9a1b295be36a80ae0e12ec", 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000900)={@private2, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="50020000", @ANYRES16=r8, @ANYBLOB="010025bd7000fbdbdf2515000000380001800800030000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="1400020077673100000000000000000000000000080003000400000068000180080003000100000008000100", @ANYRES32=r6, @ANYBLOB="080003000200000014000200626f6e645f736c6176655f3000000000140002006970366772657461703000000000000008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e31000000000000000000000008000300030000002000018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f746f5f626f6e640000001c000180080003000200000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="8800018014000200626f6e6430000000000000000000000008000300030000000800030002000000140002006970766c616e310000000000000000000800030003000000140002006c6f00000000000000000000000000001400020076657468305f766c616e00000000000008000300010000001400020070696d726567000000000000000000001c00018008000100", @ANYRES32=r6, @ANYBLOB="080003000700000008000300000000004c00018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="14000200736974300000000000000000000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="6400018008000100", @ANYRES32=r7, @ANYBLOB="140002006970766c616e300000000000000000001400020077673000000000000000000000000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="090000009f32f60b08649e9daf4450046efdf889ad14ed7a70a8e9cafecfbf5ccff622b2d77e5df3b3ff771d34e59473e97f621019", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x250}, 0x1, 0x0, 0x0, 0x2000c010}, 0x90) openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) unshare(0x42000000) 17m0.524614352s ago: executing program 3 (id=3723): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x1040418, 0x0, 0x28, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) unshare(0x2040400) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) lseek(r4, 0xf800100000000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) 16m54.480453996s ago: executing program 3 (id=3732): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x2, 0x1df, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x84be, 0x73, 0x11, 0x22, 0x8}, [], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x1000, 0x10001, 0xffffff81, 0x2, 0x1, 0x0, '\x00', r0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r3, 0x1f, 0x1, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={'veth1_macvtap\x00', {0x2, 0x4e24, @multicast1}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) 16m51.911190777s ago: executing program 3 (id=3737): mkdir(0x0, 0x92) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@barrier}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @multicast1}, 0x3ae1fb07b65935cc, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x9, 0x8, 0xff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = dup(r1) sendmsg$nl_generic(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc8, 0x1c, 0x100, 0x70bd25, 0x25dfdbfd, {0x18}, [@typed={0x4, 0xf8}, @generic="5b0f0f4be728cfd45644b5cb769206a947d44e5763c5fa245bf7d56516b7044a47c926f184a6695ee0e3898f83fc6719ac4a3509b4f57510893a4789e15d4dfc184656b4e6ef28db8b8721857a03c01edf9cafd8bfec55a0012f58003fe5681b2c169a0d171755966913ae42d2adcb9d8e6f11f857deff52709044679282639f5389816bfcb388e21f0eb9", @typed={0x8, 0x7c, 0x0, 0x0, @pid=r0}, @generic, @typed={0x19, 0x108, 0x0, 0x0, @binary="caadf84ce7631977a0a4a67172d998c2fe797a9b6b"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0xe0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r7 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x7fa, &(0x7f0000001880)=0x0) io_getevents(r8, 0x3, 0x7, &(0x7f00000018c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, r6, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) 16m47.409853178s ago: executing program 3 (id=3743): mkdir(0x0, 0x92) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@barrier}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @multicast1}, 0x3ae1fb07b65935cc, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x9, 0x8, 0xff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = dup(r1) sendmsg$nl_generic(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xac, 0x1c, 0x100, 0x70bd25, 0x25dfdbfd, {0x18}, [@typed={0x4, 0xf8}, @generic="5b0f0f4be728cfd45644b5cb769206a947d44e5763c5fa245bf7d56516b7044a47c926f184a6695ee0e3898f83fc6719ac4a3509b4f57510893a4789e15d4dfc184656b4e6ef28db8b8721857a03c01edf9cafd8bfec55a0012f58003fe5681b2c169a0d171755966913ae42d2adcb9d8e6f11f857deff52709044679282639f5389816bfcb388e21f0eb9", @typed={0x8, 0x7c, 0x0, 0x0, @pid=r0}, @generic]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0xe0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r7 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x7fa, &(0x7f0000001880)=0x0) io_getevents(r8, 0x3, 0x7, &(0x7f00000018c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, r6, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) 16m41.810228025s ago: executing program 3 (id=3750): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x1040418, 0x0, 0x28, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) unshare(0x2040400) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) lseek(r4, 0xf800100000000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) 16m38.815186062s ago: executing program 3 (id=3756): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000003, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x1001a, &(0x7f0000000080)={[{@grpjquota}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 16m23.585426632s ago: executing program 34 (id=3756): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000003, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x1001a, &(0x7f0000000080)={[{@grpjquota}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 14m32.506350284s ago: executing program 2 (id=3902): mkdir(0x0, 0x92) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@barrier}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @multicast1}, 0x3ae1fb07b65935cc, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x9, 0x8, 0xff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = dup(r1) sendmsg$nl_generic(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xdc, 0x1c, 0x100, 0x70bd25, 0x25dfdbfd, {0x18}, [@typed={0x4, 0xf8}, @generic="5b0f0f4be728cfd45644b5cb769206a947d44e5763c5fa245bf7d56516b7044a47c926f184a6695ee0e3898f83fc6719ac4a3509b4f57510893a4789e15d4dfc184656b4e6ef28db8b8721857a03c01edf9cafd8bfec55a0012f58003fe5681b2c169a0d171755966913ae42d2adcb9d8e6f11f857deff52709044679282639f5389816bfcb388e21f0eb9", @typed={0x8, 0x7c, 0x0, 0x0, @pid=r0}, @typed={0x2d, 0x108, 0x0, 0x0, @binary="caadf84ce7631977a0a4a67172d998c2fe797a9b6b06aa007c048795e1d8e4d4fa0a0388afc7a6f8ce"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0xe0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r7 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x7fa, &(0x7f0000001880)=0x0) io_getevents(r8, 0x3, 0x7, &(0x7f00000018c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, r6, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) 14m31.141325266s ago: executing program 2 (id=3906): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 14m29.270384315s ago: executing program 2 (id=3907): r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @multicast1}, 0x3ae1fb07b65935cc, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x9, 0x8, 0xff}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = dup(r1) sendmsg$nl_generic(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc8, 0x1c, 0x100, 0x70bd25, 0x25dfdbfd, {0x18}, [@typed={0x4, 0xf8}, @generic="5b0f0f4be728cfd45644b5cb769206a947d44e5763c5fa245bf7d56516b7044a47c926f184a6695ee0e3898f83fc6719ac4a3509b4f57510893a4789e15d4dfc184656b4e6ef28db8b8721857a03c01edf9cafd8bfec55a0012f58003fe5681b2c169a0d171755966913ae42d2adcb9d8e6f11f857deff52709044679282639f5389816bfcb388e21f0eb9", @typed={0x8, 0x7c, 0x0, 0x0, @pid=r0}, @generic, @typed={0x19, 0x108, 0x0, 0x0, @binary="caadf84ce7631977a0a4a67172d998c2fe797a9b6b"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0xe0) 14m29.269873435s ago: executing program 2 (id=3908): syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x1040418, 0x0, 0x28, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./bus\x00') 14m29.133897717s ago: executing program 2 (id=3912): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x1040418, 0x0, 0x28, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 14m23.440756628s ago: executing program 2 (id=3915): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x1040418, 0x0, 0x28, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) lseek(r3, 0xf800100000000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) 14m6.797680872s ago: executing program 35 (id=3915): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x1040418, 0x0, 0x28, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) lseek(r3, 0xf800100000000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) 6.219324361s ago: executing program 6 (id=8452): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = socket$inet6(0xa, 0x1, 0x7f11) sendto$inet6(r2, 0x0, 0x0, 0x4000001, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfffff0bb}, 0x1c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) chmod(0x0, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x439, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x64}}, 0x0) 4.592362117s ago: executing program 6 (id=8453): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4.591786327s ago: executing program 4 (id=8455): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3.405570256s ago: executing program 4 (id=8456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 3.357548577s ago: executing program 8 (id=8457): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 3.319532998s ago: executing program 8 (id=8458): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd49) gettid() r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) syz_emit_ethernet(0x100, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000040)={@mcast2={0xff, 0x5}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="14000200ff020000000000000000000000000001080008000207000014000100000000000000001d7000000000"], 0x48}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x20000040) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)=@urb_type_control={0x2, {0xf, 0x1}, 0x1, 0x60, &(0x7f0000000340)={0x0, 0xf, 0x8, 0x5, 0x7a71}, 0x8, 0x7, 0x4, 0x0, 0x4, 0x91a9, &(0x7f0000000440)}) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x2a8, &(0x7f0000000580)="$eJzs3c9qK1UcB/DfpGkSdZEsXInigC5cXW7vE6RIL1zMSslCXah4b0GaILRQ8A/GrgRXblz6BILQnS/hxjfwAQR3dlE4MslMk9Q07UDT+ufz2fT0nPOd8zuTaUsXOfnw5fHB0zz2T778LTqdLBr96MdZFr1oROXrWNL/LgCAf7OzlOKPNFMnl0VEZ3NlAQAbVPvv/+nGSwIANuydd997a3cw2Hs7zzvxePzN8bD4z774Ohvf3Y9PYhTP4mF04zwiXZi1H6eUJs280IvXx5PjYZEcf/BLef3d3yOm+Z3oRm/atZx/MtjbyWcW8pOijufL9ftF/lF048UV6z8Z7D1akY9hK954baH+B9GNXz+OT2MUT6dFzPNf7eT5m+n7P794vyivyGeT42F7Om8ubd3xSwMAAAAAAAAAAAAAAAAAAAAAwH/Yg/LsnHZMz+8pusrzd7bOi2+2I6/0ls/nmeWz6kKXzgeapPihOl/nYZ7nqZw4zzfjpWY072fXAAAAAAAAAAAAAAAAAAAA8M9y9NnnBx+NRs8Ob6VRnQZQva2//nVOp6n+Qs+rsT7Vnq/VKJtrloitak4WsbaeYhO3dFuuazx3Vc0//lT3gp3r52wXa3VucRfVy73QE1VPtvoeti8md6qH5OeqJ6WUWnHD1VtXDaVaj19r5VC39t1ovTBtTNbMieyqwr59Zf5zWQ5ll3fRWrrPS43tsrEQv/Rs1Hqe//67InNaBwAAAAAAAAAAAAAAAAAAbNT8Tb8rBk/WRhupvbGyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBOzT//v0ZjUoZvMLkVh0f3vEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4KAAD//+KpXP8=") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 3.319226267s ago: executing program 4 (id=8459): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") 3.246731069s ago: executing program 1 (id=8460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r0, 0x0, 0x24000000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@delchain={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0x0, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) 3.16460966s ago: executing program 7 (id=8461): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0xd, 0x20041) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, 0x0, 0x0) getrusage(0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600), 0x0, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000b00)={'gre0\x00', 0x0, 0x7800, 0x1, 0x1, 0xf, {{0x19, 0x4, 0x2, 0x1b, 0x64, 0x68, 0x0, 0x6, 0x4, 0x0, @loopback, @remote, {[@noop, @cipso={0x86, 0x4a, 0x2, [{0x2, 0x2}, {0x5, 0x9, "fe91bdee6054bf"}, {0x7, 0x8, "3d10cd65569b"}, {0x6, 0x2}, {0x3, 0x9, "547b15bbf22dc8"}, {0x5, 0xb, "f5c9f0e49f29b7c0de"}, {0x0, 0xc, "d7178f1ac063ddb84432"}, {0x6, 0x4, "920b"}, {0x6, 0xb, "bc55cc0b39e67e0ed1"}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) 3.15392478s ago: executing program 1 (id=8462): fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000500000005000000090000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3.14099439s ago: executing program 6 (id=8463): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.327688093s ago: executing program 4 (id=8464): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = socket$inet6(0xa, 0x1, 0x7f11) sendto$inet6(r2, 0x0, 0x0, 0x4000001, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfffff0bb}, 0x1c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) chmod(0x0, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x439, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x64}}, 0x0) 2.327205333s ago: executing program 8 (id=8465): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, 0x0, 0x20000000) close(r5) 2.326273653s ago: executing program 7 (id=8466): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.302457803s ago: executing program 7 (id=8467): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x4}, 0x32}]}, 0x1b, 0x4f5, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x800) close(0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 2.138021866s ago: executing program 6 (id=8468): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000780)={[], [{@subj_user={'subj_user', 0x3d, '\a/+\x1b:'}}, {@smackfsdef={'smackfsdef', 0x3d, 'macgaelic'}}]}, 0x23, 0x336, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020600) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000500)=""/173, 0xad) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x82100, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0x770a, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r6, &(0x7f0000000200)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000004c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4800) 2.136261136s ago: executing program 1 (id=8469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.87067747s ago: executing program 1 (id=8470): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x1, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) connect$unix(r4, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r5, 0x0, 0x24000000) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) close(r0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r9, 0x40047459, 0x0) 1.837047301s ago: executing program 1 (id=8471): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x804, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x5, 0x5521, &(0x7f0000006300)="$eJzs3EtrY+UbAPAnvcz9P/8iLtzNgUFoYRKbXgbdVZ3BC3Yooy5caZqkITNJTmnStHblwqW48JuIgiuXfgYXrt2JC8WdoOScU516gYGmjW1/Pzh5zvvmzXOeNwwDzzklAVxYc8kvP5XiZlyNiOmIuBGRnZeKI7OWh+ci4lZETD1xlIr5PyYuRcS1iLg5Sp7nLBVvfXZneHv1xzd//vrbyzPXP//qu8ntGpi05yOiu52f73XzmLby+KiYrw3bWeyuDIuYv9F9XIzTPO41N7MMe7XDdbUsLrfy9en2bn8Utzq1+ii22lvZ/HYvv2B/2DrMk33gUW0nGzeam1ls99Mstg7yuvYP8v/bDvqDPE+jyPdhlj4Gg8OYzzf3m/l+th9nsd4bFPN53rTR3B/FYRGLy0U97TSyOjaP803/t73V7u3uJ8PmTr+d9pLVSvXFSvVuubqTNpqD5kq51m3cXUnmW53RsvKgWeuutdK01WlW6ml3IZlv1evlajWZv9fcbNd6SbVaWa4sllcXirM7yWsP3k06jWR+FF9p93YH7U4/2Up3kvwTC8lSZfmlheR2NXl7fSPZeHj//vrGO+/fe+/By+tvvFos+ltZyfzS4tJSubpYXqouXKD9f1wUPcb9w7GUJl0AwNmj/wfGZvbpl55c/7/zMOLk+//Q/4/Fmep/z1//v/dCxET3D8ei/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLC+n/3i9exkLh9fL+b/V0w9U4xLETEVEb/9g+m4dCTndJFn9l/Wz/6lhm9KkWUYXeNycVyLiLXi+PX/J/0tAAAAwPn15Ue3Ps279fxlbtIFcZrymzZTNz4YU75SRMzO/TCmbFOjl2fHlCz79z0T+2PKlt3AujKmZPktt5lxZXsq00fClSdCKQ9Tp1oOAABwKo52AqfbhQAAAHCaPpl0AUxGKQ4fZR4+C87+8v7PB4JXj4wAAACAM6g06QIAAACAE5f1/37/DwAAAM63/Pf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+Z+d+bhMHojgAPxu8sP+0aLX3LWCb2BuUsSXsMceIAtIEBeRAWkgD1EBuKSGCCI9DIOIQxWOjRN8nmcGW/eMNgsPMSAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl+6q5ezm8vdV25zNtp08vQEAAABOWVfLWf1mks6/Nte/N5d+NudFRJQRcWrsPohPR5mDJqd6vv/68P7qRQ23EXXC7jNGzfElIv42x8OPrr8FAAAA+LhW88U0jdbTy+TcBdGnNGlTfvuXKa+IiGpynymt3OX9yhRW/76HcZEprZ7AGmcKS1Nuw1xpr1L/3fezduODpkhNefKxfZHZ+g4AAPRocNT0OwoBAACgT//f+NyfzHXQsyKeljL3S4Gj1DTLe5+PzgAAAIB3qDh3AQAAAEDn6vF/T/v/be3/BwAAAOeR9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS+tqOVvNF9O2OZttO3l6AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACP7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxcz+vcVRxAMC/O7Ozta1ijJJDRBQ86MWm29ram3hQggf/BCGk2xq79UcbxJYi5uJNcu5F9CgiKPHW/6HnFnqptx5yqOC5MrMzyesPcNU6s00+H3jzvjsM875vFkK+814CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBj+53dOC8Pc5M4q8/duHtltexvPtCXrm3eWixbGfemHO/e40p89r2UfugtRMTh7pIBAABgTxs0Qd7U9xFxu9haLvtsrqr/i+aasub//plJXNfzXzQl64P1f1P7l+23X++8sDPi3GSc8qZn1sajow/n1P8f5vlEePZvr+hXT75695JXX0j2/sbz20X1PHvfXr/+7qAKD7SRLQDwbxxp+jpofh8q+2GXiQGwb/STwrup//O5bnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaMP2Rhxu4l5ELPZ349LNu1dWH9Vf27y12LSTV69uxte79yxvUUTEmbXx6Girs5ltFy9dPrcyHo8utB+8HBFdjf52Pf1zH05xcUQnz0fwmIKs/rJnJZ8nI+jwhxIAAHtSUbeyrr9dbC2X53rzEfd+uL/+fy2JY8r6/85HJ2+kY6X1f0T6ZmB/W1o//9nSxUuX31g7v3J2dHb0yZvHhm8Nj586ceLUUvWuZMkbEwAAAP6bQd3S+j+bf3j9/1ASx5T1/+ffDb9Kx8qT+n/Y2gxn3+6iX9eZAAAA7G/PvfLnH71HnO8NBvHlyvr6heHkuPP52OTYQar/2IG6pfV/Pt91VgAAAEAbtjd6963/n07imHL9/+kfX/w5vWceEQfr9f8jq5+OT7c3nZnWxp8Tdz1HAAAAunWwbun6f1Ht/892tjxkEfH6q5O4/jeAU9X/+Xvf/JSOle7/P97eFGdStjB5HlW/ENFf6DojAAAA9rKn6lYW+78XW8sf/3Log4H9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABt+ysAAP//pIo99g==") prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x400, &(0x7f0000001080)) shutdown(r2, 