last executing test programs: 15m20.42575109s ago: executing program 32 (id=179): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') read$FUSE(r0, &(0x7f00000075c0)={0x2020}, 0x2020) 9m40.219065692s ago: executing program 33 (id=1772): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={&(0x7f0000000380)="e564a4bd5fc79c9a5a808e43b73cd276ded4c2bff127418ccb3fc4c02adea19ae01b7b4f133b41e646244c3f1471fb2a3d31aa66f2ef3847395435c70416612b2c0961e32f8e8637dfea4d3099df888620b8b3956fac5d8161a89eb5d9d0dea875572f143910fcca2edc33", &(0x7f0000000400)=""/235, &(0x7f0000000500)="7ce6d48bcdedfac57887137af0098a1490070e85722a08b8efb09b885cc1525d130b75a09b0fd82ce6ebd370b3fc88ba631a3e11f5abe86aaf082bfae3821f716c2ee2d71c25f9aaf9362b89dc2a8c7b40a691724f31f6ab491c4f65bfe218e7b25ba7a2f0c32a7755af9f5938fb43a50ef4e846846d17208112999bf4792c394ad0e30bb319e7317613c81a118943d9fcf0de780eb0e07fa3248b94b289bbae6374658b117dda56bb56eed9cba799aa", &(0x7f0000000600), 0x7fffffff, r0, 0x4}, 0x38) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x1d, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 9m0.545937974s ago: executing program 34 (id=1930): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000340), &(0x7f00000000c0), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000380)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x8, 0x6, 0x1000, 0x8, {0x1, 0x2, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x2, 0x7fff, 0x7, 0x4000, 0xd, r6, 0x0, 0x1, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',privport,access=', @ANYRESDEC=r6]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x148, 0x148, 0x7, [@var={0x3, 0x0, 0x0, 0xe, 0x5, 0x2}, @union={0x2, 0x7, 0x0, 0x5, 0x0, 0x6, [{0x8, 0x5, 0x8}, {0x2, 0x4, 0x1c}, {0x1, 0x0, 0x7}, {0x9, 0x4, 0x4}, {0xc, 0x3, 0xb4}, {0x7, 0x0, 0x9ad}, {0xf, 0x4, 0x8}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x12, 0x6}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0xc, 0x2}, {0x10, 0x401}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x3}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @restrict={0x4}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @union={0xc, 0x9, 0x0, 0x5, 0x1, 0x81, [{0xd, 0x1, 0xfffffffa}, {0xc, 0x5, 0x2}, {0x5, 0x0, 0x9}, {0xa, 0x4, 0xffffffff}, {0x6, 0x3, 0x9}, {0x7, 0x5, 0x9}, {0xd, 0x5, 0x2800000}, {0xe, 0x3, 0x9}, {0xc, 0x0, 0x80}]}]}, {0x0, [0x0, 0x0, 0x61, 0x2e, 0x61]}}, &(0x7f0000000180)=""/106, 0x167, 0x6a, 0x1, 0x6, 0x10000, @value=r5}, 0x28) 8m42.82690122s ago: executing program 35 (id=2018): setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x2f, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x10, 0x3, 0x67}, 0x2c) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000040)={@local, @broadcast, 0xffffffffffffffff, "4caa50a41596b6b7ba5c728282d65403b5b29b6853f9a795b585a23c367b7154", 0x3b6, 0x0, 0x1, 0x200}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@rand_addr=0x64010102, @broadcast, 0xffffffffffffffff, "d2c6f54163eb73d7dbb2a6a7104789ef4ae095ce7595a6b731e02b715c5c8cc3", 0x9, 0x2, 0x4, 0x689c}, 0x3c) fcntl$setsig(r0, 0xa, 0x16) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket$packet(0x11, 0x6febd3df419af30b, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r0, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0xd3, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001440)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r5, 0x300, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100) r6 = open_tree(r0, &(0x7f00000015c0)='./file0\x00', 0x800) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000001600)={0xa, {0x4, 0x1, 0x5}}, 0xa) ftruncate(r6, 0xffffffffffffcca5) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}]}, 0x1c}}, 0x4081) bpf$ENABLE_STATS(0x20, &(0x7f0000001740), 0x4) fcntl$setlease(r1, 0x400, 0x3) chdir(&(0x7f0000001780)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000001940)={&(0x7f00000017c0), 0xc, &(0x7f0000001900)={&(0x7f0000001800)=@mpls_delroute={0xe4, 0x19, 0x100, 0x70bd29, 0x25dfdbfb, {0x1c, 0x0, 0x14, 0x7f, 0x0, 0x0, 0xfe, 0x4, 0x800}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_VIA={0x14, 0x12, {0x1e, "03f40d4855a247fe43de9032ce67"}}, @RTA_NEWDST={0x84, 0x13, [{0x740}, {0x9, 0x0, 0x1}, {0xfff00}, {0x4}, {0xffffb}, {0x47d9}, {0xf79}, {0x3ff}, {0x5}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}, {0x8}, {0x401, 0x0, 0x1}, {0x800}, {0x0, 0x0, 0x1}, {0xe4a}, {0xecf3, 0x0, 0x1}, {0xef4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8}, {0x3}, {}, {0xac79}, {}, {0x6}, {0xffffa, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x663c, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xffffb}]}, @RTA_DST={0x8, 0x1, {0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x13, 0x2, r3}}, @RTA_VIA={0x14, 0x12, {0x5, "b2cb4d1eab8ba0fadac3604f4938"}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) io_setup(0x0, &(0x7f0000001980)=0x0) io_submit(r7, 0x1, &(0x7f0000001a80)=[&(0x7f0000001a40)={0x0, 0x0, 0x0, 0x3, 0xd, r6, &(0x7f00000019c0)="a5222e45c822bdde5b0db32e99ef4fa7b850796cf402352e056e9f15842cdd4045004b42abc227707d7cb3bee31985c19ab4bd2293bf782cc81f83723f9d412d5b57bd7025c854f377b5786f4db4ad38352dd9bd1f7d73f848af00", 0x5b, 0x8, 0x0, 0x1, r0}]) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001ac0)={0x1ff, 0x0, 0x1, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x33, 0x2, &(0x7f0000001b40)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x94e}], &(0x7f0000001b80)='GPL\x00', 0x5, 0x0, &(0x7f0000001bc0), 0x40f00, 0x24, '\x00', r3, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c00)={0x3, 0xb, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001c40)=[{0x0, 0x2, 0x1, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000001b00)='block_rq_remap\x00', r8, 0x0, 0x100000001}, 0x18) syz_open_dev$hiddev(&(0x7f0000001d80), 0x8, 0x20001) ioperm(0xe, 0x101, 0x7) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001dc0)={@multicast1, @private=0xa010101, 0x0, 0x3, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, 0x1c) 8m1.966845074s ago: executing program 0 (id=2314): r0 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='#\x00', 0x0) keyctl$unlink(0x9, 0x0, r0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "e813a8cd33bca4bbacc5e119937c2c4de97a00d0d278482bf54724f0e13e2df8f01f04ac524de3b5f2aa57f0d16607c41fd036ee9a28cd1644476a2dde2f07d5", 0x3a}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r1, 0x1) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x29c}, 0xc) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r3, 0x3, '\x00', 0x0, r4, 0x2, 0x2, 0x5}, 0x50) pipe2$9p(&(0x7f0000000340), 0x880) r6 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f0000000440)={0x0, "f99d19e74638267c374aaf6522026810089401d8b47c877f13929aab2fc42f8e92f7d9d5798e69e5625032f4eead8ac43feca650dcf8ce0c9d1e0adb1a2c5dad", 0x22}, 0x48, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='user\x00', &(0x7f00000004c0)=@keyring={'key_or_keyring:', r6}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x16, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x899b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0xe, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[r3, r5], &(0x7f0000000680)=[{0x6, 0x1, 0x5, 0xb}, {0x3, 0x1, 0x10, 0x8}, {0x3, 0x4, 0x5, 0xa}, {0x5, 0x3, 0xf, 0x2}, {0x3, 0x2, 0xa, 0x2}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000500)='ata_bmdma_status\x00', r7, 0x0, 0x1}, 0x18) readv(r3, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/183, 0xb7}, {&(0x7f00000008c0)=""/230, 0xe6}], 0x2) pipe2(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000a40)=0x3, &(0x7f0000000a80)=0x2) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x4010, r4}, 0x18) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x8}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000d80)=""/225, 0x2c, 0xe1, 0x0, 0x1ff, 0x10000, @value=r8}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r9, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000f80)=[0x0, 0x0], &(0x7f0000000fc0)=[0x0], 0x0, 0x22, &(0x7f0000001000)=[{}, {}], 0x10, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0xd9, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, r8, 0x4, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x13, 0x13, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xda0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c00)='GPL\x00', 0x8, 0xd8, &(0x7f0000000c40)=""/216, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, r11, 0x8, &(0x7f0000000ec0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000f00)={0x0, 0xe, 0xd, 0x765c4441}, 0x10, r12, r7, 0x1, &(0x7f00000012c0)=[r13, r3, r8, r3, r3, r3], &(0x7f0000001300)=[{0x0, 0x1, 0x2, 0x2}], 0x10, 0x6}, 0x94) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000001400)={'icmp\x00'}, &(0x7f0000001440)=0x1e) socket$inet_udplite(0x2, 0x2, 0x88) r14 = open(&(0x7f0000001480)='./file0\x00', 0x80000, 0x28) getsockopt$bt_sco_SCO_OPTIONS(r14, 0x11, 0x1, &(0x7f00000014c0)=""/161, &(0x7f0000001580)=0xa1) connect$unix(r8, &(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$user(&(0x7f0000001640), &(0x7f0000001680)={'syz', 0x3}, &(0x7f00000016c0)="78e29d3ca5612f64dbf2714f8386a8a7502009916352c20e9459f505f19cfcaae9788d5534be3446407c95f210c16eea216a347cfc86676664386c8ff2475089aac682796bd5d54d748c9b22414f90919ba9dc18858499b211fd82d275f036130057133c7630124b6a74968e69a51aa7b146c8dba205680f13ff69db663a5465d6ccdc7de04c8883c4cd457395053eb1b6c4e7d9589bc74ed7110d09929738ab4ae4d2753c09f7c162dfc60f51d4307ade4716767a27198597f8b14e16dd0f6e8cdbdb527b1be9e62c52a2a9ace076c60e9500", 0xd3, r6) stat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)) 8m1.957041775s ago: executing program 0 (id=2315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xe501, 0x3, 0x338, 0x1a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x2a0, 0x230, 0x230, 0x2a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4, [], @ipv6=@private2, [], @ipv6=@dev, [], @ipv6=@empty}}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r10, 0x40189429, &(0x7f0000000080)={0x0, 0x7, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x1, 0x0) 8m0.989082513s ago: executing program 0 (id=2319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x5}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x3, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4, 0x0, '\x00', 0x5}, {0x5, 0x1, 0xff, '\x00', 0x4}, {0x3, 0x0, 0x5, '\x00', 0x9}, {}, {0x0, 0xb, 0xbe}, {0x0, 0x6, 0x0, '\x00', 0xeb}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0xfe, 0x2, 0x4, '\x00', 0x9}, {0x0, 0x5f}, {0x1, 0x3, 0x1, '\x00', 0x4}, {0xc, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x50, 0x83, 0x10}]}}) 8m0.731029837s ago: executing program 0 (id=2321): mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x1c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404}, 0x0) 8m0.692515609s ago: executing program 0 (id=2323): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a"], 0x30}, 0x1, 0x11}, 0x0) (fail_nth: 5) 8m0.372841325s ago: executing program 0 (id=2324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="39fdc753d857a8dd10a720c6f4f84dd533e3edfd60b3e9d1f06a6a", @ANYRES32=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x55a, &(0x7f0000000b80)="$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") syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000080)=r8}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) 7m44.79219126s ago: executing program 36 (id=2324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="39fdc753d857a8dd10a720c6f4f84dd533e3edfd60b3e9d1f06a6a", @ANYRES32=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x55a, &(0x7f0000000b80)="$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") syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000080)=r8}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) 4m12.472716481s ago: executing program 7 (id=3530): close(0xffffffffffffffff) fsopen(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4m11.49438585s ago: executing program 7 (id=3533): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b61"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x70bd25, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x2, 0x2, 0x80, 0x0, 0x3b, 0x0, 0xee00}, {@in=@loopback, 0x4d2, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x2, 0x0, 0x0, 0x2, 0x0, 0x1c00000400000}, {0x11df, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_aead={0x6c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x100, 0x60, "00000000000000000000a1c31b3718243e97a18e6085921a4cf3f6e2bca13541"}}]}, 0x15c}}, 0x0) 4m10.45781764s ago: executing program 7 (id=3537): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = io_uring_setup(0x1de2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfff7fffc}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000180)={[{@bh}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@sysvgroups}, {@noauto_da_alloc}, {@debug}]}, 0x1, 0x4ed, &(0x7f00000002c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4m10.177963176s ago: executing program 7 (id=3542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="cf495a2e5ab824e60df175036fbfd372526b6afa4229e73230e0521fe6867f3d84577663dd1b0e6dc43a0c31d71be4486dc430cea8c91ed3cd25099617798136a38cb63b4de3205f5add0357b985c2dc8aaef65f027b95897515cb9b403885a39f4b95dd85fa277d43448c0668ed8600589682063c291475e66d234700080e5af8", @ANYRESHEX, @ANYBLOB="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"/291, @ANYRES64, @ANYBLOB="9448e19579c38c1505a0a00f83d4dae1521d15555932d0f9c2538d25a29b4d7cd7b4567f574fd6a9b7135c35732986eb0b07ad9a5290f4570c5ceb9bccbee3aad2c50e4e755d412ff5504393209678735570557b"], 0x48) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x100000}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000040)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x1000, 0x0}, 0x8) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adfba88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB="0a0002dfbabbbbbbbbbb0000"], 0x48}}, 0x8000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x88004000}, 0xc, &(0x7f0000000980)={&(0x7f0000000c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r5, @ANYBLOB="000229bd7000fedbdf2501000000080143dfbda60000080006007f00000108000600ac1e0101050002000a00000008000b00", @ANYRES32=r4, @ANYBLOB="a3e0c25eb116a4958e8d8ed2c3067a32a60c8bed23520376a8337c8b829ebdd6e882af09c93857800283d4a193e3ef0789b26d603fa5d1e079cac9e55354d957f434c1076b2ed97dfc125afe8eeb5d82d75efbd6d3665b4a68499a86c088b4ff7d9cfb6d55346b9fc099d8a3f736bc6a"], 0x3c}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0x2, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x9, 0xe9, &(0x7f0000000680)=""/233, 0x40f00, 0x30, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x2, 0x0, &(0x7f0000000800)=[{0x5, 0x2, 0xf, 0xc}, {0x1, 0x1, 0x6, 0x1}], 0x10, 0x9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='kfree\x00', 0x0) readv(r1, &(0x7f0000002400)=[{&(0x7f0000000e40)=""/102, 0x66}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7512fc5ac4fd935662c14aed7fbd324f8e2111e04f09161221dc17fb2d203be1aec9e9e341d320d7eb6c58fea8ba17717ffb16d3758db80cbbb451d61bcb7d8d008b1110a0b26fe93a9693e8498270a59051d2e7c602cdc245b1a1489758d4f233c4775a8681be631b4f85f8a8218bb1d0c7823cb295c38903aacd804a3dff577ef46024e4328109465e90ca25a8866e95f2f8b53381f1c8d81632f6c16b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 4m10.019560869s ago: executing program 7 (id=3543): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:kmsg_device_t:s0\x00', 0x23) clock_settime(0x1ed5d7403, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff00c}, {0x30, 0x0, 0x0, 0x709}, {0x6}]}, 0x10) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x20003) pause() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) 4m9.763795044s ago: executing program 7 (id=3544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xff39c618bcf63e1e, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180006000000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000029a050f7a2f15a83cf47d1e0f0bb4cca00e6158ac225252ea21e796b693b8bfdd6162623117a9ead585fb8ad73cc6e5b452a7cad2a9b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000200)={0xff02, 0x2, 0xffff, 0xb, 0xd, "5f730000a9003f00"}) 4m9.763067563s ago: executing program 37 (id=3544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xff39c618bcf63e1e, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180006000000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000029a050f7a2f15a83cf47d1e0f0bb4cca00e6158ac225252ea21e796b693b8bfdd6162623117a9ead585fb8ad73cc6e5b452a7cad2a9b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000200)={0xff02, 0x2, 0xffff, 0xb, 0xd, "5f730000a9003f00"}) 2m5.902218642s ago: executing program 1 (id=4164): r0 = creat(0x0, 0x0) close(r0) fsopen(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2m4.151687696s ago: executing program 1 (id=4171): socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a0005000000000000000000000000000800fc00", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m4.150072646s ago: executing program 8 (id=4172): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) utime(&(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00'}, 0x18) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)) 2m4.138650136s ago: executing program 8 (id=4173): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x104000b, @empty, 0x80ad}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x6, 0xe, 0x3, 0x3}]}) 2m3.292005453s ago: executing program 1 (id=4178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r2, r1, 0x0, 0x8010002b) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x761a58ac) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r8, r6, 0x5, 0x2, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r9, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) 2m3.253733644s ago: executing program 8 (id=4179): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20044010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000002000f030000000000003404000001ed0a0014040000170000800f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 2m2.984026179s ago: executing program 9 (id=4180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000240), 0x0}, 0x20) (fail_nth: 3) 2m2.975852029s ago: executing program 9 (id=4181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) fstat(r1, &(0x7f0000000840)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f0000000180)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setgroups(0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) 2m2.366395301s ago: executing program 1 (id=4183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001740)=@newtfilter={0x880, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x3, 0x5, 0x1, 0x0, 0xffff, 0x7, 0x5, 0xc, 0x2, 0x1, 0xac0, 0x2, 0xb9, 0x5, 0x7, 0x80, 0x80000001, 0x6, 0xc, 0x200, 0x0, 0x8000, 0x101, 0x8, 0x8, 0xf, 0xa2, 0xcd0, 0x8, 0x5, 0x7, 0xe4, 0x8, 0x7, 0x5, 0x0, 0x9, 0x80000000, 0x4abc, 0x2, 0xf0, 0x4, 0x5, 0x8, 0x3, 0x0, 0x4, 0x0, 0xffffffff, 0x7, 0x1000, 0x2, 0xa7bf, 0x7, 0x2, 0x8, 0x1, 0x0, 0x1, 0x628, 0x6, 0xb5, 0x5, 0x4, 0xfffffffe, 0x30000000, 0x7, 0x3, 0x200, 0x1, 0x6, 0x5, 0x5, 0x1000, 0x5, 0x0, 0x2, 0x7, 0xd29, 0x9, 0x0, 0x0, 0x1, 0xfffffff1, 0x47ca, 0x8, 0x613, 0xf3, 0x7, 0x1, 0x6, 0x8c5b, 0xd, 0xfc73, 0x3, 0x8, 0x8, 0x6, 0x8, 0xe15, 0x2, 0x8, 0x9, 0x80000001, 0xb8a, 0x2, 0x7, 0x6, 0xf18c, 0x6, 0x2, 0x0, 0x670c8fef, 0x2, 0x8, 0x5, 0xffffffff, 0x7ff, 0x1, 0x9, 0x0, 0x3, 0x200, 0x200, 0x401, 0x3, 0x7ff, 0x564b, 0x5, 0x6, 0xffffff7f, 0x8000, 0xfff, 0xfffffffc, 0x8000, 0x8000, 0x10, 0x1, 0x86d, 0x0, 0x2, 0xe, 0x0, 0x3, 0x5, 0x10, 0x1ff, 0x800, 0x4, 0x1ce2e2b, 0x5, 0x5, 0x9, 0x5, 0x0, 0x9, 0xba, 0x5, 0x84, 0xf7, 0x2, 0x551, 0x8001, 0xefe, 0xb242befe, 0x8, 0x4, 0x4, 0x7, 0x8b3, 0x2, 0x8001, 0x1, 0x5, 0x0, 0x9, 0x5, 0x1, 0xb, 0x8, 0x4, 0x7, 0x80000000, 0xdb2, 0x10, 0x6, 0x401, 0x2, 0x4, 0x80000000, 0xff, 0x0, 0x7, 0x4, 0xffffffff, 0x2, 0x6, 0x9, 0x1, 0x935, 0x80, 0xe6f, 0x2, 0x7, 0x0, 0x200, 0x2, 0x8, 0x5, 0x5, 0x7, 0x7, 0x8, 0x6, 0x9, 0x3, 0x1, 0xfffffff5, 0x3ff, 0x63c, 0xfffffffd, 0x7fff, 0x7, 0xca2, 0xa66, 0x9, 0x5, 0x0, 0x0, 0x2e6, 0x5, 0x5, 0x9, 0x697f, 0xfffffff9, 0x6, 0x8, 0x4, 0x5, 0xfffff8e8, 0x4, 0xf7a, 0x0, 0x9, 0x9, 0x1, 0x4, 0x47, 0x0, 0x57, 0x53, 0x2, 0x80, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x2, 0xffffffff, 0x3, 0x1000, 0x20, 0xe, 0x5, 0x4a, 0x7, 0x1, 0x7ff, 0x1, 0x40, 0x1, 0x9, 0x8000, 0x5, 0xd23f, 0x57c7, 0x7, 0x14, 0xa, 0x9, 0x1, 0x1, 0x7, 0x3, 0x80, 0x5, 0x4, 0x7fffffff, 0x5, 0x1e0, 0xf, 0xc3, 0x7, 0x60000, 0xb, 0x7, 0x8, 0x2, 0x4, 0x0, 0x3800, 0x8000, 0x0, 0x9, 0xbfa, 0x9, 0x9, 0xfffffffd, 0x4, 0x2, 0x4, 0x101, 0x959b, 0x3, 0x7, 0x80, 0xfffffff9, 0x8001, 0x2, 0x100, 0x1000, 0xfff, 0x80000000, 0x9, 0x0, 0x4, 0xf7, 0x7, 0x8, 0xb, 0x0, 0xfffffffe, 0x7c, 0x9, 0x4, 0x8a6, 0x800, 0x7, 0x4, 0x2, 0x8, 0xa, 0x1, 0x9, 0x7, 0x2, 0x6, 0x3, 0x1, 0xfffffffb, 0x800, 0x1, 0x4, 0x7, 0x0, 0x4, 0x41400a8b, 0x95, 0x3, 0x0, 0x46, 0x5, 0x4, 0x3ff, 0x7, 0x6, 0x80000, 0x0, 0x0, 0x911, 0xfffffffd, 0x24ba, 0x4, 0xffffffff, 0x5, 0x4, 0xfffffbff, 0x7, 0xa0b, 0xe8, 0x7, 0xa, 0x3, 0x10000, 0x401, 0xffff8000, 0x1, 0x7, 0x7, 0x3ff, 0x81, 0x7, 0x3, 0xa9, 0x1, 0x8000, 0x8, 0x6, 0x100, 0x4800, 0x80, 0xffff1416, 0x100, 0x4, 0x5, 0x8000, 0x9, 0x7, 0xffffffff, 0x80, 0x2, 0x0, 0x7ff, 0x7, 0x9, 0x8, 0x7fffffff, 0x40, 0x7, 0x0, 0xffffff01, 0x4, 0x7, 0x3, 0xd, 0x8, 0x3, 0x7, 0xaed8, 0xa, 0x7ff, 0x400, 0x2ee1, 0x6, 0x6, 0x10, 0x2, 0x436, 0xfff, 0x8, 0x9, 0x90, 0x8, 0xfffffff7, 0x1, 0x3, 0x1ff, 0x8, 0x7, 0x2, 0x4, 0x1, 0x4, 0xc98, 0x7, 0x6, 0x5, 0x7fff, 0x5, 0x5, 0xe4a, 0x3, 0xff, 0x2, 0x6, 0x9978, 0x8, 0x8, 0x8, 0x7ff, 0x1000, 0xffffffff, 0x6bf3, 0x7677, 0x6, 0x5, 0x10000, 0x3d5c43ba, 0x0, 0x2, 0xff, 0x3200000, 0x6, 0x2e8c, 0x8, 0x9, 0x6, 0x0, 0xce6, 0x1, 0xffff, 0xf, 0xa, 0x3, 0x3, 0x10000, 0x4, 0x8, 0x0, 0x1, 0x4, 0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x9, 0x5e1, 0x2, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa3, 0x7, 0x14581c03, 