last executing test programs: 30m40.223334453s ago: executing program 32 (id=1385): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 19m38.289804283s ago: executing program 1 (id=3893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x28}}, 0x0) 19m38.276919323s ago: executing program 1 (id=3894): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1350, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x131c, 0x2, [@TCA_MATCHALL_ACT={0x9cc, 0x2, [@m_ife={0xcc, 0xd, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000000}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff1b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x401, 0x3fc, 0x0, 0xab, 0x5}}}]}, {0x16, 0x6, "ca96f73706b3bd8a9e25fd6316dd4b379c43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x40, 0x6, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x8bc, 0x16, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ffffffe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0xa, 0x7, 0xa58, 0x1, 0x4, 0xffffffff, 0x7, 0x8000, 0xfffffff7, 0x8, 0x4, 0x3, 0x4a99790e, 0x1, 0x9, 0xffff49d2, 0x37ea, 0x5, 0x5, 0xfffffff8, 0x7, 0xf, 0x3, 0x2, 0x101, 0xfffffff2, 0x3, 0x5, 0x5df, 0x1, 0x3, 0x7f, 0xcf5, 0x6be, 0x1ff, 0x8, 0x2, 0x5, 0x401, 0xb, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x1, 0x0, 0x3, 0x6, 0xbe, 0x0, 0x4, 0x3, 0x4, 0x7, 0x5, 0x400, 0x1, 0x7, 0x0, 0x6, 0x80000001, 0x4e45, 0x7ff, 0x3ff, 0x65f, 0x9, 0x7d, 0x8, 0x7, 0x8000, 0x80, 0x6, 0x0, 0x8000, 0x9, 0x5, 0x7, 0xfff, 0x6, 0x81, 0xf4, 0x1ff, 0x6, 0x5, 0x6, 0x5, 0xffff, 0x2, 0x8, 0x2, 0xfffffff8, 0x2, 0x7, 0x7, 0x6, 0x1, 0x9, 0x58e, 0xdfb, 0x2, 0x3, 0xffff8001, 0x7455, 0x995a, 0x1, 0x1000, 0x1, 0x7fff, 0x8, 0x81, 0x9, 0x7f, 0x97d3, 0x3, 0xa, 0x0, 0x8, 0x40, 0x7fff, 0x8, 0xf, 0x1, 0x2, 0x5, 0x100, 0x0, 0x6, 0x2, 0x0, 0x10000, 0x6fd, 0x3, 0x800, 0x550, 0x9, 0x95, 0x6, 0x10, 0xffff6b02, 0x0, 0x101, 0x9, 0x6, 0x1, 0xf9, 0x6, 0xfffffffb, 0x9, 0x10001, 0xd4b, 0x4, 0x0, 0x100, 0x7, 0x1, 0xdf6, 0x8, 0x7f, 0x8e, 0xff, 0x4, 0x8, 0x6, 0xa12, 0x7, 0x3, 0x0, 0xa, 0x8000, 0x2, 0x8, 0x5, 0x0, 0x3, 0x7, 0x4ac5, 0x5, 0x9, 0xcc7, 0x8, 0x3, 0x3, 0x1ff, 0xe8, 0x3ff, 0x5, 0x3b8, 0x0, 0x80000000, 0x4, 0xa, 0x2, 0x6, 0x7f, 0x4, 0x4, 0x5, 0xdb, 0x4, 0x9, 0x4, 0x46, 0x2, 0x4, 0x1, 0x781, 0x7ff, 0xffffff4a, 0x80000001, 0x5, 0x1ff, 0x5, 0x1, 0xf, 0x9, 0x0, 0x5, 0x152a, 0xe, 0x2, 0x80000001, 0x4, 0x2, 0x8, 0x1ff, 0x401, 0xffff4065, 0x5, 0xf, 0x7, 0x9, 0x0, 0x6, 0x5, 0x8, 0xfffffffd, 0x80, 0x2, 0x7, 0x0, 0x9, 0xf, 0x3, 0xf73, 0x4, 0x4, 0x8, 0xd, 0x3, 0x3, 0x1, 0x8ac, 0x1ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7fffffff, 0x2, 0x7f, 0xb7e, 0x0, 0x3, 0x2, 0x2, 0x2, 0xc19, 0x1, 0x1, 0x126f29d5, 0x0, 0x5, 0x2, 0x2, 0x3, 0xcc19, 0x9, 0x200, 0x8, 0x8, 0x0, 0x8, 0x6, 0x1, 0xb, 0x9, 0x3, 0x200, 0x6, 0x7, 0x6526a70a, 0x401, 0x3, 0x8, 0x5, 0x9, 0x7fff, 0x4, 0x0, 0x1, 0x3ff, 0x100, 0x7, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x1, 0x3, 0xebe, 0x0, 0x4731719a, 0x2, 0xbdb, 0xc, 0x5, 0x0, 0x5, 0x5, 0x1, 0x5, 0x3, 0x4, 0x2, 0x1, 0xffffffff, 0x3, 0x461, 0x2, 0x3, 0x2, 0x40, 0x1, 0x7788, 0x4, 0x4, 0x9, 0x3, 0x4, 0xf, 0x4, 0x1, 0x80000001, 0x41, 0x9, 0x3, 0xb, 0xc, 0xff, 0x3, 0x7, 0x80, 0x3, 0x2, 0x9, 0x7, 0x5, 0x3ff, 0x9, 0x401, 0x4, 0xff, 0xb059, 0x4, 0x3, 0x0, 0xe56b, 0x4, 0x10001, 0x80, 0x101, 0x10001, 0x5, 0xfffff801, 0x9572, 0x401, 0x7, 0x6f30, 0x7, 0x5, 0x6, 0xff, 0x7, 0xe, 0x6, 0x3, 0xb8, 0x6, 0x0, 0xffffffff, 0x8, 0x1, 0x1, 0xfffd, 0x80000000, 0x9270, 0x8, 0x0, 0x5, 0x10000, 0x8, 0x81a, 0x400, 0x2, 0x7, 0x100, 0x9a4, 0xff, 0x7, 0xf, 0x6, 0xfff, 0x0, 0x0, 0x3, 0x2, 0x2, 0x7, 0x6, 0x3, 0x7, 0x7, 0x9, 0x5, 0x1, 0xb, 0x6, 0x7, 0xb, 0x81, 0x2, 0x36c, 0x800, 0x3, 0x800, 0x7ff, 0x1, 0x8, 0x7ff, 0x6, 0x9, 0x9, 0xffe0000, 0x10, 0x45, 0xfffffff6, 0x5, 0xfffffeab, 0x7, 0x2, 0x69, 0x7, 0x81, 0x2, 0x6, 0x9, 0xfff, 0x9, 0x3, 0x3aa, 0x7, 0x7f, 0x4, 0x8001, 0x16645508, 0x0, 0x8, 0x5, 0xb8, 0x9, 0x6, 0x4, 0xc, 0x3, 0x4, 0x8, 0x200, 0x8000, 0x3, 0x1, 0x401, 0x7, 0x0, 0x0, 0xe7a6, 0x9, 0xbad449bc, 0x5, 0x1, 0x2, 0x3, 0xffa, 0xe, 0x7, 0xe, 0x5, 0x1, 0x5, 0x7ff, 0x800, 0x2, 0x6, 0x8, 0x102, 0x3c5, 0xc, 0x5, 0x4, 0x1ff, 0x37fb, 0x8]}]]}, {0x64, 0x6, "8eeb0f42c51369ff5723abc46891f64f2a1f64b3267e7c97f4f3d90a0c7d62be724a70b2c3eb7956ab9ea45ccf922446afdaa4f240339bed2c135ceff58dc86310f74505c14874ea0c91ac38bcd5490b5edd4d596ea793c923c098ba71fb7643"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x914, 0x2, [@m_police={0x910, 0x6, 0x0, 0x0, {{0xb}, {0x880, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xa3b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x5, 0xfc5b, 0x5, 0x8, 0x1, 0xa, 0x1, 0x0, 0x4, 0xdf, 0x8000, 0x80000000, 0x0, 0x9, 0x0, 0xce7, 0x10, 0x7e4, 0xb, 0x7, 0x7, 0x1000, 0xb36, 0x10000, 0x9, 0x1, 0x7ff, 0xe, 0x4062, 0x0, 0x4, 0x8001, 0xd9b, 0x5, 0x5, 0x3, 0x6, 0x6, 0x80000001, 0x7be, 0x4, 0x79, 0x6, 0x8, 0x5, 0xffff, 0x4ea, 0x4, 0x0, 0x7f, 0xd702, 0x800, 0x8, 0xf, 0xadb2, 0xa7f0, 0x5, 0x17dca32e, 0x7, 0xfffffffc, 0x8, 0xf, 0xd, 0x9b, 0x0, 0x7, 0x8, 0x5a7b, 0xffff8000, 0x100, 0x200, 0x2, 0x0, 0x6, 0x5, 0xc, 0x7, 0x1, 0x4, 0x7, 0x7, 0x2, 0x5, 0x1, 0xc64f, 0x3, 0x9, 0x20000, 0x5, 0x0, 0x0, 0x9, 0x6, 0x6, 0x8, 0xffff, 0x6e82, 0x8dd0, 0x3, 0x2, 0x4, 0x1, 0x26, 0xa7ce, 0x4, 0x6, 0x4, 0x4, 0xa0000, 0xffffff01, 0xfffff20e, 0x6, 0x2, 0x3, 0x21bb, 0x5, 0x400, 0x7, 0x6, 0xed, 0x7, 0x4, 0x5, 0x6, 0x1ff, 0xfffffff9, 0x5, 0x0, 0x9, 0xf, 0xe, 0xfffffffa, 0xfffffffa, 0x80000000, 0x0, 0x7, 0x482, 0x0, 0xc935, 0x298bd4a6, 0xe, 0x9, 0x8, 0x5, 0x9, 0x5, 0x9e, 0xfff, 0x213, 0x7, 0x9, 0x4, 0x6, 0x2, 0x6cd7778a, 0x4, 0x0, 0x1a, 0x0, 0xfff, 0x1, 0x4, 0x3, 0xbd, 0xffffffff, 0x2, 0xfffffff1, 0x10001, 0x2, 0x0, 0x1, 0x7f, 0xe0, 0x4, 0x2, 0x1000, 0x0, 0x6, 0xe, 0xfffffff8, 0x7, 0xaff0, 0xffffffff, 0x7a96, 0x80000001, 0x4, 0x4, 0x2, 0x9, 0x893, 0x9, 0x5, 0x4, 0x1, 0x7, 0x5, 0x4, 0x7cf, 0x2, 0x2, 0x8000, 0x80000001, 0x87, 0x2, 0x7, 0xfff, 0x2, 0x5, 0x1, 0x9, 0xca8, 0x0, 0x81, 0x9, 0x0, 0x2, 0x3ff, 0x9, 0x101, 0x7fffffff, 0x209e, 0x0, 0x8, 0x0, 0x7, 0x7, 0x1000, 0x28d, 0xfffffffe, 0x0, 0x707, 0x4, 0x0, 0x200, 0x3, 0x2, 0xf, 0x5, 0x100, 0x9, 0x73, 0x0, 0x4, 0x1, 0x10000, 0x7fff, 0x68, 0x2, 0x81, 0x52, 0x200, 0x4, 0x27]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4b68}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfafa, 0x3, 0x23b, 0x8, 0x3, 0x3, 0x532c, 0x6, 0x0, 0x8, 0xa8e, 0x1, 0x81, 0x897, 0x3, 0x1, 0x80, 0x0, 0xf, 0x5, 0x0, 0x8, 0x2e5, 0x9, 0x7, 0x2, 0x6, 0x800, 0xfffffff7, 0x3, 0xb, 0xfffffffb, 0x4, 0x830, 0x1, 0x5, 0x2, 0xf20, 0xb9, 0x8, 0x59c, 0x7, 0xff, 0x2, 0x7ff, 0x1, 0xc5d1, 0x80, 0x2, 0x4, 0x7ff, 0x7, 0x43c, 0x4, 0x8fa3, 0x69565e33, 0x5, 0x9368, 0x2, 0x123a, 0xe, 0x6c7, 0x2, 0x7, 0x4, 0x5, 0x7, 0x5, 0x267, 0xffff, 0x6, 0xb2, 0x6, 0x97b, 0x40, 0x3, 0x7, 0x7, 0x1, 0x1, 0x2, 0x2, 0x1000, 0xfffffff7, 0xf, 0x4, 0x4e, 0x40, 0x4, 0xffff, 0xff, 0xb1a, 0x988, 0x401, 0x2, 0x2, 0x40, 0x0, 0x7fffffff, 0x9, 0xffffdefe, 0x2, 0x80000000, 0x5, 0x54, 0xe0000, 0x1, 0xe92, 0x2, 0x0, 0x0, 0x1, 0x3, 0xf7a6, 0x0, 0x100, 0x0, 0x10, 0x4, 0x4, 0x2, 0x8, 0x23421d05, 0x1, 0x9, 0xf95e, 0xd0, 0xdbf, 0x0, 0x8, 0x800, 0xffff, 0x5, 0x7, 0xfffffffa, 0x81, 0x7, 0x3, 0x5, 0x40, 0x3, 0xce3, 0x1, 0x4, 0x5, 0x3, 0x8, 0xdd, 0x4, 0x9, 0x6, 0x8, 0x88a, 0x9, 0x50f, 0xffffffff, 0xffffffff, 0x1ff, 0x3, 0xffff, 0x7, 0x400, 0x4, 0x7a, 0x5, 0xff, 0x5, 0x0, 0xed2c, 0xffffffff, 0x4, 0xf6, 0x7, 0x2, 0x8, 0x1, 0x100, 0x1, 0x71, 0x5, 0x3, 0x5, 0x9, 0x59, 0x7, 0x400, 0x6, 0x0, 0x80000003, 0xfffffff8, 0xb, 0x6, 0xaf, 0x400, 0x5, 0x0, 0x1, 0x2, 0xe8d, 0x0, 0x8, 0x600000, 0x3, 0x2, 0x80, 0xa6e, 0x6, 0x6, 0xa17, 0x6, 0x7, 0x1, 0x4, 0x5, 0x8, 0x8, 0x7ff, 0x8, 0x8, 0x2, 0x0, 0x1, 0x7, 0x400, 0x3ff, 0x10001, 0x0, 0x200, 0xfffffffb, 0x1, 0x9, 0x8, 0x7, 0x4, 0x8f, 0xffffffff, 0x2, 0x3, 0x1, 0x8b, 0x8001, 0x0, 0x100, 0x6, 0x8, 0x9, 0x5e9, 0x7, 0xd, 0x5, 0x3, 0xea5a, 0x400, 0x1, 0x6, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5e5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0xffffffffffffffff, 0x800, 0x2, 0x10000, {0x2, 0x2, 0x200, 0x45de, 0xfff, 0x8}, {0x81, 0x0, 0x40, 0x852, 0x1, 0x9}, 0x0, 0x8000, 0x9}}]]}, {0x67, 0x6, "a9d100d777e6c747a5f4009e8d2d861b7cfa0a1ec94cb2dec992da98fd369ece27f1657891fe7fb2d989bd27c10168607ddc0f2932acadd814942e1dddf9a00b04c444a708fac080f1043b1b1b28079419a30d8287fa0c40d10a72cccce1b491f14c19"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x1350}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x4000000) ptrace$cont(0x9, r1, 0x6, 0x100000000) 19m35.106186169s ago: executing program 1 (id=3899): syz_open_dev$loop(0x0, 0x8000, 0xa383) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}, @clear_death], 0x0, 0x1000000, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "2c3e2010"}]}}, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 19m34.012632866s ago: executing program 1 (id=3907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x9, 0xa, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x4, 0x19, {0x0, 0x0, 0x1}}}}, 0x30}}, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 19m33.327523835s ago: executing program 1 (id=3910): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000028b8ae3f0acc7a6a22f3b14f3bbb73a974195ca208b6ef995c5a15689bd43714411026f3346dec9f1f41a9fd7259bb09636d0e3a4ee233d13e4991ab4489cd45541a5bcdc508b2d10d4ab4f78816768604005badd6d9170ef736bea8bbe3dfb4908f4aff01000000000000a93e90"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) 19m33.197843577s ago: executing program 1 (id=3912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x41, 0x282, &(0x7f00000004c0)="$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") chdir(&(0x7f00000003c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) syz_open_dev$usbfs(0x0, 0x12, 0x80801) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xff8c) rename(0x0, &(0x7f0000000100)='./file0\x00') openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19m33.146657978s ago: executing program 33 (id=3912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000a00)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d302c636f6465706167653d3836352c756e695f786c6174653d302c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303230312c696f636861727365743d69736f383835392d342c726f6469722c756e695f786c6174653d312c00fb0cb86fb0d4221a64c956a938951a60efe056cc35be8b3cd2f21a0503d4102b90e056706e6b186ccc6161dde7bcfd36392aa4fb2594e950bfbf519be13b7bd5f6c596e8c79ec257ae8e47712cf3988f19e5be78885bacff4c1c2ffe855311e93f65f325e223b34ebf5f4f5f70d1e5a0dbc9ca9f134c2ff4139541a1a2c72c39f4a29c22da34c0afebcd6533c914342b1ebd31fc5c104707a9bb694361c7f34cc3a2cf62c02dc0cc81663cf439fd65767991652ce12c460a3f77d4fb3cafda3ee7c0838e30e1a1be2cdc5030a589d205100cd8b12124"], 0x41, 0x282, &(0x7f00000004c0)="$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") chdir(&(0x7f00000003c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) syz_open_dev$usbfs(0x0, 0x12, 0x80801) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xff8c) rename(0x0, &(0x7f0000000100)='./file0\x00') openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16m31.538957429s ago: executing program 6 (id=4753): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000200)='kfree_skb\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000ff019c8c6cc000000e800000850000006878d006cdd554ed01d52c9fea7d46", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001100000000000000000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) unshare(0x24020400) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 16m29.906074543s ago: executing program 6 (id=4756): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, &(0x7f0000000340)="896102aecdfcc44f1a", 0x9, 0x2}]) close(0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) r5 = memfd_create(&(0x7f00000000c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\x00\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) 16m29.100505904s ago: executing program 6 (id=4762): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000040207d1eed2c000000000001090200092100000401220500090581030000000000"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x20, 0xd, 0x49, {0x49, 0x3, "529e58d7b2cbdc9add9d9918389a5053784c896e635d40c917d3187cf69e7776ee2d27fb1551d8eb25e4d9ab2b0c4c8e7c4129fd8fe338e219e92a2eaee17e50c6da7e7b5db1b0"}}, &(0x7f00000008c0)={0x0, 0x3, 0x86, @string={0x86, 0x3, "067c300fcefb050bfe18cb083912920c2718ece7086027aae7cd738e6d28a5630c485a7bf0362cacb8a8e3e3e19062f6672ec20337694cf030e523970b9235e26a9c52159463ce5565a0de50b60818d587767b8c1c4560ca481fe0e83682b0ee7e52bc78c0e2cdc0d766c1c263403692e11c235e97ae994e24c26ac617a2f4faa0aa6c14"}}, &(0x7f0000000500)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x0, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x10, 0x5, 0x46, "579badf6", "af50114c"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x8, 0x9, 0x3, 0x4, 0x2, 0x52cf}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x40, 0x3, 0x77, "062509c2669234453dd929e7a4bcee5af1d4e774a89781039234bd626ef1d11be70945b82544d6fcfd892d85491769cffe223ce60e4c6d36e4b9b671a94e5bc6a21139348a52838954578687cf05ef9f639cfb9d8c148f273a0969b20018c73125f69c833e4ba2e2c23a7e0a6d70d2a51a5b778bc51c0b"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x2, 0x0, [0xffff]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000b40)={0x40, 0x9, 0x0, 0xf8}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "9d8d"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000c00)={0x40, 0x13, 0x6}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "b6bc"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000d40)={0x40, 0x1e, 0x1}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x58}}) dup(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000000)=0x88, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) write$cgroup_subtree(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r7, &(0x7f0000000040), 0x0}, 0x20) 16m25.869052011s ago: executing program 6 (id=4774): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x8000}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000000}, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 16m25.154386212s ago: executing program 6 (id=4775): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ptrace$getregset(0x4204, r1, 0x6, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x81, 0x2c2, &(0x7f0000000640)="$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") r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) 