0x0) 1.409701928s ago: executing program 4 (id=8472): fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000500000005000000090000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYBLOB="3663538545fdb750423e6b0e0d86", @ANYRES16, @ANYRES8, @ANYRESHEX], 0xfe, 0x1d1, &(0x7f0000000640)="$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") write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0xffffffff, 0x20000000, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.408927658s ago: executing program 7 (id=8473): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.174925382s ago: executing program 8 (id=8474): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x400a0080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.173368831s ago: executing program 6 (id=8475): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utimes(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@barrier}, {@grpquota}, {@usrjquota}, {@jqfmt_vfsold}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r2, 0x0) pipe2$9p(&(0x7f0000002480), 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 916.151636ms ago: executing program 6 (id=8476): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0xd, 0x20041) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, 0x0, 0x0) getrusage(0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600), 0x0, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000b00)={'gre0\x00', 0x0, 0x7800, 0x1, 0x1, 0xf, {{0x19, 0x4, 0x2, 0x1b, 0x64, 0x68, 0x0, 0x6, 0x4, 0x0, @loopback, @remote, {[@noop, @cipso={0x86, 0x4a, 0x2, [{0x2, 0x2}, {0x5, 0x9, "fe91bdee6054bf"}, {0x7, 0x8, "3d10cd65569b"}, {0x6, 0x2}, {0x3, 0x9, "547b15bbf22dc8"}, {0x5, 0xb, "f5c9f0e49f29b7c0de"}, {0x0, 0xc, "d7178f1ac063ddb84432"}, {0x6, 0x4, "920b"}, {0x6, 0xb, "bc55cc0b39e67e0ed1"}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) 421.577633ms ago: executing program 7 (id=8477): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 392.513984ms ago: executing program 7 (id=8478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000500)='smaps_rollup\x00') 188.350267ms ago: executing program 8 (id=8479): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 166.151347ms ago: executing program 4 (id=8480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080)=0x2, 0x7f03) 165.803937ms ago: executing program 8 (id=8481): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = dup(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 1 (id=8482): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000640)='veth0_macvtap\x00', 0x10) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x4000000) connect$netlink(r1, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2, &(0x7f0000003700)={0x77359400}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) ioctl$RTC_IRQP_READ(r8, 0x8008700b, &(0x7f0000000040)) kernel console output (not intermixed with test programs): -1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.004397][T19841] usb 2-1: Product: syz [ 2370.008677][T19841] usb 2-1: Manufacturer: syz [ 2370.013185][T19841] usb 2-1: SerialNumber: syz [ 2370.403464][T19841] usb 2-1: 0:2 : does not exist [ 2370.435610][T19841] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2370.631181][T19841] usb 2-1: USB disconnect, device number 5 [ 2370.948027][T21938] bridge: RTM_NEWNEIGH with invalid ether address [ 2370.984851][T21940] fuse: Bad value for 'fd' [ 2371.011908][T18772] udevd[18772]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2371.203316][T21953] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4982'. [ 2371.214064][ T28] audit: type=1326 audit(1742973549.966:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.6.4980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a64b8d169 code=0x0 [ 2371.299744][T21964] kvm: emulating exchange as write [ 2371.442022][T21978] bridge: RTM_NEWNEIGH with invalid ether address [ 2371.495043][T21985] fuse: Bad value for 'fd' [ 2371.504443][T21945] syz.7.4976 (21945) used greatest stack depth: 19976 bytes left [ 2372.299379][ T39] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2372.562013][T21996] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4994'. [ 2372.578563][ T39] usb 9-1: Using ep0 maxpacket: 16 [ 2372.584796][ T39] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2372.615294][ T39] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2372.640361][ T39] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2372.658729][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.675288][ T39] usb 9-1: Product: syz [ 2372.685368][ T39] usb 9-1: Manufacturer: syz [ 2372.693618][ T39] usb 9-1: SerialNumber: syz [ 2372.846533][T22016] bridge: RTM_NEWNEIGH with invalid ether address [ 2372.907122][ T39] usb 9-1: 0:2 : does not exist [ 2372.914645][ T39] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2372.934706][ T39] usb 9-1: USB disconnect, device number 5 [ 2374.094482][T22057] bridge: RTM_NEWNEIGH with invalid ether address [ 2374.768518][T17743] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2374.948487][T17743] usb 7-1: Using ep0 maxpacket: 16 [ 2374.954617][T17743] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2374.964656][T17743] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2374.974754][T17743] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2374.983629][T17743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.991418][T17743] usb 7-1: Product: syz [ 2374.995391][T17743] usb 7-1: Manufacturer: syz [ 2374.999842][T17743] usb 7-1: SerialNumber: syz [ 2375.213124][T17743] usb 7-1: 0:2 : does not exist [ 2375.227797][T17743] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2375.251561][T17743] usb 7-1: USB disconnect, device number 5 [ 2375.786023][T22119] bridge: RTM_NEWNEIGH with invalid ether address [ 2375.886794][T22127] xt_bpf: check failed: parse error [ 2377.861691][T22166] xt_bpf: check failed: parse error [ 2380.047747][ T28] audit: type=1326 audit(1742973558.796:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22196 comm="syz.4.5064" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4538d169 code=0x0 [ 2380.119654][T22209] xt_bpf: check failed: parse error [ 2380.159378][T22216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5072'. [ 2382.174080][T22255] device wg2 entered promiscuous mode [ 2386.968489][ T28] audit: type=1326 audit(1742973565.676:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22440 comm="syz.4.5152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4538d169 code=0x0 [ 2387.645219][T22463] xt_NFQUEUE: number of total queues is 0 [ 2390.014827][T22492] xt_bpf: check failed: parse error [ 2391.676845][T22526] xt_bpf: check failed: parse error [ 2391.741115][T22533] bridge: RTM_NEWNEIGH with invalid ether address [ 2392.222131][T22559] xt_bpf: check failed: parse error [ 2392.602881][T22567] fuse: Bad value for 'fd' [ 2392.805860][T22576] bridge: RTM_NEWNEIGH with invalid ether address [ 2393.456625][T22601] fuse: Bad value for 'fd' [ 2393.653710][T22624] bridge: RTM_NEWNEIGH with invalid ether address [ 2393.688231][T22633] fuse: Bad value for 'fd' [ 2394.761314][T22707] fuse: Bad value for 'group_id' [ 2394.770431][T17743] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2394.968551][T17743] usb 2-1: Using ep0 maxpacket: 16 [ 2394.975144][T17743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2394.997147][T17743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2395.048703][T17743] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2395.105225][T17743] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2395.119772][T17743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2395.137514][T17743] usb 2-1: config 0 descriptor?? [ 2395.147894][T22720] bridge: RTM_NEWNEIGH with invalid ether address [ 2395.264416][ T28] audit: type=1326 audit(1742973574.016:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22726 comm="syz.4.5264" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4538d169 code=0x0 [ 2395.464472][T22738] fuse: Bad value for 'group_id' [ 2395.580847][T17743] microsoft 0003:045E:07DA.0005: collection stack underflow [ 2395.596297][T17743] microsoft 0003:045E:07DA.0005: item 0 0 0 12 parsing failed [ 2395.620852][T17743] microsoft 0003:045E:07DA.0005: parse failed [ 2395.629683][T17743] microsoft: probe of 0003:045E:07DA.0005 failed with error -22 [ 2395.779306][T19586] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2395.790863][T18663] usb 2-1: USB disconnect, device number 6 [ 2395.958501][T19586] usb 9-1: Using ep0 maxpacket: 16 [ 2395.965670][T19586] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2396.007093][T19586] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2396.048474][T19586] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2396.057488][T19586] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.065630][T19586] usb 9-1: Product: syz [ 2396.069894][T19586] usb 9-1: Manufacturer: syz [ 2396.074350][T19586] usb 9-1: SerialNumber: syz [ 2396.196777][T22752] bridge: RTM_NEWNEIGH with invalid ether address [ 2396.309129][T19586] usb 9-1: 0:2 : does not exist [ 2396.324406][T19586] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2396.360033][T19586] usb 9-1: USB disconnect, device number 6 [ 2396.560843][T22777] bridge: RTM_NEWNEIGH with invalid ether address [ 2398.405179][T22857] 9pnet_fd: Insufficient options for proto=fd [ 2398.781065][T22885] 9pnet_fd: Insufficient options for proto=fd [ 2399.056821][T22910] 9pnet_fd: Insufficient options for proto=fd [ 2399.958897][T22928] xt_bpf: check failed: parse error [ 2400.272224][T22953] xt_NFQUEUE: number of total queues is 0 [ 2401.977481][T22962] xt_bpf: check failed: parse error [ 2402.119298][T22974] bridge: RTM_NEWNEIGH with invalid ether address [ 2402.197459][T22995] xt_bpf: check failed: parse error [ 2402.346241][T23017] bridge: RTM_NEWNEIGH with invalid ether address [ 2403.272939][T23092] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2403.356651][T23098] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5413'. [ 2403.518529][T17743] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2403.601171][T23120] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2403.698482][T17743] usb 9-1: Using ep0 maxpacket: 16 [ 2403.704672][T17743] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2403.715807][T17743] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2403.726119][T17743] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2403.735090][T17743] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.742947][T17743] usb 9-1: Product: syz [ 2403.746927][T17743] usb 9-1: Manufacturer: syz [ 2403.751528][T17743] usb 9-1: SerialNumber: syz [ 2404.092996][T17743] usb 9-1: 0:2 : does not exist [ 2404.100624][T17743] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2404.111929][T17743] usb 9-1: USB disconnect, device number 7 [ 2404.319745][T22584] udevd[22584]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2404.338897][T23150] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2404.484361][T23163] xt_NFQUEUE: number of total queues is 0 [ 2404.531310][T23169] fuse: Bad value for 'group_id' [ 2404.592689][T23176] 9pnet_fd: Insufficient options for proto=fd [ 2404.651612][ T28] audit: type=1326 audit(1742973583.406:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23186 comm="syz.6.5451" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a64b8d169 code=0x0 [ 2404.701230][T23193] fuse: Bad value for 'group_id' [ 2405.218326][T23204] 9pnet_fd: Insufficient options for proto=fd [ 2405.316015][T23218] fuse: Bad value for 'group_id' [ 2405.380337][T23228] 9pnet_fd: Insufficient options for proto=fd [ 2405.514040][T23244] bridge: RTM_NEWNEIGH with invalid ether address [ 2405.587872][T23245] xt_NFQUEUE: number of total queues is 0 [ 2406.161195][T23270] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5486'. [ 2406.189246][T23272] bridge: RTM_NEWNEIGH with invalid ether address [ 2407.555300][T23301] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5497'. [ 2407.599245][T23305] bridge: RTM_NEWNEIGH with invalid ether address [ 2409.164145][ T28] audit: type=1326 audit(1742973587.866:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23353 comm="syz.6.5518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a64b8d169 code=0x0 [ 2409.657341][T23370] fuse: Unknown parameter 'grou00000000000000000000' [ 2410.028012][T23378] xt_bpf: check failed: parse error [ 2410.149921][T23396] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 2410.289102][T23405] xt_bpf: check failed: parse error [ 2411.070949][ T28] audit: type=1326 audit(1742973589.826:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23421 comm="syz.8.5546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0be1f8d169 code=0x0 [ 2411.154976][T23403] syz.6.5538 (23403) used greatest stack depth: 19272 bytes left [ 2411.755409][T23484] netlink: 'syz.4.5565': attribute type 3 has an invalid length. [ 2411.777086][T23486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5571'. [ 2412.048188][T23498] xt_bpf: check failed: parse error [ 2412.245301][T23514] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5583'. [ 2412.380918][ T28] audit: type=1326 audit(1742973591.136:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23519 comm="syz.8.5585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0be1f8d169 code=0x0 [ 2412.536464][T23531] xt_bpf: check failed: parse error [ 2412.927251][T23546] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5594'. [ 2413.085797][T23553] fuse: Bad value for 'fd' [ 2413.117494][T23554] netlink: 'syz.6.5596': attribute type 3 has an invalid length. [ 2413.400127][T23573] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5605'. [ 2414.186204][T23586] fuse: Bad value for 'fd' [ 2414.521278][T23604] xt_bpf: check failed: parse error [ 2414.856198][T23613] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 2414.934417][T23615] fuse: Bad value for 'fd' [ 2415.491513][T23634] xt_bpf: check failed: parse error [ 2416.056931][T23657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5637'. [ 2416.072535][T23657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5637'. [ 2416.348120][T23666] xt_NFQUEUE: number of total queues is 0 [ 2417.221898][T23675] xt_bpf: check failed: parse error [ 2420.177268][T23734] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5665'. [ 2421.526058][ T28] audit: type=1326 audit(1742973600.276:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23760 comm="syz.4.5674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4538d169 code=0x0 [ 2421.565219][T23767] fuse: Bad value for 'user_id' [ 2421.702334][T23782] fuse: Unknown parameter 'group_id00000000000000000000' [ 2422.423065][T23808] fuse: Bad value for 'user_id' [ 2422.976335][ T28] audit: type=1400 audit(1742973601.726:674): avc: denied { remove_name } for pid=23832 comm="syz.7.5702" name="bus" dev="incremental-fs" ino=2206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2422.976412][ T28] audit: type=1400 audit(1742973601.726:675): avc: denied { rename } for pid=23832 comm="syz.7.5702" name="bus" dev="incremental-fs" ino=2206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2423.059125][T23836] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5703'. [ 2423.090273][T23840] xt_bpf: check failed: parse error [ 2423.155342][ T28] audit: type=1326 audit(1742973601.896:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23841 comm="syz.7.5706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bbd58d169 code=0x0 [ 2424.253907][T23870] xt_bpf: check failed: parse error [ 2424.345229][ T28] audit: type=1326 audit(1742973603.086:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23877 comm="syz.4.5720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4538d169 code=0x0 [ 2424.370303][T23876] fuse: Bad value for 'fd' [ 2426.314898][T23899] 9pnet_fd: Insufficient options for proto=fd [ 2426.521140][T23917] fuse: Bad value for 'fd' [ 2426.905548][T23929] xt_bpf: check failed: parse error [ 2427.204688][ T28] audit: type=1326 audit(1742973605.956:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23933 comm="syz.4.5740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4538d169 code=0x0 [ 2427.462595][T23938] 9pnet_fd: Insufficient options for proto=fd [ 2428.979119][ T28] audit: type=1326 audit(1742973607.726:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23994 comm="syz.6.5764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a64b8d169 code=0x0 [ 2429.473982][ T28] audit: type=1326 audit(1742973608.226:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24020 comm="syz.4.5774" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4538d169 code=0x0 [ 2430.419316][T24056] xt_bpf: check failed: parse error [ 2433.076274][T24089] xt_bpf: check failed: parse error [ 2434.509668][T24103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5803'. [ 2435.229025][T24127] xt_NFQUEUE: number of total