0x8, 0x81, {0x6, 0x1, 0x2, 0x3ff, 0x2, 0x7}, {0x3, 0xf594c3698cf796cf, 0x7, 0xfff, 0x7, 0x4}, 0x4, 0x2, 0xf23}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80}}]}, 0x880}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x13, 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="18320000050000000000000000000000b7080000000000007b8af8ffe6ffffffb7080000070000007b8af0ff00000000bfa1000000000000070105000000000000000000000000000008000000182300"/92, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018290000", @ANYRES32=r4, @ANYBLOB="000000000200000018590000080000000000000000000000d895000104000000183b000004000000000000000000000018260000", @ANYRES32=r5, @ANYBLOB="0000000000080000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006"], &(0x7f0000000500)='GPL\x00', 0x4, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x21, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f00000005c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x6, 0x9, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001ac0)=[{0x5, 0x4, 0x9, 0xc}, {0x3, 0x4}], 0x10, 0x3}, 0x94) 2m2.329883111s ago: executing program 8 (id=4185): r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10) 2m2.320889892s ago: executing program 8 (id=4186): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x475, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) socket$netlink(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x4d5, 0x32}, @in6=@local, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@empty, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001, {[@timestamp={0x44, 0x4, 0xea, 0x0, 0xf}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) 2m1.89151375s ago: executing program 9 (id=4187): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="00000015e7890400"/32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000240)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000002c0)={0x3f}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46, r9}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x7e, r9}) r10 = dup(r0) write$FUSE_BMAP(r10, 0x0, 0x0) 2m1.260112882s ago: executing program 8 (id=4190): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x475, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) socket$netlink(0x10, 0x3, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x40000a, 0xba}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r9}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5001000410001307fefffffffcdbdf25e0000001000000000000000000000000ac141420000000000000000000000000000000004e210002020000206c000000c836858528e6f7ed36ff9924b209ce1c3a5ecba7e30287911d313eef2f7e50c05295e7a1ea606d29fc594f13c7fb573a026a303af5e4b36cb58c0b8beaa6e636012c09c2b6f4624abdecf391568504c108a83b0a56018c939f0ec6c8e2", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000c0b90008004500001c0000000000109078130000000000000000004e200008"], 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000cc0)=ANY=[@ANYRESDEC=r5, @ANYRESOCT, @ANYRES32=r8, @ANYRESOCT=r10, @ANYRES8=r7, @ANYRES8=r6], 0x0) write$UHID_CREATE2(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001", @ANYRES16=r3, @ANYRESOCT=r3, @ANYRES64=r4], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x2000000083b6, 0x14ee42) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) 2m1.164952434s ago: executing program 1 (id=4191): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r5, 0x1, 0x70ad28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000000)={0x1, 0x401, 0xff, 0xb102, 0x7, "c74192f3b7e8720700000000000010ee0800", 0x81, 0x1}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 2m1.023954577s ago: executing program 9 (id=4192): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (fail_nth: 3) 2m0.981805428s ago: executing program 1 (id=4193): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 2m0.82786034s ago: executing program 9 (id=4196): r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10) 2m0.82718177s ago: executing program 9 (id=4197): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x5c, r6, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) close(0x3) r7 = inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, [@jmp={0x5, 0x0, 0x8, 0x5, 0x2, 0x129, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41100, 0x10}, 0x94) inotify_add_watch(r7, &(0x7f0000000340)='.\x00', 0x850002e2) 1m46.109005626s ago: executing program 38 (id=4190): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x475, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) socket$netlink(0x10, 0x3, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x40000a, 0xba}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r9}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5001000410001307fefffffffcdbdf25e0000001000000000000000000000000ac141420000000000000000000000000000000004e210002020000206c000000c836858528e6f7ed36ff9924b209ce1c3a5ecba7e30287911d313eef2f7e50c05295e7a1ea606d29fc594f13c7fb573a026a303af5e4b36cb58c0b8beaa6e636012c09c2b6f4624abdecf391568504c108a83b0a56018c939f0ec6c8e2", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000c0b90008004500001c0000000000109078130000000000000000004e200008"], 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000cc0)=ANY=[@ANYRESDEC=r5, @ANYRESOCT, @ANYRES32=r8, @ANYRESOCT=r10, @ANYRES8=r7, @ANYRES8=r6], 0x0) write$UHID_CREATE2(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001", @ANYRES16=r3, @ANYRESOCT=r3, @ANYRES64=r4], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x2000000083b6, 0x14ee42) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) 1m45.576557006s ago: executing program 39 (id=4197): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x5c, r6, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) close(0x3) r7 = inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, [@jmp={0x5, 0x0, 0x8, 0x5, 0x2, 0x129, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41100, 0x10}, 0x94) inotify_add_watch(r7, &(0x7f0000000340)='.\x00', 0x850002e2) 1m45.564505066s ago: executing program 40 (id=4193): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 7.434363256s ago: executing program 4 (id=4758): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000000) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) r2 = syz_usb_connect$uac1(0x0, 0xce, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x7, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x12}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x8, "2a9b24caf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe7, 0x2, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x7, 0x5, "83aa2d45032586f36b"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x4, 0x9, "114c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x81, 0x8, 0x6, "79c2aa4f04b9"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xd54, 0xfbe5, 0x2, "8710d2d25a2ce6d5"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x4, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x0, 0x7, {0x7, 0x25, 0x1, 0x83, 0xfc, 0x3}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x9, 0x59, 0x7, 0x20, 0x4}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xa, 0x4, 0x6}]}, 0x2, [{0xb7, &(0x7f00000004c0)=@string={0xb7, 0x3, "ef1e8f4e8cdd15c34078862665adff3a3c6e59b05545eff3a5996d7a89227ad17f63e209e8783546de0b3c5f82e476cfeb38a43e2d6958f9458c69f7f2c104059acc02f6ef2301a289d1b1e2f163312a3c54b6f8577b638d38134bb9a17c3c628966b43feef631b6c224c70bcdb5480fe780c08b2ca44da90035dc71043d77ab58691274c226ca59a83b1149ce1ad49638f667969ce59875d1bc2163029e76e1a8b2cf8ceeeff9f7a36846345f4687c5dcc5a8b216"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_control_io$uac1(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000200)={0x20, 0x8, 0x14, {0x14, 0x23, "9965c79b1d981bc49146344320834eec8bb2"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f00000009c0)={0x44, &(0x7f00000007c0)={0x40, 0x17, 0xe1, "2b614375f3ff9ee798d77bb5f87fe3aed49025be5f2b1bbc1b39712c2fe169f30d3adb6ab45be67715a3214b2f9fa62db5ea4c298c394c68de6ee0d837f1c02f130af460148e55af608b10c57ec7b7b12807076f17878a6abd10142437c5298b8d37b5a0544190eef6ea10cf4952c418296d8ec456bd06284960f7d684d4edf42cf2c55db40e7037e187f3daa93e14c9d5bfc5e23b18c6ed3bef40f9d3f951f1fca54c3a452667a14e519cf38108115e23c8af15ce97ca347606bb7cd91d5b9bcb76494e993ffdb13b503048091f94f59ba96f4a48f321f88f1230b0ab8bdf6f47"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x81, 0x3, "a9ed97"}, &(0x7f0000000440)={0x20, 0x82, 0x2, '!/'}, &(0x7f00000006c0)={0x20, 0x83, 0x2, "bb7d"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "f7"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "5c56e8"}}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="201304000000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000280)={0x10, 0x1, 0xf, "64fdb016267b8fb32501b62ea63a4e"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, 0x0}) 3.296988686s ago: executing program 2 (id=4780): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") geteuid() lstat(&(0x7f0000000540)='./file2\x00', &(0x7f00000005c0)) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x4c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200f00, 0x1000}, 0x20) 2.914450584s ago: executing program 3 (id=4784): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000880), 0x10, 0x2800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000080), 0x0}, 0x20) shutdown(r0, 0x0) 2.794544156s ago: executing program 3 (id=4789): socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a0005000000000000000000000000000800fc00", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x13, 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="18320000050000000000000000000000b7080000000000007b8af8ffe6ffffffb7080000070000007b8af0ff00000000bfa1000000000000070105000000000000000000000000000008000000182300"/92, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018290000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000080000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000"], &(0x7f0000000500)='GPL\x00', 0x4, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x6, 0x9, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001ac0)=[{0x5, 0x4, 0x9, 0xc}, {0x3, 0x4}], 0x10, 0x3}, 0x94) 2.781816326s ago: executing program 4 (id=4790): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000001c80)={0x5, 0xd9a1, 0x9}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200000000000000000000000000012c03000000000000c910fff5"], 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000021000501000000000000000002000000000000000100013b19e889f888dbf67bb7624300"], 0x1c}}, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 2.320356005s ago: executing program 2 (id=4791): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000001c80)={0x5, 0xd9a1, 0x9}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200000000000000000000000000012c03000000000000c910fff5"], 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x3, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x4) 2.08776617s ago: executing program 6 (id=4792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYBLOB, @ANYBLOB='\x00'/16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x0, 0xfffffffe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0xffffffffffffffe6, 0x3ffc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x62040200) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) 1.815795825s ago: executing program 3 (id=4793): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 1.751869357s ago: executing program 4 (id=4795): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) setpgid(0x0, 0x0) setregid(0x0, 0x0) 1.60075357s ago: executing program 3 (id=4796): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) ioctl$RTC_UIE_ON(r2, 0x7003) close_range(r0, 0xffffffffffffffff, 0x0) 1.59884829s ago: executing program 6 (id=4797): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000008000000c3a200000018110000", @ANYRES32=r2, @ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0xe3eb, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x400000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40, 0x9, 0x0, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x3, 0x3}) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xa, 0x4, 0x80}, 0x10) write(r7, &(0x7f0000000100)="247600001e005f0214ffff0600fffff8070000000000000000010100080003400b000000", 0x24) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="b9fd0900000f32c7442400f3000000c7442402df000000420fda638db805000000b9bb0000000f01d9430f4a9ae6000000420f0093e84700000f20e0c4c37904b00e000000000f22e0dfccc4227922247ab92a6430b54820004820000000ba000000000f30", 0x60}], 0x1, 0x68, 0x0, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="3e2e26360f3378b600000000000866450f35400f6024e40f38087900420f1a4000c4c2619920430f0665430f01cac422b50cea", 0x33}], 0x1, 0x55, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.56968362s ago: executing program 4 (id=4799): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000880), 0x10, 0x2800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000080), 0x0}, 0x20) shutdown(r0, 0x0) 1.471942982s ago: executing program 4 (id=4802): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003) pread64(r1, 0x0, 0x0, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x0, 0x187, &(0x7f0000001400)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.468861082s ago: executing program 4 (id=4803): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x3, r1, 0x7ff}, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xcfe6073798699b37) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000140)) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r1, 0x4}, 0xc) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x13, r0, 0x1a9cc000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000280)) unshare(0x2040100) r3 = syz_usb_connect$printer(0x3, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x2, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x12, 0x1, 0x0, 0x0, 0x0, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0xeb, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xb, 0x0, 0x3f}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x9, 0x6, 0x6, 0xff, 0x7}, 0x15, &(0x7f0000000340)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xf7, 0x1, 0x8001, 0xf0f, 0x4, [0xff00cf]}]}, 0x9, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2409}}, {0xbd, &(0x7f0000000400)=@string={0xbd, 0x3, "b65f3aa413cbe6a897b31ba44ea989da47442e7429eb90a4dff94876f842a1c842f8a4423d43e5e64986ef15cf06bb2c1dd056116dc92c2d50be35e608e50cf8f042bfefbe3b04d8d33755e09275f89544c6e2c54cacb5780296270fa25832ca41813d1c1026346d2c3ca6c190382fb0b5a268ebe053fa3fe7159701f2fe9a088879fcdeb4d778e2a0b5ecbeeedf776eb7d0b301d663075adfe039d4d955b1811e1d6a96ba37fb0876375d514d65880d9f21c32360507942434b75"}}, {0x5d, &(0x7f00000004c0)=@string={0x5d, 0x3, "dc3e75fd5071a74339eea8736c895217b789857931a2d059cb4b9130055b250345bc96e9956f74740c689236de04f7ebb9196feab18bbcad7923bf6f3089ed4998df58e0c518633869cc4a9193e37b4f23c68e25aaf6cd3d92832b"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc3e}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x457}}, {0x15, &(0x7f0000000640)=@string={0x15, 0x3, "16b607ed88adbe26290ee0b8d2a1704d2fa5f5"}}]}) syz_usb_control_io(r3, &(0x7f0000000940)={0x2c, &(0x7f0000000740)={0x0, 0x0, 0x3f, {0x3f, 0xb, "79b5b8f7c26673c5546549b222fc296636f42872491df98072f3d4bcd6d20256900ebdd7f37c9546469e417307c93396911af5dfd0aa9e392134d7d950"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000000800)={0x0, 0xf, 0xb2, {0x5, 0xf, 0xb2, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa9, 0x4, 0xab, 0x8, 0x5}, @generic={0x90, 0x10, 0xa, "0ea8e3d1287f8e5a4ed895cb76496e7dd7596164e018cb6aa42ebc2c42c36f24683f06bec02a055ad9cdb8bcdeddd47d7e21fc3ed4b894128ac7bf50699b8009c1a755cd70ea97bbbd9db2d24bb437eaf9814c80027a3e03e9716bee41ec4a71779f1f79b34dee4d953ee1c5f6a4d80a81e1caa7148a6eed02997975f617af4856516361e7d15b223f923e0794"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x9, 0x330}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x9a, 0x0, 0x1, 0x1}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x2, 0x9, 0x81, "3697a35e", "786ce365"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x7, 0x7, 0x5, 0x9, 0x6a4}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000980)={0x40, 0x1, 0x3, "f06624"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x74}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0xa7}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "d6db"}, &(0x7f0000000b80)={0x40, 0xf, 0x2}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, &(0x7f0000000c00)={0x40, 0x17, 0x6}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "85e8"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x8c}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0xfd}}) r4 = openat$cgroup_ro(r0, &(0x7f0000000e40)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r5 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000e80), 0x800) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000ec0)) r7 = socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f0000000f00)=[{r0, 0xe20}, {r2, 0x2480}, {r2}, {r2, 0x24}, {r5, 0x2089}, {r6, 0x4000}, {r7, 0x4080}], 0x7, &(0x7f0000000f40), &(0x7f0000000f80)={[0xfff]}, 0x8) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000fc0)={0x7, 0x33, 0x2}, 0x7) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f00000011c0)={0x2c, &(0x7f0000001080)={0x40, 0x4, 0x1a, {0x1a, 0x9, "f7b2fb76c9a21caacf24dab64579e3dc4d3f7a8c55b1719d"}}, &(0x7f00000010c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, &(0x7f0000001100)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "50795a840a52fc351136b509a77c96fa"}]}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x4, 0x9d, 0x8, "f2a77fcc", "f9339519"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x60, 0x0, 0x1, 0x0, 0x9, 0x4}}}, &(0x7f0000001680)={0x84, &(0x7f0000001200)={0x0, 0x14, 0x85, "fd7d58719d4a1c2419a979aa6ff48e2dcb691ba87cbf86933ac74345ef7afbdb234eac20e16b239d5893b9a09fd2572980b2a8f10919ce7e92f4450bd88a5c42d1ad2e00926c93f1f82cbb7420b5810a6819be70dc638b0704dd97d0d7dad6582bfc5db33dd53289c033c208b48bca78e42377e94664b57ea32a66f6faf36de3dbc30fb5e3"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001380)={0x20, 0x0, 0x8, {0x20, 0x1, [0xf0]}}, &(0x7f00000013c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001400)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001440)={0x40, 0xb, 0x2, "64b8"}, &(0x7f0000001480)={0x40, 0xf, 0x2, 0x1000}, &(0x7f00000014c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001500)={0x40, 0x17, 0x6, @local}, &(0x7f0000001540)={0x40, 0x19, 0x2, "3cc8"}, &(0x7f0000001580)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f00000015c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001600)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001640)={0x40, 0x21, 0x1, 0x2}}) r9 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000001740)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x10, 0xd, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf8, 0x0, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x3, 0x2}}]}}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x110, 0xd, 0xf8, 0xe, 0x20, 0x5}, 0x54, &(0x7f00000017c0)={0x5, 0xf, 0x54, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "9da00cd5e47d782b368a4d8ac65d9972"}, @ptm_cap={0x3}, @generic={0x31, 0x10, 0x3, "17087dc2552e3f2d6754b932263f8c5435ef1e6a577495d124bd1cfd9da6b11ec3a67d32c5cc4fa44cd6ea976231"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xf, 0x101}]}, 0x1, [{0xf6, &(0x7f0000001840)=@string={0xf6, 0x3, "0d96795f89d2ff8a51562a1de2c42f543b102d39fac7236be34f9629c343cf7e36a57531ae30281d964447cc05aea8195f134afb4fe428cbd3adf182ab3da183cb22f056c5aa83934f37a3b4a6f24386fa8bd63bdb583a02ec985b7e7448fb10c5984dc576b65d6bed9c2d034a674ea6525996853fca3dc28bf3d90a5f6f962364074b4333f214d84847e6fc30c08cbc07dbc43eb9a50aff04a33c74319a05bfadd3e0a14fd8a55200809f80d86ff8365597256a344f58cc1cbba3a54a6ceee4949a05c6049cabfa75ee10a260e2e85f224be5af68b8c1f62247ef456dabfb1648f9fa59eff4f6303e6588d4042f164ecebbd91a"}}]}) syz_usb_control_io$printer(r9, &(0x7f0000001a80)={0x14, &(0x7f0000001980)={0x20, 0x2, 0xaf, {0xaf, 0xe, "ca8dff4b3dd8fa95154ea6c95619fada6bc3d3872c481a94f7d679a20b8d33a82c4bef1d129bdafd5727c19e85a3c4116099785ca9ffa6ea930812ba735e4c9700e21a1517cb36e805bd194f5e83dbc3a5284ccf6c201c8da9d98a287bc3119cf43e9a84124ed598fa9733fa116cb7df43f93623a7a461a3136fc73a86befc58fd8f56e04a231f99d80c23fd89021e4875cac50ff4a5aa9c95480e4eb286d5d81bfb1885d5a59283d9c4c1d6d1"}}, &(0x7f0000001a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}}, &(0x7f0000001cc0)={0x34, &(0x7f0000001ac0)={0x20, 0x16, 0x50, "3cc8259f04d379d76530acbeb8ca4a68c7afdca0ef1e5a08b889cb33d4829df051890e4f51357f49c96868dca39be3151d9e25751005fbcb46e610a53b7f53be88c9d15e9b5770d2b19c6c94020f8ce3"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000001bc0)={0x20, 0x0, 0x4d, {0x4b, "fd6dd8b1f4741f532a51da265e10bc6cb7e7b0e8ef8af245157ba75d8d224d5c4915befafb35dacfca249956e63e860150c9c4da125392aee755db4df77e77ec4ee54ce2e5e9b861758a34"}}, &(0x7f0000001c40)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000001c80)={0x20, 0x0, 0x1, 0x7}}) 1.402234243s ago: executing program 2 (id=4804): socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a0005000000000000000000000000000800fc00", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x13, 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="18320000050000000000000000000000b7080000000000007b8af8ffe6ffffffb7080000070000007b8af0ff00000000bfa1000000000000070105000000000000000000000000000008000000182300"/92, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018290000", @ANYRES32=r4, @ANYBLOB="000000000200000018590000080000000000000000000000d895", @ANYRES32=r5, @ANYBLOB="0000000000080000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000"], &(0x7f0000000500)='GPL\x00', 0x4, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x6, 0x9, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001ac0)=[{0x5, 