16m24.036004498s ago: executing program 6 (id=4783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1}, 0x16) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x1edb, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010003904f3ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="00080000000000000500270001000000"], 0x28}}, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) 16m24.030232169s ago: executing program 34 (id=4783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1}, 0x16) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x1edb, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010003904f3ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="00080000000000000500270001000000"], 0x28}}, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) 14m20.805827035s ago: executing program 7 (id=5416): sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000}}}}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x48005) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x3}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x200}], 0x0, 0x0, 0x0}) dup3(r5, r0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1901, 0x2}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2000000, &(0x7f00000004c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14m19.917138927s ago: executing program 7 (id=5421): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x3, 0x14d1, &(0x7f00000015c0)="$eJzs3Au0ztXWMPA511p/t9CT5L7mmn+e5LJIklyS5JIkSUjuCUmSJElik1sSkpB7kntI7nZyv99yT5IjSZKQkGR9Q6fzOufrvKP3O995X+8Ye/7GWGOvuf/PnM9ae469n/96xtjPd52HVG1QrVJdZoZ/hf7bBP/6JQUAMgBAfwC4HgAiACiVrVS2K9czakz5l55E/DepN/1ar0BcS9L/tE36n7ZJ/9M26X/aJv1P26T/aZv0P22T/guRps3MfYOMtDvk/f+0TF7/0zbpf9om/U/bpP9pm/Q/bZP+p23S/7RN+p+2Sf+FSNP+F7wHLeMaDiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4n/AhXCVAYC/za/1uoQQQgghhBBCCPHvE9Jf6xUIIYQQQgghhBDivx+CAg0GIkgH6SEDZIRMcB1khiyQFa6HBNwA2eBGyA43QQ7ICbkgN+SBvJAPLBA4YIghPxSAJNwMBeEWKASFoQgUBQ/FoDjcCiXgNigJt0MpuANKw51QBspCOSgPd0EFuBsqwj1QCe6FylAFqkI1uA+qw/1QAx6AmvAg1IKHoDY8DHXgEagL9aA+PAoN4DFoCI2gMTSBptAMmv9L+S9DN3gFukMPSIGe0Atehd7QB/pCP+gPr8EAeB0GwhswCAbDEHgThsJbMAzehuEwAkbCOzAKRsMYGAvjYDxMgHdhIrwHk+B9mAxTYCpMg+kwA2bCBzALZsMc+BDmwkcwD+bDAlgIi2AxLIGlkAofwzL4BJbDClgJq2A1rIG1sA7WwwbYCJtgM2yBrbANtsOnsAN2wi7YDXtgL+yDz2A/fA4H4As4CF/+P+af/7/yuyAgoEKFBg2mw3SYATNgJsyEmTEzZsWsmMAEZsNsmB2zYw7MgbkwF+bBPJgP8yEhISNjfsyPSUxiQSyIhbAQFsEi6NFjcSyOJfA2LIklsRSWwtJYGstgWSyL5bE8VsAKWBErYiWshJWxMlbFqngf3of3Yw2sgTWxJtbCWlgba2MdrIN1sS7Wx/rYABtgQ2yIjbExNsWm2BybYwtsgS2xJbbG1tgG22BbbIvtsB22x/bYATtgR+yInbATdsbO2AVfwpfwZXwZX8FXsAdWVj2xF/bC3tgb+2I/7Iev4QB8HV/HN3AQDsYh+Ca+iW/hMDyHw3EEjsSRWEGNxjE4FlmNxwk4ASfiRJyEk3AyTsEpOA2n4wyciTNxFs7G2fghzsWP8COcj/NxIS7CRbgEl2IqpuIyPI/LcQWuxFW4GtfgalyH63EdbsRNuBG34BbchtvwU/wUd+JO3I27cS/uxc/wM/wcP8dBeBAP4iE8hIfxMB7BI3gUj+IxPIbH8TiewBN4Ek/iKTyNZ/A0nsWzeA7P4wW8gBfxIl7CS3gZL1/55VdXGGVUOpVOZVAZVCaVSWVWmVVWlVUlVEJlU9lUdpVd5VA5VC6VS+VReVQ+lU+RIsUqVvlVfpVUSVVQFVSFVCFVRBVRXnlVXBVXJVQJVVKVVKXUHaq0ulOVUWVVK19elVcVVGtfUd2jKqlKqrKqoqqqaqqaqq6qqxqqhqqpaqpaqpaqrR5WdVRP7Iv11JXONFCDsaEago1VE9VUNVNv4eOqhRqGLVUr1Vo9qUbgcGyrWvh26hnVXo3BDuo5NRafV53UeOysXlRd1Euqq3pZdVMtfXfVQ03GnqqXmoa9VR/VV/VTs7CKutKxquoNNUgNVkPUm2ohvqWGqbfVcDVCjVTvqFFqtBqjxqpxaryaoN5VE9V7apJ6X01WU9RUNU1NVzPUTPWBmqVmqznqQzVXfaTmqflqgVqoFqnFaolaqlLVx2qZ+kQtVyvUSrVKrVZr1Fq1Tq1XG9RGtUltVlvUVrVNbVefqh1qp9qldqs9aq/apz5T+9Xn6oD6Qh1UX6pD6i/qsPpKHVFfq6PqG3VMfauOq+/UCfW9Oql+UKfUaXVG/ajOqp/UOXVeXVA/q4vqF3VJ/aouq6BAo1Zaa6MjnU6n1xl0Rp1JX6cz6yw6q75eJ/QNOpu+UWfXN+kcOqfOpXPrPDqvzqetJu0061jn1wV0Ut+sC+pbdCFdWBfRRbXXxXRxfasuoW/TJfXtOvS4Q5fWd+oyuqwup8vru3QFfbeuqO/RlfS9urKuoqvqavo+XV3fr2voB3RN/aCupR/StfXDuo5+RNfV9XR9/ahuoB/TDXUj3Vg30U11M91cP65b6Cd0S91Kt9ZP6jb6Kd1WP63b6Wd0e/2s7qCf0x3187qTfkF31i/qLvol3VX/qi/roLvrHjpF99S99Ku6t+6j++p+ur9+TQ/Qr+uB+g09SA/WQ/Sbeqh+Sw/Tb+vheoQeqd/Ro/RoPUaP1eP0eD1Bv6sn6vf0JP2+nqyn6Kl6mp6uZ+i+v1ea81/If++f5A/87dm36e36U71D79S79G69R+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9Al9Up/Up/Rp/bP+UZ/VP+lz+rw+r3/WF/VFfen3nwEYNMpoY0xk0pn0JoPJaDKZ60xmk8VkNdebhLnBZDM3muzmJpPD5DS5TG6Tx+Q1+Yw1ZJxhE5v8poBJmptNQXOLKWQKmyKmqPGmmClubv3/zv+z9TU3zU0L08K0NC1Na9PatDFtTFvT1rQz7Ux70950MB1MR9PRdDKdTGfT2XQxXUxX09V0M91Md9PdpJgU08u8anqbPqav6Wf6m9fMADPADDQDzSAzyAwxQ8xQM9QMM8PMcDPcjDQjzSgzyowxY8w4M85MMBPMRDPRTDKTzGQz2Uw1U810M93MNDPNLDPLzDFzzFwz18wz88wCs8AsMovMErPEpJpUs8wsM8vNCrPCrDKrzBqzxqwz68wGs8FsMpvMFrPFLDfbzXazw+wwu8wus8fsMfvMPrPf7DcHzAFz0Bw0h8whc9gcNkfMEXPUHDXHzDFz3Bw3J8wJc9KcNKfMKXPGnDFnzVlzzpwzF8wFc9FcNJfMJXPZXL5y2xepSEUmMlG6KF2UIcoQZYoyRZmjzFHWKGuUiBJRtihblD26KcoR5YxyRbmjPFHeKF9kI4pcxFEc5Y8KRMno5qhgdEtUKCocFYmKRj4qFhWPbo1KRLdFJaPbo1LRHVHp6M6oTFQ2KheVj+6KKkR3RxWje6JK0b1R5ahKVDWqFt0XVY/uj2pED0Q1owejWtFDUe3o4ahO9EhUN6oX1Y8ejRpEj0UNo0ZR46hJ1DRqFjX/t9YP4VzOJ3x328Om2J62l33V9rZ9bF/bz/a3r9kB9nU70L5hB9nBdoh90w61b9lh9m073I6wI+07dpQdbcfYsXacHW8n2HftRPuenWTft5PtFDvVTrPT7Qw7035gZ9nZdo790M61H9l5dr5dYBfaRXaxXWKX2lT7sV1mP7HL7Qq70q6yq+0au9aus+vtBrvRbrKb7Ra71W6z2+2ndofdaXfZ3XaP3Wv32c/sfvu5PWC/sAftl/aQ/Ys9bL+yR+zX9qj9xh6z39rj9jt7wn5vT9of7Cl72p6xP9qz9id7zp63F+zP9qL9xV6yv9rLNly5ub/y8k6GDKWjdJSBMlAmykSZKTNlpayUoARlo2yUnbJTDspBuSgX5aE8lI/y0RVMTPkpPyUpSQWpIBWiQlSEipAnT8WpOJWgElSSSlIpKkWlqTSVoTJUjsrRXXQX3U130z10D91L91IVqkLVqBpVp+pUg2pQTapJtagW1abaVIfqUF2qS/WpPjWgBtSQGlJjakxNqSk1p+bUglpQS2pJrak1taE21JbaUjtqR+2pPXWgDtSROlIn6kSdqTN1oS7UlbpSN+pG3ak7pVAK9aJe1Jt6U1/qS/2pPw2gATSQBtIgGkRDaAgNpaE0jIbRcBpBI+kdGkWjaQyNpXE0nibQBJpIE2kSTaLJNJmm0lSaTtNpJs2kWTSL5tAcmktzaR7NowW0gBbRIlpCSyiVUmkZLaPltJxW0kpaTatpLa2l9bSeNtJG2kybaSttpe20nXbQDtpFu2gP7aF9tI/20346QAfoIB2kQ3SIDtNhOkJH6CgdpWN0jI7TcTpBJ+gknaRTdIrO0Bk6S2fpHJ2jC3SBLtIvdIl+pcsUKIPL6DK561xml8Vldde7LL+fFv8W53K5XR6X1+Vz1uVwOf8hJudcIVfYFXFFnXfFXHF36x/iMq6sK+fKu7tcBXe3q/iHuLq739VwD7ia7kFXzd33D3Et95Cr7R5zdVwjV9c1cfVdM9fAPeYaukausWvimrpmro17yrV1T7t27hnX3j37h3iJW+rWuw1uo9vk9rvP3QX3szvuvnMX3S+uu+vh+rvX3AD3uhvo3nCD3OA/xCPdO26UG+3GuLFunBv/h3iqm+amuxlupvvAzXKz/xAvcovdXJfq5rn5boFb+Ft8ZU2p7mO3zH3ilrsVbqVb5Va7NW6tW/cfa13ltritbpvb5z5zO9xOt8vtdnvc3t/iK/s44L5wB92X7pj71h12X7kj7oQ76r75Lb6yvxPue3fS/eBOudPujPvRnXU/uXPu/G/7v7L3H92v7rILDhhZsWbDEafj9JyBM3Imvo4zcxbOytdzgm/gbHwjZ+ebOAfn5Fycm/NwXs7HlokdM8ecnwtwkm/mgnwLF+LCXISLsudiXJxv5RJ8G5fk27kU38Gl+U4uw2W5HJfnu7gC380V+R6uxPdyZa7CVbka38fV+X6uwQ9wTX6Qa/FDXJsf5jr8CNflelyfH+UG/Bg35EbcmJtwU27GzflxbsFPcEtuxa35SW7DT3Fbfprb8TPcnp/lDvwcd+TnuRO/wJ35Re7CL3FXfpm78SvcnXtwCvfkXvwq9+Y+3Jf7cX9+jQfw6zyQ3+BBPJiH8Js8lN/iYfw2D+cRPJLf4VE8msfwWB7H43kCv8sT+T2exO/zZJ7CU3kaT+cZPJM/4Fk8m+fwhzyXP+J5PJ8X8EJexIt5CS/lVP6Yl/EnvJxX8Epexat5Da/ldbyeN/BG3sSbeQtv5W28nT/lHbyTd/Fu3sN7eR9/xvv5cz7AX/BB/pIP8V/4MH/FR/hrPsrf8DH+lo/zd3yCv+eT/AOf4tN8hn/ks/wTn+PzfIF/5ov8C1/iX/kyB4YYYxXr2MRRnC5OH2eIM8aZ4uvizHGWOGt8fZyIb4izxTfG2eOb4hxxzjhXnDvOE+eN88U2ptjFHMdx/rhAnIxvjgvGt8SF4sJxkbho7ONicfH41rhEfFtcMr49LhXfEZeO74zLxGXjcnH5+K64Qnx3XDG+J64U3xtXjqvEVeNq8X1x9fj+uEb8QFwzfjAuGT8U144fjuvEj8R143px/fjRuEH8WNwwbhQ3jpvETeNmcfP48bhF/ETcMm4Vt46fjNvET8Vt46fjdvEzcfv42T+9nhL3jHvFr8avxiE8oBckFyYXJRcnlySXJlOTHyeXJT9JLk+uSK5MrkquTq5Jrk2uS65PbkhuTG5Kbk5uSW5NbkuGUC09ePTKa2985NP59D6Dz+gz+et8Zp/FZ/XX+4S/wWfzN/rs/iafw+f0uXxun8fn9fm89eSdZx/7/L6AT/qbfUF/iy/kC/sivqj3vpgv7pv55r65b+Gf8C19K9/aP+mf9E/5p/zT/mn/jG/vn/Ud/HO+o3/ed/Iv+Bf8i76Lf8l39S/7bv4V39338Ck+xffyvXxv39v39X19f9/fD/AD/EA/0A/yg/wQP8QP9UP9MD8MDYAf6Uf6UX6UH+PH+HF+nJ/gJ/iJfqKf5Cf5yX6yn+qn+ul+up/pZ/pZfpaf4+f4uX6un+fn+QV+gV/kF/klfolP9al+mV/ml/vlfqVf6Vf71X6tX+vX+/V+o9/oN/vNfqvf6rf77X6H3+F3+V1+j9/j9/l9fr/f7w/4A/6gP+gP+UP+sD/sj/iv/VH/jT/mvzUA4E/47/1J/4M/5U/7M/5Hf9b/5M/58/6C/9lf9L/4S/5Xf9kHPyHxbmJi4r3EpMT7icmJKYmpiWmJ6YkZiZmJDxKzErMTcxIfJuYmPkrMS8xPLEgsTCxKLE4sSSxNpCY+TixLfJJYnliRWJlYlVidWJMIIe+OOOQPBUIy3BwKhltCoVA4FAlFgw/FQvFwaygRbgslw+2hVLgjlA53hjKhbCgXGoXGoUloGpqF5uHx0CI8EVqGVqF1eDK0CU+FtuHp0C48E9qHZ0OH8FzoGJ4PncILoXN4MXQJL4Wu4eXQLbwSuoceISX0DL3Cq6F36BP6hn6hf3gtDAivh4HhjTAoDA5DwpthaHgrDAtvh+FhRBgZ3gmjwugwJowN48L4MCG8GyaG98Kk8H6YHKaEqWFamB5mhJnhgzArzA5zwodhbvgozAvzw4KwMCwKi8OSsDSkho/DsvBJWB5WhJVhVVgd1oS1YV1YHzaEjWFT2By2hK1hW9gePg07ws6wK+wOe8LesC98FvaHz8OB8EU4GL4Mh8JfwuHwVTgSvg5HwzfhWPg2HA/fhRPh+3Ay/BBOhdPhTPgxnA0/hXPhfLgQfg4Xwy/hUvg1XJb/WRNCCCGE+C/Rf3K95z/5nvp9XNELALLszH30769HALA5x1/nfdT+9gkAeKZH53p/G/XqpaSk/P7Y5RqiAvMBIHE1Px1cjVdAa3gK2kErKPFP19dHlUP+k/rJOwAy/V1OBrgaX61/239Sv9HiP60/H6BQgas5GeFqfLV+yf+k/t42f1I/41cTAFr+XU5muBpfrV8cnoBnod0/PFIIIYQQQgghhPirPupilz873145n+cxV3PSw9X4z87nQgghhBBCCCGEuPaef6nr04+3a9eqo0xkIhOZ/MfkWv9lEkIIIYQQQvy7Xb3pv9YrEUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQggh0q7/iY8Tu9Z7FEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIa61/xMAAP//0ZplCw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x2, 0x2, 0x0, 0x10022, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040), 0x2000000}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 14m18.533324177s ago: executing program 7 (id=5426): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, &(0x7f00000005c0)={[{@inlinecrypt}, {@usrjquota}, {@dax_never}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@minixdf}, {@dax_never}, {@nombcache}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}], [{@audit}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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") syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB=',=', @ANYRESDEC, @ANYRESDEC, @ANYBLOB="f32be912e474ad5bd8cc0a19c9d7610b52abc6d5058fd8ecb25b45c12a91c16c105e53a45c82", @ANYBLOB="1e09ce7b0dbfb9809cc1029970ac2f57e375c7cf154a044743fbc01f26d451003f4b19e5b24ea719416047d05c86e3058a056b1f1200"], 0x80, 0x1511, &(0x7f0000001ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vcsa(&(0x7f0000001dc0), 0x1, 0x2) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) 14m16.641153963s ago: executing program 7 (id=5436): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)={0x1ff}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x8cffffff) 14m14.975732177s ago: executing program 7 (id=5442): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000280)=@attr_other={0x0, 0x2, 0x6, &(0x7f0000000180)=0x3}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x2c060000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x20000091) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7d) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xc0fb, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x387723f2cf164cc1}]}}}]}, 0x58}}, 0x0) 14m14.641862671s ago: executing program 7 (id=5444): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000404028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x42000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 14m14.617747302s ago: executing program 35 (id=5444): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000404028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x42000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 5m51.100528909s ago: executing program 8 (id=7882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) setresgid(0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) keyctl$KEYCTL_MOVE(0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m49.453352461s ago: executing program 8 (id=7885): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m48.522156195s ago: executing program 8 (id=7889): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') 5m47.309518192s ago: executing program 8 (id=7892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8e00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file1\x00', 0x11010, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=0x0], 0x0, 0x11e6, &(0x7f0000003680)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r3, 0x10, 0x2, 0x7fff) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) close(r3) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff3000/0x1000)=nil, r5, 0xf, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000040)=[r4]}, 0x1) read$FUSE(r3, &(0x7f0000000cc0)={0x2020}, 0x2020) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r5, 0x1000001, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r5, 0x3, 0x12, r2, 0x0) 5m47.009047266s ago: executing program 8 (id=7893): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000280)=@attr_other={0x0, 0x2, 0x6, &(0x7f0000000180)=0x3}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x2c060000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x20000091) sched_setscheduler(0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7d) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) 5m46.601650332s ago: executing program 8 (id=7896): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) 5m46.601395902s ago: executing program 36 (id=7896): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) 43.201680293s ago: executing program 5 (id=9490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=") r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r6}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async) write$selinux_user(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t '], 0x27) (async) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f00000004c0), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x18) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000005d00)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r0}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getpeername$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0xe) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e08000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0200000002000000040000000c00"/28], 0x50) 43.201232453s ago: executing program 5 (id=9491): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x138) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) r3 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) nanosleep(&(0x7f0000000080), 0x0) r6 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r8, 0xfffffffffffffc01, 0x0) tee(r4, r8, 0x60000000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) r10 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r11, 0x0, 0xfd, 0x9, 0xbc0000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xff00000000000000, 0x460c6}, 0x8000, 0x40, 0x6}}) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x3, r3}) 42.354866554s ago: executing program 5 (id=9493): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x138) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) r3 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) nanosleep(&(0x7f0000000080), 0x0) r6 