queues is 0 [ 2435.505955][T24133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5815'. [ 2435.849646][ T28] audit: type=1400 audit(1742973614.596:681): avc: denied { read } for pid=24147 comm="syz.4.5821" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2435.885323][ T28] audit: type=1400 audit(1742973614.606:682): avc: denied { open } for pid=24147 comm="syz.4.5821" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2438.818490][T24197] bridge: RTM_NEWNEIGH with invalid ether address [ 2439.082637][ T28] audit: type=1400 audit(1742973617.836:683): avc: denied { read } for pid=24199 comm="syz.7.5837" dev="nsfs" ino=4026532404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2439.111745][ T28] audit: type=1400 audit(1742973617.866:684): avc: denied { open } for pid=24199 comm="syz.7.5837" path="net:[4026532404]" dev="nsfs" ino=4026532404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2439.478661][T24219] 9pnet_fd: Insufficient options for proto=fd [ 2439.505223][ T28] audit: type=1326 audit(1742973618.256:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24222 comm="syz.8.5845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0be1f8d169 code=0x0 [ 2439.794834][T24234] bridge: RTM_NEWNEIGH with invalid ether address [ 2441.065370][T24260] 9pnet_fd: Insufficient options for proto=fd [ 2441.834310][T24275] bridge: RTM_NEWNEIGH with invalid ether address [ 2443.079359][T24305] fuse: Bad value for 'fd' [ 2443.088370][T24304] 9pnet_fd: Insufficient options for proto=fd [ 2443.184723][ T28] audit: type=1326 audit(1742973621.936:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24310 comm="syz.8.5872" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0be1f8d169 code=0x0 [ 2444.214864][T24338] syz.8.5882[24338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2444.214949][T24338] syz.8.5882[24338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2444.253279][T24330] kvm_set_msr_common: 8 callbacks suppressed [ 2444.253305][T24330] kvm [24329]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 2444.455390][T24351] fuse: Bad value for 'rootmode' [ 2444.896096][T24364] bridge: RTM_NEWNEIGH with invalid ether address [ 2444.936520][T24368] syz.1.5893[24368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2444.936601][T24368] syz.1.5893[24368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2445.066230][T24378] fuse: Unknown parameter 'use00000000000000000000' [ 2445.260396][T24394] syz.6.5904[24394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2445.260476][T24394] syz.6.5904[24394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2445.445163][T24409] fuse: Unknown parameter 'use00000000000000000000' [ 2445.511592][ T28] audit: type=1400 audit(1742973624.266:687): avc: denied { write } for pid=24417 comm="syz.7.5915" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2445.819220][T17739] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2446.118516][T17739] usb 2-1: Using ep0 maxpacket: 16 [ 2446.136091][T17739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2446.230522][T17739] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2446.249618][T17739] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2446.258664][T17739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.266559][T17739] usb 2-1: Product: syz [ 2446.271628][T17739] usb 2-1: Manufacturer: syz [ 2446.276073][T17739] usb 2-1: SerialNumber: syz [ 2446.488474][T17739] usb 2-1: 0:2 : does not exist [ 2446.492948][T24447] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 2446.504406][T17739] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2446.509053][ T981] Bluetooth: hci0: Frame reassembly failed (-84) [ 2446.523593][T17739] usb 2-1: USB disconnect, device number 7 [ 2446.801713][T24175] udevd[24175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2446.938383][T24462] x_tables: duplicate underflow at hook 1 [ 2447.785002][T24476] bridge: RTM_NEWNEIGH with invalid ether address [ 2448.485821][ T28] audit: type=1400 audit(1742973627.236:688): avc: denied { create } for pid=24491 comm="syz.1.5939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2448.498465][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2448.983406][ T28] audit: type=1400 audit(1742973627.516:689): avc: denied { connect } for pid=24491 comm="syz.1.5939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2449.046240][ T28] audit: type=1400 audit(1742973627.526:690): avc: denied { write } for pid=24491 comm="syz.1.5939" path="socket:[117853]" dev="sockfs" ino=117853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2449.129483][T24492] netlink: 'syz.6.5938': attribute type 3 has an invalid length. [ 2449.173742][T24512] 9pnet_fd: Insufficient options for proto=fd [ 2449.260004][T24518] fuse: Invalid rootmode [ 2449.564317][ T28] audit: type=1326 audit(1742973628.316:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.8.5952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0be1f8d169 code=0x0 [ 2449.795406][T24529] syz.7.5948 (24529) used greatest stack depth: 18952 bytes left [ 2452.066316][T24551] 9pnet_fd: Insufficient options for proto=fd [ 2452.111417][T24555] fuse: Invalid rootmode [ 2452.910908][T24582] 9pnet_fd: Insufficient options for proto=fd [ 2452.947691][T24587] fuse: Bad value for 'rootmode' [ 2453.012773][T24594] bridge: RTM_NEWNEIGH with invalid ether address [ 2453.321126][T24610] x_tables: duplicate underflow at hook 1 [ 2453.550933][T24592] netlink: 'syz.8.5973': attribute type 3 has an invalid length. [ 2453.587649][T24616] fuse: Bad value for 'fd' [ 2453.681733][T24621] fuse: Bad value for 'rootmode' [ 2453.802794][T24628] bridge: RTM_NEWNEIGH with invalid ether address [ 2453.924260][T24635] x_tables: duplicate underflow at hook 1 [ 2454.305570][T24652] fuse: Bad value for 'rootmode' [ 2454.495161][T24658] bridge: RTM_NEWNEIGH with invalid ether address [ 2454.688731][T24666] netlink: 'syz.6.5993': attribute type 3 has an invalid length. [ 2454.808692][T24668] x_tables: duplicate underflow at hook 1 [ 2455.162835][T24674] fuse: Bad value for 'fd' [ 2455.167708][T24675] xt_NFQUEUE: number of total queues is 0 [ 2455.394424][T24687] bridge: RTM_NEWNEIGH with invalid ether address [ 2455.518047][T24700] fuse: Unknown parameter '0x0000000000000004' [ 2455.681850][ T28] audit: type=1400 audit(1742973634.436:692): avc: denied { write } for pid=24703 comm="syz.1.6015" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2455.783548][T24709] netlink: 'syz.7.6013': attribute type 3 has an invalid length. [ 2456.787981][T24724] bridge: RTM_NEWNEIGH with invalid ether address [ 2457.139234][T24736] x_tables: duplicate underflow at hook 1 [ 2457.533188][T24745] xt_NFQUEUE: number of total queues is 0 [ 2458.420075][ T28] audit: type=1400 audit(1742973637.156:693): avc: denied { setopt } for pid=24754 comm="syz.4.6032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2459.203134][T24766] x_tables: duplicate underflow at hook 1 [ 2459.294257][T24772] netlink: 'syz.1.6033': attribute type 3 has an invalid length. [ 2459.608482][T17180] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 2459.715204][T24789] x_tables: duplicate underflow at hook 1 [ 2460.059570][T17180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2460.072926][T17180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2460.089104][T17180] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2460.102038][T17180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2460.116151][T17180] usb 5-1: Product: syz [ 2460.124374][T17180] usb 5-1: Manufacturer: syz [ 2460.130544][T17180] usb 5-1: SerialNumber: syz [ 2460.179702][ T28] audit: type=1400 audit(1742973638.936:694): avc: denied { load_policy } for pid=24803 comm="syz.1.6048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2460.200631][T24804] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2460.312974][ T28] audit: type=1400 audit(1742973639.056:695): avc: denied { bind } for pid=24794 comm="syz.8.6044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2460.339211][T24804] SELinux: failed to load policy [ 2460.584104][ T28] audit: type=1400 audit(1742973639.056:696): avc: denied { listen } for pid=24794 comm="syz.8.6044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2460.598761][T17180] usb 5-1: 0:2 : does not exist [ 2460.643464][T17180] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2460.659050][T17180] usb 5-1: USB disconnect, device number 3 [ 2460.666887][ T28] audit: type=1400 audit(1742973639.066:697): avc: denied { connect } for pid=24794 comm="syz.8.6044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2460.795360][T24820] fuse: Unknown parameter '0x0000000000000004' [ 2460.876576][T24175] udevd[24175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2461.257024][T24837] x_tables: duplicate underflow at hook 1 [ 2461.510702][ T28] audit: type=1326 audit(1742973640.266:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24841 comm="syz.4.6061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4538d169 code=0x0 [ 2461.568459][T24471] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 2461.748507][T24471] usb 8-1: Using ep0 maxpacket: 16 [ 2461.756008][T24471] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2461.766297][T24471] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2461.829866][T24471] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2461.839124][T24471] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2461.847200][T24471] usb 8-1: Product: syz [ 2461.857443][T24471] usb 8-1: Manufacturer: syz [ 2461.863589][T24471] usb 8-1: SerialNumber: syz [ 2461.873585][T24859] fuse: Unknown parameter 'fd0x0000000000000004' [ 2462.079631][T24471] usb 8-1: 0:2 : does not exist [ 2462.089396][T24471] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 2462.158561][T18703] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2462.360433][T18703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2462.371760][T18703] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2462.386263][T18703] usb 7-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 2462.460247][T24471] usb 8-1: USB disconnect, device number 4 [ 2462.476992][T18703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.492492][T18703] usb 7-1: config 0 descriptor?? [ 2463.026905][T18703] nintendo 0003:057E:2009.0006: item fetching failed at offset 0/3 [ 2463.037371][T18703] nintendo 0003:057E:2009.0006: HID parse failed [ 2463.044777][T18703] nintendo 0003:057E:2009.0006: probe - fail = -22 [ 2463.051377][T18703] nintendo: probe of 0003:057E:2009.0006 failed with error -22 [ 2463.231054][T18703] usb 7-1: USB disconnect, device number 6 [ 2463.721611][T24890] x_tables: duplicate underflow at hook 1 [ 2464.073151][T24900] fuse: Bad value for 'fd' [ 2464.136981][ T28] audit: type=1326 audit(1742973642.886:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24904 comm="syz.7.6083" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bbd58d169 code=0x0 [ 2466.708515][T13723] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2466.928429][T13723] usb 7-1: Using ep0 maxpacket: 16 [ 2466.934600][T13723] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2466.961459][T13723] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2467.036744][T13723] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2467.048457][T13723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2467.056319][T13723] usb 7-1: Product: syz [ 2467.067380][T13723] usb 7-1: Manufacturer: syz [ 2467.072154][T13723] usb 7-1: SerialNumber: syz [ 2469.377929][T13723] usb 7-1: 0:2 : does not exist [ 2469.387427][T13723] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2469.508961][T13723] usb 7-1: USB disconnect, device number 7 [ 2470.057884][T25011] fuse: Unknown parameter 'grou00000000000000000000' [ 2470.210872][T25021] x_tables: duplicate underflow at hook 1 [ 2471.060617][T25044] syz.6.6123[25044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2471.060967][T25044] syz.6.6123[25044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2472.310105][T25051] fuse: Unknown parameter 'grou00000000000000000000' [ 2472.703283][T25071] x_tables: duplicate underflow at hook 1 [ 2473.034856][T25080] fuse: Unknown parameter 'grou00000000000000000000' [ 2473.175854][T25084] x_tables: duplicate underflow at hook 1 [ 2473.871464][T25112] fuse: Bad value for 'group_id' [ 2474.218826][T25123] x_tables: duplicate underflow at hook 1 [ 2475.041250][T25142] fuse: Bad value for 'group_id' [ 2477.572906][T25178] xt_NFQUEUE: number of total queues is 0 [ 2477.597454][T25177] fuse: Bad value for 'group_id' [ 2479.516461][T25210] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2479.564157][T25210] SELinux: failed to load policy [ 2480.022640][T25221] fuse: Unknown parameter '0x0000000000000006' [ 2481.978546][T17180] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2482.096428][T25272] xt_NFQUEUE: number of total queues is 0 [ 2482.168444][T17180] usb 2-1: Using ep0 maxpacket: 16 [ 2482.174557][T17180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2482.195484][T17180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2482.228704][T17180] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2482.254885][T17180] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2482.294447][T17180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.347673][T17180] usb 2-1: config 0 descriptor?? [ 2482.638547][T18663] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 2482.783461][T17180] microsoft 0003:045E:07DA.0007: collection stack underflow [ 2482.795521][T17180] microsoft 0003:045E:07DA.0007: item 0 0 0 12 parsing failed [ 2482.808521][T17180] microsoft 0003:045E:07DA.0007: parse failed [ 2482.814570][T17180] microsoft: probe of 0003:045E:07DA.0007 failed with error -22 [ 2482.825419][T18663] usb 8-1: New USB device found, idVendor=07c4, idProduct=a10b, bcdDevice=8e.07 [ 2482.837508][T18663] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.850431][T18663] usb 8-1: config 0 descriptor?? [ 2482.862941][T18663] ums-datafab 8-1:0.0: USB Mass Storage device detected [ 2482.995039][T18663] usb 2-1: USB disconnect, device number 8 [ 2483.287172][ T28] audit: type=1400 audit(1742973662.036:700): avc: denied { getopt } for pid=25276 comm="syz.7.6208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2483.333840][T19617] usb 8-1: USB disconnect, device number 5 [ 2484.377479][ T28] audit: type=1400 audit(1742973663.126:701): avc: denied { mount } for pid=25300 comm="syz.8.6213" name="/" dev="configfs" ino=14682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2484.440326][ T28] audit: type=1400 audit(1742973663.156:702): avc: denied { search } for pid=25300 comm="syz.8.6213" name="/" dev="configfs" ino=14682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2484.537797][ T28] audit: type=1400 audit(1742973663.156:703): avc: denied { read } for pid=25300 comm="syz.8.6213" name="/" dev="configfs" ino=14682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2484.576641][ T28] audit: type=1400 audit(1742973663.156:704): avc: denied { open } for pid=25300 comm="syz.8.6213" path="/" dev="configfs" ino=14682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2484.993155][ T28] audit: type=1326 audit(1742973663.656:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed34b8d169 code=0x7ffc0000 [ 2486.667141][ T28] audit: type=1326 audit(1742973663.656:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.6215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed34b8d169 code=0x7ffc0000 [ 2486.792474][T25328] fuse: Bad value for 'fd' [ 2487.278555][T19841] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2487.648444][T19841] usb 5-1: Using ep0 maxpacket: 16 [ 2487.680911][T19841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2487.786915][T19841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2487.882601][T19841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2488.096969][T19841] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2488.116202][T19841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2488.155400][T19841] usb 5-1: config 0 descriptor?? [ 2489.327048][T22232] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2489.366320][T19841] microsoft 0003:045E:07DA.0008: collection stack underflow [ 2490.024690][T19841] microsoft 0003:045E:07DA.0008: item 0 0 0 12 parsing failed [ 2490.032930][T19841] microsoft 0003:045E:07DA.0008: parse failed [ 2490.035428][T25381] fuse: Unknown parameter 'user_i00000000000000000000' [ 2490.039108][T19841] microsoft: probe of 0003:045E:07DA.0008 failed with error -22 [ 2490.054281][T19841] usb 5-1: USB disconnect, device number 4 [ 2490.228062][T25386] fuse: Unknown parameter '0x0000000000000006' [ 2490.239526][T22232] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2490.258042][T22232] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2490.283176][T22232] usb 7-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 2490.292324][T22232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.373383][T22232] usb 7-1: config 0 descriptor?? [ 2490.766069][ T28] audit: type=1400 audit(1742973669.516:707): avc: denied { write } for pid=25397 comm="syz.7.6243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2490.791189][T22232] usbhid 7-1:0.0: can't add hid device: -71 [ 2490.801377][T22232] usbhid: probe of 7-1:0.0 failed with error -71 [ 2490.813822][T22232] usb 7-1: USB disconnect, device number 8 [ 2491.677575][T25414] fuse: Unknown parameter 'user_i00000000000000000000' [ 2492.210034][T25431] xt_NFQUEUE: number of total queues is 0 [ 2492.222918][T25430] netlink: 'syz.8.6251': attribute type 3 has an invalid length. [ 2493.351881][T25453] fuse: Unknown parameter 'user_i00000000000000000000' [ 2496.162265][T25480] xt_NFQUEUE: number of total queues is 0 [ 2496.963139][T25493] fuse: Unknown parameter 'user_id00000000000000000000' [ 2497.197820][T25501] overlayfs: failed to resolve './file0': -2 [ 2497.362003][T25504] fuse: Bad value for 'fd' [ 2498.386949][T25510] xt_NFQUEUE: number of total queues is 0 [ 2498.666120][T25513] xt_NFQUEUE: number of total queues is 0 [ 2499.324277][T25535] x_tables: duplicate underflow at hook 1 [ 2500.660491][T25540] fuse: Unknown parameter 'user_id00000000000000000000' [ 2500.781068][T25544] fuse: Bad value for 'fd' [ 2501.647869][T25548] x_tables: duplicate underflow at hook 1 [ 2502.246491][T25563] x_tables: duplicate underflow at hook 1 [ 2502.291536][T25570] xt_NFQUEUE: number of total queues is 0 [ 2503.288513][T17520] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2503.422809][T25590] fuse: Bad value for 'fd' [ 2503.576200][T25594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6304'. [ 2504.091341][T25600] x_tables: duplicate underflow at hook 1 [ 2504.933906][T17520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2504.954872][T17520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2504.974729][T17520] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2504.986088][T17520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.008253][T17520] usb 2-1: config 0 descriptor?? [ 2505.420721][T17520] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 2505.427804][T17520] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 2505.436007][T17520] lenovo 0003:17EF:6047.0009: report_id 0 is invalid [ 2505.455656][T17520] lenovo 0003:17EF:6047.0009: item 0 1 1 8 parsing failed [ 2505.470419][T17520] lenovo 0003:17EF:6047.0009: hid_parse failed [ 2505.483061][T17520] lenovo: probe of 0003:17EF:6047.0009 failed with error -22 [ 2505.625140][T17180] usb 2-1: USB disconnect, device number 9 [ 2507.208727][T25667] x_tables: duplicate underflow at hook 1 [ 2507.679025][T25672] overlayfs: failed to clone upperpath [ 2507.927771][T25692] 9pnet_fd: Insufficient options for proto=fd [ 2509.398462][T25711] x_tables: duplicate underflow at hook 1 [ 2509.906871][T25716] overlayfs: failed to clone upperpath [ 2509.920646][T25716] overlayfs: failed to clone upperpath [ 2511.078508][T25733] xt_NFQUEUE: number of total queues is 0 [ 2513.406923][T25753] x_tables: duplicate underflow at hook 1 [ 2515.068228][T25782] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2515.253324][T25782] SELinux: failed to load policy [ 2516.008872][T25818] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2516.018312][T25818] SELinux: failed to load policy [ 2517.362978][T25847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6389'. [ 2517.643033][T25854] x_tables: duplicate underflow at hook 1 [ 2517.937914][T25858] overlayfs: failed to clone upperpath [ 2519.558498][T25875] xt_NFQUEUE: number of total queues is 0 [ 2520.155268][T25886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6400'. [ 2521.161318][T25898] udevd[25898]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2521.229659][T25900] overlayfs: failed to resolve './file0': -2 [ 2523.298509][T25925] xt_NFQUEUE: number of total queues is 0 [ 2524.324584][T18054] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2525.707326][T25898] udevd[25898]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2525.878464][T18054] usb 2-1: device descriptor read/64, error -71 [ 2525.976700][T25969] xt_NFQUEUE: number of total queues is 0 [ 2526.148507][T18054] usb 2-1: device descriptor read/64, error -71 [ 2526.334480][T25973] overlayfs: failed to resolve './file0': -2 [ 2526.489292][T18054] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2526.710429][T18054] usb 2-1: device descriptor read/64, error -71 [ 2528.585449][T25898] udevd[25898]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2529.455435][ T28] audit: type=1400 audit(1742973708.206:708): avc: denied { read } for pid=87 comm="acpid" name="mouse0" dev="devtmpfs" ino=2972 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2529.922731][ T28] audit: type=1400 audit(1742973708.206:709): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=2972 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2529.946022][ T28] audit: type=1400 audit(1742973708.206:710): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=2972 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2530.777195][T26035] xt_NFQUEUE: number of total queues is 0 [ 2531.488572][T26037] xt_NFQUEUE: number of total queues is 0 [ 2532.815209][T26065] fuse: Unknown parameter 'user_i00000000000000000000' [ 2532.888604][T26070] fuse: Unknown parameter '0x0000000000000003' [ 2533.678490][T26086] xt_NFQUEUE: number of total queues is 0 [ 2534.235906][T26094] x_tables: duplicate underflow at hook 1 [ 2535.092181][T26098] udevd[26098]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2537.003427][T26130] xt_NFQUEUE: number of total queues is 0 [ 2538.238489][T19586] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2538.510515][T19586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2538.575296][T19586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2538.705522][T19586] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2538.813740][T19586] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2539.042200][T19586] usb 7-1: config 0 descriptor?? [ 2539.228762][T26163] xt_NFQUEUE: number of total queues is 0 [ 2540.319997][T19586] usbhid 7-1:0.0: can't add hid device: -71 [ 2540.325807][T19586] usbhid: probe of 7-1:0.0 failed with error -71 [ 2540.336373][T19586] usb 7-1: USB disconnect, device number 9 [ 2543.052155][T26098] udevd[26098]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2544.085483][T19586] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2544.320194][T19586] usb 2-1: New USB device found, idVendor=07c4, idProduct=a10b, bcdDevice=8e.07 [ 2544.350445][T19586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.494590][T19586] usb 2-1: config 0 descriptor?? [ 2544.689696][T26213] xt_NFQUEUE: number of total queues is 0 [ 2545.503842][T19586] ums-datafab 2-1:0.0: USB Mass Storage device detected [ 2545.701078][T26222] x_tables: duplicate underflow at hook 1 [ 2546.021235][T19586] usb 2-1: USB disconnect, device number 12 [ 2547.415544][T26245] blk-mq: failed to allocate request map [ 2547.892572][T26265] xt_NFQUEUE: number of total queues is 0 [ 2549.058444][T26268] x_tables: duplicate underflow at hook 1 [ 2550.163192][T26273] udevd[26273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2551.334980][T26307] x_tables: duplicate underflow at hook 1 [ 2551.436545][T26309] xt_NFQUEUE: number of total queues is 0 [ 2554.150984][T26351] netlink: 'syz.1.6544': attribute type 3 has an invalid length. [ 2554.333771][T26360] x_tables: duplicate underflow at hook 1 [ 2554.486401][T26362] xt_NFQUEUE: number of total queues is 0 [ 2556.540617][T26396] overlayfs: failed to resolve './file0': -2 [ 2558.276291][T26410] x_tables: duplicate underflow at hook 1 [ 2558.339479][T26409] netlink: 'syz.4.6563': attribute type 3 has an invalid length. [ 2558.432730][T26421] xt_NFQUEUE: number of total queues is 0 [ 2559.589028][T26439] x_tables: duplicate underflow at hook 1 [ 2560.198305][T18054] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2560.528399][T18054] usb 2-1: Using ep0 maxpacket: 16 [ 2560.534711][T18054] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2560.545153][T18054] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2560.555582][T18054] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2560.564631][T18054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2560.572695][T18054] usb 2-1: Product: syz [ 2560.576667][T18054] usb 2-1: Manufacturer: syz [ 2560.581315][T18054] usb 2-1: SerialNumber: syz [ 2560.799045][T18054] usb 2-1: 0:2 : does not exist [ 2560.816936][T18054] usb 2-1: USB disconnect, device number 13 [ 2560.852779][T26450] overlayfs: failed to clone upperpath [ 2560.952595][T26450] overlayfs: failed to clone upperpath [ 2561.834971][T26480] netlink: 'syz.1.6584': attribute type 3 has an invalid length. [ 2562.728417][T18054] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2562.918387][T18054] usb 2-1: Using ep0 maxpacket: 16 [ 2562.924526][T18054] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2562.951224][T18054] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2562.981692][T18054] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2562.998424][T18054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2563.016430][T18054] usb 2-1: Product: syz [ 2563.022803][T18054] usb 2-1: Manufacturer: syz [ 2563.031589][T18054] usb 2-1: SerialNumber: syz [ 2564.074475][T18054] usb 2-1: 0:2 : does not exist [ 2564.084241][T18054] usb 2-1: USB disconnect, device number 14 [ 2564.183861][T26525] overlayfs: failed to clone upperpath [ 2564.299018][T26447] udevd[26447]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2564.385918][ T28] audit: type=1400 audit(1742973743.136:711): avc: denied { setopt } for pid=26533 comm="syz.1.6608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2564.510324][T26528] netlink: 'syz.7.6604': attribute type 3 has an invalid length. [ 2567.987823][T26559] device wg1 entered promiscuous mode [ 2568.469517][T26573] xt_NFQUEUE: number of total queues is 0 [ 2571.040331][T26624] xt_NFQUEUE: number of total queues is 0 [ 2572.055571][T26638] 9p: Unknown access argument 18446744073709551615: -34 [ 2572.116698][ T28] audit: type=1326 audit(1742973750.866:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26644 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd58d169 code=0x7ffc0000 [ 2572.185093][ T28] audit: type=1326 audit(1742973750.906:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26644 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd58d169 code=0x7ffc0000 [ 2572.258384][ T28] audit: type=1326 audit(1742973750.906:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26644 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bbd58d169 code=0x7ffc0000 [ 2572.311909][ T28] audit: type=1326 audit(1742973750.906:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26644 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd58d169 code=0x7ffc0000 [ 2572.347600][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6648'. [ 2572.356343][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6648'. [ 2572.378401][ T28] audit: type=1326 audit(1742973750.906:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26644 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd58d169 code=0x7ffc0000 [ 2572.427625][ T28] audit: type=1326 audit(1742973750.916:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26644 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bbd58d169 code=0x7ffc0000 [ 2572.504332][ T28] audit: type=1326 audit(1742973750.916:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26644 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd58d169 code=0x7ffc0000 [ 2572.552580][ T28] audit: type=1326 audit(1742973750.916:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26644 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd58d169 code=0x7ffc0000 [ 2572.583361][ T28] audit: type=1326 audit(1742973750.916:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26644 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bbd58d169 code=0x7ffc0000 [ 2572.613779][ T28] audit: type=1326 audit(1742973750.916:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26644 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd58d169 code=0x7ffc0000 [ 2573.405828][T26671] 9p: Unknown access argument 18446744073709551615: -34 [ 2573.916734][T26678] xt_NFQUEUE: number of total queues is 0 [ 2576.619493][T26702] 9p: Unknown access argument 18446744073709551615: -34 [ 2577.288464][T26710] xt_NFQUEUE: number of total queues is 0 [ 2577.601833][T17520] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2577.609288][T17739] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2577.888830][T17520] usb 7-1: Using ep0 maxpacket: 16 [ 2577.895834][T17739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2577.909718][T17520] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2577.964330][T17739] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2578.007608][T17520] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2578.057137][T17739] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 2578.075821][T17520] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2578.118742][T17739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.130482][T17520] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.177181][T17520] usb 7-1: Product: syz [ 2578.212088][T17739] usb 2-1: config 0 descriptor?? [ 2578.231746][T17520] usb 7-1: Manufacturer: syz [ 2578.267136][T17520] usb 7-1: SerialNumber: syz [ 2578.570329][T17520] usb 7-1: 0:2 : does not exist [ 2578.575906][T17520] usb 7-1: unit 16 not found! [ 2578.600271][T17520] usb 7-1: USB disconnect, device number 10 [ 2578.776267][T17739] nintendo 0003:057E:2009.000A: unknown main item tag 0x0 [ 2578.783342][T17739] nintendo 0003:057E:2009.000A: unknown main item tag 0x0 [ 2578.791282][T17739] nintendo 0003:057E:2009.000A: unknown main item tag 0x0 [ 2578.799398][T17739] nintendo 0003:057E:2009.000A: hidraw0: USB HID vff.fe Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 2578.892317][T17739] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 2578.937822][T17739] nintendo 0003:057E:2009.000A: using factory cal for left stick [ 2578.961631][T17739] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 2579.090418][T17739] nintendo 0003:057E:2009.000A: using factory cal for right stick [ 2579.098210][T17739] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 2579.106270][T17739] nintendo 0003:057E:2009.000A: Failed to read left stick cal, using defaults; e=-38 [ 2579.115799][T17739] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 2579.124029][T17739] nintendo 0003:057E:2009.000A: Failed to read right stick cal, using defaults; e=-38 [ 2579.133931][T17739] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 2579.142005][T17739] nintendo 0003:057E:2009.000A: using factory cal for IMU [ 2579.149247][T17739] nintendo 0003:057E:2009.000A: failed reading SPI flash; ret=-38 [ 2579.156887][T17739] nintendo 0003:057E:2009.000A: Failed to read IMU cal, using defaults; ret=-38 [ 2579.166100][T17739] nintendo 0003:057E:2009.000A: Unable to read IMU calibration data [ 2579.174171][T17739] nintendo 0003:057E:2009.000A: Failed to set report mode; ret=-38 [ 2579.182144][T17739] nintendo 0003:057E:2009.000A: Failed to initialize controller; ret=-38 [ 2579.191256][T17739] nintendo 0003:057E:2009.000A: probe - fail = -38 [ 2579.197708][T17739] nintendo: probe of 0003:057E:2009.000A failed with error -38 [ 2579.208216][T17739] usb 2-1: USB disconnect, device number 15 [ 2579.409754][T26748] x_tables: duplicate underflow at hook 1 [ 2580.349937][T26756] xt_NFQUEUE: number of total queues is 0 [ 2582.533961][T26789] x_tables: duplicate underflow at hook 1 [ 2582.561965][T26793] x_tables: duplicate underflow at hook 1 [ 2584.610675][T26830] x_tables: duplicate underflow at hook 1 [ 2585.032623][T26834] x_tables: duplicate underflow at hook 1 [ 2586.168428][T26838] x_tables: duplicate underflow at hook 1 [ 2587.480241][T26869] overlayfs: failed to resolve './file0': -2 [ 2587.600970][T26869] overlayfs: failed to resolve './file0': -2 [ 2587.609556][T26878] x_tables: duplicate underflow at hook 1 [ 2588.625388][T26879] x_tables: duplicate underflow at hook 1 [ 2589.807071][T26906] 9p: Unknown access argument 18446744073709551615: -34 [ 2590.430663][T26921] x_tables: duplicate underflow at hook 1 [ 2591.612470][T26928] x_tables: duplicate underflow at hook 1 [ 2594.999199][T26996] x_tables: duplicate underflow at hook 1 [ 2596.507604][T27003] blk-mq: failed to allocate request map [ 2597.000708][T27014] xt_NFQUEUE: number of total queues is 0 [ 2599.518690][T27054] xt_NFQUEUE: number of total queues is 0 [ 2599.526158][T27047] x_tables: duplicate underflow at hook 1 [ 2602.132648][T27068] udevd[27068]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2604.566485][T27097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6787'. [ 2604.635251][T27106] x_tables: duplicate underflow at hook 1 [ 2606.333753][T27117] x_tables: duplicate underflow at hook 1 [ 2606.575798][T27119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6790'. [ 2611.174330][T27154] xt_NFQUEUE: number of total queues is 0 [ 2611.787752][T27149] kvm [27147]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x9f [ 2611.802473][T27149] kvm [27147]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x8aa [ 2611.811911][T27149] kvm [27147]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x2 [ 2611.825342][T27149] kvm [27147]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x6a [ 2611.835226][T27149] kvm [27147]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x7 [ 2611.992385][T27163] bridge: RTM_NEWNEIGH with invalid ether address [ 2613.097973][T27170] x_tables: duplicate underflow at hook 1 [ 2613.105109][T27171] x_tables: duplicate underflow at hook 1 [ 2613.279256][T27180] overlayfs: failed to clone upperpath [ 2613.360989][T27180] overlayfs: failed to clone upperpath [ 2614.581281][T27199] xt_NFQUEUE: number of total queues