0x4, 0x9, 0xc}, {0x3, 0x4}], 0x10, 0x3}, 0x94) 1.333790495s ago: executing program 3 (id=4805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001740)=@newtfilter={0x880, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x3, 0x5, 0x1, 0x0, 0xffff, 0x7, 0x5, 0xc, 0x2, 0x1, 0xac0, 0x2, 0xb9, 0x5, 0x7, 0x80, 0x80000001, 0x6, 0xc, 0x200, 0x0, 0x8000, 0x101, 0x8, 0x8, 0xf, 0xa2, 0xcd0, 0x8, 0x5, 0x7, 0xe4, 0x8, 0x7, 0x5, 0x0, 0x9, 0x80000000, 0x4abc, 0x2, 0xf0, 0x4, 0x5, 0x8, 0x3, 0x0, 0x4, 0x0, 0xffffffff, 0x7, 0x1000, 0x2, 0xa7bf, 0x7, 0x2, 0x8, 0x1, 0x0, 0x1, 0x628, 0x6, 0xb5, 0x5, 0x4, 0xfffffffe, 0x30000000, 0x7, 0x3, 0x200, 0x1, 0x6, 0x5, 0x5, 0x1000, 0x5, 0x0, 0x2, 0x7, 0xd29, 0x9, 0x0, 0x0, 0x1, 0xfffffff1, 0x47ca, 0x8, 0x613, 0xf3, 0x7, 0x1, 0x6, 0x8c5b, 0xd, 0xfc73, 0x3, 0x8, 0x8, 0x6, 0x8, 0xe15, 0x2, 0x8, 0x9, 0x80000001, 0xb8a, 0x2, 0x7, 0x6, 0xf18c, 0x6, 0x2, 0x0, 0x670c8fef, 0x2, 0x8, 0x5, 0xffffffff, 0x7ff, 0x1, 0x9, 0x0, 0x3, 0x200, 0x200, 0x401, 0x3, 0x7ff, 0x564b, 0x5, 0x6, 0xffffff7f, 0x8000, 0xfff, 0xfffffffc, 0x8000, 0x8000, 0x10, 0x1, 0x86d, 0x0, 0x2, 0xe, 0x0, 0x3, 0x5, 0x10, 0x1ff, 0x800, 0x4, 0x1ce2e2b, 0x5, 0x5, 0x9, 0x5, 0x0, 0x9, 0xba, 0x5, 0x84, 0xf7, 0x2, 0x551, 0x8001, 0xefe, 0xb242befe, 0x8, 0x4, 0x4, 0x7, 0x8b3, 0x2, 0x8001, 0x1, 0x5, 0x0, 0x9, 0x5, 0x1, 0xb, 0x8, 0x4, 0x7, 0x80000000, 0xdb2, 0x10, 0x6, 0x401, 0x2, 0x4, 0x80000000, 0xff, 0x0, 0x7, 0x4, 0xffffffff, 0x2, 0x6, 0x9, 0x1, 0x935, 0x80, 0xe6f, 0x2, 0x7, 0x0, 0x200, 0x2, 0x8, 0x5, 0x5, 0x7, 0x7, 0x8, 0x6, 0x9, 0x3, 0x1, 0xfffffff5, 0x3ff, 0x63c, 0xfffffffd, 0x7fff, 0x7, 0xca2, 0xa66, 0x9, 0x5, 0x0, 0x0, 0x2e6, 0x5, 0x5, 0x9, 0x697f, 0xfffffff9, 0x6, 0x8, 0x4, 0x5, 0xfffff8e8, 0x4, 0xf7a, 0x0, 0x9, 0x9, 0x1, 0x4, 0x47, 0x0, 0x57, 0x53, 0x2, 0x80, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x2, 0xffffffff, 0x3, 0x1000, 0x20, 0xe, 0x5, 0x4a, 0x7, 0x1, 0x7ff, 0x1, 0x40, 0x1, 0x9, 0x8000, 0x5, 0xd23f, 0x57c7, 0x7, 0x14, 0xa, 0x9, 0x1, 0x1, 0x7, 0x3, 0x80, 0x5, 0x4, 0x7fffffff, 0x5, 0x1e0, 0xf, 0xc3, 0x7, 0x60000, 0xb, 0x7, 0x8, 0x2, 0x4, 0x0, 0x3800, 0x8000, 0x0, 0x9, 0xbfa, 0x9, 0x9, 0xfffffffd, 0x4, 0x2, 0x4, 0x101, 0x959b, 0x3, 0x7, 0x80, 0xfffffff9, 0x8001, 0x2, 0x100, 0x1000, 0xfff, 0x80000000, 0x9, 0x0, 0x4, 0xf7, 0x7, 0x8, 0xb, 0x0, 0xfffffffe, 0x7c, 0x9, 0x4, 0x8a6, 0x800, 0x7, 0x4, 0x2, 0x8, 0xa, 0x1, 0x9, 0x7, 0x2, 0x6, 0x3, 0x1, 0xfffffffb, 0x800, 0x1, 0x4, 0x7, 0x0, 0x4, 0x41400a8b, 0x95, 0x3, 0x0, 0x46, 0x5, 0x4, 0x3ff, 0x7, 0x6, 0x80000, 0x0, 0x0, 0x911, 0xfffffffd, 0x24ba, 0x4, 0xffffffff, 0x5, 0x4, 0xfffffbff, 0x7, 0xa0b, 0xe8, 0x7, 0xa, 0x3, 0x10000, 0x401, 0xffff8000, 0x1, 0x7, 0x7, 0x3ff, 0x81, 0x7, 0x3, 0xa9, 0x1, 0x8000, 0x8, 0x6, 0x100, 0x4800, 0x80, 0xffff1416, 0x100, 0x4, 0x5, 0x8000, 0x9, 0x7, 0xffffffff, 0x80, 0x2, 0x0, 0x7ff, 0x7, 0x9, 0x8, 0x7fffffff, 0x40, 0x7, 0x0, 0xffffff01, 0x4, 0x7, 0x3, 0xd, 0x8, 0x3, 0x7, 0xaed8, 0xa, 0x7ff, 0x400, 0x2ee1, 0x6, 0x6, 0x10, 0x2, 0x436, 0xfff, 0x8, 0x9, 0x90, 0x8, 0xfffffff7, 0x1, 0x3, 0x1ff, 0x8, 0x7, 0x2, 0x4, 0x1, 0x4, 0xc98, 0x7, 0x6, 0x5, 0x7fff, 0x5, 0x5, 0xe4a, 0x3, 0xff, 0x2, 0x6, 0x9978, 0x8, 0x8, 0x8, 0x7ff, 0x1000, 0xffffffff, 0x6bf3, 0x7677, 0x6, 0x5, 0x10000, 0x3d5c43ba, 0x0, 0x2, 0xff, 0x3200000, 0x6, 0x2e8c, 0x8, 0x9, 0x6, 0x0, 0xce6, 0x1, 0xffff, 0xf, 0xa, 0x3, 0x3, 0x10000, 0x4, 0x8, 0x0, 0x1, 0x4, 0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x9, 0x5e1, 0x2, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa3, 0x7, 0x14581c03, 0x8, 0x81, {0x6, 0x1, 0x2, 0x3ff, 0x2, 0x7}, {0x3, 0xf594c3698cf796cf, 0x7, 0xfff, 0x7, 0x4}, 0x4, 0x2, 0xf23}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80}}]}, 0x880}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x13, 0x20, &(0x7f0000000680)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000080000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600"], &(0x7f0000000500)='GPL\x00', 0x4, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x21, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f00000005c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x6, 0x9, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001ac0)=[{0x5, 0x4, 0x9, 0xc}, {0x3, 0x4}], 0x10, 0x3}, 0x94) 876.064243ms ago: executing program 5 (id=4808): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x2022, 0x0, 0xffffffffffffffff, 0x10001}, 0x50) (fail_nth: 2) 875.776783ms ago: executing program 5 (id=4809): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) setpgid(0x0, 0x0) setregid(0x0, 0x0) 798.182795ms ago: executing program 5 (id=4810): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x2022, 0x0, 0xffffffffffffffff, 0x10001}, 0x50) 761.143436ms ago: executing program 5 (id=4811): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) creat(0x0, 0x194) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 745.941446ms ago: executing program 5 (id=4812): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000880), 0x10, 0x2800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000080), 0x0}, 0x20) shutdown(r0, 0x0) 686.534187ms ago: executing program 6 (id=4813): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x700, 0xfdef) 681.331247ms ago: executing program 6 (id=4814): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003) pread64(r1, 0x0, 0x0, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x0, 0x187, &(0x7f0000001400)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 681.171217ms ago: executing program 5 (id=4815): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000001c80)={0x5, 0xd9a1, 0x9}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200000000000000000000000000012c03000000000000c910fff5"], 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x3, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x4) 589.198629ms ago: executing program 6 (id=4816): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) ioctl$RTC_UIE_ON(r2, 0x7003) close_range(r0, 0xffffffffffffffff, 0x0) 534.86894ms ago: executing program 2 (id=4817): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 311.239054ms ago: executing program 2 (id=4818): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x800010, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6e6f696e6c696e655f64656e7472792c70726a6a71756f74613d6163746976655f6c6f67733d342c6a71666d743d76667376312c6e6f696e6c696e655f646174612c6e6f5f686561702c636865636b706f696e743d64697361626c652c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c00ac19de274efe59cc5334a78992c33160f2bb29d00ec19e86b62e10e9d54427a6838f1aff0ce27327b707feafcce74234d4abe846a4a55fd26c5918e2ac7a6aa2fd027fd0b881927cefce65dd3d73b0b9185466a67b", @ANYRES32, @ANYRES8, @ANYRESHEX, @ANYRES8, @ANYRES16, @ANYRES64, @ANYRES64, @ANYBLOB="0bf43d1a2f75756c772cfe61273a33068a756a479dec645e42b8e9f6f254f2cb0d734f14ba02ccf8518ff861c63c96536536528bf26c4fc9ed44383f8b40cb42501b8344fee8218885738047b92122a30fc7ffae0e90c47b03283d2ab19687cf6de8afe5134392b97dc28283e299d1b9c3aeab09695b4a81c5d76c2766af3b721d9b05a73b19c16345d7820747441db612ef09e7b43c64824a68d23e349db2d9f27737c4fb36495a089bdb44bf29c149c49154595d0ed895fa5c44a2dfc1d48bf886", @ANYRES32, @ANYRESDEC, @ANYRES8], 0x21, 0x552d, &(0x7f0000000a00)="$eJzs3EtvG1UUAODjpOmbEiEW7DqoQkqk2qrTh2BXoBUP0aoqsGAFju1abmxPFDtOyIoFS8SCf4JAYsWS38CCNTvEAsQOCeS5E2gKlZDixKT5Pml85t65c+beURTpzFgO4NhazH77pRIX4kxEzEfE+Yhiv1JuhZspvBARFyNi7pGtUvb/1XEyIs5GxIVJ8pSzUh764vL40vWf3/712+9PnTj35Tc/zG7VwKy9FBH99bS/1U8x76T4sOxvjLtF7F8blzEd6K+V7TzFrfZqkWGrsTuuUcSrnTQ+X98cTuKDXqM5iZ3ug6J/fZAuOBx3dvMUJzxsbBTtVnu1iN1hXsTOTprX9k7637YzHKU8rTLfx0X6GI12Y+pvb7fTetbXitgcjMr+lDdvtbcncVzG8nLRzHutYh6r+7nT/2svvtMdbG5n4/bGsJsPsuu1+su1+o1qfSNvtUfta9VGv3XjWrbU6U2GVUftRv9mJ887vXatmfeXs6VOs1mt17OlW+3VbmOQ1eu1q7Ur1evL5d7l7I2772e9VrY0ia91B5ujbm+YPcg3snTGcrZSu/rKcnapnr1751527/7t23fuvffhrQ/uvnrnrdfLQf+YVra0cmVlpVq/Ul2pL+/vBhyp9X9aTnqK64d9qcx6AgBHj/ofmIWDq/837kccfP0f6v+pOFL173Gv/w9g/bAv6n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGPrx4Wv3ix2FlP7XNn/TNn1XNmuRMRcRPzxL+bj5J6c82WehSeMX3hsDt9VosgwucapcjsbETfL7fdnD/ouAAAAwNPr608ufp6q9fSxOOsJcZjSQ5u58x9NKV8lIhYWf5pStrnJx/NTSlb8fZ+I7SllKx5gnZ5SsvTI7cS0sv0n83vC6UdCJYW5x8+Y2moBAICZ2VsJHG4VAgAAwGH67IlH1g51HhyySuy+ytx9F1x88/7vl31nUturPwAAADi6KrOeAAAAAHDgivrf7/8BAADA0y39/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+ycy+5aQNxHID/NrjQl4qq7nuV7uAYPUKXXVYcoJfgCOQKuQBnILscIYIIj4NCRB7EY6xE3yfZgy3zmxkei5mRBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLV9VydvHv5/+2OZttO3l6AwAAAByzrpaz+sUkXX9u7n9tbn1vrouIKCPi2Nh9EB8OMgdNTvXI89WDNlxG1Am7OkbN8SkifqVjG9+6/hQAAADgXRruTqv5YppG6+k06btVtHbCd5gmbcovvzNVXURENbnOlFbu8n5kCqt/38P4mymtnsAaZwpLU27DXGkvUv/d97N243tFkYry6fdn6zsAAHBGg4PivKMQAAAAzulP3w2gCx+ffaKIu6XM/VLgKBXjgwiLfQAAAPB2FX03AAAAAOhcPf4/Zf+/6Gf/v7ix/x8AAAC8Wtr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC6tq+VsNV9M2+Zstu3k6Q0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7Ny/b9xUHADwZ/t8/QGII6AbghBIDLDQ67W0dEMMoIiBPwEpSq8l9MqPNgOtKqQsbChzFwQjQkigsPUfYOqG1EpdytbhhiKxsByyz845TSUuRLEvyecjPb/vOY7f99lSlK+fEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR6bxon2aYzieNi373Ht1ay/v4TfebOxoPFrGVxVGfSB8Mr1Q9Rt7lEAAAAODqSsr4PITxMN5eyPu7k9X9aHpPV/N8/N4nLev7Jur/sy9o/a7/9+uilrYE6k3Gyk15aHQ5O70yltX+znG/P/+cRrfzK589ekvyGxB+uvzhK8+sZfXv37vvtPDxWR7YAwP9xquyLoPx9KOv7TSYGwJHRqhTeZf2fdJrNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAOo/XwTBlHIYTF1jTO3H98a+Vp/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8GkJoavR3i+lf+XiGg0No5PrsV/DPeDze1Xcdbz7nPQVxcbPnJZ+DETT4QwkAgEMpLVpW1z9MN5eyfdFCCOMfttf/b1TiMGP9/+iT8/eqY1Xr/35tM5x/vbWrX/Su37j51urV5cuDy4PP3j7Tf6d/9sK5cxd6+bOSnicmAAAA7E27aNX6P17Yuf5/shKHGev/L7/rfz0d6Y98q/7fabro13QmAAAAR9sLr/39V/SU/VG7Hb5aXlu71p9stz6fmWwbSHXXjhWtWv8nC01nBQAAANRhtB5tW/+/WInDjOv/z/748s/VcyYhhBPF+v+plc+HF+ubzlyr48+Jm54jAAAAzTpRtOr6f5q//x9vvfIQhxDefH0SF/8GcKb6P/ngm5+qYyWV9//P1jfFuRR3J9cj77shtLrbvvx7Y4kBAABwKB0vWlbs/5luLn36y8mP2t7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbvwEAAP//E41CoA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xa, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 287.689845ms ago: executing program 6 (id=4819): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 173.640557ms ago: executing program 3 (id=4820): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) setpgid(0x0, 0x0) setregid(0x0, 0x0) 0s ago: executing program 2 (id=4821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): veth0_to_batadv: link becomes ready [ 848.268059][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 848.277139][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 848.303573][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 848.311913][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 848.347859][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 848.631517][T13715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 848.655798][T13715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 848.696889][T13715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 848.710498][T13715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 849.212601][ T4168] tipc: Left network mode [ 849.242606][T14691] input: syz1 as /devices/virtual/input/input236 [ 851.962989][T14692] udevd[14692]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 852.725757][T14706] udevd[14706]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 853.191710][T14742] input: syz1 as /devices/virtual/input/input237 [ 853.394458][T14754] FAULT_INJECTION: forcing a failure. [ 853.394458][T14754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.407617][T14754] CPU: 1 PID: 14754 Comm: syz.5.4243 Tainted: G W syzkaller #0 [ 853.416564][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.427063][T14754] Call Trace: [ 853.430352][T14754] [ 853.433293][T14754] __dump_stack+0x21/0x24 [ 853.437621][T14754] dump_stack_lvl+0xee/0x150 [ 853.442206][T14754] ? __cfi_dump_stack_lvl+0x8/0x8 [ 853.447230][T14754] ? __local_bh_enable_ip+0x58/0x80 [ 853.452431][T14754] dump_stack+0x15/0x24 [ 853.456580][T14754] should_fail_ex+0x3d4/0x520 [ 853.461260][T14754] should_fail+0xb/0x10 [ 853.465417][T14754] should_fail_usercopy+0x1a/0x20 [ 853.470538][T14754] _copy_from_user+0x1e/0xc0 [ 853.475272][T14754] copy_from_sockptr+0x59/0x70 [ 853.480057][T14754] sk_setsockopt+0x7cc/0x2590 [ 853.484922][T14754] ? __cfi_sk_setsockopt+0x10/0x10 [ 853.490170][T14754] ? preempt_schedule_irq+0xbb/0x110 [ 853.495632][T14754] ? selinux_socket_setsockopt+0x21c/0x300 [ 853.501443][T14754] ? sysvec_reschedule_ipi+0x78/0x80 [ 853.506748][T14754] ? __fget_files+0x2d5/0x330 [ 853.511432][T14754] sock_setsockopt+0x5a/0x70 [ 853.516031][T14754] __sys_setsockopt+0x270/0x4e0 [ 853.520893][T14754] ? __cfi___sys_setsockopt+0x10/0x10 [ 853.526277][T14754] ? ksys_write+0x1eb/0x240 [ 853.530815][T14754] ? __kasan_check_write+0x14/0x20 [ 853.535958][T14754] ? fpregs_restore_userregs+0x128/0x260 [ 853.541610][T14754] __x64_sys_setsockopt+0xbf/0xd0 [ 853.546734][T14754] x64_sys_call+0x124/0x9a0 [ 853.551430][T14754] do_syscall_64+0x4c/0xa0 [ 853.555866][T14754] ? clear_bhb_loop+0x30/0x80 [ 853.560549][T14754] ? clear_bhb_loop+0x30/0x80 [ 853.565235][T14754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.571128][T14754] RIP: 0033:0x7f0338d8ebe9 [ 853.575633][T14754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.595327][T14754] RSP: 002b:00007f0339ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 853.603750][T14754] RAX: ffffffffffffffda RBX: 00007f0338fc6180 RCX: 00007f0338d8ebe9 [ 853.611836][T14754] RDX: 0000000000000032 RSI: 0000000000000001 RDI: 000000000000000a [ 853.619810][T14754] RBP: 00007f0339ca8090 R08: 0000000000000004 R09: 0000000000000000 [ 853.627786][T14754] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 853.635766][T14754] R13: 00007f0338fc6218 R14: 00007f0338fc6180 R15: 00007fffb0177a58 [ 853.643746][T14754] [ 853.713211][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 853.741127][ T4168] bridge0: port 3(gretap0) entered disabled state [ 853.790588][ T4168] bridge0: port 1(gretap0) entered disabled state [ 853.859157][T14758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2076 sclass=netlink_route_socket pid=14758 comm=syz.3.4246 [ 853.886000][ T4168] device gretap0 left promiscuous mode [ 853.912605][ T4168] bridge0: port 3(gretap0) entered disabled state [ 853.954844][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.993407][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 854.061703][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 854.078309][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 854.086617][ T24] usb 3-1: SerialNumber: syz [ 854.221966][ T4168] device bridge_slave_1 left promiscuous mode [ 854.243918][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.261845][ T4168] device bridge_slave_0 left promiscuous mode [ 854.271562][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.804606][ T4168] device veth1_macvtap left promiscuous mode [ 854.866492][ T4168] device veth1_macvtap left promiscuous mode [ 855.244652][T14770] x_tables: duplicate underflow at hook 4 [ 855.353529][ T24] usb 3-1: 0:2 : does not exist [ 855.368309][ T24] usb 3-1: USB disconnect, device number 35 [ 855.596561][T14692] udevd[14692]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 855.834136][T14788] input: syz1 as /devices/virtual/input/input238 [ 855.928415][ T28] audit: type=1400 audit(1757265825.578:1120): avc: denied { append } for pid=14793 comm="syz.6.4258" name="pfkey" dev="proc" ino=4026533433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 856.049614][T14706] udevd[14706]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 856.693193][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 856.971132][T14814] overlayfs: missing 'workdir' [ 857.064317][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.075541][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 857.084849][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.093450][ T24] usb 4-1: config 0 descriptor?? [ 857.301412][T14823] FAULT_INJECTION: forcing a failure. [ 857.301412][T14823] name failslab, interval 1, probability 0, space 0, times 0 [ 857.314119][T14823] CPU: 1 PID: 14823 Comm: syz.5.4266 Tainted: G W syzkaller #0 [ 857.323056][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 857.333111][T14823] Call Trace: [ 857.336390][T14823] [ 857.339320][T14823] __dump_stack+0x21/0x24 [ 857.343649][T14823] dump_stack_lvl+0xee/0x150 [ 857.348245][T14823] ? __cfi_dump_stack_lvl+0x8/0x8 [ 857.353325][T14823] ? sysvec_reschedule_ipi+0x78/0x80 [ 857.358699][T14823] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 857.364505][T14823] dump_stack+0x15/0x24 [ 857.368662][T14823] should_fail_ex+0x3d4/0x520 [ 857.373343][T14823] __should_failslab+0xac/0xf0 [ 857.378123][T14823] ? __get_vm_area_node+0x12c/0x360 [ 857.383518][T14823] should_failslab+0x9/0x20 [ 857.388061][T14823] __kmem_cache_alloc_node+0x3d/0x2c0 [ 857.393625][T14823] ? __get_vm_area_node+0x12c/0x360 [ 857.398842][T14823] kmalloc_node_trace+0x26/0xb0 [ 857.403712][T14823] __get_vm_area_node+0x12c/0x360 [ 857.408752][T14823] __vmalloc_node_range+0x326/0x13d0 [ 857.414041][T14823] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 857.419684][T14823] ? __schedule+0xb8f/0x14e0 [ 857.424369][T14823] ? release_firmware_map_entry+0x194/0x194 [ 857.430383][T14823] ? __cfi___vmalloc_node_range+0x10/0x10 [ 857.436210][T14823] ? preempt_schedule_irq+0xbb/0x110 [ 857.441479][T14823] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 857.447190][T14823] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 857.452766][T14823] __vmalloc+0x79/0x90 [ 857.456850][T14823] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 857.462504][T14823] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 857.467976][T14823] bpf_prog_alloc+0x22/0x1c0 [ 857.472909][T14823] bpf_prog_load+0x7c6/0x15a0 [ 857.477576][T14823] ? map_freeze+0x390/0x390 [ 857.482066][T14823] ? __sys_bpf+0x2ed/0x780 [ 857.486469][T14823] ? __sanitizer_cov_trace_switch+0x5c/0xe0 [ 857.492351][T14823] __sys_bpf+0x504/0x780 [ 857.496581][T14823] ? bpf_link_show_fdinfo+0x320/0x320 [ 857.501950][T14823] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 857.507583][T14823] ? fpregs_restore_userregs+0x128/0x260 [ 857.513210][T14823] __x64_sys_bpf+0x7c/0x90 [ 857.517631][T14823] x64_sys_call+0x488/0x9a0 [ 857.522116][T14823] do_syscall_64+0x4c/0xa0 [ 857.526511][T14823] ? clear_bhb_loop+0x30/0x80 [ 857.531173][T14823] ? clear_bhb_loop+0x30/0x80 [ 857.535846][T14823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.541811][T14823] RIP: 0033:0x7f0338d8ebe9 [ 857.546212][T14823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.565805][T14823] RSP: 002b:00007f0339ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 857.574209][T14823] RAX: ffffffffffffffda RBX: 00007f0338fc6180 RCX: 00007f0338d8ebe9 [ 857.582265][T14823] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 857.590323][T14823] RBP: 00007f0339ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 857.598283][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.606322][T14823] R13: 00007f0338fc6218 R14: 00007f0338fc6180 R15: 00007fffb0177a58 [ 857.614465][T14823] [ 857.648945][T14823] syz.5.4266: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 857.662317][T14827] input: syz1 as /devices/virtual/input/input239 [ 857.665236][T14823] CPU: 1 PID: 14823 Comm: syz.5.4266 Tainted: G W syzkaller #0 [ 857.680542][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 857.690603][T14823] Call Trace: [ 857.693883][T14823] [ 857.696814][T14823] __dump_stack+0x21/0x24 [ 857.701146][T14823] dump_stack_lvl+0xee/0x150 [ 857.705750][T14823] ? __cfi_dump_stack_lvl+0x8/0x8 [ 857.710784][T14823] ? pr_cont_kernfs_name+0x133/0x160 [ 857.716080][T14823] dump_stack+0x15/0x24 [ 857.720238][T14823] warn_alloc+0x1b0/0x1d0 [ 857.724603][T14823] ? should_failslab+0x9/0x20 [ 857.729281][T14823] ? __cfi_warn_alloc+0x10/0x10 [ 857.734134][T14823] ? kmalloc_node_trace+0x3d/0xb0 [ 857.739168][T14823] ? __get_vm_area_node+0x353/0x360 [ 857.744376][T14823] __vmalloc_node_range+0x34b/0x13d0 [ 857.749655][T14823] ? __schedule+0xb8f/0x14e0 [ 857.754249][T14823] ? release_firmware_map_entry+0x194/0x194 [ 857.760143][T14823] ? __cfi___vmalloc_node_range+0x10/0x10 [ 857.765863][T14823] ? preempt_schedule_irq+0xbb/0x110 [ 857.771249][T14823] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 857.776976][T14823] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 857.782574][T14823] __vmalloc+0x79/0x90 [ 857.786914][T14823] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 857.792552][T14823] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 857.798021][T14823] bpf_prog_alloc+0x22/0x1c0 [ 857.802621][T14823] bpf_prog_load+0x7c6/0x15a0 [ 857.808007][T14823] ? map_freeze+0x390/0x390 [ 857.812517][T14823] ? __sys_bpf+0x2ed/0x780 [ 857.817014][T14823] ? __sanitizer_cov_trace_switch+0x5c/0xe0 [ 857.822924][T14823] __sys_bpf+0x504/0x780 [ 857.827187][T14823] ? bpf_link_show_fdinfo+0x320/0x320 [ 857.832563][T14823] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 857.838205][T14823] ? fpregs_restore_userregs+0x128/0x260 [ 857.844103][T14823] __x64_sys_bpf+0x7c/0x90 [ 857.848612][T14823] x64_sys_call+0x488/0x9a0 [ 857.853204][T14823] do_syscall_64+0x4c/0xa0 [ 857.857767][T14823] ? clear_bhb_loop+0x30/0x80 [ 857.862441][T14823] ? clear_bhb_loop+0x30/0x80 [ 857.867212][T14823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.873106][T14823] RIP: 0033:0x7f0338d8ebe9 [ 857.877689][T14823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.897480][T14823] RSP: 002b:00007f0339ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 857.905915][T14823] RAX: ffffffffffffffda RBX: 00007f0338fc6180 RCX: 00007f0338d8ebe9 [ 857.914334][T14823] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 857.922785][T14823] RBP: 00007f0339ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 857.931113][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.939321][T14823] R13: 00007f0338fc6218 R14: 00007f0338fc6180 R15: 00007fffb0177a58 [ 857.947308][T14823] [ 