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r8, 0xfffffffffffffc01, 0x0) tee(r4, r8, 0x60000000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x3, r3}) 41.502397626s ago: executing program 5 (id=9500): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x80, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_mount_image$fuse(0x0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x21d046, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0}}, 0x25) unshare(0x40020000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0xfe2a, 0x0, &(0x7f0000000d40)="fae56ac553d73f32", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000000)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000611018000000e5eef6eb000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4) 40.864502915s ago: executing program 5 (id=9507): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) (fail_nth: 1) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0xf8, r6, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xdc, 0x2a, [@fast_bss_trans={0x37, 0xd6, {0x6a, 0x8, "f7fa66e827a9c2e761f8193523812368", "3467f474f64c92fdcbf21f6dc786e8fcd69f4a66ba570e3d94f8c75fa5233548", "f428cca48a0a34b663c9f47861b0607839affed8fcb7bd69cfedae3a6c9f2606", [{0x4}, {0x2, 0x17, "923f985037975fe300efa2cff39dfbabf123bf08ae1c0f"}, {0x2, 0x3, 'o,\"'}, {0x3, 0x11, "33e86de37a94e405d810b5d1a7c2b1e1ee"}, {0x4, 0x25, "2d95c03b4cc5ea79a3876b7fd4c069b3cf06723ca52f4e08851f0a436e8a9e958a8f6fa4aa"}, {0x3, 0x1c, "6033bc34a228632b548d505213490e1abe18953d0f8709a014fb26b0"}, {0x1, 0x7, "6da97b3e4721c7"}, {0x1, 0x1, "e0"}]}}]}]}, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000380)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000df00"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 40.682840908s ago: executing program 5 (id=9509): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000023c0)=[@ioring_restriction_register_op={0x0, 0x1d}, @ioring_restriction_sqe_flags_required={0x3, 0xb}], 0x2) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 40.587937469s ago: executing program 37 (id=9509): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000023c0)=[@ioring_restriction_register_op={0x0, 0x1d}, @ioring_restriction_sqe_flags_required={0x3, 0xb}], 0x2) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 7.85291639s ago: executing program 2 (id=9753): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000000100)=""/41, 0x29}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1}, 0x11) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa86"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$uac1(0x3, 0xef, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x80, 0x90, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x1fd, 0x5, 0x7f, 0x1ff, 0x2, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x4, 0x4, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x3, 0x6, 0x8, 0x5, 0xc5}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x3, 0x5, [0x6, 0x6, 0x7, 0x2, 0x4], 0x9}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xc}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x4, 0x2, 0x1, 0xce}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x1, 0x99, 0x7, "d5dffe"}, @format_type_i_continuous={0xfffffffffffffcc1, 0x24, 0x2, 0x1, 0x8, 0x3, 0x7f, 0x10, "", "040c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x81, 0x5, {0x7, 0x25, 0x1, 0x80, 0x6, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x78, 0x3, 0x3, 0x7, "2c95"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x1}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x7, 0x3, 0x5c, 0x7, "adee3e", "07e312"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1b, 0x3, 0x1, 0x3f}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x0, 0x8, {0x7, 0x25, 0x1, 0x80, 0x2, 0x9}}}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x8, 0x8, 0x9, 0x10, 0xfe}, 0x193, &(0x7f0000000900)={0x5, 0xf, 0x193, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x2, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "10f8ef0fbe0fdb659cb1aeb685c789c6"}, @generic={0xcb, 0x10, 0x4, "8d4b46a5851e054b0045515e8ebca2e448d43461c97724d4e0e3afb31b651382ede7208a89de31f43dad9edef0539011d7fc27a65f30c2b9a43ca8b4bfbfbd591098665dd4d4da93d908606269cf1b7421680587456ca5ec389909586955692e34ecbab723c27bcc43dbbb8a4ca23c0790296649d3490e658a77836ece2ca2d1af26a8ef47ef310d82ad0083e24b3457b1721293685ae5bbe21690be8d92a941b63df53e90c6a1d92dfc4a36d7bffe33c863131feef49eee3adb2a895aa3d2181ee3514b7ebee9b2"}, @generic={0x7e, 0x10, 0x3, "5f5e1f98345da4e2d547e1f5fecda64fd57f0dcb8348648fa7d9d147ea1e8d7322961c1b51dd0a65c2e57e392cefb49bb2ab8c64360b4e85d8831b3de88ad84de54d4449c848f75d7338ef18b3f25c9e6f49e5e27b1bc9452499c26282824bcd58cce551b7de6ab4257597ef23bfbdf5a219ddf34e9d1d3448a6e3"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x3, 0xc, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x2, 0xff00, 0x2, [0x0, 0xff30, 0xff0000, 0x3f0f, 0x3fc0]}]}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x427}}, {0xe8, &(0x7f0000000ac0)=@string={0xe8, 0x3, "19fc820080e00876a4892ffbee106374236ecdd57a05392e40eb57fa01f22a456d91e86439b9dccfe1e13a847e61653e87fb1d30215433d7ce2c5011a4a09ff4dcc2ba0b69bc75ca2dfd9c1d76b27f32182449e9a84bd034393aa67da84f72a65dcef7706c6f3af08c7f4309ec8d01f9a739a47b6028219938a298f298019249772b7aad158556fefe2559a751d062bad76351d410f1967e000674e4a4c1d153d16cb46fcffa053cf0e1722b479bf7ba27151ecdd58e02cdc71f749703c4095b5513a0e0610688c794cb5109269807d2db7bdd0a60736d2f92a268276d4891a2ed27efe68912"}}, {0x83, &(0x7f0000000340)=@string={0x83, 0x3, "4215fef8e55d335bdde0ddf2674e70946f841c949f73d4d8b886a2a01733333a1ad9baf95b6bec2f33e1b0dbd8e6906aab0678fff382311e39809c7a428e81576bf4b8e3c8ea1314fcb6e2293d9ce0695cdf5732b1c5367d5235e5a16a5c095db5e6cad2ee6fdfbf46b91dad9915c70440085f5db842311f012cb0ff3458d8d28c"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x400a}}, {0xe0, &(0x7f0000000bc0)=@string={0xe0, 0x3, "69776e6351f8b9c97d574dded0f696c671bebda6dba91d17470075632c7f87fa83efaf3419763955a3dd5752a630f17ad6fee78462989dca0d945b842a2874fff5f7466f7922987879bdf22be060291a7b572cf2d502f4b425c38f9492cafd9636f317189c461c806fc1303d1ccbc56a3be0889a4f519a049c4183d04a3fa33f51616d0797dc55c317b8114a5d36e07d4da7123f26acc52f0fb3527053dded602b4fb145b399d80433b6066d095d3bd4f04ed920574debc128ed8a1a4b2edfed5fe7adf8988f51bc112a1612846c39b890371185189477407d547ce7c509"}}, {0x6a, &(0x7f0000000cc0)=@string={0x6a, 0x3, "2948858a6e6ae619e7a4ef10c483edeb7807162a008473a214b25616a58b5d0960aac32adcbd8a30f0cdbd41663450d12b0beb02dbf349fa7a6d4103b9bd5ee6c2761fe8a710bee91a389dfa3645a8f3c3f88da87d241272f0eb688458a0bda0b73ce7567f02101f"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000f00)={0x14, &(0x7f0000000dc0)={0x40, 0x39, 0x98, {0x98, 0xe, "7eca175d8b80f5cd80c3e3ac563fe1a99015ca7e773e6abca1cb410a90d23653ace9a1406f750ec985a74c9bf6c686f16133a4dcf82e304ee9d160d4257cf698467b6702d2807fe16b77bd6ad0aea82e330ee8571da119de4250b74eb7b2e81f915246e420c082135bfeca94119a93e7e8429f4b5c99d83a77dc993d491324be4c28e89ae0b1d14a28b1860f410f9ef31340b74f9ccd"}}, &(0x7f0000000400)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "bf3a48d4bf0741e4d475846a790e8a0ea44644f6e61f0b8675866345518c3556245981ea18e2dc0f3cc2529ff22a609adeb75255cf80e2e31ac3e6ae574270f1cda8c5bbf5b37b0596b81623559bf6cfeb6ca414dd13586ae1b26a398b056bb36cf09c9e9df1fe61f30a7267"}}}, &(0x7f0000001700)={0x44, &(0x7f0000000480)={0x0, 0x12, 0xb7, "1c4826d0769dda2badcba30d28170f4e6d26738332da21e5e7e724dd849e64773e56f9716122715930514bb11ad63299d43e9eaa71824ada9217a8d6f96f95e359fe7355e3602be22d5f5b81676960f9473b9dee8b972cf7d472df79b190f92e5d86cd11cb687a1fde188a4177a1c42cecf3a3fd5d2f79b6c1d45d6eb457b1446bc2b300b958bd83b72d555379949a175e60483062273795a66200c0918e5dd226b84785b44a547e356ed3ba791a3b7a732ee1986cb775"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001040)={0x20, 0x81, 0x2, "f005"}, &(0x7f0000001600)={0x20, 0x82, 0x3, "c5a95a"}, &(0x7f0000001640)={0x20, 0x83, 0x3, "67d695"}, &(0x7f0000001680)={0x20, 0x84, 0x4, "82f1adc9"}, &(0x7f00000016c0)={0x20, 0x85, 0x3, "9fb0f5"}}) syz_usb_connect(0x6, 0x81, &(0x7f0000000100)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@delalloc}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@data_err_ignore}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x12) write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b) 5.271669506s ago: executing program 9 (id=9765): preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/167, 0xa7}], 0x2, 0x7, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) 5.247260137s ago: executing program 0 (id=9766): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x138) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) r3 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) nanosleep(&(0x7f0000000080), 0x0) r6 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r8, 0xfffffffffffffc01, 0x0) tee(r4, r8, 0x60000000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) r10 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r11, 0x0, 0xfd, 0x9, 0xbc0000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xff00000000000000, 0x460c6}, 0x8000, 0x40, 0x6}}) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x3, r3}) 4.336825459s ago: executing program 2 (id=9770): accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10) (async) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="93a6586de211c1672bfceb567c17c6be50191dec2bf81f631543e6f670d6ab653e624b206d679142f7d7f061a518508f61119351e944c1e2f4d5cb4ac6e9797054f539be12b8a8ac330f49b3f47ac1d4a1812a369a7ed2f3a59319d4e2650e9993ae312651422a32e59e4d73ad0fe7c8290f2e0399338308b60c9cf069d2b50ea917c1d63271c569544665e9b2630d4794224eba3bd2d915b9b40739da71d9eabf71fb4b0d509efab848fecc83ff6f109076cff8c16f62a6"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="93a6586de211c1672bfceb567c17c6be50191dec2bf81f631543e6f670d6ab653e624b206d679142f7d7f061a518508f61119351e944c1e2f4d5cb4ac6e9797054f539be12b8a8ac330f49b3f47ac1d4a1812a369a7ed2f3a59319d4e2650e9993ae312651422a32e59e4d73ad0fe7c8290f2e0399338308b60c9cf069d2b50ea917c1d63271c569544665e9b2630d4794224eba3bd2d915b9b40739da71d9eabf71fb4b0d509efab848fecc83ff6f109076cff8c16f62a6"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f00000002c0)={0x8, 0x2f77}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_generic(r1, 0x0, 0x4008) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2000, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013300000000009500000000000000cf0e377d91441c09c0f1e2f650f887d396905b741d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb9, &(0x7f000000cf3d)=""/185, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013300000000009500000000000000cf0e377d91441c09c0f1e2f650f887d396905b741d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb9, &(0x7f000000cf3d)=""/185, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff", @ANYRES64=r6], 0x40c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000e0977f0c46a03ee4b46eedbf4f138868f4a9bff62a3c799654421d50033c30225bf76c283174e91d357f988705d82aa9bd7e70a04ccfa5b2fe42c300"/82, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES16=r7], 0x48) 4.336444989s ago: executing program 9 (id=9771): bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x2400c001}, 0x800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.32480584s ago: executing program 0 (id=9772): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000240)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5558, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x5, &(0x7f0000001140)=0x0) io_submit(r0, 0x1, &(0x7f0000000780)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x3b6, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (fail_nth: 2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x300}}], 0x4, 0xc080) 2.782520481s ago: executing program 4 (id=9773): fstat(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000009e000/0x1000)=nil, 0x1000, 0x1) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x9, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/keys\x00', 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000200)=0x4, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fsopen(&(0x7f0000000180)='logfs\x00', 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) 2.657212713s ago: executing program 9 (id=9774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000100)={0x68, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0xffff, 0x0, 0x4, 0x5}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache']) utime(&(0x7f0000000200)='./file0\x00', 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.326300688s ago: executing program 4 (id=9775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0x8}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x2000000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) 2.043950921s ago: executing program 9 (id=9776): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x10, 0x3a}, {0x0, 0x40000000004, 0x4, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x20000a78a}, 0xfffffffe, 0x0, 0x1, 0x1, 0x0, 0x2}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@broadcast, 0xfffffffc, 0x3, 0x1, 0x4, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) flock(r0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) dup3(r2, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000100010009"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000feffffff7b"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x448, &(0x7f00000009c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 1.948466393s ago: executing program 0 (id=9778): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x5394a15b}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) io_uring_setup(0x1851, &(0x7f0000000380)={0x0, 0xffffe, 0x8}) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000008600)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000008840)=""/200, 0xc8}], 0x1, &(0x7f0000000880)=""/179, 0xb3}}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)=""/148, 0x94}, {&(0x7f0000000b80)=""/148, 0x94}, {&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000c40)=""/249, 0xf9}], 0x4, &(0x7f0000000d40)=""/83, 0x53}}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000e40)=""/163, 0xa3}, {&(0x7f0000000f00)=""/164, 0xa4}, {&(0x7f0000000680)=""/42, 