is 0 [ 2617.883715][T27223] x_tables: duplicate underflow at hook 1 [ 2618.500802][T27232] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2618.518649][T27232] SELinux: failed to load policy [ 2619.107728][T27250] xt_NFQUEUE: number of total queues is 0 [ 2621.185830][T27269] x_tables: duplicate underflow at hook 1 [ 2621.890548][T11301] tipc: Left network mode [ 2622.103521][T27301] 9p: Unknown access argument ÿ: -22 [ 2622.948436][T27305] xt_NFQUEUE: number of total queues is 0 [ 2623.180592][T27284] bridge0: port 1(bridge_slave_0) entered blocking state [ 2623.187458][T27284] bridge0: port 1(bridge_slave_0) entered disabled state [ 2623.288302][T27284] device bridge_slave_0 entered promiscuous mode [ 2623.304681][T27284] bridge0: port 2(bridge_slave_1) entered blocking state [ 2623.637329][T27315] x_tables: duplicate underflow at hook 1 [ 2623.644068][T13723] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2623.715420][T27284] bridge0: port 2(bridge_slave_1) entered disabled state [ 2623.797797][T27284] device bridge_slave_1 entered promiscuous mode [ 2624.550542][T13723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2624.865194][T27327] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2624.875289][T13723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2624.885383][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2624.889038][T27327] SELinux: failed to load policy [ 2624.894929][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2624.904728][T13723] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2624.916719][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2624.925360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2624.933752][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 2624.940647][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2624.948970][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2624.957332][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2624.975230][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 2624.982144][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2625.043656][T27284] device veth0_vlan entered promiscuous mode [ 2625.282231][T13723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2625.294399][T13723] usb 7-1: config 0 descriptor?? [ 2625.313198][T13723] usb 7-1: can't set config #0, error -71 [ 2625.323274][T13723] usb 7-1: USB disconnect, device number 11 [ 2625.589483][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2625.674446][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2625.688082][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2625.699112][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2626.792620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2626.894317][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2626.902797][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2626.911008][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2626.918807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2626.934368][T27284] device veth1_macvtap entered promiscuous mode [ 2628.131766][T27352] xt_NFQUEUE: number of total queues is 0 [ 2628.775542][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2628.786496][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2628.795378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2628.804803][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2628.813233][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2628.832756][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2628.841241][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2628.850269][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2628.858654][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2628.873622][T11301] device bridge_slave_0 left promiscuous mode [ 2628.886926][T11301] bridge0: port 1(bridge_slave_0) entered disabled state [ 2628.896012][T11301] device veth1_macvtap left promiscuous mode [ 2628.901974][T11301] device veth0_vlan left promiscuous mode [ 2629.057008][T27369] overlayfs: failed to clone upperpath [ 2629.507103][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 2629.608595][ T28] audit: type=1400 audit(1742973808.256:746): avc: denied { mount } for pid=27372 comm="syz.7.6866" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2629.982647][ T28] audit: type=1400 audit(1742973808.736:747): avc: denied { unmount } for pid=27284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2630.078440][T27397] xt_NFQUEUE: number of total queues is 0 [ 2632.955901][ T328] tipc: Left network mode [ 2633.113502][T27418] bridge0: port 1(bridge_slave_0) entered blocking state [ 2633.133894][T27418] bridge0: port 1(bridge_slave_0) entered disabled state [ 2633.152658][T27418] device bridge_slave_0 entered promiscuous mode [ 2633.173151][T27418] bridge0: port 2(bridge_slave_1) entered blocking state [ 2633.245075][T27418] bridge0: port 2(bridge_slave_1) entered disabled state [ 2633.255667][T27418] device bridge_slave_1 entered promiscuous mode [ 2633.268904][T27425] fuse: Unknown parameter 'group_i00000000000000000000' [ 2633.776004][T27437] overlayfs: failed to resolve './file0': -2 [ 2633.783165][T27418] bridge0: port 2(bridge_slave_1) entered blocking state [ 2633.790050][T27418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2633.797146][T27418] bridge0: port 1(bridge_slave_0) entered blocking state [ 2633.803988][T27418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2633.918975][T27438] xt_NFQUEUE: number of total queues is 0 [ 2633.939961][T27437] overlayfs: failed to resolve './file0': -2 [ 2634.011866][T11301] bridge0: port 1(bridge_slave_0) entered disabled state [ 2634.021453][T11301] bridge0: port 2(bridge_slave_1) entered disabled state [ 2634.262814][ T328] device bridge_slave_0 left promiscuous mode [ 2634.322491][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 2634.605609][ T328] device veth1_macvtap left promiscuous mode [ 2634.672602][T27444] overlayfs: missing 'lowerdir' [ 2634.695631][ T328] device veth0_vlan left promiscuous mode [ 2635.984512][T27456] overlayfs: failed to clone upperpath [ 2636.590646][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2636.607536][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2636.642858][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2636.666687][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2636.694649][T11301] bridge0: port 1(bridge_slave_0) entered blocking state [ 2636.701588][T11301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2636.726118][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2636.762227][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2636.770616][T11301] bridge0: port 2(bridge_slave_1) entered blocking state [ 2636.777476][T11301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2636.794867][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2636.810529][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2636.828403][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2636.844879][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2636.877575][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2636.894764][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2637.235287][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2637.245402][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2637.262987][T27418] device veth0_vlan entered promiscuous mode [ 2637.277643][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2637.294267][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2637.315785][T27418] device veth1_macvtap entered promiscuous mode [ 2637.322970][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2637.332481][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2637.340662][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2637.356369][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2637.364838][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2637.373260][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2637.382012][T11301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2637.436386][T27479] overlayfs: failed to resolve './file0': -2 [ 2637.529926][T27479] overlayfs: failed to resolve './file0': -2 [ 2637.825692][T27480] x_tables: duplicate underflow at hook 1 [ 2637.832804][T27481] x_tables: duplicate underflow at hook 1 [ 2638.452962][T27495] xt_NFQUEUE: number of total queues is 0 [ 2642.641859][ T28] audit: type=1400 audit(1742973821.396:748): avc: denied { getopt } for pid=27543 comm="syz.4.6915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2642.684863][T27546] overlayfs: missing 'lowerdir' [ 2644.093378][T27565] xt_NFQUEUE: number of total queues is 0 [ 2644.208429][T27564] x_tables: duplicate underflow at hook 1 [ 2645.105629][ T28] audit: type=1400 audit(1742973823.856:749): avc: denied { mount } for pid=27584 comm="syz.6.6927" name="/" dev="ramfs" ino=126910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2645.151724][ T28] audit: type=1400 audit(1742973823.896:750): avc: denied { unmount } for pid=21227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2645.156804][T27588] overlayfs: missing 'lowerdir' [ 2646.121233][T27593] x_tables: duplicate underflow at hook 1 [ 2647.688537][T27616] xt_NFQUEUE: number of total queues is 0 [ 2648.876738][T27620] tty tty33: ldisc open failed (-12), clearing slot 32 [ 2649.496682][T27647] x_tables: duplicate underflow at hook 1 [ 2649.882551][T27661] xt_NFQUEUE: number of total queues is 0 [ 2651.927772][T27670] overlayfs: missing 'lowerdir' [ 2651.949227][T27668] bridge: RTM_NEWNEIGH with invalid ether address [ 2652.001921][T27679] overlayfs: failed to resolve './file0': -2 [ 2652.084931][T27679] overlayfs: failed to resolve './file0': -2 [ 2652.181330][ T28] audit: type=1400 audit(1742973830.936:751): avc: denied { getopt } for pid=27671 comm="syz.4.6955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2652.899657][T27696] x_tables: duplicate underflow at hook 1 [ 2654.228570][T27706] xt_NFQUEUE: number of total queues is 0 [ 2656.008785][T27714] overlayfs: failed to clone upperpath [ 2656.036442][T27718] bridge: RTM_NEWNEIGH with invalid ether address [ 2656.685470][T27725] x_tables: duplicate underflow at hook 1 [ 2656.996092][T27720] overlayfs: failed to clone upperpath [ 2657.114667][T27720] overlayfs: failed to clone upperpath [ 2657.668846][T27082] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2660.098431][T27082] usb 8-1: device not accepting address 6, error -71 [ 2660.501957][T27786] x_tables: duplicate underflow at hook 1 [ 2665.277747][T27808] xt_NFQUEUE: number of total queues is 0 [ 2667.099290][T27822] udevd[27822]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2669.098589][T27852] xt_NFQUEUE: number of total queues is 0 [ 2672.310505][T27892] xt_NFQUEUE: number of total queues is 0 [ 2675.885924][T27932] 9pnet_fd: Insufficient options for proto=fd [ 2676.426746][T27938] x_tables: duplicate underflow at hook 1 [ 2677.287299][T27958] overlayfs: failed to clone upperpath [ 2677.756734][T27962] 9pnet_fd: Insufficient options for proto=fd [ 2678.582642][T27971] x_tables: duplicate underflow at hook 1 [ 2678.629634][T27977] overlayfs: missing 'lowerdir' [ 2680.293202][T28002] 9pnet_fd: Insufficient options for proto=fd [ 2680.417123][T28004] bridge0: port 1(bridge_slave_0) entered blocking state [ 2680.424169][T28004] bridge0: port 1(bridge_slave_0) entered disabled state [ 2680.431882][T28004] device bridge_slave_0 entered promiscuous mode [ 2680.439520][T28004] bridge0: port 2(bridge_slave_1) entered blocking state [ 2680.446369][T28004] bridge0: port 2(bridge_slave_1) entered disabled state [ 2681.384304][T28004] device bridge_slave_1 entered promiscuous mode [ 2684.557761][ T28] audit: type=1400 audit(1742973863.086:752): avc: denied { setopt } for pid=28032 comm="syz.6.7061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2685.097045][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2685.116978][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2685.193051][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2685.205604][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2685.223793][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2685.239753][ T981] bridge0: port 1(bridge_slave_0) entered blocking state [ 2685.246660][ T981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2685.549482][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2685.557848][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2685.566006][ T981] bridge0: port 2(bridge_slave_1) entered blocking state [ 2685.572876][ T981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2685.590323][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2685.609924][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2685.613700][T28067] overlayfs: failed to resolve './file1': -2 [ 2685.618019][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2685.713697][T28004] device veth0_vlan entered promiscuous mode [ 2686.405600][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2686.414450][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2686.431589][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2686.547609][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2686.804342][ T10] device bridge_slave_0 left promiscuous mode [ 2686.810597][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2686.912265][T28088] overlayfs: failed to resolve './file0': -2 [ 2687.323216][T28091] overlayfs: failed to resolve './file0': -2 [ 2687.334329][ T10] device veth1_macvtap left promiscuous mode [ 2687.350582][ T10] device veth0_vlan left promiscuous mode [ 2687.593798][T28004] device veth1_macvtap entered promiscuous mode [ 2687.678491][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2687.692159][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2687.807962][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2687.929575][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2688.007408][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2688.015777][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2688.030643][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2688.064673][T28124] overlayfs: failed to resolve './file0': -2 [ 2688.148358][T28124] overlayfs: failed to resolve './file0': -2 [ 2688.816392][T28140] 9pnet_fd: Insufficient options for proto=fd [ 2694.312948][T28081] udevd[28081]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2694.912514][T28219] 9pnet_fd: Insufficient options for proto=fd [ 2696.806347][T28240] 9pnet_fd: Insufficient options for proto=fd [ 2697.039778][ T28] audit: type=1400 audit(1742973875.786:753): avc: denied { mount } for pid=28246 comm="syz.1.7125" name="/" dev="configfs" ino=14682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2697.363159][T28259] x_tables: duplicate underflow at hook 1 [ 2697.589524][T28262] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 2697.969491][T28276] 9pnet_fd: Insufficient options for proto=fd [ 2698.612454][T28281] 9pnet_fd: Insufficient options for proto=fd [ 2698.849327][T19448] bridge0: port 3(syz_tun) entered disabled state [ 2698.861573][T19448] device syz_tun left promiscuous mode [ 2698.877028][T19448] bridge0: port 3(syz_tun) entered disabled state [ 2698.889294][ T28] audit: type=1400 audit(1742973877.646:754): avc: denied { mounton } for pid=28305 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2698.963085][T28138] tipc: Left network mode [ 2699.273070][T28305] bridge0: port 1(bridge_slave_0) entered blocking state [ 2699.341921][T28265] udevd[28265]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2699.446703][T28305] bridge0: port 1(bridge_slave_0) entered disabled state [ 2699.522196][T28305] device bridge_slave_0 entered promiscuous mode [ 2699.554334][T28319] 9pnet_fd: Insufficient options for proto=fd [ 2700.018699][T28305] bridge0: port 2(bridge_slave_1) entered blocking state [ 2700.025568][T28305] bridge0: port 2(bridge_slave_1) entered disabled state [ 2700.100360][T28305] device bridge_slave_1 entered promiscuous mode [ 2701.228514][T28342] device ip6erspan0 entered promiscuous mode [ 2701.405376][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2701.415034][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2701.436807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2701.445362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2701.460451][T28348] 9pnet_fd: Insufficient options for proto=fd [ 2701.466553][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 2701.473468][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2701.483415][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2701.492387][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2701.501103][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 2701.508006][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2702.858759][T28305] device veth0_vlan entered promiscuous mode [ 2702.872665][T28305] device veth1_macvtap entered promiscuous mode [ 2702.881408][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2702.891640][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2702.899256][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2702.906644][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2702.914833][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2702.934692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2702.942798][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2702.950745][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2702.959091][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2702.967198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2702.976194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2703.010566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2703.045150][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2703.070331][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2703.079870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2703.098255][T28138] device