857.950393][T14823] Mem-Info: [ 857.953621][T14823] active_anon:29650 inactive_anon:516 isolated_anon:0 [ 857.953621][T14823] active_file:15893 inactive_file:11841 isolated_file:0 [ 857.953621][T14823] unevictable:16874 dirty:275 writeback:0 [ 857.953621][T14823] slab_reclaimable:9915 slab_unreclaimable:76789 [ 857.953621][T14823] mapped:53209 shmem:11632 pagetables:773 [ 857.953621][T14823] sec_pagetables:0 bounce:0 [ 857.953621][T14823] kernel_misc_reclaimable:0 [ 857.953621][T14823] free:1364144 free_pcp:7835 free_cma:0 [ 857.999738][T14823] Node 0 active_anon:118500kB inactive_anon:2064kB active_file:63572kB inactive_file:47364kB unevictable:67496kB isolated(anon):0kB isolated(file):0kB mapped:212836kB dirty:1100kB writeback:0kB shmem:46528kB shmem_thp: 2048kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12320kB pagetables:3092kB sec_pagetables:0kB all_unreclaimable? no [ 858.034054][T14823] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974204kB mlocked:0kB bounce:0kB free_pcp:5672kB local_pcp:5612kB free_cma:0kB [ 858.062443][T14823] lowmem_reserve[]: 0 3932 3932 3932 [ 858.068182][T14823] Normal free:2488044kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:118600kB inactive_anon:2064kB active_file:63572kB inactive_file:47364kB unevictable:67496kB writepending:1100kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:25540kB local_pcp:14560kB free_cma:0kB [ 858.098907][T14823] lowmem_reserve[]: 0 0 0 0 [ 858.103557][T14823] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 858.119140][T14823] Normal: 3015*4kB (UE) 2856*8kB (UME) 893*16kB (UME) 976*32kB (UME) 593*64kB (UME) 333*128kB (UME) 116*256kB (UME) 121*512kB (UME) 219*1024kB (UM) 28*2048kB (UM) 477*4096kB (UME) = 2488044kB [ 858.138488][T14823] 56753 total pagecache pages [ 858.143278][T14823] 517 pages in swap cache [ 858.147607][T14823] Free swap = 122624kB [ 858.151766][T14823] Total swap = 124996kB [ 858.156022][T14823] 2097051 pages RAM [ 858.159815][T14823] 0 pages HighMem/MovableOnly [ 858.164540][T14823] 346836 pages reserved [ 858.168687][T14823] 0 pages cma reserved [ 858.393016][ T24] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 858.409360][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0016/input/input240 [ 858.638327][ T24] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 858.788953][T14846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4271'. [ 858.944943][T14776] udevd[14776]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 859.546729][T14776] udevd[14776]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 860.351530][T14692] udevd[14692]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 860.418437][ T8825] usb 4-1: USB disconnect, device number 5 [ 862.045880][T14897] FAULT_INJECTION: forcing a failure. [ 862.045880][T14897] name failslab, interval 1, probability 0, space 0, times 0 [ 862.071237][T14897] CPU: 0 PID: 14897 Comm: syz.3.4287 Tainted: G W syzkaller #0 [ 862.080552][T14897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 862.090709][T14897] Call Trace: [ 862.093999][T14897] [ 862.096916][T14897] __dump_stack+0x21/0x24 [ 862.101234][T14897] dump_stack_lvl+0xee/0x150 [ 862.105827][T14897] ? __cfi_dump_stack_lvl+0x8/0x8 [ 862.110941][T14897] ? number+0xd1d/0xf70 [ 862.115105][T14897] dump_stack+0x15/0x24 [ 862.119514][T14897] should_fail_ex+0x3d4/0x520 [ 862.124257][T14897] __should_failslab+0xac/0xf0 [ 862.129011][T14897] ? kvasprintf_const+0xf2/0x240 [ 862.133978][T14900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.134170][T14897] should_failslab+0x9/0x20 [ 862.144144][T14900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.146991][T14897] __kmem_cache_alloc_node+0x3d/0x2c0 [ 862.160048][T14897] ? vsnprintf+0x1896/0x1960 [ 862.162422][T14900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.164650][T14897] ? kvasprintf_const+0xf2/0x240 [ 862.164679][T14897] __kmalloc_node_track_caller+0xa0/0x1e0 [ 862.164702][T14897] kvasprintf+0xd9/0x180 [ 862.164719][T14897] ? __kasan_kmalloc+0x95/0xb0 [ 862.174023][T14900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.178124][T14897] ? kmalloc_trace+0x40/0xb0 [ 862.205194][T14897] ? serport_ldisc_read+0x11b/0x540 [ 862.210410][T14897] ? __cfi_kvasprintf+0x10/0x10 [ 862.215253][T14897] ? x64_sys_call+0x3bd/0x9a0 [ 862.219998][T14897] ? format_decode+0x1bb/0x1520 [ 862.225023][T14897] kvasprintf_const+0xf2/0x240 [ 862.229870][T14897] kobject_set_name_vargs+0x61/0x110 [ 862.235144][T14897] dev_set_name+0xd1/0x120 [ 862.239547][T14897] ? memset+0x35/0x40 [ 862.243564][T14897] ? __serio_register_port+0x159/0x300 [ 862.249022][T14897] ? __cfi_dev_set_name+0x10/0x10 [ 862.254032][T14897] ? pm_runtime_init+0x27d/0x370 [ 862.259045][T14897] ? device_initialize+0x1e1/0x3a0 [ 862.264246][T14897] __serio_register_port+0x17a/0x300 [ 862.269512][T14897] serport_ldisc_read+0x346/0x540 [ 862.274607][T14897] ? __cfi_ldsem_down_read+0x10/0x10 [ 862.280055][T14897] ? __cfi_serport_ldisc_read+0x10/0x10 [ 862.286215][T14897] ? memset+0x35/0x40 [ 862.290195][T14897] ? __fsnotify_parent+0x614/0x6e0 [ 862.295347][T14897] tty_read+0x271/0x560 [ 862.299607][T14897] ? __cfi_tty_read+0x10/0x10 [ 862.304895][T14897] ? avc_policy_seqno+0x1b/0x70 [ 862.309803][T14897] ? fsnotify_perm+0x3e9/0x5b0 [ 862.314798][T14897] do_iter_read+0x662/0xb30 [ 862.319361][T14897] ? _copy_from_user+0x8f/0xc0 [ 862.324122][T14897] ? iovec_from_user+0x2a2/0x2e0 [ 862.329061][T14897] ? vfs_iter_read+0xa0/0xa0 [ 862.333648][T14897] ? import_iovec+0x7c/0xb0 [ 862.338143][T14897] do_readv+0x22e/0x3e0 [ 862.342306][T14897] ? generic_file_rw_checks+0x2a0/0x2a0 [ 862.347940][T14897] ? __kasan_check_write+0x14/0x20 [ 862.353053][T14897] ? fput+0x154/0x1a0 [ 862.357027][T14897] ? debug_smp_processor_id+0x17/0x20 [ 862.362389][T14897] __x64_sys_readv+0x7d/0x90 [ 862.366961][T14897] x64_sys_call+0x3bd/0x9a0 [ 862.371448][T14897] do_syscall_64+0x4c/0xa0 [ 862.375853][T14897] ? clear_bhb_loop+0x30/0x80 [ 862.380570][T14897] ? clear_bhb_loop+0x30/0x80 [ 862.385317][T14897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.391530][T14897] RIP: 0033:0x7f42e538ebe9 [ 862.395936][T14897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.415531][T14897] RSP: 002b:00007f42e61d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 862.423935][T14897] RAX: ffffffffffffffda RBX: 00007f42e55c5fa0 RCX: 00007f42e538ebe9 [ 862.431910][T14897] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000003 [ 862.439875][T14897] RBP: 00007f42e61d6090 R08: 0000000000000000 R09: 0000000000000000 [ 862.447830][T14897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.455869][T14897] R13: 00007f42e55c6038 R14: 00007f42e55c5fa0 R15: 00007ffd44de2558 [ 862.463851][T14897] [ 862.493950][ T695] serio (null): device_add() failed for ttyS3/serio0 (Serial port), error: -22 [ 862.503065][T14897] serio: Serial port ttyS3 [ 863.994259][T14692] udevd[14692]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 864.240507][T14922] input: syz1 as /devices/virtual/input/input242 [ 869.629739][T14977] FAULT_INJECTION: forcing a failure. [ 869.629739][T14977] name failslab, interval 1, probability 0, space 0, times 0 [ 869.644976][T14977] CPU: 1 PID: 14977 Comm: syz.3.4308 Tainted: G W syzkaller #0 [ 869.654394][T14977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 869.664487][T14977] Call Trace: [ 869.667775][T14977] [ 869.670701][T14977] __dump_stack+0x21/0x24 [ 869.675038][T14977] dump_stack_lvl+0xee/0x150 [ 869.679622][T14977] ? __cfi_dump_stack_lvl+0x8/0x8 [ 869.684649][T14977] dump_stack+0x15/0x24 [ 869.688799][T14977] should_fail_ex+0x3d4/0x520 [ 869.693476][T14977] ? vm_area_dup+0x65/0x280 [ 869.698004][T14977] __should_failslab+0xac/0xf0 [ 869.703472][T14977] should_failslab+0x9/0x20 [ 869.709852][T14977] kmem_cache_alloc+0x3b/0x330 [ 869.714683][T14977] vm_area_dup+0x65/0x280 [ 869.719122][T14977] __split_vma+0x1d2/0x930 [ 869.723559][T14977] ? file_has_perm+0x4f4/0x640 [ 869.728404][T14977] split_vma+0x7c/0xd0 [ 869.732546][T14977] mprotect_fixup+0x4b3/0x930 [ 869.737386][T14977] ? __cfi_mprotect_fixup+0x10/0x10 [ 869.742732][T14977] ? security_file_mprotect+0x95/0xc0 [ 869.748401][T14977] do_mprotect_pkey+0x75f/0xa80 [ 869.753514][T14977] ? __cfi_vfs_write+0x10/0x10 [ 869.758340][T14977] ? prot_none_test+0x10/0x10 [ 869.763192][T14977] ? ksys_write+0x1eb/0x240 [ 869.767887][T14977] ? debug_smp_processor_id+0x17/0x20 [ 869.773245][T14977] __x64_sys_mprotect+0x80/0x90 [ 869.778085][T14977] x64_sys_call+0x997/0x9a0 [ 869.782566][T14977] do_syscall_64+0x4c/0xa0 [ 869.786959][T14977] ? clear_bhb_loop+0x30/0x80 [ 869.791622][T14977] ? clear_bhb_loop+0x30/0x80 [ 869.796316][T14977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.802212][T14977] RIP: 0033:0x7f42e538ebe9 [ 869.806606][T14977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.826280][T14977] RSP: 002b:00007f42e61b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 869.834681][T14977] RAX: ffffffffffffffda RBX: 00007f42e55c6090 RCX: 00007f42e538ebe9 [ 869.842639][T14977] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000002000 [ 869.850684][T14977] RBP: 00007f42e61b5090 R08: 0000000000000000 R09: 0000000000000000 [ 869.858817][T14977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.866916][T14977] R13: 00007f42e55c6128 R14: 00007f42e55c6090 R15: 00007ffd44de2558 [ 869.874906][T14977] [ 869.997229][T14998] FAULT_INJECTION: forcing a failure. [ 869.997229][T14998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.011179][T14998] CPU: 1 PID: 14998 Comm: syz.6.4316 Tainted: G W syzkaller #0 [ 870.020374][T14998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 870.030518][T14998] Call Trace: [ 870.033883][T14998] [ 870.037063][T14998] __dump_stack+0x21/0x24 [ 870.041576][T14998] dump_stack_lvl+0xee/0x150 [ 870.046246][T14998] ? __cfi_dump_stack_lvl+0x8/0x8 [ 870.051363][T14998] dump_stack+0x15/0x24 [ 870.055500][T14998] should_fail_ex+0x3d4/0x520 [ 870.060260][T14998] should_fail+0xb/0x10 [ 870.064471][T14998] should_fail_usercopy+0x1a/0x20 [ 870.069515][T14998] _copy_from_user+0x1e/0xc0 [ 870.074125][T14998] __se_sys_memfd_create+0x131/0x3b0 [ 870.079438][T14998] __x64_sys_memfd_create+0x5b/0x70 [ 870.084731][T14998] x64_sys_call+0x235/0x9a0 [ 870.089250][T14998] do_syscall_64+0x4c/0xa0 [ 870.093667][T14998] ? clear_bhb_loop+0x30/0x80 [ 870.098346][T14998] ? clear_bhb_loop+0x30/0x80 [ 870.103026][T14998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.109042][T14998] RIP: 0033:0x7f36aa98ebe9 [ 870.113458][T14998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.133151][T14998] RSP: 002b:00007f36ab888e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 870.141582][T14998] RAX: ffffffffffffffda RBX: 00000000000005d8 RCX: 00007f36aa98ebe9 [ 870.150014][T14998] RDX: 00007f36ab888ef0 RSI: 0000000000000000 RDI: 00007f36aaa127e8 [ 870.158083][T14998] RBP: 0000200000000c00 R08: 00007f36ab888bb7 R09: 00007f36ab888e40 [ 870.166162][T14998] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 870.174316][T14998] R13: 00007f36ab888ef0 R14: 00007f36ab888eb0 R15: 0000200000000740 [ 870.182394][T14998] [ 870.697068][T15014] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4320'. [ 870.818407][T15018] FAULT_INJECTION: forcing a failure. [ 870.818407][T15018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.831830][T15018] CPU: 1 PID: 15018 Comm: syz.3.4321 Tainted: G W syzkaller #0 [ 870.840797][T15018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 870.850990][T15018] Call Trace: [ 870.854276][T15018] [ 870.857214][T15018] __dump_stack+0x21/0x24 [ 870.861545][T15018] dump_stack_lvl+0xee/0x150 [ 870.866133][T15018] ? __cfi_dump_stack_lvl+0x8/0x8 [ 870.871165][T15018] ? memcpy+0x56/0x70 [ 870.875148][T15018] dump_stack+0x15/0x24 [ 870.879393][T15018] should_fail_ex+0x3d4/0x520 [ 870.884171][T15018] should_fail+0xb/0x10 [ 870.888344][T15018] should_fail_usercopy+0x1a/0x20 [ 870.893380][T15018] strncpy_from_user+0x24/0x2d0 [ 870.898242][T15018] bpf_prog_load+0x1bb/0x15a0 [ 870.903005][T15018] ? map_freeze+0x390/0x390 [ 870.907506][T15018] ? selinux_bpf+0xc7/0xf0 [ 870.911923][T15018] ? security_bpf+0x93/0xb0 [ 870.916468][T15018] __sys_bpf+0x504/0x780 [ 870.920821][T15018] ? bpf_link_show_fdinfo+0x320/0x320 [ 870.926368][T15018] ? __cfi_ksys_write+0x10/0x10 [ 870.931228][T15018] ? debug_smp_processor_id+0x17/0x20 [ 870.936650][T15018] __x64_sys_bpf+0x7c/0x90 [ 870.941081][T15018] x64_sys_call+0x488/0x9a0 [ 870.945575][T15018] do_syscall_64+0x4c/0xa0 [ 870.949984][T15018] ? clear_bhb_loop+0x30/0x80 [ 870.954644][T15018] ? clear_bhb_loop+0x30/0x80 [ 870.959478][T15018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.965364][T15018] RIP: 0033:0x7f42e538ebe9 [ 870.969881][T15018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.989568][T15018] RSP: 002b:00007f42e61b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 870.997969][T15018] RAX: ffffffffffffffda RBX: 00007f42e55c6090 RCX: 00007f42e538ebe9 [ 871.005928][T15018] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 871.013892][T15018] RBP: 00007f42e61b5090 R08: 0000000000000000 R09: 0000000000000000 [ 871.021849][T15018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.029806][T15018] R13: 00007f42e55c6128 R14: 00007f42e55c6090 R15: 00007ffd44de2558 [ 871.037772][T15018] [ 872.763502][T15055] input: syz1 as /devices/virtual/input/input246 [ 876.376520][T15063] input: syz1 as /devices/virtual/input/input247 [ 877.011981][T14705] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 877.173199][T14705] usb 3-1: device descriptor read/64, error -71 [ 877.326148][T15085] cgroup: Bad value for 'name' [ 877.453291][T14705] usb 3-1: device descriptor read/64, error -71 [ 877.713190][ T336] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 877.733198][T14705] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 877.883267][T14705] usb 3-1: device descriptor read/64, error -71 [ 877.892579][T15100] netlink: 'syz.4.4344': attribute type 29 has an invalid length. [ 877.901208][T15100] netlink: 'syz.4.4344': attribute type 3 has an invalid length. [ 877.910831][T15100] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4344'. [ 878.023201][ T336] usb 4-1: Using ep0 maxpacket: 16 [ 878.029610][ T336] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.040603][ T336] usb 4-1: config 0 interface 0 has no altsetting 0 [ 878.047381][ T336] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 878.056486][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.065013][ T336] usb 4-1: config 0 descriptor?? [ 878.163214][T14705] usb 3-1: device descriptor read/64, error -71 [ 878.283400][T14705] usb usb3-port1: attempt power cycle [ 878.340836][T15104] FAULT_INJECTION: forcing a failure. [ 878.340836][T15104] name failslab, interval 1, probability 0, space 0, times 0 [ 878.353803][T15104] CPU: 0 PID: 15104 Comm: syz.6.4345 Tainted: G W syzkaller #0 [ 878.362746][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 878.372804][T15104] Call Trace: [ 878.376108][T15104] [ 878.379135][T15104] __dump_stack+0x21/0x24 [ 878.383478][T15104] dump_stack_lvl+0xee/0x150 [ 878.388064][T15104] ? __cfi_dump_stack_lvl+0x8/0x8 [ 878.393190][T15104] dump_stack+0x15/0x24 [ 878.397362][T15104] should_fail_ex+0x3d4/0x520 [ 878.402160][T15104] ? security_file_alloc+0x33/0x130 [ 878.407473][T15104] __should_failslab+0xac/0xf0 [ 878.412253][T15104] should_failslab+0x9/0x20 [ 878.416756][T15104] kmem_cache_alloc+0x3b/0x330 [ 878.421539][T15104] ? __alloc_file+0x28/0x2a0 [ 878.426141][T15104] security_file_alloc+0x33/0x130 [ 878.431179][T15104] __alloc_file+0xb5/0x2a0 [ 878.435595][T15104] alloc_empty_file+0x97/0x180 [ 878.440356][T15104] path_openat+0xf4/0x2f50 [ 878.444779][T15104] ? kasan_set_track+0x4b/0x70 [ 878.449539][T15104] ? kasan_save_alloc_info+0x25/0x30 [ 878.454832][T15104] ? __kasan_slab_alloc+0x72/0x80 [ 878.459916][T15104] ? kmem_cache_alloc+0x16e/0x330 [ 878.464946][T15104] ? getname_flags+0xb9/0x500 [ 878.469626][T15104] ? getname+0x19/0x20 [ 878.473703][T15104] ? do_sys_openat2+0xcb/0x7e0 [ 878.478463][T15104] ? __x64_sys_openat+0x136/0x160 [ 878.483486][T15104] ? x64_sys_call+0x783/0x9a0 [ 878.488170][T15104] ? do_syscall_64+0x4c/0xa0 [ 878.492758][T15104] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.498852][T15104] ? do_filp_open+0x3c0/0x3c0 [ 878.503713][T15104] do_filp_open+0x1c1/0x3c0 [ 878.508824][T15104] ? __cfi_do_filp_open+0x10/0x10 [ 878.513954][T15104] ? alloc_fd+0x4e6/0x590 [ 878.518484][T15104] do_sys_openat2+0x185/0x7e0 [ 878.523184][T15104] ? __kasan_check_write+0x14/0x20 [ 878.528416][T15104] ? do_sys_open+0xe0/0xe0 [ 878.532839][T15104] ? ksys_write+0x1eb/0x240 [ 878.537366][T15104] ? __cfi_ksys_write+0x10/0x10 [ 878.542419][T15104] __x64_sys_openat+0x136/0x160 [ 878.547554][T15104] x64_sys_call+0x783/0x9a0 [ 878.552059][T15104] do_syscall_64+0x4c/0xa0 [ 878.556480][T15104] ? clear_bhb_loop+0x30/0x80 [ 878.561177][T15104] ? clear_bhb_loop+0x30/0x80 [ 878.565854][T15104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.571852][T15104] RIP: 0033:0x7f36aa98ebe9 [ 878.576265][T15104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.595880][T15104] RSP: 002b:00007f36ab847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 878.604471][T15104] RAX: ffffffffffffffda RBX: 00007f36aabc6180 RCX: 00007f36aa98ebe9 [ 878.612546][T15104] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 878.620822][T15104] RBP: 00007f36ab847090 R08: 0000000000000000 R09: 0000000000000000 [ 878.628798][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.636951][T15104] R13: 00007f36aabc6218 R14: 00007f36aabc6180 R15: 00007ffe6f827638 [ 878.645121][T15104] [ 878.801244][ T336] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 878.809489][ T336] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 878.811603][ T28] audit: type=1400 audit(1757265848.458:1121): avc: denied { map } for pid=15105 comm="syz.5.4346" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 878.816928][ T336] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 878.863201][ T336] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 878.870089][ T336] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 878.895487][ T336] arvo 0003:1E7D:30D4.0017: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 878.948698][ T24] usb 4-1: USB disconnect, device number 6 [ 878.957864][T15110] fido_id[15110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 879.093241][T14705] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 879.134817][T14705] usb 3-1: device descriptor read/8, error -71 [ 879.284862][T14705] usb 3-1: device descriptor read/8, error -71 [ 879.563233][T14705] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 880.013244][T14705] usb 3-1: device not accepting address 39, error -71 [ 880.046619][T14705] usb usb3-port1: unable to enumerate USB device [ 881.821823][T15138] FAULT_INJECTION: forcing a failure. [ 881.821823][T15138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.883417][T15138] CPU: 0 PID: 15138 Comm: syz.2.4355 Tainted: G W syzkaller #0 [ 881.892561][T15138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 881.902626][T15138] Call Trace: [ 881.905922][T15138] [ 881.908946][T15138] __dump_stack+0x21/0x24 [ 881.913291][T15138] dump_stack_lvl+0xee/0x150 [ 881.913854][T15140] FAULT_INJECTION: forcing a failure. [ 881.913854][T15140] name failslab, interval 1, probability 0, space 0, times 0 [ 881.917879][T15138] ? __cfi_dump_stack_lvl+0x8/0x8 [ 881.935764][T15138] dump_stack+0x15/0x24 [ 881.940054][T15138] should_fail_ex+0x3d4/0x520 [ 881.944846][T15138] should_fail+0xb/0x10 [ 881.949014][T15138] should_fail_usercopy+0x1a/0x20 [ 881.954143][T15138] copyin+0x20/0xa0 [ 881.957962][T15138] _copy_from_iter+0x3e2/0xfd0 [ 881.962750][T15138] ? __cfi__copy_from_iter+0x10/0x10 [ 881.968056][T15138] ? __check_object_size+0x45a/0x600 [ 881.973506][T15138] netlink_sendmsg+0x72c/0xbc0 [ 881.978393][T15138] ? __cfi_netlink_sendmsg+0x10/0x10 [ 881.983804][T15138] ? security_socket_sendmsg+0x93/0xb0 [ 881.989277][T15138] ? __cfi_netlink_sendmsg+0x10/0x10 [ 881.994579][T15138] ____sys_sendmsg+0x5a9/0x990 [ 881.999366][T15138] ? __sys_sendmsg_sock+0x40/0x40 [ 882.004412][T15138] ? import_iovec+0x7c/0xb0 [ 882.008919][T15138] ___sys_sendmsg+0x21c/0x290 [ 882.013586][T15138] ? __sys_sendmsg+0x270/0x270 [ 882.018532][T15138] ? __cfi___switch_to+0x10/0x10 [ 882.023564][T15138] ? __fdget+0x19c/0x220 [ 882.027794][T15138] __x64_sys_sendmsg+0x1f0/0x2c0 [ 882.032774][T15138] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 882.038220][T15138] x64_sys_call+0x171/0x9a0 [ 882.042808][T15138] do_syscall_64+0x4c/0xa0 [ 882.047349][T15138] ? clear_bhb_loop+0x30/0x80 [ 882.052411][T15138] ? clear_bhb_loop+0x30/0x80 [ 882.057078][T15138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 882.063246][T15138] RIP: 0033:0x7f144fb8ebe9 [ 882.067924][T15138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.087607][T15138] RSP: 002b:00007f1450979038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.096102][T15138] RAX: ffffffffffffffda RBX: 00007f144fdc5fa0 RCX: 00007f144fb8ebe9 [ 882.104266][T15138] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000007 [ 882.112228][T15138] RBP: 00007f1450979090 R08: 0000000000000000 R09: 0000000000000000 [ 882.120182][T15138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.128139][T15138] R13: 00007f144fdc6038 R14: 00007f144fdc5fa0 R15: 00007fff6621f3c8 [ 882.136099][T15138] [ 882.141619][T15140] CPU: 0 PID: 15140 Comm: syz.6.4354 Tainted: G W syzkaller #0 [ 882.150571][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 882.160725][T15140] Call Trace: [ 882.164769][T15140] [ 882.167790][T15140] __dump_stack+0x21/0x24 [ 882.172254][T15140] dump_stack_lvl+0xee/0x150 [ 882.177115][T15140] ? __cfi_dump_stack_lvl+0x8/0x8 [ 882.182137][T15140] dump_stack+0x15/0x24 [ 882.186288][T15140] should_fail_ex+0x3d4/0x520 [ 882.191146][T15140] __should_failslab+0xac/0xf0 [ 882.195903][T15140] should_failslab+0x9/0x20 [ 882.200397][T15140] slab_pre_alloc_hook+0x30/0x1e0 [ 882.205546][T15140] kmem_cache_alloc_lru+0x49/0x280 [ 882.210748][T15140] ? __d_alloc+0x34/0x6c0 [ 882.215086][T15140] __d_alloc+0x34/0x6c0 [ 882.219261][T15140] d_alloc_cursor+0x41/0xd0 [ 882.223855][T15140] dcache_dir_open+0x3b/0x80 [ 882.228434][T15140] do_dentry_open+0x88e/0x1260 [ 882.233186][T15140] ? __cfi_dcache_dir_open+0x10/0x10 [ 882.238469][T15140] vfs_open+0x73/0x80 [ 882.242472][T15140] path_openat+0x2681/0x2f50 [ 882.247048][T15140] ? kasan_set_track+0x4b/0x70 [ 882.251850][T15140] ? getname_flags+0xb9/0x500 [ 882.256873][T15140] ? getname+0x19/0x20 [ 882.261045][T15140] ? x64_sys_call+0x97b/0x9a0 [ 882.265740][T15140] ? do_syscall_64+0x4c/0xa0 [ 882.270364][T15140] ? do_filp_open+0x3c0/0x3c0 [ 882.275051][T15140] do_filp_open+0x1c1/0x3c0 [ 882.279556][T15140] ? __cfi_do_filp_open+0x10/0x10 [ 882.284576][T15140] ? alloc_fd+0x4e6/0x590 [ 882.288897][T15140] do_sys_openat2+0x185/0x7e0 [ 882.293559][T15140] ? __kasan_check_write+0x14/0x20 [ 882.298682][T15140] ? do_sys_open+0xe0/0xe0 [ 882.303183][T15140] ? ksys_write+0x1eb/0x240 [ 882.307675][T15140] ? __cfi_ksys_write+0x10/0x10 [ 882.312516][T15140] ? do_user_addr_fault+0x9ac/0x1050 [ 882.317810][T15140] __x64_sys_open+0x11c/0x140 [ 882.322488][T15140] x64_sys_call+0x97b/0x9a0 [ 882.327070][T15140] do_syscall_64+0x4c/0xa0 [ 882.331741][T15140] ? clear_bhb_loop+0x30/0x80 [ 882.339180][T15140] ? clear_bhb_loop+0x30/0x80 [ 882.343862][T15140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 882.349755][T15140] RIP: 0033:0x7f36aa98ebe9 [ 882.354241][T15140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.374011][T15140] RSP: 002b:00007f36ab868038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 882.382431][T15140] RAX: ffffffffffffffda RBX: 00007f36aabc6090 RCX: 00007f36aa98ebe9 [ 882.390413][T15140] RDX: 0000000000000040 RSI: 0000000000000500 RDI: 0000200000000140 [ 882.398540][T15140] RBP: 00007f36ab868090 R08: 0000000000000000 R09: 0000000000000000 [ 882.406515][T15140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.414779][T15140] R13: 00007f36aabc6128 R14: 00007f36aabc6090 R15: 00007ffe6f827638 [ 882.422852][T15140] [ 882.622592][T15157] incfs_lookup_dentry err:-5 [ 882.660875][T15157] incfs: Can't find or create .index dir in ./file0 [ 882.668151][T15157] incfs: mount failed -5 [ 885.053003][T15124] udevd[15124]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 885.973452][T15189] netlink: 'syz.2.4368': attribute type 29 has an invalid length. [ 885.983024][T15189] netlink: 'syz.2.4368': attribute type 3 has an invalid length. [ 885.991525][T15189] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4368'. [ 886.229055][T15124] udevd[15124]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 886.443444][ T37] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 886.624212][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.635279][ T37] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 886.644347][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.657090][ T37] usb 6-1: config 0 descriptor?? [ 886.673162][ T8825] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 886.853216][ T8825] usb 5-1: Using ep0 maxpacket: 32 [ 886.859830][ T8825] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 886.879163][ T8825] usb 5-1: config 0 has no interface number 0 [ 886.888996][ T8825] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 886.898740][ T8825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.906852][ T8825] usb 5-1: Product: syz [ 886.911093][ T8825] usb 5-1: Manufacturer: syz [ 886.931990][ T8825] usb 5-1: SerialNumber: syz [ 887.005412][ T8825] usb 5-1: config 0 descriptor?? [ 887.011503][ T8825] smsc95xx v2.0.0 [ 887.091168][ T37] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 887.155870][ T37] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0018/input/input249 [ 887.297812][T15227] FAULT_INJECTION: forcing a failure. [ 887.297812][T15227] name failslab, interval 1, probability 0, space 0, times 0 [ 887.327369][ T37] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 887.335635][T15227] CPU: 0 PID: 15227 Comm: syz.3.4385 Tainted: G W syzkaller #0 [ 887.348414][T15227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 887.358564][T15227] Call Trace: [ 887.361861][T15227] [ 887.364801][T15227] __dump_stack+0x21/0x24 [ 887.369181][T15227] dump_stack_lvl+0xee/0x150 [ 887.373783][T15227] ? __cfi_dump_stack_lvl+0x8/0x8 [ 887.378831][T15227] dump_stack+0x15/0x24 [ 887.382994][T15227] should_fail_ex+0x3d4/0x520 [ 887.387690][T15227] __should_failslab+0xac/0xf0 [ 887.392465][T15227] ? kvmalloc_node+0x294/0x480 [ 887.397242][T15227] should_failslab+0x9/0x20 [ 887.401746][T15227] __kmem_cache_alloc_node+0x3d/0x2c0 [ 887.407127][T15227] ? seq_read_iter+0x1fc/0xdd0 [ 887.411902][T15227] ? kernfs_fop_read_iter+0x147/0x480 [ 887.417289][T15227] ? generic_file_splice_read+0x1b6/0x500 [ 887.422339][ T8825] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 887.423148][T15227] ? kvmalloc_node+0x294/0x480 [ 887.423177][T15227] __kmalloc_node+0xa1/0x1e0 [ 887.423200][T15227] kvmalloc_node+0x294/0x480 [ 887.441171][ T8825] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 887.443659][T15227] ? __kasan_check_write+0x14/0x20 [ 887.443690][T15227] ? __cfi_kvmalloc_node+0x10/0x10 [ 887.443713][T15227] ? _raw_spin_unlock_irq+0x4d/0x70 [ 887.472925][T15227] ? cgroup_task_count+0xe0/0xf0 [ 887.477886][T15227] cgroup_pidlist_start+0x33c/0xe40 [ 887.483111][T15227] ? __cfi_cgroup_pidlist_start+0x10/0x10 [ 887.488832][T15227] ? __kasan_check_write+0x14/0x20 [ 887.493955][T15227] ? mutex_lock+0x8d/0x1a0 [ 887.498372][T15227] ? __cfi_mutex_lock+0x10/0x10 [ 887.503221][T15227] ? kvmalloc_node+0x2bf/0x480 [ 887.507993][T15227] ? __kasan_check_write+0x14/0x20 [ 887.513199][T15227] cgroup_seqfile_start+0xaf/0xc0 [ 887.518229][T15227] kernfs_seq_start+0xe2/0x1f0 [ 887.523067][T15227] seq_read_iter+0x3d2/0xdd0 [ 887.527662][T15227] kernfs_fop_read_iter+0x147/0x480 [ 887.533032][T15227] ? iov_iter_pipe+0x102/0x270 [ 887.537816][T15227] generic_file_splice_read+0x1b6/0x500 [ 887.543582][T15227] ? __cfi_generic_file_splice_read+0x10/0x10 [ 887.549752][T15227] ? __kasan_check_read+0x11/0x20 [ 887.554799][T15227] ? fsnotify_perm+0x269/0x5b0 [ 887.559746][T15227] ? security_file_permission+0x94/0xb0 [ 887.565302][T15227] ? rw_verify_area+0xa7/0x1c0 [ 887.570065][T15227] splice_direct_to_actor+0x3c5/0xb10 [ 887.575453][T15227] ? __cfi_direct_splice_actor+0x10/0x10 [ 887.581092][T15227] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 887.587002][T15227] ? security_file_permission+0x94/0xb0 [ 887.592556][T15227] ? rw_verify_area+0xa7/0x1c0 [ 887.597331][T15227] do_splice_direct+0x1b3/0x2c0 [ 887.602222][T15227] ? avc_policy_seqno+0x1b/0x70 [ 887.607191][T15227] ? __cfi_do_splice_direct+0x10/0x10 [ 887.612578][T15227] ? security_file_permission+0x94/0xb0 [ 887.618219][T15227] do_sendfile+0x5c6/0xeb0 [ 887.622639][T15227] ? __cfi_vfs_write+0x10/0x10 [ 887.627413][T15227] ? do_preadv+0x330/0x330 [ 887.631920][T15227] ? __kasan_check_write+0x14/0x20 [ 887.637037][T15227] ? fput+0x154/0x1a0 [ 887.641034][T15227] __x64_sys_sendfile64+0x18f/0x1f0 [ 887.646266][T15227] ? __cfi_ksys_write+0x10/0x10 [ 887.651437][T15227] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 887.657167][T15227] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 887.663242][T15227] x64_sys_call+0x62c/0x9a0 [ 887.667747][T15227] do_syscall_64+0x4c/0xa0 [ 887.672156][T15227] ? clear_bhb_loop+0x30/0x80 [ 887.676838][T15227] ? clear_bhb_loop+0x30/0x80 [ 887.681527][T15227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.687421][T15227] RIP: 0033:0x7f42e538ebe9 [ 887.691830][T15227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.711534][T15227] RSP: 002b:00007f42e61d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 887.720052][T15227] RAX: ffffffffffffffda RBX: 00007f42e55c5fa0 RCX: 00007f42e538ebe9 [ 887.720079][T15227] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 887.720092][T15227] RBP: 00007f42e61d6090 R08: 0000000000000000 R09: 0000000000000000 [ 887.720103][T15227] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 887.720114][T15227] R13: 00007f42e55c6038 R14: 00007f42e55c5fa0 R15: 00007ffd44de2558 [ 887.720130][T15227] [ 887.870874][ T8825] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 887.936060][ T8825] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 887.946292][ T8825] usb 5-1: USB disconnect, device number 9 [ 887.978742][T15242] FAULT_INJECTION: forcing a failure. [ 887.978742][T15242] name failslab, interval 1, probability 0, space 0, times 0 [ 887.991560][T15242] CPU: 1 PID: 15242 Comm: syz.3.4386 Tainted: G W syzkaller #0 [ 888.000497][T15242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 888.010635][T15242] Call Trace: [ 888.013916][T15242] [ 888.016848][T15242] __dump_stack+0x21/0x24 [ 888.021182][T15242] dump_stack_lvl+0xee/0x150 [ 888.025768][T15242] ? __cfi_dump_stack_lvl+0x8/0x8 [ 888.030964][T15242] ? irqentry_exit+0x37/0x40 [ 888.035639][T15242] dump_stack+0x15/0x24 [ 888.039796][T15242] should_fail_ex+0x3d4/0x520 [ 888.044483][T15242] ? vm_area_dup+0x65/0x280 [ 888.049430][T15242] __should_failslab+0xac/0xf0 [ 888.054223][T15242] should_failslab+0x9/0x20 [ 888.058749][T15242] kmem_cache_alloc+0x3b/0x330 [ 888.063512][T15242] vm_area_dup+0x65/0x280 [ 888.067847][T15242] __split_vma+0x1d2/0x930 [ 888.072255][T15242] ? mas_find+0x155/0x370 [ 888.076603][T15242] do_mas_align_munmap+0x718/0x1230 [ 888.081788][T15242] ? do_mas_munmap+0x2b0/0x2b0 [ 888.086539][T15242] ? mas_find+0x307/0x370 [ 888.090859][T15242] do_mas_munmap+0x241/0x2b0 [ 888.095558][T15242] do_munmap+0xd2/0x120 [ 888.099713][T15242] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 888.105426][T15242] ? __cfi_do_munmap+0x10/0x10 [ 888.110181][T15242] ? __cfi_mtree_load+0x10/0x10 [ 888.115024][T15242] mremap_to+0x323/0x600 [ 888.119254][T15242] __se_sys_mremap+0x453/0xc80 [ 888.124002][T15242] ? finish_task_switch+0x16b/0x7b0 [ 888.129189][T15242] ? __switch_to_asm+0x3a/0x60 [ 888.133941][T15242] ? __x64_sys_mremap+0xd0/0xd0 [ 888.139181][T15242] ? release_firmware_map_entry+0x194/0x194 [ 888.145449][T15242] ? ksys_write+0x1eb/0x240 [ 888.149985][T15242] ? __kasan_check_write+0x14/0x20 [ 888.155267][T15242] ? fpregs_restore_userregs+0x128/0x260 [ 888.160894][T15242] __x64_sys_mremap+0xbf/0xd0 [ 888.165642][T15242] x64_sys_call+0x989/0x9a0 [ 888.170146][T15242] do_syscall_64+0x4c/0xa0 [ 888.174544][T15242] ? clear_bhb_loop+0x30/0x80 [ 888.179204][T15242] ? clear_bhb_loop+0x30/0x80 [ 888.183868][T15242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.189763][T15242] RIP: 0033:0x7f42e538ebe9 [ 888.194169][T15242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.213770][T15242] RSP: 002b:00007f42e6194038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 888.222298][T15242] RAX: ffffffffffffffda RBX: 00007f42e55c6180 RCX: 00007f42e538ebe9 [ 888.230254][T15242] RDX: 0000000000002000 RSI: 0000000000003000 RDI: 0000200000728000 [ 888.238211][T15242] RBP: 00007f42e6194090 R08: 0000200000320000 R09: 0000000000000000 [ 888.246254][T15242] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 888.254256][T15242] R13: 00007f42e55c6218 R14: 00007f42e55c6180 R15: 00007ffd44de2558 [ 888.262310][T15242] [ 888.317265][ T24] usb 6-1: USB disconnect, device number 10 [ 888.970400][ T28] audit: type=1400 audit(1757265858.618:1122): avc: denied { create } for pid=15258 comm="syz.2.4393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 889.802477][T15088] udevd[15088]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 890.014818][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4398'. [ 890.024406][T15282] FAULT_INJECTION: forcing a failure. [ 890.024406][T15282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 890.045377][T15282] CPU: 0 PID: 15282 Comm: syz.4.4400 Tainted: G W syzkaller #0 [ 890.054669][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 890.065073][T15282] Call Trace: [ 890.068357][T15282] [ 890.071337][T15282] __dump_stack+0x21/0x24 [ 890.075883][T15282] dump_stack_lvl+0xee/0x150 [ 890.080484][T15282] ? __cfi_dump_stack_lvl+0x8/0x8 [ 890.085602][T15282] ? __se_sys_ioctl+0x12f/0x1b0 [ 890.090479][T15282] ? x64_sys_call+0x58b/0x9a0 [ 890.095269][T15282] ? do_syscall_64+0x4c/0xa0 [ 890.099951][T15282] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 890.106308][T15282] dump_stack+0x15/0x24 [ 890.110563][T15282] should_fail_ex+0x3d4/0x520 [ 890.115315][T15282] should_fail_alloc_page+0x61/0x90 [ 890.120514][T15282] prepare_alloc_pages+0x148/0x5f0 [ 890.125729][T15282] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 890.131343][T15282] __alloc_pages+0x124/0x450 [ 890.136136][T15282] ? kasan_save_alloc_info+0x25/0x30 [ 890.141608][T15282] ? __cfi___alloc_pages+0x10/0x10 [ 890.146919][T15282] ? slab_post_alloc_hook+0x6d/0x2d0 [ 890.152475][T15282] ? kvm_vm_ioctl_create_vcpu+0x12a/0x8c0 [ 890.158293][T15282] ? kmem_cache_alloc+0x16e/0x330 [ 890.163318][T15282] ? kvm_vm_ioctl_create_vcpu+0x12a/0x8c0 [ 890.169237][T15282] kvm_vm_ioctl_create_vcpu+0x146/0x8c0 [ 890.174931][T15282] ? kstrtouint+0x74/0xe0 [ 890.179375][T15282] kvm_vm_ioctl+0x5f7/0xa80 [ 890.183885][T15282] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 890.189028][T15282] ? memcpy+0x56/0x70 [ 890.193546][T15282] ? ioctl_has_perm+0x3e8/0x4c0 [ 890.198456][T15282] ? has_cap_mac_admin+0x330/0x330 [ 890.203653][T15282] ? security_file_permission+0x94/0xb0 [ 890.209358][T15282] ? vfs_write+0x9d6/0xca0 [ 890.214009][T15282] ? slab_free_freelist_hook+0xc2/0x190 [ 890.219558][T15282] ? selinux_file_ioctl+0x377/0x480 [ 890.225062][T15282] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 890.230801][T15282] ? mutex_unlock+0x89/0x220 [ 890.235492][T15282] ? __cfi_mutex_unlock+0x10/0x10 [ 890.240563][T15282] ? __fget_files+0x2d5/0x330 [ 890.245263][T15282] ? security_file_ioctl+0x95/0xc0 [ 890.250370][T15282] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 890.255498][T15282] __se_sys_ioctl+0x12f/0x1b0 [ 890.260349][T15282] __x64_sys_ioctl+0x7b/0x90 [ 890.264990][T15282] x64_sys_call+0x58b/0x9a0 [ 890.269658][T15282] do_syscall_64+0x4c/0xa0 [ 890.274320][T15282] ? clear_bhb_loop+0x30/0x80 [ 890.279067][T15282] ? clear_bhb_loop+0x30/0x80 [ 890.283951][T15282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 890.290138][T15282] RIP: 0033:0x7f9a4798ebe9 [ 890.294721][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.314751][T15282] RSP: 002b:00007f9a48845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.323166][T15282] RAX: ffffffffffffffda RBX: 00007f9a47bc5fa0 RCX: 00007f9a4798ebe9 [ 890.331120][T15282] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000006 [ 890.339700][T15282] RBP: 00007f9a48845090 R08: 0000000000000000 R09: 0000000000000000 [ 890.348474][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.357419][T15282] R13: 00007f9a47bc6038 R14: 00007f9a47bc5fa0 R15: 00007ffd8f1ee4f8 [ 890.365796][T15282] [ 890.395974][ T28] audit: type=1400 audit(1757265860.048:1123): avc: denied { getopt } for pid=15280 comm="syz.4.4400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 891.217592][ T1481] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 891.409090][ T28] audit: type=1400 audit(1757265861.058:1124): avc: denied { read } for pid=15310 comm="syz.5.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 891.414229][ T1481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.451962][ T1481] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 891.473645][ T1481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.518028][ T1481] usb 3-1: config 0 descriptor?? [ 892.357075][T15231] udevd[15231]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 892.484969][ T1481] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 892.495056][ T1481] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0019/input/input250 [ 892.539736][T15336] FAULT_INJECTION: forcing a failure. [ 892.539736][T15336] name failslab, interval 1, probability 0, space 0, times 0 [ 892.552708][T15336] CPU: 1 PID: 15336 Comm: syz.5.4416 Tainted: G W syzkaller #0 [ 892.561661][T15336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 892.571817][T15336] Call Trace: [ 892.575100][T15336] [ 892.578053][T15336] __dump_stack+0x21/0x24 [ 892.582399][T15336] dump_stack_lvl+0xee/0x150 [ 892.587088][T15336] ? __cfi_dump_stack_lvl+0x8/0x8 [ 892.592203][T15336] ? do_user_addr_fault+0x9ac/0x1050 [ 892.594126][ T1481] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 892.597484][T15336] dump_stack+0x15/0x24 [ 892.597509][T15336] should_fail_ex+0x3d4/0x520 [ 892.618255][T15336] ? getname_flags+0xb9/0x500 [ 892.622936][T15336] __should_failslab+0xac/0xf0 [ 892.627698][T15336] should_failslab+0x9/0x20 [ 892.632392][T15336] kmem_cache_alloc+0x3b/0x330 [ 892.637261][T15336] ? asm_exc_page_fault+0x27/0x30 [ 892.642484][T15336] getname_flags+0xb9/0x500 [ 892.647004][T15336] ? __cfi__copy_from_user+0x1/0x10 [ 892.652308][T15336] user_path_at_empty+0x30/0x1c0 [ 892.657262][T15336] __se_sys_mount+0x2e3/0x380 [ 892.661952][T15336] ? __x64_sys_mount+0xd0/0xd0 [ 892.666729][T15336] ? __cfi_ksys_write+0x10/0x10 [ 892.671602][T15336] __x64_sys_mount+0xbf/0xd0 [ 892.676316][T15336] x64_sys_call+0x65d/0x9a0 [ 892.680843][T15336] do_syscall_64+0x4c/0xa0 [ 892.685358][T15336] ? clear_bhb_loop+0x30/0x80 [ 892.690040][T15336] ? clear_bhb_loop+0x30/0x80 [ 892.694735][T15336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.700637][T15336] RIP: 0033:0x7f0338d8ebe9 [ 892.705047][T15336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.724663][T15336] RSP: 002b:00007f0339cea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 892.733105][T15336] RAX: ffffffffffffffda RBX: 00007f0338fc5fa0 RCX: 00007f0338d8ebe9 [ 892.741190][T15336] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 892.749288][T15336] RBP: 00007f0339cea090 R08: 0000200000000a40 R09: 0000000000000000 [ 892.757257][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.765483][T15336] R13: 00007f0338fc6038 R14: 00007f0338fc5fa0 R15: 00007fffb0177a58 [ 892.773472][T15336] [ 892.919755][T15343] block device autoloading is deprecated and will be removed. [ 892.929089][T15343] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 892.942191][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4419'. [ 893.839877][ T1481] usb 3-1: USB disconnect, device number 40 [ 894.636307][T15364] input: syz1 as /devices/virtual/input/input251 [ 895.734204][T15402] input: syz1 as /devices/virtual/input/input252 [ 896.584453][T15418] bridge: RTM_NEWNEIGH with invalid ether address [ 896.626680][T15424] fuse: Bad value for 'user_id' [ 896.743228][ T1481] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 897.113177][ T1481] usb 3-1: Using ep0 maxpacket: 32 [ 897.119546][ T1481] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 897.137059][ T1481] usb 3-1: config 0 has no interface number 0 [ 897.151234][ T1481] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 897.170571][ T1481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.180038][ T1481] usb 3-1: Product: syz [ 897.184604][ T1481] usb 3-1: Manufacturer: syz [ 897.189517][ T1481] usb 3-1: SerialNumber: syz [ 897.196228][ T1481] usb 3-1: config 0 descriptor?? [ 897.202278][ T1481] smsc95xx v2.0.0 [ 897.291021][T15441] FAULT_INJECTION: forcing a failure. [ 897.291021][T15441] name failslab, interval 1, probability 0, space 0, times 0 [ 897.304431][T15441] CPU: 1 PID: 15441 Comm: syz.4.4447 Tainted: G W syzkaller #0 [ 897.313551][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 897.323788][T15441] Call Trace: [ 897.327066][T15441] [ 897.330082][T15441] __dump_stack+0x21/0x24 [ 897.334474][T15441] dump_stack_lvl+0xee/0x150 [ 897.339234][T15441] ? __cfi_dump_stack_lvl+0x8/0x8 [ 897.344523][T15441] ? release_firmware_map_entry+0x194/0x194 [ 897.350884][T15441] dump_stack+0x15/0x24 [ 897.355141][T15441] should_fail_ex+0x3d4/0x520 [ 897.359921][T15441] __should_failslab+0xac/0xf0 [ 897.365127][T15441] ? copy_net_ns+0x10f/0x5c0 [ 897.369905][T15441] should_failslab+0x9/0x20 [ 897.374680][T15441] __kmem_cache_alloc_node+0x3d/0x2c0 [ 897.380423][T15441] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 897.386694][T15441] ? copy_net_ns+0x10f/0x5c0 [ 897.391322][T15441] __kmalloc+0xa1/0x1e0 [ 897.395587][T15441] copy_net_ns+0x10f/0x5c0 [ 897.400014][T15441] create_new_namespaces+0x3a2/0x660 [ 897.405352][T15441] unshare_nsproxy_namespaces+0x120/0x170 [ 897.411253][T15441] ksys_unshare+0x4ac/0x7b0 [ 897.415952][T15441] ? __cfi_ksys_unshare+0x10/0x10 [ 897.421171][T15441] __x64_sys_unshare+0x38/0x40 [ 897.425955][T15441] x64_sys_call+0x767/0x9a0 [ 897.430477][T15441] do_syscall_64+0x4c/0xa0 [ 897.434929][T15441] ? clear_bhb_loop+0x30/0x80 [ 897.439768][T15441] ? clear_bhb_loop+0x30/0x80 [ 897.444579][T15441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.450528][T15441] RIP: 0033:0x7f9a4798ebe9 [ 897.455120][T15441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.475265][T15441] RSP: 002b:00007f9a48803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 897.483961][T15441] RAX: ffffffffffffffda RBX: 00007f9a47bc6180 RCX: 00007f9a4798ebe9 [ 897.492120][T15441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 897.500218][T15441] RBP: 00007f9a48803090 R08: 0000000000000000 R09: 0000000000000000 [ 897.501986][T15447] input: syz1 as /devices/virtual/input/input253 [ 897.508292][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.508311][T15441] R13: 00007f9a47bc6218 R14: 00007f9a47bc6180 R15: 00007ffd8f1ee4f8 [ 897.508327][T15441] [ 897.603852][ T1481] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 897.615152][ T1481] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 897.702545][T15457] device wg1 entered promiscuous mode [ 898.302286][T15466] FAULT_INJECTION: forcing a failure. [ 898.302286][T15466] name failslab, interval 1, probability 0, space 0, times 0 [ 