0x2a}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f0000001080)=""/240, 0xf0}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x6, &(0x7f0000002200)=""/77, 0x4d}, 0xf}, {{&(0x7f0000002280)=@l2, 0x80, &(0x7f0000004440)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/90, 0x5a}, {&(0x7f0000000940)=""/60, 0x3c}, {&(0x7f0000003380)=""/85, 0x55}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/27, 0x1b}], 0x6, &(0x7f00000044c0)=""/149, 0x95}, 0x8cdd}, {{&(0x7f0000004580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000005700)=[{&(0x7f0000004600)=""/12, 0xc}, {&(0x7f0000004640)=""/171, 0xab}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x3, &(0x7f0000005740)=""/246, 0xf6}, 0x7}, {{&(0x7f0000005840)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006940)=[{&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/9, 0x9}, {&(0x7f0000006900)=""/44, 0x2c}], 0x3, &(0x7f0000006980)=""/177, 0xb1}, 0x101}, {{&(0x7f0000006a40)=@qipcrtr, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000006ac0)=""/7, 0x7}, {&(0x7f0000006b00)=""/20, 0x14}, {&(0x7f0000006b40)=""/252, 0xfc}, {&(0x7f0000006c40)=""/248, 0xf8}, {&(0x7f00000070c0)=""/244, 0xf4}, {&(0x7f0000006e40)=""/103, 0x67}, {&(0x7f0000006ec0)=""/217, 0xd9}], 0x7, &(0x7f0000007040)=""/89, 0x59}, 0x9}, {{&(0x7f0000000780)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000007400), 0x0, &(0x7f0000007440)=""/180, 0xb4}, 0x4}, {{&(0x7f0000007500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000008580)=[{&(0x7f0000007580)=""/4096, 0x1000}], 0x1, &(0x7f00000085c0)=""/26, 0x1a}, 0x1}], 0x9, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16=r5], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 1.876545064s ago: executing program 2 (id=9779): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x138) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) r3 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) nanosleep(0x0, 0x0) r6 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r8, 0xfffffffffffffc01, 0x0) tee(r4, r8, 0x60000000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) r10 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r11, 0x0, 0xfd, 0x9, 0xbc0000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xff00000000000000, 0x460c6}, 0x8000, 0x40, 0x6}}) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x3, r3}) 1.750703516s ago: executing program 9 (id=9780): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0x8}, 0x1c) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @thr={&(0x7f0000000300)="c9a140c79604da99e2b45539e841866545e402f8d5230658da00a8b7d13e1f186106b2019d41ff175c4519af65c825ff62531b118d699346162a013930698d81384fbe4dedc888888224766602fadb45fcfa9d762962cb575dfd95e82d2e7ccfb407e56fb69c7a7312b4229a5bf7bb3fcc8d4bde2c4c408c011c47bc9ef8926e4c7ac195eaa4030000005296dc85ef008f874001e1140ac549c11ff217c334f873ed07e12cdb3b883d83f2c2426fc0aa0a954f31e0f8b9bfc06426c3616bff4a02061073b6cf1f228966f99f8e3e16b91680f216620258e886e8c34a581c65b241621ea261d38b", &(0x7f0000000040)="3407ea4621259b89ff014844afb49de33938bc43eea41f3b9303d6ec2d380f"}}, &(0x7f0000bbdffc)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) 1.598685588s ago: executing program 3 (id=9783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x2400c001}, 0x800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.588373278s ago: executing program 3 (id=9784): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa8800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x1, 0xd853, 0x400, 0x0, 0x11}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$FS_IOC_GETFSLABEL(r3, 0x541b, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403"], 0x0) 1.48039223s ago: executing program 4 (id=9785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache']) utime(&(0x7f0000000200)='./file0\x00', 0x0) 1.4680818s ago: executing program 4 (id=9786): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a0001000000000000b03cf200000000000008000100ffffffff080002007f0000018b1bf20a34d8b60f007bed0f5ea79720ad2cd606c02fe9f7748e2d8e1dd5f60931c2d58d46"], 0x2c}}, 0x0) recvmmsg(r4, &(0x7f0000000280), 0x0, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) ioctl$TIOCPKT(r2, 0x5420, 0x0) syz_open_pts(r2, 0x121500) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x81, 0xfc, 0x7f}, {0x6}]}) shutdown(r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.109119635s ago: executing program 0 (id=9787): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0xffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000002a80)=[{{&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/230, 0xe6}], 0x2, &(0x7f0000000500)=""/139, 0x8b}, 0x40}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)=""/151, 0x97}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000840)=""/219, 0xdb}, {&(0x7f0000000940)=""/210, 0xd2}, {&(0x7f0000000a40)=""/166, 0xa6}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000bc0)=""/9, 0x9}], 0x9}, 0x5}, {{&(0x7f0000000cc0)=@caif=@rfm, 0x80, &(0x7f0000000d40)=[{&(0x7f0000001380)=""/214, 0xd6}, {&(0x7f0000002c00)=""/201, 0xc9}, {&(0x7f0000000fc0)=""/198, 0xc6}], 0x3, &(0x7f00000010c0)=""/146, 0x92}, 0x7}, {{&(0x7f0000001180), 0x80, &(0x7f0000002380)=[{&(0x7f0000001200)=""/115, 0x73}, {&(0x7f0000000d80)=""/53, 0x35}, {&(0x7f0000001280)=""/116, 0x74}, {&(0x7f0000001300)=""/96, 0x60}, {&(0x7f0000002d00)=""/4081, 0xff1}], 0x5}, 0x6}, {{&(0x7f0000002400)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002480)=""/156, 0x9c}, {&(0x7f0000002540)=""/17, 0x11}, {&(0x7f0000002580)=""/78, 0x4e}, {&(0x7f0000002600)=""/248, 0xf8}], 0x4, &(0x7f0000002740)=""/184, 0xb8}, 0x5}, {{&(0x7f0000002800)=@rc, 0x80, &(0x7f0000000e40)=[{&(0x7f0000002880)=""/247, 0xf7}], 0x1, &(0x7f00000029c0)=""/158, 0x9e}, 0xb}], 0x6, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2400000, 0x0, 0x0, 0x10, "00f8fffffffffffffff7ffffff00"}) r7 = syz_open_pts(r2, 0x121500) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x3) r8 = syz_open_dev$evdev(&(0x7f0000000e00), 0x0, 0x8620ce13dd84ccc) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) shutdown(r0, 0x0) 1.023605566s ago: executing program 2 (id=9788): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_kernel_read_file\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)="00fa0004000000333f092d2fbc8ac04dc52c9def98d5ece9ba3cebefeb098599e98702f421a7fb6ae777fb3ecce14f1eb8550c82df1fde3f756dc368610b64e6a7bf740586edec8e545eec0a8621be466762b707ea2e9d37051a504d6000"/110, 0x7a52, 0xfffffffffffffffe) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r9 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 962.975537ms ago: executing program 2 (id=9789): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_io_uring_setup(0x1683, &(0x7f0000000240)={0x0, 0x87f9, 0x400, 0x3, 0xf0}, &(0x7f0000000040), &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x5, 0x8}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0xf) accept4(r8, 0x0, 0x0, 0x0) timer_settime(r7, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000000c0)={0x1, 0x1, 0xa, 0x0, 0x4}, 0xc) 889.638978ms ago: executing program 9 (id=9790): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000bc0)=""/95, 0x5f}], 0x2, 0x4000ffe, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904"], 0x0) 565.832033ms ago: executing program 4 (id=9791): inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000600), &(0x7f0000000640)=[0x0, 0x0], 0x0, 0xbc, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r6, &(0x7f0000000000), 0xaa6f50) ioctl$EVIOCGBITKEY(r6, 0x80404521, 0x0) 330.056596ms ago: executing program 4 (id=9792): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x138) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) r3 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) nanosleep(&(0x7f0000000080), 0x0) r6 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r8, 0xfffffffffffffc01, 0x0) tee(r4, r8, 0x60000000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x3, r3}) 289.550166ms ago: executing program 3 (id=9793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4}, 0x38) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000003f40)={'veth0_virt_wifi\x00', &(0x7f0000003e40)=@ethtool_eeprom={0x43, 0xfffffff4, 0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x693, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x2, 0x6, 0x2, 0x6, 0x100, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0x9, 0x2, 0x4, 0x7, 0x40}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ldst={0x1, 0x0, 0x2, 0x4, 0x9, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @map_fd={0x18, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r7}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x8, &(0x7f0000004200)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(r9, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7, r10, &(0x7f0000000300)="9c", 0x1, 0x8001, 0x0, 0x0, r10}]) (async, rerun: 32) ioctl$KVM_CAP_DISABLE_QUIRKS2(r10, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x2}) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) 270.481537ms ago: executing program 3 (id=9794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000740)={'filter\x00', 0x0, [0x2, 0x5, 0x2, 0x4, 0x45a]}, &(0x7f0000000180)=0x54) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r3}, 0x10) chmod(&(0x7f0000000340)='./file1\x00', 0x0) 268.267237ms ago: executing program 3 (id=9795): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='devices.list\x00', 0x275a, 0x0) 197.686047ms ago: executing program 0 (id=9796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=']) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000009df8b93354cc5c868665ab00"/39], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0xfffffffffffffece, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000006a00"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000400000850100000e0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r5, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000e0000001500000000000000270000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = getegid() syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x8c00, &(0x7f00000059c0)=ANY=[@ANYBLOB='iocharset=cp874,allow_utime=00000000000006042211173,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000004000,iocharset=cp869,namecase=1,fmask=00000000000000000000406,fmask=00000000000000000000011,gid=', @ANYRESHEX=r11, @ANYBLOB="2c666d61736b3d303030303084134028698db723303033303030303030303030fdffffff34332c00"], 0x1, 0x1528, &(0x7f0000000a00)="$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") stat(&(0x7f0000005300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2645, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 166.256938ms ago: executing program 3 (id=9797): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1232800, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unlink(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(r0, 0x400, 0x0) 155.949338ms ago: executing program 0 (id=9798): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x138) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) r3 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) nanosleep(0x0, 0x0) r6 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r8, 0xfffffffffffffc01, 0x0) tee(r4, r8, 0x60000000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) r10 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r11, 0x0, 0xfd, 0x9, 0xbc0000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xff00000000000000, 0x460c6}, 0x8000, 0x40, 0x6}}) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x3, r3}) 0s ago: executing program 2 (id=9799): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): block_group 0 [ 2094.780368][T25975] EXT4-fs error (device loop5): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 2094.794634][T31889] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 2094.803420][T31889] EXT4-fs (loop5): 1 orphan inode deleted [ 2094.807789][T25975] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 2094.809487][T31889] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2094.819180][T31898] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2094.831597][T31889] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 16: comm syz.5.8990: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 2094.873714][T25975] EXT4-fs error (device loop5): ext4_release_dquot:6812: comm kworker/u4:1: Failed to release dquot type 0 [ 2094.879050][T31900] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2095.422846][T27760] EXT4-fs (loop5): unmounting filesystem. [ 2095.952982][ T634] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2096.036241][T31933] tap0: tun_chr_ioctl cmd 2147767507 [ 2096.241856][T31933] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9004'. [ 2096.357488][ T634] usb 6-1: Using ep0 maxpacket: 16 [ 2096.364773][ T634] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 2096.373015][ T634] usb 6-1: config 0 has no interface number 0 [ 2096.379184][ T634] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2097.439239][ T634] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2097.449312][ T634] usb 6-1: config 0 interface 41 has no altsetting 0 [ 2097.459660][ T634] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2097.839963][ T634] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.852226][ T634] usb 6-1: Product: syz [ 2097.856506][ T634] usb 6-1: Manufacturer: syz [ 2097.861210][ T634] usb 6-1: SerialNumber: syz [ 2097.874219][ T634] usb 6-1: config 0 descriptor?? [ 2097.882470][T31920] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2097.893851][T31920] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2098.167676][T31920] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2098.177159][T31920] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2098.219033][T31961] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2098.587084][T31920] bridge: RTM_NEWNEIGH with invalid ether address [ 2098.593659][ T634] Error reading MAC address [ 2098.606729][T31920] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2098.621609][T31920] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2098.755991][T31970] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2099.446366][ T634] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 