bridge_slave_0 left promiscuous mode [ 2703.104854][T28138] bridge0: port 1(bridge_slave_0) entered disabled state [ 2703.122561][T28138] device veth1_macvtap left promiscuous mode [ 2704.088438][T28138] device veth0_vlan left promiscuous mode [ 2704.578488][T28388] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2704.588013][T28388] SELinux: failed to load policy [ 2704.599246][T28318] udevd[28318]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 2706.160896][T28422] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2706.222569][T28422] SELinux: failed to load policy [ 2707.574128][T28440] overlayfs: failed to resolve './file1': -2 [ 2708.029523][T28455] xt_NFQUEUE: number of total queues is 0 [ 2710.173710][T28469] x_tables: duplicate underflow at hook 1 [ 2711.423616][T28484] udevd[28484]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2712.312716][T28504] xt_NFQUEUE: number of total queues is 0 [ 2713.371893][T28507] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 2713.398943][ T28] audit: type=1400 audit(1742973892.126:755): avc: denied { remount } for pid=28506 comm="syz.6.7210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2713.456282][ T28] audit: type=1326 audit(1742973892.146:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28508 comm="syz.7.7211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf2558d169 code=0x0 [ 2713.552192][ T28] audit: type=1400 audit(1742973892.306:757): avc: denied { getattr } for pid=28513 comm="syz.4.7213" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2714.385192][T28522] x_tables: duplicate underflow at hook 1 [ 2714.622768][T28540] 9pnet_fd: Insufficient options for proto=fd [ 2714.670285][T28484] udevd[28484]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2715.014181][T28549] overlayfs: failed to resolve './file0': -2 [ 2715.126069][T28549] overlayfs: failed to resolve './file0': -2 [ 2715.785058][T28566] kvm: MONITOR instruction emulated as NOP! [ 2715.983520][T28576] 9pnet_fd: Insufficient options for proto=fd [ 2716.056033][T28577] x_tables: duplicate underflow at hook 1 [ 2716.394571][T28583] overlayfs: failed to resolve './file0': -2 [ 2716.474234][T28583] overlayfs: failed to resolve './file0': -2 [ 2716.474332][ T28] audit: type=1400 audit(1742973895.226:758): avc: denied { watch watch_reads } for pid=28580 comm="syz.1.7236" path="/6/control" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2716.874571][T28606] 9pnet_fd: Insufficient options for proto=fd [ 2717.157031][T28612] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2719.490282][T28639] x_tables: duplicate underflow at hook 1 [ 2722.211985][T28687] x_tables: duplicate underflow at hook 1 [ 2724.868742][T28723] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2725.298218][T28743] overlayfs: failed to resolve './file0': -2 [ 2725.338468][T13723] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2725.398430][T28743] overlayfs: failed to resolve './file0': -2 [ 2725.548333][T13723] usb 8-1: Using ep0 maxpacket: 32 [ 2725.555343][T13723] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 2725.581105][T13723] usb 8-1: config 0 has no interface number 0 [ 2725.609248][T13723] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2725.638371][T13723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2725.656364][T13723] usb 8-1: Product: syz [ 2725.666525][T13723] usb 8-1: Manufacturer: syz [ 2725.680722][T13723] usb 8-1: SerialNumber: syz [ 2725.695823][T13723] usb 8-1: config 0 descriptor?? [ 2725.706542][T13723] smsc95xx v2.0.0 [ 2725.890297][T28755] device bridge1 entered promiscuous mode [ 2726.060267][T28760] xt_NFQUEUE: number of total queues is 0 [ 2726.107679][T13723] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2726.135758][T13723] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2727.136706][T13723] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2727.157483][T13723] smsc95xx: probe of 8-1:0.67 failed with error -32 [ 2727.862606][T28797] overlayfs: missing 'lowerdir' [ 2728.187481][T27082] usb 8-1: USB disconnect, device number 8 [ 2730.668156][T28830] overlayfs: failed to resolve './file0': -2 [ 2730.767528][T28830] overlayfs: failed to resolve './file0': -2 [ 2730.816692][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7321'. [ 2730.833907][T28835] overlayfs: missing 'lowerdir' [ 2731.008407][T28850] bridge: RTM_NEWNEIGH with invalid ether address [ 2731.261150][T28858] xt_NFQUEUE: number of total queues is 0 [ 2732.502681][T28866] overlayfs: missing 'lowerdir' [ 2732.564591][T28868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7335'. [ 2732.709464][T28869] device bridge1 entered promiscuous mode [ 2733.695198][T28712] udevd[28712]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2734.051681][T28917] xt_NFQUEUE: number of total queues is 0 [ 2738.567150][T28957] udevd[28957]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2740.627700][T28976] device bridge1 entered promiscuous mode [ 2742.296066][T29027] xt_NFQUEUE: number of total queues is 0 [ 2742.815664][T29028] x_tables: duplicate underflow at hook 1 [ 2743.007218][T29030] bridge: RTM_NEWNEIGH with invalid ether address [ 2743.347773][T29053] x_tables: duplicate underflow at hook 1 [ 2744.090347][ T28] audit: type=1326 audit(1742973922.806:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29067 comm="syz.4.7401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94dbb8d169 code=0x0 [ 2744.230625][T29072] x_tables: duplicate underflow at hook 1 [ 2744.512516][T29075] xt_NFQUEUE: number of total queues is 0 [ 2744.527315][T29077] bridge: RTM_NEWNEIGH with invalid ether address [ 2745.170793][T29100] x_tables: duplicate underflow at hook 1 [ 2746.141329][T29128] overlayfs: missing 'lowerdir' [ 2746.201476][T29129] x_tables: duplicate underflow at hook 1 [ 2747.951865][ T28] audit: type=1326 audit(1742973926.706:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2748.036806][T29153] x_tables: duplicate underflow at hook 1 [ 2748.257727][ T28] audit: type=1326 audit(1742973926.816:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2748.286835][ T28] audit: type=1326 audit(1742973926.816:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2748.441383][ T28] audit: type=1326 audit(1742973926.816:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2748.631242][ T28] audit: type=1326 audit(1742973926.816:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2748.658437][ T28] audit: type=1326 audit(1742973926.816:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2748.683143][ T28] audit: type=1326 audit(1742973926.826:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2748.706731][ T28] audit: type=1326 audit(1742973926.826:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2748.730178][ T28] audit: type=1326 audit(1742973926.826:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2749.855502][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 2749.855600][ T28] audit: type=1326 audit(1742973927.546:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2750.053835][ T28] audit: type=1326 audit(1742973927.546:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29147 comm="syz.7.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2558d169 code=0x7ffc0000 [ 2751.666531][T19586] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2753.731805][ T28] audit: type=1400 audit(1742973932.486:805): avc: denied { listen } for pid=29226 comm="syz.8.7453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2753.768722][ T28] audit: type=1400 audit(1742973932.516:806): avc: denied { connect } for pid=29226 comm="syz.8.7453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2753.825209][ T28] audit: type=1400 audit(1742973932.566:807): avc: denied { accept } for pid=29226 comm="syz.8.7453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2753.933756][T29234] x_tables: duplicate underflow at hook 1 [ 2754.337501][T29191] udevd[29191]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2757.226828][ T28] audit: type=1400 audit(1742973934.986:808): avc: denied { read } for pid=29260 comm="syz.7.7462" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2757.285335][T29268] overlayfs: missing 'lowerdir' [ 2757.438326][T27055] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2757.628339][T27055] usb 2-1: Using ep0 maxpacket: 16 [ 2757.634500][T27055] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2757.675638][T27055] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2757.695587][T27055] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2757.728344][T27055] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2757.746842][T27055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.760165][T27055] usb 2-1: config 0 descriptor?? [ 2757.857812][T29281] x_tables: duplicate underflow at hook 1 [ 2758.743411][T27055] usbhid 2-1:0.0: can't add hid device: -71 [ 2758.751237][T27055] usbhid: probe of 2-1:0.0 failed with error -71 [ 2758.769197][T27055] usb 2-1: USB disconnect, device number 17 [ 2758.940261][T29311] xt_NFQUEUE: number of total queues is 0 [ 2759.460420][T29313] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2760.958406][T29332] x_tables: duplicate underflow at hook 1 [ 2761.884950][T29361] overlayfs: missing 'lowerdir' [ 2762.240129][T29369] xt_NFQUEUE: number of total queues is 0 [ 2763.161845][T29424] device bridge2 entered promiscuous mode [ 2763.699404][T29449] x_tables: duplicate underflow at hook 1 [ 2764.213930][T29191] udevd[29191]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2765.546957][T29484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7539'. [ 2766.044648][T29490] x_tables: duplicate underflow at hook 1 [ 2769.014389][T29548] x_tables: duplicate underflow at hook 1 [ 2770.350827][T29573] udevd[29573]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2771.801668][T29593] x_tables: duplicate underflow at hook 1 [ 2777.244915][ T28] audit: type=1400 audit(1742973955.666:809): avc: denied { bind } for pid=29664 comm="syz.6.7592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2777.272404][ T28] audit: type=1400 audit(1742973955.676:810): avc: denied { name_bind } for pid=29664 comm="syz.6.7592" src=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2777.434710][ T28] audit: type=1400 audit(1742973955.676:811): avc: denied { node_bind } for pid=29664 comm="syz.6.7592" saddr=2001:: src=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 2777.476042][T29678] overlayfs: missing 'lowerdir' [ 2777.578357][T18663] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2778.407426][T29694] device bridge1 entered promiscuous mode [ 2778.418403][T18663] usb 2-1: Using ep0 maxpacket: 16 [ 2778.431304][T18663] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2778.455942][T18663] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2778.506194][T18663] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2778.525533][T18663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2778.543883][T18663] usb 2-1: Product: syz [ 2778.548052][T18663] usb 2-1: Manufacturer: syz [ 2778.558143][T18663] usb 2-1: SerialNumber: syz [ 2778.917499][T18663] usb 2-1: 0:2 : does not exist [ 2778.925176][T18663] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2778.943332][T18663] usb 2-1: USB disconnect, device number 18 [ 2782.166979][T29767] device bridge1 entered promiscuous mode [ 2782.175453][T29768] x_tables: duplicate underflow at hook 1 [ 2782.463975][T29777] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7626'. [ 2783.013903][ T28] audit: type=1400 audit(1742973961.766:812): avc: denied { unmount } for pid=28305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2783.911182][T29805] device bridge2 entered promiscuous mode [ 2785.220743][T29831] x_tables: duplicate underflow at hook 1 [ 2785.614226][T29834] xt_NFQUEUE: number of total queues is 0 [ 2786.394442][T29839] block device autoloading is deprecated and will be removed. [ 2786.401795][ T28] audit: type=1400 audit(1742973965.146:813): avc: denied { mounton } for pid=29835 comm="syz.6.7645" path="/579/file0" dev="tmpfs" ino=3185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2786.402062][T29839] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2786.433634][T29839] FAT-fs (loop13): unable to read boot sector [ 2786.671343][T29850] x_tables: duplicate underflow at hook 1 [ 2787.666249][T29873] overlayfs: failed to resolve './file0': -2 [ 2787.757882][T29873] overlayfs: failed to resolve './file0': -2 [ 2787.914025][T29880] x_tables: duplicate underflow at hook 1 [ 2788.510894][T29881] xt_NFQUEUE: number of total queues is 0 [ 2788.904281][T29889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7662'. [ 2788.990131][T29889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7662'. [ 2791.728327][T17743] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2792.164455][ T28] audit: type=1326 audit(1742973970.916:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.1.7671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69f2f8d169 code=0x0 [ 2792.489534][T29927] x_tables: duplicate underflow at hook 1 [ 2792.585069][T29928] x_tables: duplicate underflow at hook 1 [ 2792.678330][T17743] usb 9-1: device descriptor read/64, error -71 [ 2792.979463][T17743] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2792.993531][T17743] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2793.057951][T17743] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2793.077072][T17743] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2793.090239][T17743] usb 9-1: config 0 descriptor?? [ 2794.782332][T17743] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 2794.814191][T17743] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 2794.841558][T17743] lenovo 0003:17EF:6047.000B: report_id 0 is invalid [ 2794.848083][T17743] lenovo 0003:17EF:6047.000B: item 0 1 1 8 parsing failed [ 2794.906047][T17743] lenovo 0003:17EF:6047.000B: hid_parse failed [ 2794.929888][T17743] lenovo: probe of 0003:17EF:6047.000B failed with error -22 [ 2794.966274][T17743] usb 9-1: USB disconnect, device number 8 [ 2795.425959][T29952] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7681'. [ 2795.476862][T29955] device bridge2 entered promiscuous mode [ 2796.425567][T29966] x_tables: duplicate underflow at hook 1 [ 2797.143382][T29897] udevd[29897]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2797.329826][T29984] x_tables: duplicate underflow at hook 1 [ 2799.550656][T30011] x_tables: duplicate underflow at hook 1 [ 2799.628757][T17743] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2799.969810][T17743] usb 5-1: device descriptor read/all, error -71 [ 2801.700519][T30023] x_tables: duplicate underflow at hook 1 [ 2802.348976][T30058] x_tables: duplicate underflow at hook 1 [ 2802.791314][ T28] audit: type=1326 audit(1742973981.546:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.8.7718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a98d169 code=0x7ffc0000 [ 2802.915873][ T28] audit: type=1326 audit(1742973981.586:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.8.7718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d5a98d169 code=0x7ffc0000 [ 2802.952387][ T28] audit: type=1326 audit(1742973981.586:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.8.7718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a98d169 code=0x7ffc0000 [ 2803.081221][ T28] audit: type=1326 audit(1742973981.586:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.8.7718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5d5a98b9d7 code=0x7ffc0000 [ 2803.298530][T17743] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2803.374484][ T28] audit: type=1326 audit(1742973981.596:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.8.7718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a98d169 code=0x7ffc0000 [ 2803.530113][T17743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2803.543506][ T28] audit: type=1326 audit(1742973981.596:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.8.7718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d5a98d169 code=0x7ffc0000 [ 2803.659859][T17743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2803.845216][ T28] audit: type=1326 audit(1742973981.596:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.8.7718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a98d169 code=0x7ffc0000 [ 2803.894267][ T28] audit: type=1326 audit(1742973981.596:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.8.7718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d5a98d169 code=0x7ffc0000 [ 2804.069680][ T28] audit: type=1326 audit(1742973981.596:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.8.7718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a98d169 code=0x7ffc0000 [ 2804.148483][T17743] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2804.158928][T17743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2804.169847][T17743] usb 2-1: config 0 descriptor?? [ 2804.174721][ T28] audit: type=1326 audit(1742973981.596:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30071 