898.319598][T15466] CPU: 1 PID: 15466 Comm: syz.4.4456 Tainted: G W syzkaller #0 [ 898.328563][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 898.338816][T15466] Call Trace: [ 898.342094][T15466] [ 898.345043][T15466] __dump_stack+0x21/0x24 [ 898.349492][T15466] dump_stack_lvl+0xee/0x150 [ 898.354185][T15466] ? __cfi_dump_stack_lvl+0x8/0x8 [ 898.359360][T15466] dump_stack+0x15/0x24 [ 898.363511][T15466] should_fail_ex+0x3d4/0x520 [ 898.368292][T15466] __should_failslab+0xac/0xf0 [ 898.373053][T15466] ? __se_sys_mount+0x153/0x380 [ 898.377914][T15466] should_failslab+0x9/0x20 [ 898.382414][T15466] __kmem_cache_alloc_node+0x3d/0x2c0 [ 898.388086][T15466] ? __se_sys_mount+0x153/0x380 [ 898.393126][T15466] kmalloc_trace+0x29/0xb0 [ 898.397724][T15466] __se_sys_mount+0x153/0x380 [ 898.402441][T15466] ? __x64_sys_mount+0xd0/0xd0 [ 898.407261][T15466] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 898.412916][T15466] __x64_sys_mount+0xbf/0xd0 [ 898.417511][T15466] x64_sys_call+0x65d/0x9a0 [ 898.422130][T15466] do_syscall_64+0x4c/0xa0 [ 898.426551][T15466] ? clear_bhb_loop+0x30/0x80 [ 898.431298][T15466] ? clear_bhb_loop+0x30/0x80 [ 898.436023][T15466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.442022][T15466] RIP: 0033:0x7f9a4798ebe9 [ 898.446538][T15466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.466202][T15466] RSP: 002b:00007f9a48845038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 898.474923][T15466] RAX: ffffffffffffffda RBX: 00007f9a47bc5fa0 RCX: 00007f9a4798ebe9 [ 898.483262][T15466] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000000 [ 898.491447][T15466] RBP: 00007f9a48845090 R08: 0000200000000580 R09: 0000000000000000 [ 898.499748][T15466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.507729][T15466] R13: 00007f9a47bc6038 R14: 00007f9a47bc5fa0 R15: 00007ffd8f1ee4f8 [ 898.515707][T15466] [ 898.574010][ T1481] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 898.585420][ T1481] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 898.593552][ T1481] usb 3-1: USB disconnect, device number 41 [ 898.651136][T15476] input: syz1 as /devices/virtual/input/input254 [ 899.898340][T15500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4470'. [ 899.911122][T15500] tc_dump_action: action bad kind [ 899.963862][T15500] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 900.263841][T15517] futex_wake_op: syz.5.4470 tries to shift op by 36; fix this program [ 900.397305][T15520] input: syz1 as /devices/virtual/input/input255 [ 900.445026][ T695] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 900.663174][ T695] usb 4-1: Using ep0 maxpacket: 8 [ 900.669651][ T695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.680349][ T695] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 900.689465][ T695] usb 4-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 900.698760][ T695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.710652][ T695] usb 4-1: config 0 descriptor?? [ 900.805090][T15530] block device autoloading is deprecated and will be removed. [ 900.813291][T15530] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 900.824086][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4482'. [ 901.112299][T15547] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 901.136814][T15551] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 901.144754][T15549] input: syz1 as /devices/virtual/input/input256 [ 901.480840][ T1481] usb 4-1: USB disconnect, device number 7 [ 902.142137][T15583] input: syz1 as /devices/virtual/input/input257 [ 902.167500][T15585] block device autoloading is deprecated and will be removed. [ 902.176009][T15585] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 902.233575][ T28] audit: type=1400 audit(1757265871.878:1125): avc: denied { name_bind } for pid=15592 comm="syz.4.4504" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 902.263638][ T28] audit: type=1400 audit(1757265871.908:1126): avc: denied { create } for pid=15595 comm="syz.3.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 902.285092][ T28] audit: type=1400 audit(1757265871.908:1127): avc: denied { append } for pid=15595 comm="syz.3.4505" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 902.998048][T15606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 903.218927][ T695] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 903.393841][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4508'. [ 903.600342][T15617] input: syz1 as /devices/virtual/input/input258 [ 903.821317][T15624] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 903.967807][T15630] fuse: Unknown parameter '0x0000000000000004' [ 904.313242][ T336] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 904.715359][T15647] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 904.732541][ T28] audit: type=1400 audit(1757265874.378:1128): avc: denied { read } for pid=15639 comm="syz.3.4519" path="socket:[85092]" dev="sockfs" ino=85092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 904.963417][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 906.057840][T15643] 9pnet_fd: Insufficient options for proto=fd [ 906.104943][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 906.139715][T13759] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 906.153471][T13759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 906.173341][T13759] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 906.192714][T13759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 906.246441][T13759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 906.277588][T13759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 906.287791][T13759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 906.297715][T13759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 906.876636][T15671] input: syz1 as /devices/virtual/input/input259 [ 907.529754][T15691] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 908.880091][T15710] input: syz1 as /devices/virtual/input/input260 [ 908.886581][ T28] audit: type=1400 audit(1757265878.538:1129): avc: denied { add_name } for pid=15699 comm="syz.3.4539" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 908.891119][T15706] FAULT_INJECTION: forcing a failure. [ 908.891119][T15706] name failslab, interval 1, probability 0, space 0, times 0 [ 908.921092][ T28] audit: type=1400 audit(1757265878.568:1130): avc: denied { create } for pid=15699 comm="syz.3.4539" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 908.933846][T15706] CPU: 1 PID: 15706 Comm: syz.4.4541 Tainted: G W syzkaller #0 [ 908.950433][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 908.950447][T15706] Call Trace: [ 908.950452][T15706] [ 908.950458][T15706] __dump_stack+0x21/0x24 [ 908.950484][T15706] dump_stack_lvl+0xee/0x150 [ 908.950496][T15706] ? __cfi_dump_stack_lvl+0x8/0x8 [ 908.950510][T15706] dump_stack+0x15/0x24 [ 908.950522][T15706] should_fail_ex+0x3d4/0x520 [ 908.950540][T15706] ? security_file_alloc+0x33/0x130 [ 908.950555][T15706] __should_failslab+0xac/0xf0 [ 908.950570][T15706] should_failslab+0x9/0x20 [ 908.950583][T15706] kmem_cache_alloc+0x3b/0x330 [ 908.950598][T15706] ? __alloc_file+0x28/0x2a0 [ 908.950613][T15706] security_file_alloc+0x33/0x130 [ 908.950628][T15706] __alloc_file+0xb5/0x2a0 [ 908.950641][T15706] alloc_empty_file+0x97/0x180 [ 908.950655][T15706] path_openat+0xf4/0x2f50 [ 908.950670][T15706] ? kasan_set_track+0x4b/0x70 [ 908.950684][T15706] ? kasan_save_alloc_info+0x25/0x30 [ 908.950702][T15706] ? __kasan_slab_alloc+0x72/0x80 [ 908.950715][T15706] ? kmem_cache_alloc+0x16e/0x330 [ 908.950730][T15706] ? getname_flags+0xb9/0x500 [ 908.950747][T15706] ? getname+0x19/0x20 [ 908.950763][T15706] ? do_sys_openat2+0xcb/0x7e0 [ 908.950778][T15706] ? __x64_sys_openat+0x136/0x160 [ 908.950794][T15706] ? x64_sys_call+0x783/0x9a0 [ 908.950808][T15706] ? do_syscall_64+0x4c/0xa0 [ 908.950820][T15706] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.950838][T15706] ? do_filp_open+0x3c0/0x3c0 [ 908.950853][T15706] do_filp_open+0x1c1/0x3c0 [ 908.950867][T15706] ? __cfi_do_filp_open+0x10/0x10 [ 908.950884][T15706] ? alloc_fd+0x4e6/0x590 [ 908.950904][T15706] do_sys_openat2+0x185/0x7e0 [ 908.950920][T15706] ? __kasan_check_write+0x14/0x20 [ 908.950939][T15706] ? do_sys_open+0xe0/0xe0 [ 908.950953][T15706] ? ksys_write+0x1eb/0x240 [ 908.950977][T15706] ? __cfi_ksys_write+0x10/0x10 [ 908.950995][T15706] __x64_sys_openat+0x136/0x160 [ 908.951013][T15706] x64_sys_call+0x783/0x9a0 [ 908.951028][T15706] do_syscall_64+0x4c/0xa0 [ 908.951039][T15706] ? clear_bhb_loop+0x30/0x80 [ 908.951054][T15706] ? clear_bhb_loop+0x30/0x80 [ 908.951070][T15706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.951085][T15706] RIP: 0033:0x7f9a4798ebe9 [ 908.951098][T15706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.951110][T15706] RSP: 002b:00007f9a48845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 908.951126][T15706] RAX: ffffffffffffffda RBX: 00007f9a47bc5fa0 RCX: 00007f9a4798ebe9 [ 908.951137][T15706] RDX: 0000000000000e42 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 908.951146][T15706] RBP: 00007f9a48845090 R08: 0000000000000000 R09: 0000000000000000 [ 908.951156][T15706] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 908.951164][T15706] R13: 00007f9a47bc6038 R14: 00007f9a47bc5fa0 R15: 00007ffd8f1ee4f8 [ 908.951177][T15706] [ 908.951373][ T28] audit: type=1400 audit(1757265878.568:1131): avc: denied { associate } for pid=15699 comm="syz.3.4539" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 909.271743][ T28] audit: type=1400 audit(1757265878.918:1132): avc: denied { create } for pid=15711 comm="syz.5.4543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 909.292173][ T28] audit: type=1400 audit(1757265878.918:1133): avc: denied { sys_admin } for pid=15711 comm="syz.5.4543" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 909.319162][ T28] audit: type=1400 audit(1757265878.918:1134): avc: denied { checkpoint_restore } for pid=15711 comm="syz.5.4543" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 911.346167][T15756] kthread_run failed with err -4 [ 911.900581][T15765] input: syz1 as /devices/virtual/input/input261 [ 911.942557][T15766] FAULT_INJECTION: forcing a failure. [ 911.942557][T15766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.955937][T15766] CPU: 1 PID: 15766 Comm: syz.2.4556 Tainted: G W syzkaller #0 [ 911.965144][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 911.975290][T15766] Call Trace: [ 911.978589][T15766] [ 911.981626][T15766] __dump_stack+0x21/0x24 [ 911.986085][T15766] dump_stack_lvl+0xee/0x150 [ 911.990769][T15766] ? __cfi_dump_stack_lvl+0x8/0x8 [ 911.995795][T15766] dump_stack+0x15/0x24 [ 911.999958][T15766] should_fail_ex+0x3d4/0x520 [ 912.004663][T15766] should_fail+0xb/0x10 [ 912.008823][T15766] should_fail_usercopy+0x1a/0x20 [ 912.013851][T15766] _copy_from_user+0x1e/0xc0 [ 912.018448][T15766] __se_sys_memfd_create+0x131/0x3b0 [ 912.023828][T15766] __x64_sys_memfd_create+0x5b/0x70 [ 912.029121][T15766] x64_sys_call+0x235/0x9a0 [ 912.033711][T15766] do_syscall_64+0x4c/0xa0 [ 912.038468][T15766] ? clear_bhb_loop+0x30/0x80 [ 912.043440][T15766] ? clear_bhb_loop+0x30/0x80 [ 912.048139][T15766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.054291][T15766] RIP: 0033:0x7f144fb8ebe9 [ 912.058707][T15766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.078513][T15766] RSP: 002b:00007f1450957e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 912.087111][T15766] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007f144fb8ebe9 [ 912.095251][T15766] RDX: 00007f1450957ef0 RSI: 0000000000000000 RDI: 00007f144fc127e8 [ 912.103332][T15766] RBP: 00002000000005c0 R08: 00007f1450957bb7 R09: 00007f1450957e40 [ 912.111841][T15766] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000b80 [ 912.120251][T15766] R13: 00007f1450957ef0 R14: 00007f1450957eb0 R15: 00002000000001c0 [ 912.128330][T15766] [ 912.306876][T15778] block device autoloading is deprecated and will be removed. [ 912.323274][T15778] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 912.417422][T15781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 912.440702][T13745] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 912.456067][T15789] input: syz1 as /devices/virtual/input/input262 [ 912.459081][T13745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 912.487138][T13745] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 912.497872][T15790] 9pnet_fd: Insufficient options for proto=fd [ 912.497976][T13745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 912.515609][T13745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 912.524518][T13745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 912.532792][T13745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 912.553598][T13745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 912.611347][T15795] input: syz1 as /devices/virtual/input/input263 [ 912.773797][T15804] tipc: Started in network mode [ 912.778929][T15804] tipc: Node identity 265b349d5ac4, cluster identity 4711 [ 912.783248][ T335] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 912.786678][T15804] tipc: Enabled bearer , priority 0 [ 912.914946][T15804] tipc: Disabling bearer [ 912.973333][ T335] usb 4-1: Using ep0 maxpacket: 8 [ 912.980057][ T335] usb 4-1: config 1 interface 0 altsetting 18 bulk endpoint 0x1 has invalid maxpacket 64 [ 912.992293][ T335] usb 4-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 913.016625][ T335] usb 4-1: config 1 interface 0 has no altsetting 0 [ 913.025488][ T335] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 913.035178][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.045566][ T335] usb 4-1: Product: 徶ꐺ쬓꣦뎗ꐛꥎ䑇琮꒐履癈䋸좡䊤䌽虉ᗯۏⲻ퀝ᅖ쥭⴬빐䋰㮾㟓疒闸완엢걌碵阂༧墢쨲腁᰽☐洴㰬솦㢐뀯ꊵ叠㿺ᗧƗﻲ࢚禈ힴ떠뻬湷킷Ƴ揖娇퐹嗙膱ᴞ陪㞺ࣻ㝶兝敍ඈ↟⏃偠䉹䭃 [ 913.049249][T15805] block device autoloading is deprecated and will be removed. [ 913.073545][ T335] usb 4-1: Manufacturer: ␉ [ 913.085945][ T335] usb 4-1: SerialNumber: 㻜ﵵ煐䎧玨襬ᝒ覷禅ꈱ姐䯋ゑ嬅̥뱅澕瑴栌㚒Ӟᦹ讱궼⍹澿褰䧭ᣅ㡣챩酊佻옣▎㷍莒 [ 913.109734][T15792] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 913.117307][T15792] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 913.374172][ T8825] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 913.531029][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.542777][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.557345][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.563256][ T695] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 913.567522][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.586172][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.594753][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.605312][ T8825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.617767][ T335] usb 4-1: USB disconnect, device number 8 [ 913.624913][ T8825] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 913.634212][ T8825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.642595][ T8825] usb 6-1: config 0 descriptor?? [ 913.774286][ T695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.784449][ T695] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 913.968565][ T695] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 914.018685][ T695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 914.032592][ T695] usb 3-1: SerialNumber: syz [ 914.080825][T15845] block device autoloading is deprecated and will be removed. [ 914.088610][T15845] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 914.146514][ T8825] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 914.157185][ T8825] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001A/input/input265 [ 914.237024][ T8825] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 915.264479][T15868] 9pnet_fd: Insufficient options for proto=fd [ 915.764040][ T695] usb 3-1: 0:2 : does not exist [ 915.774163][ T695] usb 3-1: unit 5: unexpected type 0x0d [ 915.793396][ T695] usb 3-1: USB disconnect, device number 42 [ 915.803610][T15876] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 916.233840][ T8825] usb 6-1: USB disconnect, device number 11 [ 916.267250][T15889] block device autoloading is deprecated and will be removed. [ 916.275690][T15889] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 916.373948][T15894] tipc: Started in network mode [ 916.378986][T15894] tipc: Node identity 669500a22a48, cluster identity 4711 [ 916.386729][T15894] tipc: Enabled bearer , priority 0 [ 917.015127][T15908] input: syz1 as /devices/virtual/input/input266 [ 917.383434][ T8825] tipc: Node number set to 1289552034 [ 917.407939][T15912] FAULT_INJECTION: forcing a failure. [ 917.407939][T15912] name failslab, interval 1, probability 0, space 0, times 0 [ 917.423194][T15912] CPU: 1 PID: 15912 Comm: syz.5.4609 Tainted: G W syzkaller #0 [ 917.432150][T15912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 917.442303][T15912] Call Trace: [ 917.445577][T15912] [ 917.448537][T15912] __dump_stack+0x21/0x24 [ 917.452852][T15912] dump_stack_lvl+0xee/0x150 [ 917.457435][T15912] ? __cfi_dump_stack_lvl+0x8/0x8 [ 917.462452][T15912] ? unwind_get_return_address+0x4d/0x90 [ 917.468097][T15912] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 917.474339][T15912] dump_stack+0x15/0x24 [ 917.478613][T15912] should_fail_ex+0x3d4/0x520 [ 917.483301][T15912] ? mas_alloc_nodes+0x2d8/0x850 [ 917.488341][T15912] __should_failslab+0xac/0xf0 [ 917.493095][T15912] should_failslab+0x9/0x20 [ 917.497625][T15912] kmem_cache_alloc+0x3b/0x330 [ 917.502377][T15912] mas_alloc_nodes+0x2d8/0x850 [ 917.507129][T15912] mas_preallocate+0xdf5/0x1400 [ 917.511983][T15912] ? __cfi_mas_preallocate+0x10/0x10 [ 917.513170][ T1481] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 917.517253][T15912] ? rwsem_write_trylock+0x130/0x300 [ 917.517287][T15912] __vma_adjust+0x5dc/0x1e50 [ 917.534650][T15912] ? kasan_save_alloc_info+0x25/0x30 [ 917.539931][T15912] ? __cfi___vma_adjust+0x10/0x10 [ 917.544950][T15912] ? rwsem_write_trylock+0x130/0x300 [ 917.550227][T15912] __split_vma+0x6dd/0x930 [ 917.554642][T15912] do_mas_align_munmap+0x718/0x1230 [ 917.559835][T15912] ? do_mas_munmap+0x2b0/0x2b0 [ 917.564586][T15912] ? _parse_integer+0x2a/0x40 [ 917.569336][T15912] ? mas_find+0x307/0x370 [ 917.573659][T15912] do_mas_munmap+0x241/0x2b0 [ 917.578238][T15912] do_munmap+0xd2/0x120 [ 917.582444][T15912] ? __cfi_do_munmap+0x10/0x10 [ 917.587214][T15912] ? __cfi_mtree_load+0x10/0x10 [ 917.592072][T15912] mremap_to+0x323/0x600 [ 917.596305][T15912] __se_sys_mremap+0x453/0xc80 [ 917.601058][T15912] ? __kasan_check_write+0x14/0x20 [ 917.606164][T15912] ? mutex_unlock+0x89/0x220 [ 917.610781][T15912] ? __cfi_mutex_unlock+0x10/0x10 [ 917.615875][T15912] ? __x64_sys_mremap+0xd0/0xd0 [ 917.620712][T15912] ? __kasan_check_write+0x14/0x20 [ 917.625829][T15912] ? ksys_write+0x1eb/0x240 [ 917.630685][T15912] ? __cfi_ksys_write+0x10/0x10 [ 917.635521][T15912] __x64_sys_mremap+0xbf/0xd0 [ 917.640181][T15912] x64_sys_call+0x989/0x9a0 [ 917.644667][T15912] do_syscall_64+0x4c/0xa0 [ 917.649061][T15912] ? clear_bhb_loop+0x30/0x80 [ 917.653715][T15912] ? clear_bhb_loop+0x30/0x80 [ 917.658387][T15912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 917.664287][T15912] RIP: 0033:0x7f0338d8ebe9 [ 917.668686][T15912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.688364][T15912] RSP: 002b:00007f0339cea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 917.696770][T15912] RAX: ffffffffffffffda RBX: 00007f0338fc5fa0 RCX: 00007f0338d8ebe9 [ 917.703172][ T1481] usb 4-1: Using ep0 maxpacket: 8 [ 917.704729][T15912] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 917.704745][T15912] RBP: 00007f0339cea090 R08: 0000200000000000 R09: 0000000000000000 [ 917.704757][T15912] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 917.712957][ T1481] usb 4-1: config 1 interface 0 altsetting 18 bulk endpoint 0x1 has invalid maxpacket 64 [ 917.717710][T15912] R13: 00007f0338fc6038 R14: 00007f0338fc5fa0 R15: 00007fffb0177a58 [ 917.717736][T15912] [ 917.755503][ T1481] usb 4-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 917.771219][T15894] tipc: Disabling bearer [ 917.771260][ T1481] usb 4-1: config 1 interface 0 has no altsetting 0 [ 917.795701][ T1481] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 917.804920][ T1481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.812917][ T1481] usb 4-1: Product: 徶ꐺ쬓꣦뎗ꐛꥎ䑇琮꒐履癈䋸좡䊤䌽虉ᗯۏⲻ퀝ᅖ쥭⴬빐䋰㮾㟓疒闸완엢걌碵阂༧墢쨲腁᰽☐洴㰬솦㢐뀯ꊵ叠㿺ᗧƗﻲ࢚禈ힴ떠뻬湷킷Ƴ揖娇퐹嗙膱ᴞ陪㞺ࣻ㝶兝敍ඈ↟⏃偠䉹䭃 [ 917.840012][ T1481] usb 4-1: Manufacturer: ␉ [ 917.844805][ T1481] usb 4-1: SerialNumber: 㻜ﵵ煐䎧玨襬ᝒ覷禅ꈱ姐䯋ゑ嬅̥뱅澕瑴栌㚒Ӟᦹ讱궼⍹澿褰䧭ᣅ㡣챩酊佻옣▎㷍莒 [ 917.870033][T15899] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 917.877509][T15899] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 918.599137][T15899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.608605][T15899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.656729][T15899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.685228][T15899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.712148][T15899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.740239][T15899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.843268][ T1481] usb 4-1: USB disconnect, device number 9 [ 919.342186][T15972] FAULT_INJECTION: forcing a failure. [ 919.342186][T15972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.355467][T15972] CPU: 1 PID: 15972 Comm: syz.6.4624 Tainted: G W syzkaller #0 [ 919.364413][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 919.374464][T15972] Call Trace: [ 919.377747][T15972] [ 919.380679][T15972] __dump_stack+0x21/0x24 [ 919.385008][T15972] dump_stack_lvl+0xee/0x150 [ 919.389590][T15972] ? __cfi_dump_stack_lvl+0x8/0x8 [ 919.394614][T15972] dump_stack+0x15/0x24 [ 919.398765][T15972] should_fail_ex+0x3d4/0x520 [ 919.403442][T15972] should_fail+0xb/0x10 [ 919.407676][T15972] should_fail_usercopy+0x1a/0x20 [ 919.412700][T15972] copyin+0x20/0xa0 [ 919.416501][T15972] _copy_from_iter+0x3e2/0xfd0 [ 919.421272][T15972] ? __cfi__copy_from_iter+0x10/0x10 [ 919.426554][T15972] ? __kasan_check_write+0x14/0x20 [ 919.432109][T15972] ? __build_skb_around+0x24f/0x470 [ 919.437309][T15972] ? check_stack_object+0x81/0x140 [ 919.442442][T15972] ? __check_object_size+0x45a/0x600 [ 919.447733][T15972] netlink_sendmsg+0x72c/0xbc0 [ 919.452764][T15972] ? __cfi_netlink_sendmsg+0x10/0x10 [ 919.458050][T15972] ? security_socket_sendmsg+0x93/0xb0 [ 919.463503][T15972] ? __cfi_netlink_sendmsg+0x10/0x10 [ 919.468816][T15972] ____sys_sendmsg+0x5a9/0x990 [ 919.473577][T15972] ? __sys_sendmsg_sock+0x40/0x40 [ 919.478689][T15972] ? import_iovec+0x7c/0xb0 [ 919.483281][T15972] ___sys_sendmsg+0x21c/0x290 [ 919.487952][T15972] ? __sys_sendmsg+0x270/0x270 [ 919.492717][T15972] ? __kasan_check_write+0x14/0x20 [ 919.497827][T15972] ? proc_fail_nth_write+0x17a/0x1f0 [ 919.503107][T15972] ? vfs_write+0x9d6/0xca0 [ 919.507529][T15972] ? __fdget+0x19c/0x220 [ 919.511776][T15972] __x64_sys_sendmsg+0x1f0/0x2c0 [ 919.516739][T15972] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 919.522213][T15972] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 919.528377][T15972] x64_sys_call+0x171/0x9a0 [ 919.532881][T15972] do_syscall_64+0x4c/0xa0 [ 919.537290][T15972] ? clear_bhb_loop+0x30/0x80 [ 919.542049][T15972] ? clear_bhb_loop+0x30/0x80 [ 919.546899][T15972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 919.552888][T15972] RIP: 0033:0x7f36aa98ebe9 [ 919.557413][T15972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.577110][T15972] RSP: 002b:00007f36ab847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.585524][T15972] RAX: ffffffffffffffda RBX: 00007f36aabc6180 RCX: 00007f36aa98ebe9 [ 919.593583][T15972] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 919.601558][T15972] RBP: 00007f36ab847090 R08: 0000000000000000 R09: 0000000000000000 [ 919.609525][T15972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.617500][T15972] R13: 00007f36aabc6218 R14: 00007f36aabc6180 R15: 00007ffe6f827638 [ 919.625474][T15972] [ 919.966930][T15981] tipc: Enabled bearer , priority 0 [ 920.107008][T15983] tipc: Enabled bearer , priority 0 [ 920.506077][T15976] tipc: Disabling bearer [ 920.634488][T15983] tipc: Disabling bearer [ 921.812620][ T28] audit: type=1400 audit(1757265891.458:1135): avc: denied { write } for pid=16024 comm="syz.5.4641" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 922.050421][T16032] block device autoloading is deprecated and will be removed. [ 922.101082][T14705] kernel write not supported for file bpf-prog (pid: 14705 comm: kworker/1:2) [ 922.222076][T16047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 922.325181][T16052] FAULT_INJECTION: forcing a failure. [ 922.325181][T16052] name failslab, interval 1, probability 0, space 0, times 0 [ 922.338004][T16052] CPU: 1 PID: 16052 Comm: syz.3.4648 Tainted: G W syzkaller #0 [ 922.346952][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 922.357008][T16052] Call Trace: [ 922.360316][T16052] [ 922.363328][T16052] __dump_stack+0x21/0x24 [ 922.367654][T16052] dump_stack_lvl+0xee/0x150 [ 922.372233][T16052] ? __cfi_dump_stack_lvl+0x8/0x8 [ 922.377246][T16052] ? finish_task_switch+0x16b/0x7b0 [ 922.382530][T16052] ? __switch_to_asm+0x3a/0x60 [ 922.387385][T16052] dump_stack+0x15/0x24 [ 922.391540][T16052] should_fail_ex+0x3d4/0x520 [ 922.396218][T16052] __should_failslab+0xac/0xf0 [ 922.400981][T16052] ? usbdev_open+0xa4/0x760 [ 922.405473][T16052] should_failslab+0x9/0x20 [ 922.410050][T16052] __kmem_cache_alloc_node+0x3d/0x2c0 [ 922.415402][T16052] ? usbdev_open+0xa4/0x760 [ 922.419879][T16052] kmalloc_trace+0x29/0xb0 [ 922.424272][T16052] usbdev_open+0xa4/0x760 [ 922.428574][T16052] ? kobject_get_unless_zero+0x15e/0x1e0 [ 922.434182][T16052] ? __kasan_check_write+0x14/0x20 [ 922.439342][T16052] ? __cfi_usbdev_open+0x10/0x10 [ 922.444261][T16052] ? preempt_schedule_thunk+0x16/0x18 [ 922.449635][T16052] chrdev_open+0x5a5/0x680 [ 922.454067][T16052] ? __cfi_chrdev_open+0x10/0x10 [ 922.456142][T16054] tipc: Enabled bearer , priority 0 [ 922.459038][T16052] ? fsnotify_perm+0x3e9/0x5b0 [ 922.470365][T16052] do_dentry_open+0x88e/0x1260 [ 922.475141][T16052] ? __cfi_chrdev_open+0x10/0x10 [ 922.480087][T16052] vfs_open+0x73/0x80 [ 922.484171][T16052] path_openat+0x2681/0x2f50 [ 922.488760][T16052] ? do_filp_open+0x3c0/0x3c0 [ 922.493434][T16052] ? preempt_schedule_irq+0xbb/0x110 [ 922.498709][T16052] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 922.504414][T16052] do_filp_open+0x1c1/0x3c0 [ 922.508901][T16052] ? __cfi_do_filp_open+0x10/0x10 [ 922.513908][T16052] ? alloc_fd+0x4e6/0x590 [ 922.518221][T16052] do_sys_openat2+0x185/0x7e0 [ 922.522891][T16052] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 922.528606][T16052] ? do_sys_open+0xe0/0xe0 [ 922.533017][T16052] ? sysvec_reschedule_ipi+0x78/0x80 [ 922.538292][T16052] __x64_sys_openat+0x136/0x160 [ 922.543140][T16052] x64_sys_call+0x783/0x9a0 [ 922.547633][T16052] do_syscall_64+0x4c/0xa0 [ 922.552028][T16052] ? clear_bhb_loop+0x30/0x80 [ 922.556804][T16052] ? clear_bhb_loop+0x30/0x80 [ 922.561476][T16052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.567361][T16052] RIP: 0033:0x7f42e538d550 [ 922.571783][T16052] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 922.591398][T16052] RSP: 002b:00007f42e6193b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 922.599802][T16052] RAX: ffffffffffffffda RBX: 0000000000001501 RCX: 00007f42e538d550 [ 922.607759][T16052] RDX: 0000000000001501 RSI: 00007f42e6193c10 RDI: 00000000ffffff9c [ 922.615711][T16052] RBP: 00007f42e6193c10 R08: 0000000000000000 R09: 0000000000000000 [ 922.623662][T16052] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 922.631625][T16052] R13: 00007f42e55c6218 R14: 00007f42e55c6180 R15: 00007ffd44de2558 [ 922.639794][T16052] [ 922.650727][T16048] tipc: Disabling bearer [ 923.636153][T15088] udevd[15088]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 925.389414][T16106] input: syz1 as /devices/virtual/input/input267 [ 926.453575][ T28] audit: type=1400 audit(1757265895.308:1136): avc: denied { read write } for pid=16105 comm="syz.3.4663" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 926.651005][ T28] audit: type=1400 audit(1757265895.308:1137): avc: denied { open } for pid=16105 comm="syz.3.4663" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 926.677549][T16119] tipc: Enabled bearer , priority 0 [ 926.692341][T16128] 9p: Unknown Cache mode fsca [ 926.769997][T16119] tipc: Disabling bearer [ 927.303208][T14705] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 927.483216][T14705] usb 5-1: Using ep0 maxpacket: 8 [ 927.490417][T14705] usb 5-1: config 1 interface 0 altsetting 18 bulk endpoint 0x1 has invalid maxpacket 64 [ 927.500518][T14705] usb 5-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 927.514693][T14705] usb 5-1: config 1 interface 0 has no altsetting 0 [ 927.523337][T14705] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 927.533596][T14705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.541923][T14705] usb 5-1: Product: 徶ꐺ쬓꣦뎗ꐛꥎ䑇琮꒐履癈䋸좡䊤䌽虉ᗯۏⲻ퀝ᅖ쥭⴬빐䋰㮾㟓疒闸완엢걌碵阂༧墢쨲腁᰽☐洴㰬솦㢐뀯ꊵ叠㿺ᗧƗﻲ࢚禈ힴ떠뻬湷킷Ƴ揖娇퐹嗙膱ᴞ陪㞺ࣻ㝶兝敍ඈ↟⏃偠䉹䭃 [ 927.572577][T14705] usb 5-1: Manufacturer: ␉ [ 927.577246][T14705] usb 5-1: SerialNumber: 㻜ﵵ煐䎧玨襬ᝒ覷禅ꈱ姐䯋ゑ嬅̥뱅澕瑴栌㚒Ӟᦹ讱궼⍹澿褰䧭ᣅ㡣챩酊佻옣▎㷍莒 [ 927.581121][T16144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 927.600550][T16144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 928.063795][T16164] 9p: Unknown Cache mode fsca [ 928.268643][T16144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.284876][T16144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.306649][T16144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.322474][T16144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.354295][T16144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.363278][T16144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.413374][T14705] usb 5-1: USB disconnect, device number 10 [ 928.506079][T16173] tipc: Enabled bearer , priority 0 [ 928.537986][T16174] tipc: Enabled bearer , priority 0 [ 928.594665][T16173] tipc: Disabling bearer [ 928.614336][T16174] tipc: Disabling bearer [ 928.798772][T16183] tipc: Enabled bearer , priority 0 [ 928.864552][T16183] tipc: Disabling bearer [ 930.487202][T16211] block device autoloading is deprecated and will be removed. [ 930.495177][T16211] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 932.798560][T16238] tipc: Enabled bearer , priority 0 [ 932.955406][T16236] tipc: Disabling bearer [ 933.113185][T14705] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 933.289926][ T1481] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 933.383271][T14705] usb 4-1: Using ep0 maxpacket: 8 [ 933.410390][T14705] usb 4-1: config 1 interface 0 altsetting 18 bulk endpoint 0x1 has invalid maxpacket 64 [ 933.422965][T14705] usb 4-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 933.437741][T14705] usb 4-1: config 1 interface 0 has no altsetting 0 [ 933.448613][T14705] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 933.459285][T14705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.468222][T14705] usb 4-1: Product: 徶ꐺ쬓꣦뎗ꐛꥎ䑇琮꒐履癈䋸좡䊤䌽虉ᗯۏⲻ퀝ᅖ쥭⴬빐䋰㮾㟓疒闸완엢걌碵阂༧墢쨲腁᰽☐洴㰬솦㢐뀯ꊵ叠㿺ᗧƗﻲ࢚禈ힴ떠뻬湷킷Ƴ揖娇퐹嗙膱ᴞ陪㞺ࣻ㝶兝敍ඈ↟⏃偠䉹䭃 [ 933.499220][T14705] usb 4-1: Manufacturer: ␉ [ 933.503869][T14705] usb 4-1: SerialNumber: 㻜ﵵ煐䎧玨襬ᝒ覷禅ꈱ姐䯋ゑ嬅̥뱅澕瑴栌㚒Ӟᦹ讱궼⍹澿褰䧭ᣅ㡣챩酊佻옣▎㷍莒 [ 933.520285][T16243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 933.527731][T16243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 933.593140][ T1481] usb 5-1: Using ep0 maxpacket: 8 [ 933.593186][ T335] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 933.600175][ T1481] usb 5-1: config 1 interface 0 altsetting 18 bulk endpoint 0x1 has invalid maxpacket 64 [ 933.615932][ T1481] usb 5-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 933.629686][ T1481] usb 5-1: config 1 interface 0 has no altsetting 0 [ 933.638097][ T1481] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 933.647732][ T1481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.655802][ T1481] usb 5-1: Product: 徶ꐺ쬓꣦뎗ꐛꥎ䑇琮꒐履癈䋸좡䊤䌽虉ᗯۏⲻ퀝ᅖ쥭⴬빐䋰㮾㟓疒闸완엢걌碵阂༧墢쨲腁᰽☐洴㰬솦㢐뀯ꊵ叠㿺ᗧƗﻲ࢚禈ힴ떠뻬湷킷Ƴ揖娇퐹嗙膱ᴞ陪㞺ࣻ㝶兝敍ඈ↟⏃偠䉹䭃 [ 933.682933][ T1481] usb 5-1: Manufacturer: ␉ [ 933.687588][ T1481] usb 5-1: SerialNumber: 㻜ﵵ煐䎧玨襬ᝒ覷禅ꈱ姐䯋ゑ嬅̥뱅澕瑴栌㚒Ӟᦹ讱궼⍹澿褰䧭ᣅ㡣챩酊佻옣▎㷍莒 [ 933.704528][T16248] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 933.711904][T16248] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 933.794298][ T335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.805523][ T335] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 933.814736][ T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.823515][ T335] usb 6-1: config 0 descriptor?? [ 933.925848][T16261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4706'. [ 933.935254][T16261] tc_dump_action: action bad kind [ 933.937745][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.963332][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.987071][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.995970][T16261] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 934.003474][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.016236][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.024846][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.037534][T14705] usb 4-1: USB disconnect, device number 10 [ 934.072672][T16267] futex_wake_op: syz.2.4706 tries to shift op by 36; fix this program [ 934.123947][T16248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.132719][T16248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.142491][T16248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.151228][T16248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.161492][T16248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.186906][T16248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.316748][ T335] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 934.336137][ T335] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001B/input/input269 [ 934.345684][ T1481] usb 5-1: USB disconnect, device number 11 [ 934.435281][ T335] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 934.920320][T16286] tipc: Enabled bearer , priority 0 [ 935.055169][T16286] tipc: Disabling bearer [ 935.407532][ T335] usb 6-1: USB disconnect, device number 12 [ 935.733757][T16302] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 936.333301][ T335] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 936.348175][T16320] FAULT_INJECTION: forcing a failure. [ 936.348175][T16320] name failslab, interval 1, probability 0, space 0, times 0 [ 936.361068][T16320] CPU: 1 PID: 16320 Comm: syz.5.4722 Tainted: G W syzkaller #0 [ 936.370104][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 936.380447][T16320] Call Trace: [ 936.383726][T16320] [ 936.386655][T16320] __dump_stack+0x21/0x24 [ 936.391008][T16320] dump_stack_lvl+0xee/0x150 [ 936.395775][T16320] ? __cfi_dump_stack_lvl+0x8/0x8 [ 936.400884][T16320] ? __schedule+0xb8f/0x14e0 [ 936.405508][T16320] dump_stack+0x15/0x24 [ 936.409684][T16320] should_fail_ex+0x3d4/0x520 [ 936.414373][T16320] __should_failslab+0xac/0xf0 [ 936.419145][T16320] ? ref_tracker_alloc+0x139/0x430 [ 936.424516][T16320] should_failslab+0x9/0x20 [ 936.429005][T16320] __kmem_cache_alloc_node+0x3d/0x2c0 [ 936.434365][T16320] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 936.440092][T16320] ? ref_tracker_alloc+0x139/0x430 [ 936.445219][T16320] kmalloc_trace+0x29/0xb0 [ 936.449745][T16320] ref_tracker_alloc+0x139/0x430 [ 936.454687][T16320] ? sysvec_reschedule_ipi+0x78/0x80 [ 936.460005][T16320] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 936.465453][T16320] ? slab_post_alloc_hook+0x6d/0x2d0 [ 936.470737][T16320] dst_init+0xc4/0x3d0 [ 936.474791][T16320] ? __cfi_ip6_dst_gc+0x10/0x10 [ 936.479634][T16320] dst_alloc+0x191/0x1e0 [ 936.484036][T16320] ip6_create_rt_rcu+0x213/0x530 [ 936.489307][T16320] ? trace_raw_output_fib6_table_lookup+0x450/0x450 [ 936.496082][T16320] ip6_pol_route_lookup+0x13e6/0x1730 [ 936.501476][T16320] ? __cfi_ip6_pol_route_lookup+0x10/0x10 [ 936.507341][T16320] ? __kasan_kmalloc+0x95/0xb0 [ 936.512120][T16320] ? __kmalloc+0xb1/0x1e0 [ 936.516474][T16320] ? sock_kmalloc+0x99/0xf0 [ 936.521000][T16320] ? __ipv6_sock_mc_join+0x2fd/0x620 [ 936.526298][T16320] ? do_ipv6_setsockopt+0x2607/0x39a0 [ 936.531677][T16320] ? ipv6_setsockopt+0x59/0x1a0 [ 936.536538][T16320] ? udpv6_setsockopt+0x92/0xb0 [ 936.541398][T16320] ? sock_common_setsockopt+0xb1/0xc0 [ 936.546789][T16320] fib6_rule_lookup+0x1d7/0x580 [ 936.551657][T16320] ? __cfi_ip6_pol_route_lookup+0x10/0x10 [ 936.557388][T16320] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 936.562751][T16320] ? memcpy+0x56/0x70 [ 936.566725][T16320] rt6_lookup+0x110/0x1c0 [ 936.571051][T16320] ? __cfi_rt6_lookup+0x10/0x10 [ 936.575908][T16320] ? __kmalloc+0xb1/0x1e0 [ 936.580252][T16320] ? memcpy+0x56/0x70 [ 936.584225][T16320] __ipv6_sock_mc_join+0x472/0x620 [ 936.589356][T16320] ipv6_sock_mc_join_ssm+0x2b/0x40 [ 936.594464][T16320] do_ipv6_setsockopt+0x2607/0x39a0 [ 936.599662][T16320] ? __cpupri_find+0x42/0x210 [ 936.604337][T16320] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 936.609906][T16320] ? __kasan_check_read+0x11/0x20 [ 936.614956][T16320] ? __cpupri_find+0x42/0x210 [ 936.619644][T16320] ? cpupri_find_fitness+0xe4/0x2a0 [ 936.624870][T16320] ? __cfi_rt_task_fits_cpu+0x10/0x10 [ 936.630262][T16320] ? find_lowest_rq+0x17d/0x580 [ 936.635143][T16320] ? pick_next_pushable_task+0x210/0x210 [ 936.640790][T16320] ? __kasan_check_write+0x14/0x20 [ 936.645923][T16320] ? push_rt_task+0x35f/0x5b0 [ 936.650613][T16320] ? __cfi_push_rt_tasks+0x10/0x10 [ 936.655731][T16320] ? _raw_spin_unlock+0x4c/0x70 [ 936.660598][T16320] ? __cfi_push_rt_tasks+0x10/0x10 [ 936.665723][T16320] ? finish_task_switch+0x16b/0x7b0 [ 936.670930][T16320] ? __switch_to_asm+0x3a/0x60 [ 936.675794][T16320] ? __schedule+0xb8f/0x14e0 [ 936.680372][T16320] ? release_firmware_map_entry+0x194/0x194 [ 936.686427][T16320] ? __kasan_check_read+0x11/0x20 [ 936.691539][T16320] ? preempt_schedule_irq+0xbb/0x110 [ 936.696911][T16320] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 936.702628][T16320] ? selinux_socket_setsockopt+0x21c/0x300 [ 936.708430][T16320] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 936.714601][T16320] ipv6_setsockopt+0x59/0x1a0 [ 936.719283][T16320] udpv6_setsockopt+0x92/0xb0 [ 936.724031][T16320] sock_common_setsockopt+0xb1/0xc0 [ 936.729218][T16320] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 936.735099][T16320] __sys_setsockopt+0x306/0x4e0 [ 936.739965][T16320] ? __cfi___sys_setsockopt+0x10/0x10 [ 936.745496][T16320] ? __kasan_check_write+0x14/0x20 [ 936.750598][T16320] ? fpregs_restore_userregs+0x128/0x260 [ 936.756229][T16320] __x64_sys_setsockopt+0xbf/0xd0 [ 936.761242][T16320] x64_sys_call+0x124/0x9a0 [ 936.765732][T16320] do_syscall_64+0x4c/0xa0 [ 936.770136][T16320] ? clear_bhb_loop+0x30/0x80 [ 936.774901][T16320] ? clear_bhb_loop+0x30/0x80 [ 936.779567][T16320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 936.785445][T16320] RIP: 0033:0x7f0338d8ebe9 [ 936.790032][T16320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.809632][T16320] RSP: 002b:00007f0339ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 936.818046][T16320] RAX: ffffffffffffffda RBX: 00007f0338fc6180 RCX: 00007f0338d8ebe9 [ 936.826094][T16320] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000008 [ 936.834320][T16320] RBP: 00007f0339ca8090 R08: 0000000000000108 R09: 0000000000000000 [ 936.842374][T16320] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 936.850348][T16320] R13: 00007f0338fc6218 R14: 00007f0338fc6180 R15: 00007fffb0177a58 [ 936.858344][T16320] [ 937.073554][ T335] usb 5-1: Using ep0 maxpacket: 8 [ 937.100775][ T335] usb 5-1: config 1 interface 0 altsetting 18 bulk endpoint 0x1 has invalid maxpacket 64 [ 937.117054][ T335] usb 5-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 937.130536][ T335] usb 5-1: config 1 interface 0 has no altsetting 0 [ 937.139693][ T335] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 937.220930][ T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.263197][ T335] usb 5-1: Product: 徶ꐺ쬓꣦뎗ꐛꥎ䑇琮꒐履癈䋸좡䊤䌽虉ᗯۏⲻ퀝ᅖ쥭⴬빐䋰㮾㟓疒闸완엢걌碵阂༧墢쨲腁᰽☐洴㰬솦㢐뀯ꊵ叠㿺ᗧƗﻲ࢚禈ힴ떠뻬湷킷Ƴ揖娇퐹嗙膱ᴞ陪㞺ࣻ㝶兝敍ඈ↟⏃偠䉹䭃 [ 937.383134][ T335] usb 5-1: Manufacturer: ␉ [ 937.387795][ T335] usb 5-1: SerialNumber: 㻜ﵵ煐䎧玨襬ᝒ覷禅ꈱ姐䯋ゑ嬅̥뱅澕瑴栌㚒Ӟᦹ讱궼⍹澿褰䧭ᣅ㡣챩酊佻옣▎㷍莒 [ 937.408536][T16306] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 937.416852][T16306] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 937.702823][T16342] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 937.755908][T16344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4730'. [ 937.765161][T16344] tc_dump_action: action bad kind [ 937.827475][T16344] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 937.839403][T16344] futex_wake_op: syz.2.4730 tries to shift op by 36; fix this program [ 937.844451][T16306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.857119][T16306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.870940][T16306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.880298][T16306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.890009][T16306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.899097][T16306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.983308][ T335] usb 5-1: USB disconnect, device number 12 [ 938.912486][T16365] netlink: 'syz.5.4736': attribute type 13 has an invalid length. [ 938.976334][T16365] gretap0: refused to change device tx_queue_len [ 938.986137][T16365] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 939.073239][ T336] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 939.158544][T16373] input: syz1 as /devices/virtual/input/input270 [ 939.442594][ T28] audit: type=1400 audit(1757265909.088:1138): avc: denied { read } for pid=16382 comm="syz.5.4742" path="socket:[88887]" dev="sockfs" ino=88887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 939.804403][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.815562][ T336] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 939.824693][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.833459][ T336] usb 3-1: config 0 descriptor?? [ 940.242205][ T336] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 940.251682][ T336] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001C/input/input271 [ 940.354223][ T336] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 941.222534][T16409] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 941.261632][T16416] xt_TCPMSS: Only works on TCP SYN packets [ 941.368131][ T28] audit: type=1400 audit(1757265911.018:1139): avc: denied { bind } for pid=16415 comm="syz.5.