2099.457822][ T634] usb 6-1: USB disconnect, device number 113 [ 2099.534318][T31982] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2099.693225][T31989] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2100.048292][T32007] loop9: detected capacity change from 0 to 8192 [ 2102.579121][T32064] loop9: detected capacity change from 0 to 2048 [ 2102.628401][T32064] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2102.826057][T32069] 9pnet_fd: Insufficient options for proto=fd [ 2103.004763][T32061] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2103.196167][T32077] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2103.208208][T32077] FAT-fs (loop7): unable to read boot sector [ 2103.489811][T28240] EXT4-fs (loop9): unmounting filesystem. [ 2103.708424][T32088] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2104.265761][T32102] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2104.293570][T32106] loop9: detected capacity change from 0 to 2048 [ 2104.312828][T32106] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2104.567091][T32115] 9pnet_fd: Insufficient options for proto=fd [ 2104.796887][T32119] loop5: detected capacity change from 0 to 128 [ 2104.805783][T32119] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2104.814679][T32119] ext4 filesystem being mounted at /260/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2106.558945][T27760] EXT4-fs (loop5): unmounting filesystem. [ 2106.642634][T32138] tap0: tun_chr_ioctl cmd 2147767507 [ 2106.683714][T28240] EXT4-fs (loop9): unmounting filesystem. [ 2106.802225][T32138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9059'. [ 2106.883907][T32143] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2106.893774][T32146] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2107.770338][T32168] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2108.066514][ T1377] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2108.272938][ T1377] usb 4-1: Using ep0 maxpacket: 16 [ 2108.279619][ T1377] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2108.288325][ T1377] usb 4-1: config 0 has no interface number 0 [ 2108.299862][ T1377] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2108.310963][ T1377] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2108.322140][ T1377] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2108.331271][ T1377] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2108.340999][ T1377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.351876][ T1377] usb 4-1: Product: syz [ 2108.356700][ T1377] usb 4-1: Manufacturer: syz [ 2108.361830][ T1377] usb 4-1: SerialNumber: syz [ 2108.442589][ T1377] usb 4-1: config 0 descriptor?? [ 2108.453571][T32172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2108.461938][T32172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2109.408443][T32172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2109.420931][T32172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2109.870968][T32197] tap0: tun_chr_ioctl cmd 2147767507 [ 2110.063670][ T1377] Error reading MAC address [ 2110.073251][T32172] bridge: RTM_NEWNEIGH with invalid ether address [ 2110.080252][T32172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2110.107743][T32172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2110.114349][T32197] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9075'. [ 2110.224100][T32171] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2110.256345][T32171] FAT-fs (loop19): unable to read boot sector [ 2110.554773][ T1377] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 2110.576538][ T1377] usb 4-1: USB disconnect, device number 13 [ 2110.893067][T32220] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2111.189960][T32225] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2111.294592][T32231] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2111.882107][T32246] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2111.882962][T17681] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2112.016059][T32250] fuse: Bad value for 'user_id' [ 2112.653821][T17681] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.674386][T17681] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2112.702921][T17681] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2112.722917][T17681] usb 3-1: Product: syz [ 2112.727116][T17681] usb 3-1: Manufacturer: syz [ 2112.731716][T17681] usb 3-1: SerialNumber: syz [ 2112.757793][T17681] usb 3-1: config 0 descriptor?? [ 2112.769683][T17681] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 2112.805965][T30330] udevd[30330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2112.995735][ T28] audit: type=1400 audit(1747140706.402:2117): avc: denied { create } for pid=32254 comm="syz.4.9094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2113.054001][ T1377] usb 3-1: USB disconnect, device number 68 [ 2114.837721][T32285] loop5: detected capacity change from 0 to 8192 [ 2115.373647][T32289] tap0: tun_chr_ioctl cmd 2147767507 [ 2115.458430][T32289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9104'. [ 2116.216526][T32309] fuse: Bad value for 'user_id' [ 2116.762947][ T6780] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2116.813934][T32315] loop9: detected capacity change from 0 to 40427 [ 2116.832778][T32315] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 2116.857200][T32315] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2116.871576][T32315] F2FS-fs (loop9): invalid crc value [ 2116.878392][T32315] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2116.902196][T32315] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 2116.909637][T32315] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2117.597002][T32327] FAULT_INJECTION: forcing a failure. [ 2117.597002][T32327] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.609749][T32327] CPU: 1 PID: 32327 Comm: syz.3.9112 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2117.619666][T32327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2117.629723][T32327] Call Trace: [ 2117.633005][T32327] [ 2117.635932][T32327] __dump_stack+0x21/0x24 [ 2117.640270][T32327] dump_stack_lvl+0xee/0x150 [ 2117.644858][T32327] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2117.649889][T32327] dump_stack+0x15/0x24 [ 2117.654042][T32327] should_fail_ex+0x3d4/0x520 [ 2117.658716][T32327] ? __sigqueue_alloc+0x13f/0x210 [ 2117.663737][T32327] __should_failslab+0xac/0xf0 [ 2117.668500][T32327] should_failslab+0x9/0x20 [ 2117.673004][T32327] kmem_cache_alloc+0x3b/0x330 [ 2117.677769][T32327] __sigqueue_alloc+0x13f/0x210 [ 2117.682618][T32327] sigqueue_alloc+0x28/0x30 [ 2117.687124][T32327] do_timer_create+0x1b0/0x12c0 [ 2117.691972][T32327] ? finish_task_switch+0x16b/0x7b0 [ 2117.697171][T32327] ? __switch_to_asm+0x3a/0x60 [ 2117.701933][T32327] ? __ia32_sys_clock_nanosleep_time32+0xb0/0xb0 [ 2117.708254][T32327] ? __kasan_check_write+0x14/0x20 [ 2117.713370][T32327] __x64_sys_timer_create+0x13c/0x180 [ 2117.718772][T32327] ? release_firmware_map_entry+0x194/0x194 [ 2117.724685][T32327] ? __cfi___x64_sys_timer_create+0x10/0x10 [ 2117.730601][T32327] ? __kasan_check_write+0x14/0x20 [ 2117.735718][T32327] ? fpregs_restore_userregs+0x128/0x260 [ 2117.741350][T32327] ? switch_fpu_return+0xe/0x10 [ 2117.746198][T32327] x64_sys_call+0x31c/0x9a0 [ 2117.750701][T32327] do_syscall_64+0x4c/0xa0 [ 2117.755113][T32327] ? clear_bhb_loop+0x15/0x70 [ 2117.759782][T32327] ? clear_bhb_loop+0x15/0x70 [ 2117.764452][T32327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2117.770345][T32327] RIP: 0033:0x7f1eb6d8e969 [ 2117.774757][T32327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2117.794361][T32327] RSP: 002b:00007f1eb7c92038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 2117.802770][T32327] RAX: ffffffffffffffda RBX: 00007f1eb6fb6160 RCX: 00007f1eb6d8e969 [ 2117.810738][T32327] RDX: 0000200000044000 RSI: 000020000049efa0 RDI: 0000000000000002 [ 2117.818724][T32327] RBP: 00007f1eb7c92090 R08: 0000000000000000 R09: 0000000000000000 [ 2117.826773][T32327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2117.834737][T32327] R13: 0000000000000000 R14: 00007f1eb6fb6160 R15: 00007ffead66e378 [ 2117.842705][T32327] [ 2117.853845][ T6780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2117.865026][ T6780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2117.875873][ T28] audit: type=1326 audit(1747140711.288:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32318 comm="syz.3.9112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1eb6d8e969 code=0x0 [ 2117.876147][ T6780] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2117.902452][ T28] audit: type=1400 audit(1747140711.318:2119): avc: denied { write } for pid=32314 comm="syz.9.9113" name="file0" dev="loop9" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2117.908156][ T6780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.930161][ T28] audit: type=1400 audit(1747140711.318:2120): avc: denied { add_name } for pid=32314 comm="syz.9.9113" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2117.939212][ T6780] usb 3-1: config 0 descriptor?? [ 2117.965610][ T28] audit: type=1400 audit(1747140711.318:2121): avc: denied { create } for pid=32314 comm="syz.9.9113" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2118.025008][ T328] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2118.043946][ T328] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2118.230515][T32342] tap0: tun_chr_ioctl cmd 2147767507 [ 2118.301077][T32342] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9120'. [ 2118.368570][T32337] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2118.402406][ T6780] kone 0003:1E7D:2CED.0180: item fetching failed at offset 2/5 [ 2118.410624][T32337] FAT-fs (loop9): unable to read boot sector [ 2118.416014][T32349] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2118.424943][ T6780] kone 0003:1E7D:2CED.0180: parse failed [ 2118.430634][ T6780] kone: probe of 0003:1E7D:2CED.0180 failed with error -22 [ 2118.529526][T32352] loop5: detected capacity change from 0 to 128 [ 2118.533008][T17681] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2118.547479][T32352] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2118.556752][T32352] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2118.699560][ T6780] usb 3-1: USB disconnect, device number 69 [ 2118.722939][T17681] usb 10-1: Using ep0 maxpacket: 16 [ 2118.729803][T17681] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2118.738602][T17681] usb 10-1: config 1 has an invalid interface number: 206 but max is 0 [ 2118.748474][T17681] usb 10-1: config 1 has no interface number 0 [ 2118.759178][T17681] usb 10-1: string descriptor 0 read error: -22 [ 2118.765776][T17681] usb 10-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 2118.776898][T17681] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.064462][ T6780] usb 10-1: USB disconnect, device number 17 [ 2119.347064][T32370] FAULT_INJECTION: forcing a failure. [ 2119.347064][T32370] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.367057][T32370] CPU: 1 PID: 32370 Comm: syz.2.9128 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2119.376991][T32370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2119.387071][T32370] Call Trace: [ 2119.390362][T32370] [ 2119.393738][T32370] __dump_stack+0x21/0x24 [ 2119.398281][T32370] dump_stack_lvl+0xee/0x150 [ 2119.402909][T32370] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2119.407966][T32370] ? unwind_get_return_address+0x4d/0x90 [ 2119.413616][T32370] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2119.419775][T32370] ? arch_stack_walk+0xfc/0x150 [ 2119.424635][T32370] dump_stack+0x15/0x24 [ 2119.428787][T32370] should_fail_ex+0x3d4/0x520 [ 2119.433459][T32370] __should_failslab+0xac/0xf0 [ 2119.438215][T32370] ? alloc_pipe_info+0xe7/0x4b0 [ 2119.443065][T32370] should_failslab+0x9/0x20 [ 2119.447565][T32370] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2119.452935][T32370] ? fsnotify+0x56a/0x1ee0 [ 2119.457347][T32370] ? alloc_pipe_info+0xe7/0x4b0 [ 2119.462195][T32370] kmalloc_trace+0x29/0xb0 [ 2119.466617][T32370] alloc_pipe_info+0xe7/0x4b0 [ 2119.471288][T32370] splice_direct_to_actor+0x956/0xb10 [ 2119.476655][T32370] ? __cfi_fsnotify+0x10/0x10 [ 2119.481327][T32370] ? selinux_file_permission+0x2a5/0x510 [ 2119.486954][T32370] ? fsnotify_perm+0x67/0x5b0 [ 2119.491629][T32370] ? security_file_permission+0x8a/0xb0 [ 2119.497168][T32370] ? __cfi_direct_splice_actor+0x10/0x10 [ 2119.502794][T32370] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 2119.508682][T32370] ? security_file_permission+0x94/0xb0 [ 2119.514224][T32370] ? rw_verify_area+0xa7/0x1c0 [ 2119.518990][T32370] do_splice_direct+0x1b3/0x2c0 [ 2119.523835][T32370] ? avc_policy_seqno+0x1b/0x70 [ 2119.528698][T32370] ? __cfi_do_splice_direct+0x10/0x10 [ 2119.534089][T32370] ? security_file_permission+0x94/0xb0 [ 2119.539668][T32370] do_sendfile+0x5c6/0xeb0 [ 2119.544101][T32370] ? __cfi_vfs_write+0x10/0x10 [ 2119.548886][T32370] ? do_preadv+0x330/0x330 [ 2119.553305][T32370] ? __kasan_check_write+0x14/0x20 [ 2119.558428][T32370] ? fput+0x154/0x1a0 [ 2119.562428][T32370] __x64_sys_sendfile64+0x18f/0x1f0 [ 2119.567662][T32370] ? __cfi_ksys_write+0x10/0x10 [ 2119.572529][T32370] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 2119.578251][T32370] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2119.584318][T32370] x64_sys_call+0x62c/0x9a0 [ 2119.588818][T32370] do_syscall_64+0x4c/0xa0 [ 2119.593234][T32370] ? clear_bhb_loop+0x15/0x70 [ 2119.597902][T32370] ? clear_bhb_loop+0x15/0x70 [ 2119.602577][T32370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2119.608467][T32370] RIP: 0033:0x7f3ed178e969 [ 2119.612877][T32370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2119.632484][T32370] RSP: 002b:00007f3ed2548038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2119.640903][T32370] RAX: ffffffffffffffda RBX: 00007f3ed19b5fa0 RCX: 00007f3ed178e969 [ 2119.648868][T32370] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2119.656847][T32370] RBP: 00007f3ed2548090 R08: 0000000000000000 R09: 0000000000000000 [ 2119.664813][T32370] R10: 0000000024002deb R11: 0000000000000246 R12: 0000000000000001 [ 2119.672783][T32370] R13: 