comm="syz.8.7718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d5a98d169 code=0x7ffc0000 [ 2804.202633][T30103] x_tables: duplicate underflow at hook 1 [ 2804.281866][T30105] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2804.636765][T17743] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 2804.669868][T17743] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 2804.703726][T17743] lenovo 0003:17EF:6047.000C: report_id 0 is invalid [ 2804.729772][T17743] lenovo 0003:17EF:6047.000C: item 0 1 1 8 parsing failed [ 2804.780837][T17743] lenovo 0003:17EF:6047.000C: hid_parse failed [ 2804.807804][T17743] lenovo: probe of 0003:17EF:6047.000C failed with error -22 [ 2804.896054][T17743] usb 2-1: USB disconnect, device number 19 [ 2805.388760][T30113] overlayfs: missing 'lowerdir' [ 2805.476171][T30120] x_tables: duplicate underflow at hook 1 [ 2805.682868][T30126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7738'. [ 2805.696878][T30126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7738'. [ 2805.752767][T30134] tipc: Enabling of bearer rejected, failed to enable media [ 2805.820809][T30137] overlayfs: failed to resolve './file0': -2 [ 2805.921038][T30137] overlayfs: failed to resolve './file0': -2 [ 2805.986723][T30142] device bridge3 entered promiscuous mode [ 2806.156336][T30146] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2807.300335][T30151] overlayfs: missing 'lowerdir' [ 2807.346699][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7750'. [ 2807.365699][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7750'. [ 2807.380392][T30169] x_tables: duplicate underflow at hook 1 [ 2807.394073][T30170] overlayfs: failed to resolve './file0': -2 [ 2807.494186][T30170] overlayfs: failed to resolve './file0': -2 [ 2807.752632][T30186] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2809.016667][T30189] bridge0: port 1(bridge_slave_0) entered blocking state [ 2809.043063][T30189] bridge0: port 1(bridge_slave_0) entered disabled state [ 2809.083279][T30189] device bridge_slave_0 entered promiscuous mode [ 2809.106464][T30189] bridge0: port 2(bridge_slave_1) entered blocking state [ 2809.121002][T30189] bridge0: port 2(bridge_slave_1) entered disabled state [ 2809.135977][T30189] device bridge_slave_1 entered promiscuous mode [ 2809.152316][T28138] device bridge_slave_0 left promiscuous mode [ 2809.158694][T28138] bridge0: port 1(bridge_slave_0) entered disabled state [ 2809.220930][T28138] device veth1_macvtap left promiscuous mode [ 2809.238725][T28138] device veth0_vlan left promiscuous mode [ 2809.918657][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2809.926312][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2810.001054][T30228] xt_NFQUEUE: number of total queues is 0 [ 2810.048432][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2810.080333][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2810.088473][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 2810.095331][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2810.179231][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2810.211984][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2810.220609][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2810.228968][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 2810.235847][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2810.288323][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2810.315116][T30240] x_tables: duplicate underflow at hook 1 [ 2810.326586][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2810.364293][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2810.395223][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2810.438434][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2810.467676][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2810.502911][T30189] device veth0_vlan entered promiscuous mode [ 2810.515613][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2810.541398][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2810.579988][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2810.610294][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2810.637237][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2810.676639][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2810.708611][T30189] device veth1_macvtap entered promiscuous mode [ 2810.730744][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2810.741900][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2810.797983][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2810.867567][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2810.916593][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2813.095076][T30286] xt_NFQUEUE: number of total queues is 0 [ 2813.355327][T30297] x_tables: duplicate underflow at hook 1 [ 2816.954590][T30321] bridge: RTM_NEWNEIGH with invalid ether address [ 2817.085808][T30327] x_tables: duplicate underflow at hook 1 [ 2817.156964][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 2817.157051][ T28] audit: type=1400 audit(1742973995.906:835): avc: denied { ioctl } for pid=30330 comm="syz.8.7809" path="socket:[138347]" dev="sockfs" ino=138347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2819.618428][T30359] xt_NFQUEUE: number of total queues is 0 [ 2820.023672][T30372] syz.8.7821 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2820.041163][T30369] x_tables: duplicate underflow at hook 1 [ 2820.113518][ T28] audit: type=1326 audit(1742973998.866:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30377 comm="syz.8.7823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a98d169 code=0x0 [ 2823.221756][T30399] xt_NFQUEUE: number of total queues is 0 [ 2823.516623][T30426] x_tables: duplicate underflow at hook 1 [ 2824.897289][T30439] device bridge1 entered promiscuous mode [ 2825.217856][T30460] xt_NFQUEUE: number of total queues is 0 [ 2826.033424][T30467] x_tables: duplicate underflow at hook 1 [ 2826.147567][T30470] overlayfs: missing 'lowerdir' [ 2827.653865][ T28] audit: type=1400 audit(1742974006.406:837): avc: denied { set_context_mgr } for pid=30480 comm="syz.7.7856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2827.699334][T30483] device bridge3 entered promiscuous mode [ 2828.554626][T30502] xt_NFQUEUE: number of total queues is 0 [ 2828.891343][T30514] device bridge4 entered promiscuous mode [ 2829.089356][T30520] x_tables: duplicate underflow at hook 1 [ 2831.775408][ T28] audit: type=1400 audit(1742974010.526:838): avc: denied { read } for pid=30564 comm="syz.4.7887" path="socket:[139541]" dev="sockfs" ino=139541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2833.746211][T30603] overlayfs: failed to resolve './file0': -2 [ 2833.846776][T30603] overlayfs: failed to resolve './file0': -2 [ 2833.912913][T30608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7900'. [ 2835.451655][T30634] x_tables: duplicate underflow at hook 1 [ 2836.238673][T30643] overlayfs: failed to resolve './file1': -2 [ 2836.415502][T30643] overlayfs: failed to resolve './file1': -2 [ 2836.893246][ T28] audit: type=1400 audit(1742974015.176:839): avc: denied { accept } for pid=30638 comm="syz.7.7909" path="socket:[139659]" dev="sockfs" ino=139659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2837.164488][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7913'. [ 2838.469261][T30672] x_tables: duplicate underflow at hook 1 [ 2838.665213][T19510] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2838.888303][T19510] usb 2-1: Using ep0 maxpacket: 16 [ 2838.894370][T19510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2838.915379][T19510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2838.927156][T30686] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 2838.958428][T19510] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2838.992389][T19510] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2839.265383][T30691] x_tables: duplicate underflow at hook 1 [ 2839.327035][T19510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2839.345358][T19510] usb 2-1: config 0 descriptor?? [ 2839.651938][T30695] 9pnet_fd: Insufficient options for proto=fd [ 2839.678796][T30698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7928'. [ 2840.248036][T19510] usbhid 2-1:0.0: can't add hid device: -71 [ 2840.257477][T19510] usbhid: probe of 2-1:0.0 failed with error -71 [ 2840.266850][T19510] usb 2-1: USB disconnect, device number 20 [ 2840.349962][T30722] 9pnet_fd: Insufficient options for proto=fd [ 2840.531317][T30662] udevd[30662]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2842.330349][T30750] x_tables: duplicate underflow at hook 1 [ 2844.246124][T30812] x_tables: duplicate underflow at hook 1 [ 2844.354289][T30827] tipc: Started in network mode [ 2844.361592][T30827] tipc: Node identity ac14140f, cluster identity 4711 [ 2844.373866][T30827] tipc: New replicast peer: 255.0.0.255 [ 2844.383977][T30827] tipc: Enabled bearer , priority 10 [ 2845.601794][T18663] tipc: Node number set to 2886997007 [ 2846.874829][T30878] bridge: RTM_NEWNEIGH with invalid ether address [ 2847.629549][ T28] audit: type=1326 audit(1742974026.386:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30890 comm="syz.6.7997" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa13e98d169 code=0x0 [ 2847.656277][T30893] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7996'. [ 2847.738537][T30901] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7999'. [ 2850.931693][T30956] block device autoloading is deprecated and will be removed. [ 2850.940013][T30956] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2850.949124][T30956] FAT-fs (loop3): unable to read boot sector [ 2855.122101][T31037] 9pnet_fd: Insufficient options for proto=fd [ 2856.805982][T31053] block device autoloading is deprecated and will be removed. [ 2856.814572][T31053] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2856.823765][T31053] FAT-fs (loop13): unable to read boot sector [ 2857.806735][T31072] x_tables: duplicate underflow at hook 1 [ 2858.021653][T31082] 9pnet_fd: Insufficient options for proto=fd [ 2858.860400][T31102] x_tables: duplicate underflow at hook 1 [ 2859.138769][T31107] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8067'. [ 2860.885559][ T28] audit: type=1400 audit(1742974039.626:841): avc: denied { map } for pid=31140 comm="syz.8.8077" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2861.959384][T31171] x_tables: duplicate underflow at hook 1 [ 2862.723827][T31185] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8091'. [ 2862.775550][T31192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8095'. [ 2862.977550][T31205] device wg2 entered promiscuous mode [ 2862.998342][T24471] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2863.188286][T24471] usb 7-1: Using ep0 maxpacket: 16 [ 2863.194493][T24471] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2863.214415][T24471] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2863.241654][T24471] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2863.253362][T24471] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2863.270259][T24471] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2863.305763][T24471] usb 7-1: config 0 descriptor?? [ 2863.346315][T31214] x_tables: duplicate underflow at hook 1 [ 2863.717864][T24471] hid (null): report_id 0 is invalid [ 2863.725225][T24471] hid (null): invalid report_count -737697329 [ 2863.917237][T24471] usb 7-1: USB disconnect, device number 12 [ 2864.015685][T31227] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8107'. [ 2864.024880][T31229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8108'. [ 2864.204239][T31243] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8114'. [ 2864.222405][ T28] audit: type=1326 audit(1742974042.976:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31237 comm="syz.4.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dbb8d169 code=0x7ffc0000 [ 2864.388855][ T28] audit: type=1326 audit(1742974042.996:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31237 comm="syz.4.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dbb8d169 code=0x7ffc0000 [ 2864.542477][ T28] audit: type=1326 audit(1742974042.996:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31237 comm="syz.4.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94dbb8d169 code=0x7ffc0000 [ 2864.575943][ T28] audit: type=1326 audit(1742974042.996:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31237 comm="syz.4.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dbb8d169 code=0x7ffc0000 [ 2864.604352][T31252] 9pnet_fd: Insufficient options for proto=fd [ 2864.636052][ T28] audit: type=1326 audit(1742974042.996:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31237 comm="syz.4.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dbb8d169 code=0x7ffc0000 [ 2864.698886][T31259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8120'. [ 2864.741641][T31265] device bridge2 entered promiscuous mode [ 2864.919588][T31274] overlayfs: './file1' not a directory [ 2865.242333][T31293] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8133'. [ 2865.326037][T31300] device bridge3 entered promiscuous mode [ 2865.428322][T13723] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2865.436463][T31310] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8140'. [ 2865.473279][T31312] overlayfs: missing 'lowerdir' [ 2865.555106][T31312] overlayfs: failed to resolve './file0': -2 [ 2865.629429][T13723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2865.654056][T13723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2865.668586][T31323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8145'. [ 2865.671040][T13723] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2865.752734][T13723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2865.804785][T13723] usb 2-1: config 0 descriptor?? [ 2865.896957][T31337] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8151'. [ 2866.552797][T13723] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 2866.580094][T13723] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 2866.644128][T13723] lenovo 0003:17EF:6047.000E: report_id 0 is invalid [ 2866.797517][T31347] overlayfs: missing 'lowerdir' [ 2866.818531][T13723] lenovo 0003:17EF:6047.000E: item 0 1 1 8 parsing failed [ 2866.835910][T13723] lenovo 0003:17EF:6047.000E: hid_parse failed [ 2866.842550][T13723] lenovo: probe of 0003:17EF:6047.000E failed with error -22 [ 2866.860052][T13723] usb 2-1: USB disconnect, device number 21 [ 2866.904004][T31347] overlayfs: failed to resolve './file0': -2 [ 2867.122119][T31366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8160'. [ 2867.138108][T31370] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8162'. [ 2868.147419][T31386] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8167'. [ 2868.163731][T31389] overlayfs: missing 'lowerdir' [ 2868.243100][T31389] overlayfs: failed to resolve './file0': -2 [ 2868.399687][T31401] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8174'. [ 2869.202324][T31426] overlayfs: missing 'lowerdir' [ 2869.395016][T31426] overlayfs: failed to resolve './file0': -2 [ 2869.767634][T31430] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8184'. [ 2869.891639][T31437] bridge: RTM_NEWNEIGH with invalid ether address [ 2870.898313][T19510] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2871.289366][T19510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2871.304446][T19510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2871.319994][T19510] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2871.343566][T19510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2871.369906][T19510] usb 5-1: config 0 descriptor?? [ 2871.887259][T19510] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 2871.894881][T19510] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 2871.901889][T19510] lenovo 0003:17EF:6047.000F: report_id 0 is invalid [ 2871.908576][T19510] lenovo 0003:17EF:6047.000F: item 0 1 1 8 parsing failed [ 2871.915728][T19510] lenovo 0003:17EF:6047.000F: hid_parse failed [ 2871.926984][T19510] lenovo: probe of 0003:17EF:6047.000F failed with error -22 [ 2871.971682][T31475] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8197'. [ 2872.054558][T18059] usb 5-1: USB disconnect, device number 7 [ 2873.282699][T31495] block device autoloading is deprecated and will be removed. [ 2873.290540][T31495] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2873.299602][T31495] FAT-fs (loop3): unable to read boot sector [ 2875.431013][T31534] 9pnet_fd: Insufficient options for proto=fd [ 2875.511636][T31540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8218'. [ 2877.958319][T24471] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2878.140075][T24471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2878.151251][T24471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2878.162652][T24471] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2878.172736][T24471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2878.225361][T24471] usb 5-1: config 0 descriptor?? [ 2878.436741][T24471] usbhid 5-1:0.0: can't add hid device: -71 [ 2878.450472][T24471] usbhid: probe of 5-1:0.0 failed with error -71 [ 2878.507703][T24471] usb 5-1: USB disconnect, device number 8 [ 2878.748534][T31569] 9pnet_fd: Insufficient options for proto=fd [ 2878.817292][ T28] audit: type=1400 audit(1742974057.566:847): avc: denied { setopt } for pid=31575 comm="syz.1.8230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2880.444730][ T28] audit: type=1400 audit(1742974057.866:848): avc: denied { bind } for pid=31575 comm="syz.1.8230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2880.864616][T31599] bridge: RTM_NEWNEIGH with invalid ether address [ 2883.510085][T31636] bridge: RTM_NEWNEIGH with invalid ether address [ 2883.548307][T30034] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2884.003392][T31641] block device autoloading is deprecated and will be removed. [ 2884.010992][T31641] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2884.020093][T31641] FAT-fs (loop15): unable to read boot sector [ 2884.020613][T30034] usb 2-1: device descriptor read/all, error -71 [ 2885.115863][T31672] bridge: RTM_NEWNEIGH with invalid ether address [ 2885.880042][T31684] x_tables: duplicate underflow at hook 1 [ 2886.913824][T31699] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8268'. [ 2886.961305][T31707] bridge: RTM_NEWNEIGH with invalid ether address [ 2887.815471][T31728] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8280'. [ 2888.193079][T31739] bridge: RTM_NEWNEIGH with invalid ether address [ 2890.424017][T31760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8289'. [ 2893.895999][T31793] x_tables: duplicate underflow at hook 1 [ 2894.986588][T31805] x_tables: duplicate underflow at hook 1 [ 2895.473329][T31813] device batadv_slave_1 entered promiscuous mode [ 2895.502678][ T28] audit: type=1400 audit(1742974074.246:849): avc: denied { ioctl } for pid=31812 comm="syz.8.8306" path="socket:[143480]" dev="sockfs" ino=143480 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2895.653796][T31813] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8307'. [ 2895.710421][T31810] device batadv_slave_1 left promiscuous mode [ 2895.854207][T31833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8309'. [ 2895.945232][T31835] x_tables: duplicate underflow at hook 1 [ 2896.558848][T31846] x_tables: duplicate underflow at hook 1 [ 2896.939529][T31867] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8326'. [ 2898.575039][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8328'. [ 2898.681924][T31885] x_tables: duplicate underflow at hook 1 [ 2899.628282][T31897] x_tables: duplicate underflow at hook 1 [ 2899.730704][T31906] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8339'. [ 2902.427995][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8347'. [ 2902.716433][T31948] x_tables: duplicate underflow at hook 1 [ 2904.606527][T31978] x_tables: duplicate underflow at hook 1 [ 2904.900968][T31983] x_tables: duplicate underflow at hook 1 [ 2905.387667][T32009] udevd[32009]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2907.315733][T32027] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8377'. [ 2907.656288][T32034] x_tables: duplicate underflow at hook 1 [ 2908.038314][ T28] audit: type=1400 audit(1742974086.736:850): avc: denied { create } for pid=32040 comm="syz.4.8381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 2912.622781][T32121] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8402'. [ 2913.368640][T32135] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2913.563785][T25779] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2913.890338][T32148] syz.7.8413[32148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2913.890791][T32148] syz.7.8413[32148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2915.208432][T32148] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 2916.410841][ T28] audit: type=1400 audit(1742974093.966:851): avc: denied { relabelfrom } for pid=32141 comm="syz.7.8413" name="" dev="pipefs" ino=144034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2916.552156][ T28] audit: type=1400 audit(1742974093.986:852): avc: denied { relabelto } for pid=32141 comm="syz.7.8413" name="" dev="pipefs" ino=144034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 2917.363991][ T28] audit: type=1400 audit(1742974094.386:853): avc: denied { map } for pid=32141 comm="syz.7.8413" path="socket:[144468]" dev="sockfs" ino=144468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2917.438251][T25779] usb 2-1: device not accepting address 24, error -71 [ 2917.505131][T32173] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2918.005724][T32181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8422'. [ 2919.086046][T32191] block device autoloading is deprecated and will be removed. [ 2919.093634][T32191] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2919.102774][T32191] FAT-fs (loop13): unable to read boot sector [ 2919.298581][T32205] overlayfs: failed to resolve './file0': -2 [ 2919.514471][ T28] audit: type=1400 audit(1742974098.256:854): avc: denied { getopt } for pid=32206 comm="syz.4.8432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2919.598569][T32205] overlayfs: failed to resolve './file0': -2 [ 2919.672094][T32212] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2920.299556][T32237] 9pnet: Could not find request transport: fd0x0000000000000007 [ 2921.912509][T32258] overlayfs: failed to resolve './file0': -2 [ 2922.371882][T32258] overlayfs: failed to resolve './file0': -2 [ 2924.675999][T32284] 9pnet: Could not find request transport: fd0x0000000000000007 [ 2926.853912][T32324] 9pnet: Could not find request transport: fd0x0000000000000007 [ 2927.247730][T32334] device batadv_slave_1 entered promiscuous mode [ 2927.255179][T32334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8470'. [ 2927.284069][T32333] device batadv_slave_1 left promiscuous mode [ 2927.356594][T32332] block device autoloading is deprecated and will be removed. [ 2927.364143][T32332] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2927.373271][T32332] FAT-fs (loop15): unable to read boot sector [ 2928.743822][T32361] 9pnet_fd: Insufficient options for proto=fd [ 2929.011618][T27418] ------------[ cut here ]------------ [ 2929.016956][T27418] WARNING: CPU: 0 PID: 27418 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 2929.025011][T27418] Modules linked in: [ 2929.028700][T27418] CPU: 0 PID: 27418 Comm: syz-executor Not tainted 6.1.128-syzkaller-00032-gb18db21117e2 #0 [ 2929.038644][T27418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2929.048498][T27418] RIP: 0010:drop_nlink+0xc1/0x110 [ 2929.053328][T27418] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 57 d0 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 df 22 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 2929.072839][T27418] RSP: 0018:ffffc900082cfbf0 EFLAGS: 00010293 [ 2929.078688][T27418] RAX: ffffffff81cd73b1 RBX: 0000000000000000 RCX: ffff88811af72880 [ 2929.086506][T27418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2929.094357][T27418] RBP: ffffc900082cfc18 R08: ffffffff81cd7334 R09: 0000000000000003 [ 2929.102157][T27418] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 2929.109961][T27418] R13: 1ffff11027308c5a R14: ffff888139846288 R15: ffff8881398462d0 [ 2929.117827][T27418] FS: 000055558dac6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2929.126706][T27418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2929.133218][T27418] CR2: ffffffffffffffe8 CR3: 00000001284f3000 CR4: 00000000003506b0 [ 2929.140967][T27418] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 2929.148826][T27418] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2929.156700][T27418] Call Trace: [ 2929.159837][T27418] [ 2929.162582][T27418] ? show_regs+0x58/0x60 [ 2929.166647][T27418] ? __warn+0x160/0x3d0 [ 2929.170733][T27418] ? drop_nlink+0xc1/0x110 [ 2929.175008][T27418] ? report_bug+0x4d5/0x7d0 [ 2929.179494][T27418] ? drop_nlink+0xc1/0x110 [ 2929.183794][T27418] ? handle_bug+0x41/0x70 [ 2929.187962][T27418] ? exc_invalid_op+0x1b/0x50 [ 2929.192510][T27418] ? asm_exc_invalid_op+0x1b/0x20 [ 2929.197515][T27418] ? drop_nlink+0x44/0x110 [ 2929.201828][T27418] ? drop_nlink+0xc1/0x110 [ 2929.206128][T27418] ? drop_nlink+0xc1/0x110 [ 2929.210435][T27418] shmem_rmdir+0x59/0x90 [ 2929.214559][T27418] vfs_rmdir+0x398/0x500 [ 2929.218709][T27418] incfs_kill_sb+0x113/0x230 [ 2929.223188][T27418] deactivate_locked_super+0xad/0x110 [ 2929.228435][T27418] deactivate_super+0xbe/0xf0 [ 2929.232974][T27418] cleanup_mnt+0x485/0x510 [ 2929.237281][T27418] ? user_path_at_empty+0x14e/0x1a0 [ 2929.242351][T27418] __cleanup_mnt+0x19/0x20 [ 2929.246572][T27418] task_work_run+0x24d/0x2e0 [ 2929.251065][T27418] ? task_work_cancel+0x2e0/0x2e0 [ 2929.255944][T27418] ? __x64_sys_umount+0x122/0x170 [ 2929.260888][T27418] exit_to_user_mode_loop+0x94/0xa0 [ 2929.265855][T27418] exit_to_user_mode_prepare+0x5a/0xa0 [ 2929.271163][T27418] syscall_exit_to_user_mode+0x26/0x130 [ 2929.276559][T27418] do_syscall_64+0x47/0xb0 [ 2929.280824][T27418] ? clear_bhb_loop+0x55/0xb0 [ 2929.285290][T27418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2929.291058][T27418] RIP: 0033:0x7f5d5a98e497 [ 2929.295298][T27418] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2929.314869][T27418] RSP: 002b:00007ffd492e3c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2929.323132][T27418] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5d5a98e497 [ 2929.331016][T27418] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd492e3d20 [ 2929.338928][T27418] RBP: 00007ffd492e3d20 R08: 0000000000000000 R09: 0000000000000000 [ 2929.346801][T27418] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd492e4db0 [ 2929.354661][T27418] R13: 00007f5d5aa0e08c R14: 00000000002cb148 R15: 00007ffd492e4df0 [ 2929.362501][T27418] [ 2929.365272][T27418] ---[ end trace 0000000000000000 ]--- [ 2929.377898][T27418] ================================================================== [ 2929.385795][T27418] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 2929.391869][T27418] Write of size 4 at addr 0000000000000170 by task syz-executor/27418 [ 2929.399851][T27418] [ 2929.402036][T27418] CPU: 0 PID: 27418 Comm: syz-executor Tainted: G W 6.1.128-syzkaller-00032-gb18db21117e2 #0 [ 2929.413394][T27418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2929.423287][T27418] Call Trace: [ 2929.426408][T27418] [ 2929.429185][T27418] dump_stack_lvl+0x151/0x1b7 [ 2929.433702][T27418] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2929.438998][T27418] ? _printk+0xd1/0x111 [ 2929.442989][T27418] print_report+0xe1/0x4e0 [ 2929.447242][T27418] ? __virt_addr_valid+0x59/0x2f0 [ 2929.452099][T27418] ? kasan_addr_to_slab+0xd/0x80 [ 2929.456872][T27418] ? ihold+0x20/0x60 [ 2929.460606][T27418] kasan_report+0x13c/0x170 [ 2929.464949][T27418] ? ihold+0x20/0x60 [ 2929.468693][T27418] kasan_check_range+0x294/0x2a0 [ 2929.473454][T27418] __kasan_check_write+0x14/0x20 [ 2929.478231][T27418] ihold+0x20/0x60 [ 2929.481785][T27418] vfs_rmdir+0x268/0x500 [ 2929.485867][T27418] incfs_kill_sb+0x113/0x230 [ 2929.490294][T27418] deactivate_locked_super+0xad/0x110 [ 2929.495501][T27418] deactivate_super+0xbe/0xf0 [ 2929.500013][T27418] cleanup_mnt+0x485/0x510 [ 2929.504263][T27418] ? user_path_at_empty+0x14e/0x1a0 [ 2929.509298][T27418] __cleanup_mnt+0x19/0x20 [ 2929.513552][T27418] task_work_run+0x24d/0x2e0 [ 2929.517977][T27418] ? task_work_cancel+0x2e0/0x2e0 [ 2929.522837][T27418] ? __x64_sys_umount+0x122/0x170 [ 2929.527704][T27418] exit_to_user_mode_loop+0x94/0xa0 [ 2929.532735][T27418] exit_to_user_mode_prepare+0x5a/0xa0 [ 2929.538027][T27418] syscall_exit_to_user_mode+0x26/0x130 [ 2929.543405][T27418] do_syscall_64+0x47/0xb0 [ 2929.547659][T27418] ? clear_bhb_loop+0x55/0xb0 [ 2929.552178][T27418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2929.557898][T27418] RIP: 0033:0x7f5d5a98e497 [ 2929.562161][T27418] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2929.581598][T27418] RSP: 002b:00007ffd492e3c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2929.589843][T27418] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5d5a98e497 [ 2929.597742][T27418] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd492e3d20 [ 2929.605546][T27418] RBP: 00007ffd492e3d20 R08: 0000000000000000 R09: 0000000000000000 [ 2929.613359][T27418] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd492e4db0 [ 2929.621175][T27418] R13: 00007f5d5aa0e08c R14: 00000000002cb148 R15: 00007ffd492e4df0 [ 2929.629081][T27418] [ 2929.631937][T27418] ================================================================== [ 2929.647597][T27418] Disabling lock debugging due to kernel taint [ 2929.655059][T27418] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 2929.662693][T27418] #PF: supervisor write access in kernel mode [ 2929.668594][T27418] #PF: error_code(0x0002) - not-present page [ 2929.674410][T27418] PGD 11d8d8067 P4D 11d8d8067 PUD 0 [ 2929.679525][T27418] Oops: 0002 [#1] PREEMPT SMP KASAN [ 2929.684562][T27418] CPU: 0 PID: 27418 Comm: syz-executor Tainted: G B W 6.1.128-syzkaller-00032-gb18db21117e2 #0 [ 2929.696279][T27418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2929.706264][T27418] RIP: 0010:ihold+0x25/0x60 [ 2929.710594][T27418] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 b1 1a a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 34 1e a8 [ 2929.730040][T27418] RSP: 0018:ffffc900082cfc30 EFLAGS: 00010246 [ 2929.736124][T27418] RAX: ffff88811af72800 RBX: 0000000000000001 RCX: ffff88811af72880 [ 2929.743938][T27418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2929.751746][T27418] RBP: ffffc900082cfc40 R08: ffffffff8144b2d3 R09: fffffbfff0f6e8fd [ 2929.759559][T27418] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11023000a71 [ 2929.767368][T27418] R13: ffff888117c6c220 R14: 0000000000000000 R15: 1ffff11022f8d84a [ 2929.775178][T27418] FS: 000055558dac6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2929.783948][T27418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2929.790368][T27418] CR2: 0000000000000170 CR3: 00000001284f3000 CR4: 00000000003506b0 [ 2929.798184][T27418] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 2929.806160][T27418] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2929.813972][T27418] Call Trace: [ 2929.817095][T27418] [ 2929.819896][T27418] ? __die_body+0x62/0xb0 [ 2929.824039][T27418] ? __die+0x7e/0x90 [ 2929.827767][T27418] ? page_fault_oops+0x7f9/0xa90 [ 2929.832543][T27418] ? vprintk_default+0x26/0x30 [ 2929.837143][T27418] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 2929.842534][T27418] ? add_taint+0x44/0xe0 [ 2929.846608][T27418] ? panic+0x667/0x667 [ 2929.850511][T27418] ? preempt_schedule_thunk+0x16/0x18 [ 2929.855725][T27418] ? exc_page_fault+0x529/0x6d0 [ 2929.860408][T27418] ? asm_exc_page_fault+0x27/0x30 [ 2929.865266][T27418] ? add_taint+0x93/0xe0 [ 2929.869342][T27418] ? ihold+0x25/0x60 [ 2929.873075][T27418] vfs_rmdir+0x268/0x500 [ 2929.877158][T27418] incfs_kill_sb+0x113/0x230 [ 2929.881583][T27418] deactivate_locked_super+0xad/0x110 [ 2929.886789][T27418] deactivate_super+0xbe/0xf0 [ 2929.891301][T27418] cleanup_mnt+0x485/0x510 [ 2929.895555][T27418] ? user_path_at_empty+0x14e/0x1a0 [ 2929.900590][T27418] __cleanup_mnt+0x19/0x20 [ 2929.904843][T27418] task_work_run+0x24d/0x2e0 [ 2929.909271][T27418] ? task_work_cancel+0x2e0/0x2e0 [ 2929.914128][T27418] ? __x64_sys_umount+0x122/0x170 [ 2929.918990][T27418] exit_to_user_mode_loop+0x94/0xa0 [ 2929.924023][T27418] exit_to_user_mode_prepare+0x5a/0xa0 [ 2929.929317][T27418] syscall_exit_to_user_mode+0x26/0x130 [ 2929.934700][T27418] do_syscall_64+0x47/0xb0 [ 2929.938949][T27418] ? clear_bhb_loop+0x55/0xb0 [ 2929.943463][T27418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2929.949192][T27418] RIP: 0033:0x7f5d5a98e497 [ 2929.953449][T27418] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2929.972887][T27418] RSP: 002b:00007ffd492e3c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2929.981131][T27418] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5d5a98e497 [ 2929.988944][T27418] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd492e3d20 [ 2929.996753][T27418] RBP: 00007ffd492e3d20 R08: 0000000000000000 R09: 0000000000000000 [ 2930.004568][T27418] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd492e4db0 [ 2930.012375][T27418] R13: 00007f5d5aa0e08c R14: 00000000002cb148 R15: 00007ffd492e4df0 [ 2930.020193][T27418] [ 2930.023051][T27418] Modules linked in: [ 2930.026800][T27418] CR2: 0000000000000170 [ 2930.030782][T27418] ---[ end trace 0000000000000000 ]--- [ 2930.036073][T27418] RIP: 0010:ihold+0x25/0x60 [ 2930.040412][T27418] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 b1 1a a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 34 1e a8 [ 2930.059858][T27418] RSP: 0018:ffffc900082cfc30 EFLAGS: 00010246 [ 2930.065753][T27418] RAX: ffff88811af72800 RBX: 0000000000000001 RCX: ffff88811af72880 [ 2930.073568][T27418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2930.081376][T27418] RBP: ffffc900082cfc40 R08: ffffffff8144b2d3 R09: fffffbfff0f6e8fd [ 2930.089189][T27418] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11023000a71 [ 2930.096999][T27418] R13: ffff888117c6c220 R14: 0000000000000000 R15: 1ffff11022f8d84a [ 2930.104813][T27418] FS: 000055558dac6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2930.113576][T27418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2930.119997][T27418] CR2: 0000000000000170 CR3: 00000001284f3000 CR4: 00000000003506b0 [ 2930.127812][T27418] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 2930.135620][T27418] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2930.143441][T27418] Kernel panic - not syncing: Fatal exception [ 2930.149658][T27418] Kernel Offset: disabled [ 2930.153789][T27418] Rebooting in 86400 seconds..