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 941.563192][ T336] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 941.753138][ T336] usb 4-1: Using ep0 maxpacket: 8 [ 941.760096][ T336] usb 4-1: config 1 interface 0 altsetting 18 bulk endpoint 0x1 has invalid maxpacket 64 [ 941.770370][ T336] usb 4-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 941.776718][ T8825] usb 3-1: USB disconnect, device number 43 [ 941.783505][ C0] keytouch 0003:0926:3333.001C: usb_submit_urb(ctrl) failed: -19 [ 941.797691][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 941.805210][ T336] usb 4-1: config 1 interface 0 has no altsetting 0 [ 941.816679][ T336] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 941.826376][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.834691][ T336] usb 4-1: Product: 徶ꐺ쬓꣦뎗ꐛꥎ䑇琮꒐履癈䋸좡䊤䌽虉ᗯۏⲻ퀝ᅖ쥭⴬빐䋰㮾㟓疒闸완엢걌碵阂༧墢쨲腁᰽☐洴㰬솦㢐뀯ꊵ叠㿺ᗧƗﻲ࢚禈ힴ떠뻬湷킷Ƴ揖娇퐹嗙膱ᴞ陪㞺ࣻ㝶兝敍ඈ↟⏃偠䉹䭃 [ 941.862325][ T336] usb 4-1: Manufacturer: ␉ [ 941.866941][ T336] usb 4-1: SerialNumber: 㻜ﵵ煐䎧玨襬ᝒ覷禅ꈱ姐䯋ゑ嬅̥뱅澕瑴栌㚒Ӟᦹ讱궼⍹澿褰䧭ᣅ㡣챩酊佻옣▎㷍莒 [ 941.883826][T16418] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 941.891013][T16418] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 942.138845][T16425] 9pnet_fd: Insufficient options for proto=fd [ 943.073380][T16418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.175255][T16418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.226152][T16418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.243871][T16418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.273826][T16418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.293260][T16418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.306504][ T336] usb 4-1: USB disconnect, device number 11 [ 943.556343][ T8825] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 943.763195][ T8825] usb 5-1: Using ep0 maxpacket: 32 [ 943.770518][ T8825] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 943.779606][ T8825] usb 5-1: config 0 has no interface number 0 [ 943.826494][ T8825] usb 5-1: config 0 interface 184 has no altsetting 0 [ 943.837263][ T8825] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 943.850096][ T8825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.858520][T16452] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 943.868001][ T8825] usb 5-1: Product: syz [ 943.872389][ T8825] usb 5-1: Manufacturer: syz [ 943.879761][ T8825] usb 5-1: SerialNumber: syz [ 943.888605][ T8825] usb 5-1: config 0 descriptor?? [ 943.888840][T16454] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4763'. [ 943.896179][ T8825] smsc75xx v1.0.0 [ 943.902995][T16454] tc_dump_action: action bad kind [ 943.931445][T16454] futex_wake_op: syz.6.4763 tries to shift op by 36; fix this program [ 944.093471][T16459] tipc: Started in network mode [ 944.098437][T16459] tipc: Node identity 6e1f63d57368, cluster identity 4711 [ 944.106012][T16459] tipc: Enabled bearer , priority 0 [ 944.878634][T16459] tipc: Disabling bearer [ 945.511442][ T336] tipc: Node number set to 494363605 [ 945.527134][T16479] netlink: 'syz.2.4770': attribute type 12 has an invalid length. [ 945.536286][T16479] netlink: 'syz.2.4770': attribute type 29 has an invalid length. [ 945.545343][T16479] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4770'. [ 945.554636][T16479] netlink: 'syz.2.4770': attribute type 2 has an invalid length. [ 945.562454][T16479] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4770'. [ 945.574263][T16479] netlink: 'syz.2.4770': attribute type 12 has an invalid length. [ 945.582113][T16479] netlink: 'syz.2.4770': attribute type 29 has an invalid length. [ 945.590747][T16479] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4770'. [ 945.613352][T16479] netlink: 'syz.2.4770': attribute type 2 has an invalid length. [ 945.621157][T16479] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4770'. [ 945.663679][T16487] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 945.673584][ T336] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 945.681044][T16489] input: syz1 as /devices/virtual/input/input272 [ 945.816798][T16440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.833069][T16440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.844575][ T8825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 945.856027][ T8825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 945.874260][ T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.517334][ T336] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 946.527119][ T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.542081][ T336] usb 6-1: config 0 descriptor?? [ 947.210496][ T8825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 947.258057][ T8825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 947.430345][ T336] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 947.443161][ T8825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 947.449111][ T336] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001D/input/input273 [ 947.452755][ T8825] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 947.523269][ T8825] usb 5-1: USB disconnect, device number 13 [ 947.546176][ T336] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 947.621524][T16511] tipc: Enabled bearer , priority 0 [ 947.714509][T16511] tipc: Disabling bearer [ 947.832933][T16533] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 948.135153][ T8825] usb 6-1: USB disconnect, device number 13 [ 948.633477][T16551] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4792'. [ 948.642496][T16551] tc_dump_action: action bad kind [ 948.908170][T16558] FAULT_INJECTION: forcing a failure. [ 948.908170][T16558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.921429][T16558] CPU: 1 PID: 16558 Comm: syz.5.4794 Tainted: G W syzkaller #0 [ 948.930377][T16558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 948.940434][T16558] Call Trace: [ 948.943717][T16558] [ 948.946650][T16558] __dump_stack+0x21/0x24 [ 948.949819][T16551] futex_wake_op: syz.6.4792 tries to shift op by 36; fix this program [ 948.950983][T16558] dump_stack_lvl+0xee/0x150 [ 948.963809][T16558] ? __cfi_dump_stack_lvl+0x8/0x8 [ 948.968837][T16558] dump_stack+0x15/0x24 [ 948.973013][T16558] should_fail_ex+0x3d4/0x520 [ 948.977704][T16558] should_fail+0xb/0x10 [ 948.981860][T16558] should_fail_usercopy+0x1a/0x20 [ 948.986878][T16558] _copy_from_user+0x1e/0xc0 [ 948.991460][T16558] __se_sys_memfd_create+0x131/0x3b0 [ 948.996732][T16558] __x64_sys_memfd_create+0x5b/0x70 [ 949.001937][T16558] x64_sys_call+0x235/0x9a0 [ 949.006511][T16558] do_syscall_64+0x4c/0xa0 [ 949.010906][T16558] ? clear_bhb_loop+0x30/0x80 [ 949.015566][T16558] ? clear_bhb_loop+0x30/0x80 [ 949.020228][T16558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 949.026104][T16558] RIP: 0033:0x7f0338d8ebe9 [ 949.030514][T16558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.050102][T16558] RSP: 002b:00007f0339ce9e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 949.058502][T16558] RAX: ffffffffffffffda RBX: 0000000000005505 RCX: 00007f0338d8ebe9 [ 949.066454][T16558] RDX: 00007f0339ce9ef0 RSI: 0000000000000000 RDI: 00007f0338e127e8 [ 949.074405][T16558] RBP: 0000200000002480 R08: 00007f0339ce9bb7 R09: 00007f0339ce9e40 [ 949.082456][T16558] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100 [ 949.090589][T16558] R13: 00007f0339ce9ef0 R14: 00007f0339ce9eb0 R15: 00002000000005c0 [ 949.099693][T16558] [ 949.128501][T16564] sock: sock_timestamping_bind_phc: sock not bind to device [ 949.149275][T16572] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 949.190676][T16576] printk: syz.6.4797 (16576): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 949.232739][T16575] tipc: Enabled bearer , priority 0 [ 949.263683][T16575] tipc: Disabling bearer [ 949.563414][ T8825] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 949.645664][ T28] audit: type=1400 audit(1757265919.298:1140): avc: denied { read } for pid=16593 comm="syz.5.4807" name="/" dev="configfs" ino=14338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 949.668712][ T28] audit: type=1400 audit(1757265919.298:1141): avc: denied { open } for pid=16593 comm="syz.5.4807" path="/" dev="configfs" ino=14338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 949.813190][ T8825] usb 5-1: Using ep0 maxpacket: 8 [ 949.821596][ T8825] usb 5-1: config 1 interface 0 altsetting 18 bulk endpoint 0x1 has invalid maxpacket 64 [ 949.846381][ T8825] usb 5-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 949.861619][ T8825] usb 5-1: config 1 interface 0 has no altsetting 0 [ 949.870592][ T8825] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 949.879850][ T8825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.888044][ T8825] usb 5-1: Product: 徶ꐺ쬓꣦뎗ꐛꥎ䑇琮꒐履癈䋸좡䊤䌽虉ᗯۏⲻ퀝ᅖ쥭⴬빐䋰㮾㟓疒闸완엢걌碵阂༧墢쨲腁᰽☐洴㰬솦㢐뀯ꊵ叠㿺ᗧƗﻲ࢚禈ힴ떠뻬湷킷Ƴ揖娇퐹嗙膱ᴞ陪㞺ࣻ㝶兝敍ඈ↟⏃偠䉹䭃 [ 949.925735][ T8825] usb 5-1: Manufacturer: ␉ [ 949.933267][ T8825] usb 5-1: SerialNumber: 㻜ﵵ煐䎧玨襬ᝒ覷禅ꈱ姐䯋ゑ嬅̥뱅澕瑴栌㚒Ӟᦹ讱궼⍹澿褰䧭ᣅ㡣챩酊佻옣▎㷍莒 [ 949.961200][T16582] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.972795][T16582] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 950.013249][T16609] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 950.489197][T16582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.503648][T16582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.511803][T16630] FAULT_INJECTION: forcing a failure. [ 950.511803][T16630] name failslab, interval 1, probability 0, space 0, times 0 [ 950.523970][T16582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.532956][T16582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.544056][T16630] CPU: 0 PID: 16630 Comm: syz.6.4819 Tainted: G W syzkaller #0 [ 950.553057][T16630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 950.563113][T16630] Call Trace: [ 950.566394][T16630] [ 950.569332][T16630] __dump_stack+0x21/0x24 [ 950.573666][T16630] dump_stack_lvl+0xee/0x150 [ 950.578269][T16630] ? __cfi_dump_stack_lvl+0x8/0x8 [ 950.583326][T16630] ? call_rcu+0xb83/0xf90 [ 950.587673][T16630] ? exit_to_user_mode_loop+0x9b/0xb0 [ 950.593148][T16630] dump_stack+0x15/0x24 [ 950.597326][T16630] should_fail_ex+0x3d4/0x520 [ 950.602110][T16630] __should_failslab+0xac/0xf0 [ 950.607106][T16630] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 950.613111][T16630] should_failslab+0x9/0x20 [ 950.617634][T16630] __kmem_cache_alloc_node+0x3d/0x2c0 [ 950.623142][T16630] ? __cfi_mutex_lock+0x10/0x10 [ 950.628098][T16630] ? delete_node+0x2b3/0xa60 [ 950.632813][T16630] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 950.638805][T16630] __kmalloc+0xa1/0x1e0 [ 950.642974][T16630] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 950.649065][T16630] tracepoint_probe_unregister+0x1e6/0x8b0 [ 950.654864][T16630] bpf_probe_unregister+0x61/0x70 [ 950.659950][T16630] bpf_raw_tp_link_release+0x63/0x90 [ 950.665333][T16630] bpf_link_free+0x13a/0x390 [ 950.670023][T16630] ? bpf_link_put_deferred+0x20/0x20 [ 950.675339][T16630] ? security_file_free+0xd8/0xf0 [ 950.680375][T16630] bpf_link_release+0x15f/0x170 [ 950.685233][T16630] ? __cfi_bpf_link_release+0x10/0x10 [ 950.690729][T16630] __fput+0x1fc/0x8f0 [ 950.694772][T16630] ____fput+0x15/0x20 [ 950.698771][T16630] task_work_run+0x1db/0x240 [ 950.703390][T16630] ? __cfi_task_work_run+0x10/0x10 [ 950.708511][T16630] ? __cfi___close_range+0x10/0x10 [ 950.713633][T16630] exit_to_user_mode_loop+0x9b/0xb0 [ 950.718840][T16630] exit_to_user_mode_prepare+0x5a/0xa0 [ 950.724311][T16630] syscall_exit_to_user_mode+0x1a/0x30 [ 950.729909][T16630] do_syscall_64+0x58/0xa0 [ 950.734334][T16630] ? clear_bhb_loop+0x30/0x80 [ 950.739111][T16630] ? clear_bhb_loop+0x30/0x80 [ 950.743810][T16630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.749721][T16630] RIP: 0033:0x7f36aa98ebe9 [ 950.754147][T16630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.773947][T16630] RSP: 002b:00007f36ab889038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 950.782386][T16630] RAX: 0000000000000000 RBX: 00007f36aabc5fa0 RCX: 00007f36aa98ebe9 [ 950.790373][T16630] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 950.798343][T16630] RBP: 00007f36ab889090 R08: 0000000000000000 R09: 0000000000000000 [ 950.806405][T16630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.814489][T16630] R13: 00007f36aabc6038 R14: 00007f36aabc5fa0 R15: 00007ffe6f827638 [ 950.822663][T16630] [ 950.830152][ T8825] usb 5-1: USB disconnect, device number 14 [ 950.831917][T16630] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 950.836482][ T8825] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 950.848436][T16630] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 950.866643][T16630] CPU: 0 PID: 16630 Comm: syz.6.4819 Tainted: G W syzkaller #0 [ 950.875568][T16630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 950.885726][T16630] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 950.891922][T16630] Code: 80 3c 30 00 74 05 e8 24 6d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 950.911605][T16630] RSP: 0018:ffffc90001117590 EFLAGS: 00010096 [ 950.917773][T16630] RAX: 1ffff110223d0df6 RBX: ffff888111e86fa8 RCX: ffff888132c11440 [ 950.926156][T16630] RDX: ffff88816210e540 RSI: 0000000000000001 RDI: ffffc90000eab000 [ 950.934673][T16630] RBP: ffffc900011175d0 R08: 0000000000000000 R09: fffffbfff0ee4bb6 [ 950.942713][T16630] R10: 00000000b720eca3 R11: 1ffffffff0ee4bb5 R12: 0000000000000001 [ 950.950678][T16630] R13: ffff888111e86fa8 R14: dffffc0000000000 R15: ffffffff817125b0 [ 950.958731][T16630] FS: 00007f36ab8896c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 950.967707][T16630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.974298][T16630] CR2: 0000001b33123ffc CR3: 0000000131b89000 CR4: 00000000003506b0 [ 950.982449][T16630] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 950.990420][T16630] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 950.998393][T16630] Call Trace: [ 951.001671][T16630] [ 951.004596][T16630] __schedule+0x1263/0x14e0 [ 951.009269][T16630] ? 0xffffffffa0002778 [ 951.013504][T16630] ? release_firmware_map_entry+0x194/0x194 [ 951.019392][T16630] preempt_schedule_notrace+0xca/0x110 [ 951.024949][T16630] ? __cfi_preempt_schedule_notrace+0x10/0x10 [ 951.031010][T16630] preempt_schedule_notrace_thunk+0x16/0x18 [ 951.037043][T16630] rcu_is_watching+0x7b/0xb0 [ 951.042075][T16630] kernel_text_address+0x80/0xd0 [ 951.047554][T16630] __kernel_text_address+0xd/0x30 [ 951.052847][T16630] unwind_get_return_address+0x4d/0x90 [ 951.058316][T16630] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 951.064578][T16630] arch_stack_walk+0xfc/0x150 [ 951.069299][T16630] stack_trace_save+0x98/0xe0 [ 951.074153][T16630] ? __cfi_stack_trace_save+0x10/0x10 [ 951.079527][T16630] ? check_preempt_wakeup+0x5be/0xbc0 [ 951.084988][T16630] ? memset+0x35/0x40 [ 951.088984][T16630] kasan_set_track+0x4b/0x70 [ 951.093707][T16630] ? kasan_set_track+0x4b/0x70 [ 951.098701][T16630] ? kasan_save_free_info+0x31/0x50 [ 951.104093][T16630] ? ____kasan_slab_free+0x132/0x180 [ 951.109478][T16630] ? __kasan_slab_free+0x11/0x20 [ 951.114410][T16630] ? slab_free_freelist_hook+0xc2/0x190 [ 951.120060][T16630] ? kmem_cache_free+0x12d/0x300 [ 951.124986][T16630] ? security_file_free+0xd8/0xf0 [ 951.130091][T16630] ? __fput+0x5f4/0x8f0 [ 951.134236][T16630] ? ____fput+0x15/0x20 [ 951.138372][T16630] ? task_work_run+0x1db/0x240 [ 951.143133][T16630] ? exit_to_user_mode_loop+0x9b/0xb0 [ 951.148529][T16630] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 951.154242][T16630] ? syscall_exit_to_user_mode+0x1a/0x30 [ 951.159889][T16630] ? do_syscall_64+0x58/0xa0 [ 951.164468][T16630] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.170607][T16630] ? kmem_cache_free+0x12d/0x300 [ 951.175805][T16630] kasan_save_free_info+0x31/0x50 [ 951.180821][T16630] ____kasan_slab_free+0x132/0x180 [ 951.185920][T16630] __kasan_slab_free+0x11/0x20 [ 951.190674][T16630] slab_free_freelist_hook+0xc2/0x190 [ 951.196037][T16630] ? security_file_free+0xd8/0xf0 [ 951.201245][T16630] kmem_cache_free+0x12d/0x300 [ 951.206013][T16630] security_file_free+0xd8/0xf0 [ 951.210875][T16630] __fput+0x5f4/0x8f0 [ 951.215115][T16630] ____fput+0x15/0x20 [ 951.219256][T16630] task_work_run+0x1db/0x240 [ 951.223846][T16630] ? __cfi_task_work_run+0x10/0x10 [ 951.228958][T16630] ? __cfi___close_range+0x10/0x10 [ 951.234277][T16630] exit_to_user_mode_loop+0x9b/0xb0 [ 951.239729][T16630] exit_to_user_mode_prepare+0x5a/0xa0 [ 951.245711][T16630] syscall_exit_to_user_mode+0x1a/0x30 [ 951.251360][T16630] do_syscall_64+0x58/0xa0 [ 951.255925][T16630] ? clear_bhb_loop+0x30/0x80 [ 951.260686][T16630] ? clear_bhb_loop+0x30/0x80 [ 951.265464][T16630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.271355][T16630] RIP: 0033:0x7f36aa98ebe9 [ 951.275777][T16630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.295468][T16630] RSP: 002b:00007f36ab889038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 951.303888][T16630] RAX: 0000000000000000 RBX: 00007f36aabc5fa0 RCX: 00007f36aa98ebe9 [ 951.312075][T16630] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 951.320034][T16630] RBP: 00007f36ab889090 R08: 0000000000000000 R09: 0000000000000000 [ 951.327989][T16630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.335939][T16630] R13: 00007f36aabc6038 R14: 00007f36aabc5fa0 R15: 00007ffe6f827638 [ 951.344135][T16630] [ 951.347143][T16630] Modules linked in: [ 951.351136][T16630] ---[ end trace 0000000000000000 ]--- [ 951.351170][ T8825] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 951.356734][T16630] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 951.363053][ T8825] CPU: 1 PID: 8825 Comm: kworker/1:5 Tainted: G D W syzkaller #0 [ 951.369363][T16630] Code: 80 3c 30 00 74 05 e8 24 6d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 951.378280][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 951.398046][T16630] RSP: 0018:ffffc90001117590 EFLAGS: 00010096 [ 951.408355][ T8825] Workqueue: usb_hub_wq hub_event [ 951.414486][T16630] RAX: 1ffff110223d0df6 RBX: ffff888111e86fa8 RCX: ffff888132c11440 [ 951.419580][ T8825] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 951.427702][T16630] RDX: ffff88816210e540 RSI: 0000000000000001 RDI: ffffc90000eab000 [ 951.433931][ T8825] Code: 80 3c 30 00 74 05 e8 24 6d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 951.441874][T16630] RBP: ffffc900011175d0 R08: 0000000000000000 R09: fffffbfff0ee4bb6 [ 951.461549][ T8825] RSP: 0018:ffffc900093af310 EFLAGS: 00010096 [ 951.469507][T16630] R10: 00000000b720eca3 R11: 1ffffffff0ee4bb5 R12: 0000000000000001 [ 951.475825][ T8825] RAX: 1ffff110223d0df6 RBX: ffff888111e86fa8 RCX: ffff88810a745100 [ 951.483874][T16630] R13: ffff888111e86fa8 R14: dffffc0000000000 R15: ffffffff817125b0 [ 951.491918][ T8825] RDX: ffff888115dc9440 RSI: 0000000000000001 RDI: ffffc90000eab000 [ 951.500161][T16630] FS: 00007f36ab8896c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 951.508141][ T8825] RBP: ffffc900093af350 R08: 0000000000000000 R09: fffffbfff0ee4bb6 [ 951.517078][T16630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.525069][ T8825] R10: 00000000b720eca3 R11: 1ffffffff0ee4bb5 R12: 0000000000000001 [ 951.531677][T16630] CR2: 0000001b33123ffc CR3: 0000000131b89000 CR4: 00000000003506b0 [ 951.539715][ T8825] R13: ffff888111e86fa8 R14: dffffc0000000000 R15: ffffffff817125b0 [ 951.547842][T16630] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 951.555787][ T8825] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 951.563756][T16630] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 951.572836][ T8825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.580885][T16630] Kernel panic - not syncing: Fatal exception [ 951.587886][ T8825] CR2: 0000001b33efd000 CR3: 000000010e760000 CR4: 00000000003506a0 [ 951.587907][ T8825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 951.587918][ T8825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 951.587930][ T8825] Call Trace: [ 951.587937][ T8825] [ 951.587947][ T8825] __schedule+0x1263/0x14e0 [ 951.587970][ T8825] ? release_firmware_map_entry+0x194/0x194 [ 951.587988][ T8825] ? __cfi_vprintk_store+0x10/0x10 [ 951.588006][ T8825] ? format_decode+0xbbf/0x1520 [ 951.588022][ T8825] ? preempt_schedule+0xa7/0xb0 [ 951.588039][ T8825] preempt_schedule_common+0x9b/0xf0 [ 951.588056][ T8825] preempt_schedule+0xa7/0xb0 [ 951.588072][ T8825] ? __cfi_preempt_schedule+0x10/0x10 [ 951.588087][ T8825] ? __cfi_console_unlock+0x10/0x10 [ 951.588106][ T8825] preempt_schedule_thunk+0x16/0x18 [ 951.588127][ T8825] ? vprintk_emit+0x3aa/0x410 [ 951.588144][ T8825] vprintk_emit+0x3af/0x410 [ 951.588162][ T8825] ? __cfi_vprintk_emit+0x10/0x10 [ 951.588179][ T8825] ? __stack_depot_save+0x36/0x480 [ 951.588195][ T8825] ? dev_vprintk_emit+0x15c/0x3d8 [ 951.588216][ T8825] dev_vprintk_emit+0x330/0x3d8 [ 951.588237][ T8825] ? __cfi_dev_vprintk_emit+0x8/0x8 [ 951.588256][ T8825] ? __kasan_slab_free+0x11/0x20 [ 951.588276][ T8825] ? ret_from_fork+0x1f/0x30 [ 951.588295][ T8825] dev_printk_emit+0xdd/0x120 [ 951.588317][ T8825] ? __cfi_dev_printk_emit+0x8/0x8 [ 951.588339][ T8825] __dev_printk+0x17f/0x1b0 [ 951.588355][ T8825] _dev_info+0x107/0x150 [ 951.588375][ T8825] ? __cfi__dev_info+0x8/0x8 [ 951.588399][ T8825] usb_disconnect+0xe3/0x860 [ 951.588420][ T8825] hub_event+0x1a78/0x4350 [ 951.588449][ T8825] ? __cfi_hub_event+0x10/0x10 [ 951.588469][ T8825] ? __kasan_check_write+0x14/0x20 [ 951.588491][ T8825] ? _raw_spin_lock_irq+0x8f/0xe0 [ 951.588506][ T8825] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 951.588522][ T8825] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 951.588546][ T8825] process_one_work+0x71f/0xc40 [ 951.588564][ T8825] worker_thread+0xd2e/0x11f0 [ 951.588580][ T8825] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 951.588606][ T8825] kthread+0x281/0x320 [ 951.588623][ T8825] ? __cfi_worker_thread+0x10/0x10 [ 951.588639][ T8825] ? __cfi_kthread+0x10/0x10 [ 951.588655][ T8825] ret_from_fork+0x1f/0x30 [ 951.588675][ T8825] [ 951.588681][ T8825] Modules linked in: [ 951.594749][ T8825] ---[ end trace 0000000000000000 ]--- [ 951.594766][ T8825] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 951.594793][ T8825] Code: 80 3c 30 00 74 05 e8 24 6d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 951.594816][ T8825] RSP: 0018:ffffc90001117590 EFLAGS: 00010096 [ 951.594831][ T8825] RAX: 1ffff110223d0df6 RBX: ffff888111e86fa8 RCX: ffff888132c11440 [ 951.594845][ T8825] RDX: ffff88816210e540 RSI: 0000000000000001 RDI: ffffc90000eab000 [ 951.594858][ T8825] RBP: ffffc900011175d0 R08: 0000000000000000 R09: fffffbfff0ee4bb6 [ 951.594870][ T8825] R10: 00000000b720eca3 R11: 1ffffffff0ee4bb5 R12: 0000000000000001 [ 951.594883][ T8825] R13: ffff888111e86fa8 R14: dffffc0000000000 R15: ffffffff817125b0 [ 951.594896][ T8825] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 951.594911][ T8825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.594924][ T8825] CR2: 0000001b33efd000 CR3: 000000010e760000 CR4: 00000000003506a0 [ 951.594939][ T8825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 951.594950][ T8825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 952.704763][T16630] Shutting down cpus with NMI [ 953.054044][T16630] Kernel Offset: disabled [ 953.058372][T16630] Rebooting in 86400 seconds..