0000000000000000 R14: 00007f3ed19b5fa0 R15: 00007ffe443540c8 [ 2119.680837][T32370] [ 2119.725353][T27760] EXT4-fs (loop5): unmounting filesystem. [ 2119.752422][T32374] tap0: tun_chr_ioctl cmd 2147767507 [ 2119.819313][T32374] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9131'. [ 2119.864750][T32385] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2119.938645][T32389] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2120.583825][T32395] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2120.618967][T32395] FAT-fs (loop11): unable to read boot sector [ 2120.663812][T32402] FAULT_INJECTION: forcing a failure. [ 2120.663812][T32402] name failslab, interval 1, probability 0, space 0, times 0 [ 2120.698175][T32402] CPU: 0 PID: 32402 Comm: syz.3.9138 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2120.708117][T32402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2120.718194][T32402] Call Trace: [ 2120.721491][T32402] [ 2120.724439][T32402] __dump_stack+0x21/0x24 [ 2120.728796][T32402] dump_stack_lvl+0xee/0x150 [ 2120.733406][T32402] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2120.738450][T32402] ? memset+0x35/0x40 [ 2120.742456][T32402] dump_stack+0x15/0x24 [ 2120.746632][T32402] should_fail_ex+0x3d4/0x520 [ 2120.751330][T32402] __should_failslab+0xac/0xf0 [ 2120.756107][T32402] should_failslab+0x9/0x20 [ 2120.760628][T32402] slab_pre_alloc_hook+0x30/0x1e0 [ 2120.765666][T32402] kmem_cache_alloc_lru+0x49/0x280 [ 2120.770794][T32402] ? __d_alloc+0x34/0x6c0 [ 2120.775142][T32402] __d_alloc+0x34/0x6c0 [ 2120.779307][T32402] ? rwsem_write_trylock+0x130/0x300 [ 2120.784611][T32402] d_alloc+0x4b/0x1d0 [ 2120.788608][T32402] lookup_one_qstr_excl+0xcb/0x270 [ 2120.793735][T32402] filename_create+0x219/0x450 [ 2120.798505][T32402] ? kasan_save_alloc_info+0x25/0x30 [ 2120.803805][T32402] ? kern_path_create+0x1b0/0x1b0 [ 2120.808844][T32402] do_symlinkat+0x65/0x5a0 [ 2120.813269][T32402] ? getname_flags+0x206/0x500 [ 2120.818046][T32402] __x64_sys_symlink+0x7e/0x90 [ 2120.822817][T32402] x64_sys_call+0x369/0x9a0 [ 2120.827329][T32402] do_syscall_64+0x4c/0xa0 [ 2120.831761][T32402] ? clear_bhb_loop+0x15/0x70 [ 2120.836443][T32402] ? clear_bhb_loop+0x15/0x70 [ 2120.841126][T32402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2120.847034][T32402] RIP: 0033:0x7f1eb6d8e969 [ 2120.851455][T32402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2120.871069][T32402] RSP: 002b:00007f1eb7cd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 2120.879478][T32402] RAX: ffffffffffffffda RBX: 00007f1eb6fb5fa0 RCX: 00007f1eb6d8e969 [ 2120.887446][T32402] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000200000000b00 [ 2120.895411][T32402] RBP: 00007f1eb7cd4090 R08: 0000000000000000 R09: 0000000000000000 [ 2120.903375][T32402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2120.911352][T32402] R13: 0000000000000000 R14: 00007f1eb6fb5fa0 R15: 00007ffead66e378 [ 2120.919321][T32402] [ 2121.566293][T32426] tap0: tun_chr_ioctl cmd 2147767507 [ 2121.629763][T32426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9145'. [ 2121.956251][T32436] syz.2.9146[32436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2121.956582][T32436] syz.2.9146[32436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2123.576607][T32447] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2124.009027][T32457] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2124.018792][T32457] FAT-fs (loop11): unable to read boot sector [ 2124.027250][T32458] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2126.039801][T32496] tap0: tun_chr_ioctl cmd 2147767507 [ 2126.308024][T32496] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9164'. [ 2128.585947][ T28] audit: type=1400 audit(1747140721.998:2122): avc: denied { map } for pid=32535 comm="syz.3.9176" path="socket:[133514]" dev="sockfs" ino=133514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2128.662929][ T28] audit: type=1400 audit(1747140721.998:2123): avc: denied { read } for pid=32535 comm="syz.3.9176" path="socket:[133514]" dev="sockfs" ino=133514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2128.713077][ T28] audit: type=1400 audit(1747140721.998:2124): avc: denied { bind } for pid=32535 comm="syz.3.9176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2128.862956][ T634] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 2129.033035][ T634] usb 4-1: device descriptor read/64, error -71 [ 2129.302966][ T634] usb 4-1: device descriptor read/64, error -71 [ 2129.572967][ T634] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 2129.587129][T32560] tap0: tun_chr_ioctl cmd 2147767507 [ 2130.079352][T32560] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9183'. [ 2130.271667][T32573] loop9: detected capacity change from 0 to 256 [ 2130.914358][ T634] usb 4-1: device descriptor read/64, error -71 [ 2131.006578][T32582] loop5: detected capacity change from 0 to 256 [ 2131.080588][T32585] netlink: 'syz.2.9190': attribute type 13 has an invalid length. [ 2131.080829][T32582] FAT-fs (loop5): bogus number of FAT sectors [ 2131.103312][T32582] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2131.115279][T32585] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2131.125511][T32585] device gretap1 entered promiscuous mode [ 2131.196097][T32589] loop5: detected capacity change from 0 to 2048 [ 2131.212932][ T634] usb 4-1: device descriptor read/64, error -71 [ 2131.255268][T32589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2131.342989][ T634] usb usb4-port1: attempt power cycle [ 2131.357838][T32599] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2131.517186][T32603] 9pnet_fd: Insufficient options for proto=fd [ 2132.233763][T27760] EXT4-fs (loop5): unmounting filesystem. [ 2134.321134][T32623] loop5: detected capacity change from 0 to 256 [ 2134.693927][T32642] tap0: tun_chr_ioctl cmd 2147767507 [ 2134.793833][T32642] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9206'. [ 2135.042932][ T24] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2135.234014][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2135.245161][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2135.327174][ T24] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2135.366752][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.376818][ T24] usb 6-1: Product: syz [ 2135.381005][ T24] usb 6-1: Manufacturer: syz [ 2135.385909][ T24] usb 6-1: SerialNumber: syz [ 2135.394590][ T24] usb 6-1: config 0 descriptor?? [ 2135.399902][T32643] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2135.407383][T32643] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2135.479977][T32664] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2135.614883][T32670] tap0: tun_chr_ioctl cmd 2147767507 [ 2135.617547][T32633] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2135.627625][T32633] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2135.972157][T32670] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9213'. [ 2136.066458][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 2136.320347][ T24] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 2136.340443][ T24] usb 6-1: USB disconnect, device number 114 [ 2136.886791][T32695] FAULT_INJECTION: forcing a failure. [ 2136.886791][T32695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.924607][T32695] CPU: 0 PID: 32695 Comm: syz.5.9220 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2136.934545][T32695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2136.944619][T32695] Call Trace: [ 2136.947917][T32695] [ 2136.950857][T32695] __dump_stack+0x21/0x24 [ 2136.955213][T32695] dump_stack_lvl+0xee/0x150 [ 2136.959821][T32695] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2136.964866][T32695] dump_stack+0x15/0x24 [ 2136.969043][T32695] should_fail_ex+0x3d4/0x520 [ 2136.973734][T32695] should_fail+0xb/0x10 [ 2136.977906][T32695] should_fail_usercopy+0x1a/0x20 [ 2136.982949][T32695] strncpy_from_user+0x24/0x2d0 [ 2136.987819][T32695] ? getname_flags+0xb9/0x500 [ 2136.992515][T32695] getname_flags+0xf4/0x500 [ 2136.997036][T32695] user_path_at_empty+0x30/0x1c0 [ 2137.001987][T32695] path_listxattr+0x9f/0x1b0 [ 2137.006599][T32695] ? path_getxattr+0x400/0x400 [ 2137.011382][T32695] ? debug_smp_processor_id+0x17/0x20 [ 2137.016781][T32695] __x64_sys_listxattr+0x80/0x90 [ 2137.021737][T32695] x64_sys_call+0xd7/0x9a0 [ 2137.026176][T32695] do_syscall_64+0x4c/0xa0 [ 2137.030612][T32695] ? clear_bhb_loop+0x15/0x70 [ 2137.035302][T32695] ? clear_bhb_loop+0x15/0x70 [ 2137.039994][T32695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2137.045910][T32695] RIP: 0033:0x7fc5c8d8e969 [ 2137.050340][T32695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2137.069963][T32695] RSP: 002b:00007fc5c9bd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 2137.078395][T32695] RAX: ffffffffffffffda RBX: 00007fc5c8fb5fa0 RCX: 00007fc5c8d8e969 [ 2137.086368][T32695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 2137.094357][T32695] RBP: 00007fc5c9bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 2137.102324][T32695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2137.110290][T32695] R13: 0000000000000000 R14: 00007fc5c8fb5fa0 R15: 00007ffc2df68508 [ 2137.118263][T32695] [ 2137.402817][T32711] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2137.418295][T32711] FAT-fs (loop19): unable to read boot sector [ 2137.465433][T32716] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2138.168017][T32718] loop5: detected capacity change from 0 to 256 [ 2138.367751][T32718] exfat: Unknown parameter '"0x0000000000000000ÿÿÿÿÿÿÿÿ' [ 2138.447752][T32718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9238'. [ 2138.483301][T32718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9238'. [ 2138.507169][T32718] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9238'. [ 2138.695169][ T28] audit: type=1326 audit(1747140732.108:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32727 comm="syz.4.9231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f597158e969 code=0x0 [ 2138.796546][T32737] FAULT_INJECTION: forcing a failure. [ 2138.796546][T32737] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.815893][T32736] loop5: detected capacity change from 0 to 1024 [ 2138.827765][T32737] CPU: 1 PID: 32737 Comm: syz.4.9231 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2138.837734][T32737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2138.847812][T32737] Call Trace: [ 2138.851112][T32737] [ 2138.854066][T32737] __dump_stack+0x21/0x24 [ 2138.855473][T32736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2138.858422][T32737] dump_stack_lvl+0xee/0x150 [ 2138.869618][T32737] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2138.874680][T32737] dump_stack+0x15/0x24 [ 2138.878870][T32737] should_fail_ex+0x3d4/0x520 [ 2138.883566][T32737] __should_failslab+0xac/0xf0 [ 2138.888347][T32737] ? __se_sys_mount+0x153/0x380 [ 2138.893214][T32737] should_failslab+0x9/0x20 [ 2138.897739][T32737] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2138.903127][T32737] ? __se_sys_mount+0x153/0x380 [ 2138.907997][T32737] kmalloc_trace+0x29/0xb0 [ 2138.912433][T32737] __se_sys_mount+0x153/0x380 [ 2138.917134][T32737] ? __this_cpu_preempt_check+0x13/0x20 [ 2138.922702][T32737] ? __x64_sys_mount+0xd0/0xd0 [ 2138.927482][T32737] ? __kasan_check_write+0x14/0x20 [ 2138.932608][T32737] ? fpregs_restore_userregs+0x128/0x260 [ 2138.938254][T32737] __x64_sys_mount+0xbf/0xd0 [ 2138.942858][T32737] x64_sys_call+0x65d/0x9a0 [ 2138.947371][T32737] do_syscall_64+0x4c/0xa0 [ 2138.951800][T32737] ? clear_bhb_loop+0x15/0x70 [ 2138.956534][T32737] ? clear_bhb_loop+0x15/0x70 [ 2138.961236][T32737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2138.967158][T32737] RIP: 0033:0x7f597158e969 [ 2138.971583][T32737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2138.991197][T32737] RSP: 002b:00007f59713de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2138.999622][T32737] RAX: ffffffffffffffda RBX: 00007f59717b6160 RCX: 00007f597158e969 [ 2139.007602][T32737] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 2139.015583][T32737] RBP: 00007f59713de090 R08: 0000200000000400 R09: 0000000000000000 [ 2139.023564][T32737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2139.031541][T32737] R13: 0000000000000000 R14: 00007f59717b6160 R15: 00007ffe88b4fa48 [ 2139.039527][T32737] [ 2139.045819][T32736] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2139.396429][T32747] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2139.654304][T27760] EXT4-fs (loop5): unmounting filesystem. [ 2140.050070][ T300] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2140.629750][ T317] 9p: Unknown Cache mode fsca [ 2140.682620][ T28] audit: type=1326 audit(1747140734.088:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.5.9250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c8d8e969 code=0x7ffc0000 [ 2140.718773][ T28] audit: type=1326 audit(1747140734.128:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.5.9250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c8d8e969 code=0x7ffc0000 [ 2140.742397][ T28] audit: type=1326 audit(1747140734.128:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.5.9250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c8d8e969 code=0x7ffc0000 [ 2140.818177][ T28] audit: type=1326 audit(1747140734.128:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.5.9250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c8d8e969 code=0x7ffc0000 [ 2140.850982][ T28] audit: type=1326 audit(1747140734.128:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.5.9250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c8d8e969 code=0x7ffc0000 [ 2140.874701][ T28] audit: type=1326 audit(1747140734.128:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.5.9250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c8d8e969 code=0x7ffc0000 [ 2140.943751][ T28] audit: type=1326 audit(1747140734.128:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.5.9250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c8d8e969 code=0x7ffc0000 [ 2141.664116][ T28] audit: type=1326 audit(1747140734.128:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.5.9250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c8d8e969 code=0x7ffc0000 [ 2141.702964][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2141.864422][ T28] audit: type=1326 audit(1747140734.128:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=324 comm="syz.5.9250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c8d8e969 code=0x7ffc0000 [ 2142.073028][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 2142.079618][ T24] usb 3-1: config 0 has no interfaces? [ 2142.095009][ T24] usb 3-1: New USB device found, idVendor=fbb4, idProduct=de61, bcdDevice= 0.40 [ 2142.117850][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.138350][ T24] usb 3-1: Product: syz [ 2142.142577][ T24] usb 3-1: Manufacturer: syz [ 2142.152687][ T24] usb 3-1: SerialNumber: syz [ 2142.158381][ T24] usb 3-1: config 0 descriptor?? [ 2142.366695][ T24] usb 3-1: USB disconnect, device number 70 [ 2142.612407][ T357] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2143.474388][ T379] loop5: detected capacity change from 0 to 8192 [ 2144.020432][ T391] tap0: tun_chr_ioctl cmd 2147767507 [ 2144.092431][ T391] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9269'. [ 2144.350474][ T400] xt_policy: output policy not valid in PREROUTING and INPUT [ 2144.561473][ T407] loop9: detected capacity change from 0 to 128 [ 2144.576437][ T410] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2144.668830][ T407] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2144.680773][ T407] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2144.723452][T28240] EXT4-fs (loop9): unmounting filesystem. [ 2145.322442][ T421] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2145.331715][ T421] FAT-fs (loop9): unable to read boot sector [ 2145.704348][ T433] 9pnet_fd: Insufficient options for proto=fd [ 2147.209142][ T469] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2148.066198][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 2148.066215][ T28] audit: type=1400 audit(1747140741.478:2167): avc: denied { setattr } for pid=491 comm="syz.2.9299" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2148.415736][ T501] loop5: detected capacity change from 0 to 256 [ 2148.740378][ T448] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2148.749615][ T448] FAT-fs (loop7): unable to read boot sector [ 2148.807268][ T509] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2149.841961][ T525] loop9: detected capacity change from 0 to 2048 [ 2149.906459][ T525] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2150.131554][ T539] 9pnet_fd: Insufficient options for proto=fd [ 2151.110949][ T553] 9pnet_fd: Insufficient options for proto=fd [ 2151.165111][ T562] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2151.175103][T28240] EXT4-fs (loop9): unmounting filesystem. [ 2151.408235][ T567] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2151.417860][ T567] FAT-fs (loop5): unable to read boot sector [ 2152.307467][ T587] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2152.398014][ T591] 9pnet_fd: Insufficient options for proto=fd [ 2152.719567][ T599] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2153.234063][ T614] loop9: detected capacity change from 0 to 40427 [ 2153.242975][ T614] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 2153.250883][ T614] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2153.261202][ T614] F2FS-fs (loop9): invalid crc value [ 2153.529889][ T614] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2153.591014][ T614] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 2153.598148][ T614] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2153.774623][ T28] audit: type=1326 audit(1747140747.188:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=613 comm="syz.9.9338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f875418e969 code=0x0 [ 2155.049704][ T652] tipc: Started in network mode [ 2155.054703][ T652] tipc: Node identity ac14142f, cluster identity 4711 [ 2155.061672][ T652] tipc: New replicast peer: 0.0.0.0 [ 2155.067647][ T652] tipc: Enabled bearer , priority 10 [ 2155.076573][ T652] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9347'. [ 2155.405537][ T654] loop9: detected capacity change from 0 to 40427 [ 2155.412448][ T654] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 2155.420387][ T654] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2155.430121][ T654] F2FS-fs (loop9): invalid crc value [ 2155.453711][ T654] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2155.490668][ T654] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 2155.497806][ T654] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2156.838458][ T5182] tipc: Node number set to 2886997039 [ 2158.557762][ T694] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2158.784228][ T702] FAULT_INJECTION: forcing a failure. [ 2158.784228][ T702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2158.805802][ T702] CPU: 0 PID: 702 Comm: syz.4.9362 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2158.815568][ T702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2158.825645][ T702] Call Trace: [ 2158.828946][ T702] [ 2158.831893][ T702] __dump_stack+0x21/0x24 [ 2158.836250][ T702] dump_stack_lvl+0xee/0x150 [ 2158.840869][ T702] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2158.845919][ T702] ? 0xffffffffa0000950 [ 2158.850260][ T702] ? is_bpf_text_address+0x177/0x190 [ 2158.855724][ T702] dump_stack+0x15/0x24 [ 2158.859906][ T702] should_fail_ex+0x3d4/0x520 [ 2158.864604][ T702] should_fail_alloc_page+0x61/0x90 [ 2158.869229][ T696] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2158.869812][ T702] prepare_alloc_pages+0x148/0x5f0 [ 2158.879112][ T696] FAT-fs (loop11): unable to read boot sector [ 2158.884102][ T702] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 2158.884130][ T702] ? stack_trace_save+0x98/0xe0 [ 2158.900207][ T702] __alloc_pages+0x115/0x3a0 [ 2158.904806][ T702] ? __cfi___alloc_pages+0x10/0x10 [ 2158.909923][ T702] ? _parse_integer+0x2a/0x40 [ 2158.914601][ T702] ? kstrtoull+0x137/0x1d0 [ 2158.919017][ T702] __kmalloc_large_node+0xa1/0x1c0 [ 2158.924131][ T702] ? iovec_from_user+0x86/0x2e0 [ 2158.929067][ T702] __kmalloc+0xe0/0x1e0 [ 2158.933224][ T702] iovec_from_user+0x86/0x2e0 [ 2158.937913][ T702] __import_iovec+0x71/0x470 [ 2158.942517][ T702] import_iovec+0x7c/0xb0 [ 2158.946851][ T702] vfs_writev+0x113/0x590 [ 2158.951192][ T702] ? do_writev+0x2b0/0x2b0 [ 2158.955613][ T702] ? __kasan_check_write+0x14/0x20 [ 2158.960730][ T702] ? __fdget+0x19c/0x220 [ 2158.964972][ T702] ? __x64_sys_pwritev+0xec/0x290 [ 2158.970086][ T702] __x64_sys_pwritev+0x193/0x290 [ 2158.975021][ T702] ? __cfi_ksys_write+0x10/0x10 [ 2158.979869][ T702] ? __cfi___x64_sys_pwritev+0x10/0x10 [ 2158.985330][ T702] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2158.991410][ T702] x64_sys_call+0x695/0x9a0 [ 2158.995908][ T702] do_syscall_64+0x4c/0xa0 [ 2159.000338][ T702] ? clear_bhb_loop+0x15/0x70 [ 2159.005008][ T702] ? clear_bhb_loop+0x15/0x70 [ 2159.009681][ T702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2159.015591][ T702] RIP: 0033:0x7f597158e969 [ 2159.020000][ T702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2159.039604][ T702] RSP: 002b:00007f597231b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 2159.048012][ T702] RAX: ffffffffffffffda RBX: 00007f59717b5fa0 RCX: 00007f597158e969 [ 2159.055981][ T702] RDX: 0000000000000300 RSI: 0000200000000540 RDI: 0000000000000008 [ 2159.063954][ T702] RBP: 00007f597231b090 R08: 0000000000000000 R09: 0000000000000000 [ 2159.071917][ T702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2159.079881][ T702] R13: 0000000000000000 R14: 00007f59717b5fa0 R15: 00007ffe88b4fa48 [ 2159.087851][ T702] [ 2159.435263][ T713] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.442334][ T713] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.450077][ T713] device bridge_slave_0 entered promiscuous mode [ 2159.457207][ T713] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.464317][ T713] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.472656][ T713] device bridge_slave_1 entered promiscuous mode [ 2159.577093][ T727] fuse: Bad value for 'fd' [ 2160.277513][T25975] tipc: Left network mode [ 2160.533588][ T744] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2160.559424][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2160.571801][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2160.594559][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2160.605181][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2160.613587][T23113] bridge0: port 1(bridge_slave_0) entered blocking state [ 2160.620660][T23113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2160.654433][ T713] device veth0_vlan entered promiscuous mode [ 2160.668798][ T713] device veth1_macvtap entered promiscuous mode [ 2160.725038][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2160.737774][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2160.746224][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2160.755748][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2160.764180][T23113] bridge0: port 2(bridge_slave_1) entered blocking state [ 2160.771242][T23113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2160.793873][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2160.810814][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2160.826759][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2160.844699][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2160.861641][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2160.887245][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2160.903810][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2160.968810][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2160.977474][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2160.985857][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2160.994729][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2161.003915][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2161.012388][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2161.020709][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2161.233069][ T28] audit: type=1400 audit(1747140754.588:2169): avc: denied { listen } for pid=758 comm="syz.4.9380" path="/133/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2161.443831][T25975] device bridge_slave_1 left promiscuous mode [ 2161.450110][T25975] bridge0: port 2(bridge_slave_1) entered disabled state [ 2161.457846][T25975] device bridge_slave_0 left promiscuous mode [ 2161.464206][T25975] bridge0: port 1(bridge_slave_0) entered disabled state [ 2161.897752][T25975] device veth1_macvtap left promiscuous mode [ 2162.018858][T25975] device veth0_vlan left promiscuous mode [ 2163.325012][ T780] loop5: detected capacity change from 0 to 40427 [ 2163.336011][ T780] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 2163.338195][ T793] loop9: detected capacity change from 0 to 256 [ 2163.353282][ T780] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2163.363299][ T793] exfat: Deprecated parameter 'utf8' [ 2163.368667][ T793] exfat: Deprecated parameter 'namecase' [ 2163.383307][ T793] exfat: Bad value for 'umask' [ 2163.387163][ T780] F2FS-fs (loop5): invalid crc value [ 2163.427737][ T793] loop9: detected capacity change from 0 to 128 [ 2163.443781][ T793] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2163.461720][ T780] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2163.514669][ T793] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2163.548035][ T793] ext4 filesystem being mounted at /280/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2163.620952][T28240] EXT4-fs (loop9): unmounting filesystem. [ 2163.661982][ T780] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2163.671324][ T780] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2163.672630][ T808] device pim6reg1 entered promiscuous mode [ 2163.830312][ T816] tap0: tun_chr_ioctl cmd 2147767507 [ 2164.025847][ T819] 9pnet: Unknown protocol version Mjå¿Ùã9 [ 2164.042940][ T28] audit: type=1400 audit(1747140757.438:2170): avc: denied { mounton } for pid=779 comm="syz.5.9385" path="/321/file0/file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2164.243577][ T816] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9397'. [ 2164.502524][ T836] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2164.979570][ T844] loop9: detected capacity change from 0 to 8192 [ 2165.401452][ T856] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2165.834346][ T869] tap0: tun_chr_ioctl cmd 2147767507 [ 2165.981423][ T869] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9411'. [ 2168.608302][ T912] tap0: tun_chr_ioctl cmd 2147767507 [ 2168.815276][ T912] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9424'. [ 2169.062914][ T1584] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 2169.254104][ T1584] usb 4-1: config 0 has no interfaces? [ 2169.261650][ T1584] usb 4-1: string descriptor 0 read error: -22 [ 2169.276581][ T1584] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2169.303403][ T1584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.321180][ T1584] usb 4-1: config 0 descriptor?? [ 2169.535830][T28335] usb 4-1: USB disconnect, device number 17 [ 2169.881214][ T930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9431'. [ 2171.037951][ T950] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2172.095626][ T976] FAULT_INJECTION: forcing a failure. [ 2172.095626][ T976] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.108315][ T976] CPU: 1 PID: 976 Comm: syz.9.9442 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2172.118047][ T976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2172.128117][ T976] Call Trace: [ 2172.131406][ T976] [ 2172.134345][ T976] __dump_stack+0x21/0x24 [ 2172.138699][ T976] dump_stack_lvl+0xee/0x150 [ 2172.143312][ T976] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2172.148350][ T976] ? __kasan_check_write+0x14/0x20 [ 2172.153474][ T976] ? _raw_spin_lock+0x8e/0xe0 [ 2172.158165][ T976] ? __cfi__raw_spin_lock+0x10/0x10 [ 2172.163382][ T976] dump_stack+0x15/0x24 [ 2172.167554][ T976] should_fail_ex+0x3d4/0x520 [ 2172.172267][ T976] ? __alloc_file+0x28/0x2a0 [ 2172.176873][ T976] __should_failslab+0xac/0xf0 [ 2172.181649][ T976] should_failslab+0x9/0x20 [ 2172.186166][ T976] kmem_cache_alloc+0x3b/0x330 [ 2172.190943][ T976] ? __cfi__raw_spin_lock+0x10/0x10 [ 2172.196155][ T976] __alloc_file+0x28/0x2a0 [ 2172.200587][ T976] alloc_empty_file+0x97/0x180 [ 2172.205384][ T976] alloc_file+0x59/0x640 [ 2172.209661][ T976] alloc_file_pseudo+0x17a/0x1f0 [ 2172.214629][ T976] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 2172.220110][ T976] ? __kasan_check_write+0x14/0x20 [ 2172.225246][ T976] ? clear_nlink+0x8a/0xe0 [ 2172.229696][ T976] __shmem_file_setup+0x1df/0x2b0 [ 2172.234753][ T976] shmem_file_setup+0x2f/0x40 [ 2172.239449][ T976] __se_sys_memfd_create+0x1e6/0x3b0 [ 2172.244767][ T976] __x64_sys_memfd_create+0x5b/0x70 [ 2172.250005][ T976] x64_sys_call+0x235/0x9a0 [ 2172.254542][ T976] do_syscall_64+0x4c/0xa0 [ 2172.258983][ T976] ? clear_bhb_loop+0x15/0x70 [ 2172.263691][ T976] ? clear_bhb_loop+0x15/0x70 [ 2172.268413][ T976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2172.274347][ T976] RIP: 0033:0x7f875418e969 [ 2172.278791][ T976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2172.298422][ T976] RSP: 002b:00007f8754ff0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 2172.306865][ T976] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007f875418e969 [ 2172.314863][ T976] RDX: 00007f8754ff0ef0 RSI: 0000000000000000 RDI: 00007f8754211444 [ 2172.322855][ T976] RBP: 0000200000000180 R08: 00007f8754ff0bb7 R09: 00007f8754ff0e40 [ 2172.330845][ T976] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 2172.338844][ T976] R13: 00007f8754ff0ef0 R14: 00007f8754ff0eb0 R15: 0000200000000940 [ 2172.346845][ T976] [ 2172.374885][ T28] audit: type=1400 audit(1747140765.788:2171): avc: denied { create } for pid=979 comm="syz.4.9447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 2172.983183][ T28] audit: type=1400 audit(1747140766.378:2172): avc: denied { associate } for pid=979 comm="syz.4.9447" name="147" dev="tmpfs" ino=810 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 2173.175595][ T988] loop9: detected capacity change from 0 to 8192 [ 2173.306742][ T28] audit: type=1400 audit(1747140766.698:2173): avc: denied { write } for pid=30789 comm="syz-executor" name="147" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2173.333419][ T28] audit: type=1400 audit(1747140766.698:2174): avc: denied { remove_name } for pid=30789 comm="syz-executor" name="file1" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2173.421003][ T28] audit: type=1400 audit(1747140766.698:2175): avc: denied { rmdir } for pid=30789 comm="syz-executor" name="147" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2174.637488][ T1008] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2174.855141][ T1015] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2175.080347][ T1020] loop5: detected capacity change from 0 to 2048 [ 2175.099594][ T1020] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2175.293909][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 2175.738062][ T1043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.746993][ T1043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.938426][T27760] EXT4-fs (loop5): unmounting filesystem. [ 2176.023013][ T1584] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 2176.040621][ T1051] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2176.050194][ T1051] FAT-fs (loop11): unable to read boot sector [ 2176.078569][ T1053] 9pnet_fd: Insufficient options for proto=fd [ 2176.205902][ T1584] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2176.240488][ T1584] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2176.301899][ T1584] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2176.363154][ T1584] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 2176.383633][ T1584] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2176.392896][ T1584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.400943][ T1584] usb 5-1: Product: syz [ 2176.405350][ T1584] usb 5-1: Manufacturer: syz [ 2176.410005][ T1584] usb 5-1: SerialNumber: syz [ 2176.427893][ T1044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2176.783670][ T1042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2178.393214][ T1042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2178.443927][ T1085] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2178.476340][ T1584] cdc_ncm 5-1:1.0: bind() failure [ 2178.484630][ T1584] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2178.491449][ T1584] cdc_ncm 5-1:1.1: bind() failure [ 2178.736227][ T24] usb 5-1: USB disconnect, device number 13 [ 2179.294222][ T1105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9480'. [ 2179.336258][ T1107] loop5: detected capacity change from 0 to 8192 [ 2179.693395][T23113] Bluetooth: hci0: Frame reassembly failed (-84) [ 2179.737945][T23113] Bluetooth: hci0: Frame reassembly failed (-84) [ 2181.143649][ T1143] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2181.752904][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2181.881329][ T1149] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2181.893401][ T1149] FAT-fs (loop19): unable to read boot sector [ 2181.996617][ T1151] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2182.256945][ T1155] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2182.854469][ T1168] loop5: detected capacity change from 0 to 512 [ 2182.884555][ T1170] binder: BINDER_SET_CONTEXT_MGR already set [ 2182.897847][ T1170] binder: 1169:1170 ioctl 4018620d 200000000040 returned -16 [ 2182.908854][ T1170] binder: 1169:1170 ioctl c0306201 2000000003c0 returned -14 [ 2182.919185][ T1168] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.9500: corrupted inode contents [ 2182.948375][ T1168] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #16: comm syz.5.9500: mark_inode_dirty error [ 2182.975513][ T1171] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2182.985325][ T1171] FAT-fs (loop9): unable to read boot sector [ 2182.986445][ T1168] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.9500: corrupted inode contents [ 2183.027219][ T1168] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.9500: mark_inode_dirty error [ 2183.050211][ T1168] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.9500: corrupted inode contents [ 2183.064460][ T1168] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 2183.074493][ T1168] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.9500: corrupted inode contents [ 2183.087161][ T1168] EXT4-fs error (device loop5): ext4_truncate:4313: inode #16: comm syz.5.9500: mark_inode_dirty error [ 2183.098721][ T1168] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 2183.108187][ T1168] EXT4-fs (loop5): 1 truncate cleaned up [ 2183.114053][ T1168] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2183.123281][T23113] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2183.133196][ T1168] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2183.144562][T23113] EXT4-fs error (device loop5): ext4_release_dquot:6812: comm kworker/u4:0: Failed to release dquot type 1 [ 2183.307832][ T1190] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2183.344356][ T1192] syz.2.9506[1192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2183.344437][ T1192] syz.2.9506[1192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2183.356138][ T1168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9500'. [ 2183.440362][ T28] audit: type=1326 audit(1747140776.848:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.2.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2183.470633][ T28] audit: type=1326 audit(1747140776.878:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.2.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2183.471518][T28490] EXT4-fs (loop5): unmounting filesystem. [ 2183.495294][ T28] audit: type=1326 audit(1747140776.878:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.2.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2183.523384][ T28] audit: type=1326 audit(1747140776.878:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.2.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2183.547036][ T28] audit: type=1326 audit(1747140776.878:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.2.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2184.044080][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2184.051650][ T1200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.061933][ T1200] device bridge_slave_0 entered promiscuous mode [ 2184.075053][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2184.082965][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.092984][ T1200] device bridge_slave_1 entered promiscuous mode [ 2185.119129][ T1219] tap0: tun_chr_ioctl cmd 2147767507 [ 2186.036618][ T1228] loop9: detected capacity change from 0 to 256 [ 2186.482166][ T1219] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9517'. [ 2186.536321][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2186.544105][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2186.551722][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2186.561162][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2186.590693][T23113] bridge0: port 1(bridge_slave_0) entered blocking state [ 2186.597800][T23113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2186.610156][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2186.618853][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2186.634957][T23113] bridge0: port 2(bridge_slave_1) entered blocking state [ 2186.642046][T23113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2186.664693][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2186.723851][ T1237] tap0: tun_chr_ioctl cmd 2147767507 [ 2186.729269][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2186.743440][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2186.761773][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2186.782006][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2186.792087][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2186.818042][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2186.827308][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2186.835649][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2186.850955][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2186.858801][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2186.872116][ T1200] device veth0_vlan entered promiscuous mode [ 2186.878984][ T1233] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9519'. [ 2186.897299][ T1200] device veth1_macvtap entered promiscuous mode [ 2186.905894][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2186.915755][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2186.924412][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2186.936816][ T1248] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2186.953392][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2186.970778][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2186.983908][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2186.993545][T23113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2187.059983][ T1255] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2187.082977][ T634] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2187.162749][ T1257] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2187.384048][ T634] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2187.578380][ T1128] device bridge_slave_1 left promiscuous mode [ 2187.590727][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 2187.635283][ T1128] device bridge_slave_0 left promiscuous mode [ 2187.671088][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 2187.677740][ T634] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2187.688303][ T1128] device veth1_macvtap left promiscuous mode [ 2187.696236][ T634] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2187.700928][ T1128] device veth0_vlan left promiscuous mode [ 2187.705367][ T634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2187.722905][ T634] usb 4-1: SerialNumber: syz [ 2187.932533][ T634] usb 4-1: 0:2 : does not exist [ 2187.989794][ T634] usb 4-1: USB disconnect, device number 18 [ 2188.576700][ T1279] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2188.594243][T30330] udevd[30330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2188.644178][ T1283] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2188.798552][ T1286] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2188.822980][ T1288] tap0: tun_chr_ioctl cmd 2147767507 [ 2189.324371][ T1288] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9537'. [ 2190.514675][ T1321] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2190.626818][ T1324] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2190.745210][ T1331] tap0: tun_chr_ioctl cmd 2147767507 [ 2190.745338][ T1328] loop9: detected capacity change from 0 to 2048 [ 2190.857007][ T1331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9551'. [ 2190.859950][ T1328] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2191.114068][ T1351] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2191.165251][ T1354] 9pnet_fd: Insufficient options for proto=fd [ 2191.302944][T28335] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2191.502923][T28335] usb 5-1: Using ep0 maxpacket: 32 [ 2191.509378][T28335] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2191.521698][T28335] usb 5-1: config 0 has no interface number 0 [ 2191.552918][T28335] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2191.572897][T28335] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2191.589381][T28335] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2191.599165][T28335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.609526][T28240] EXT4-fs (loop9): unmounting filesystem. [ 2191.612745][T28335] usb 5-1: config 0 descriptor?? [ 2191.894878][ T1370] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2191.950144][ T1372] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2192.099347][ T1386] tap0: tun_chr_ioctl cmd 2147767507 [ 2192.199755][ T1386] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9565'. [ 2192.225182][T28335] uclogic 0003:28BD:0094.0181: pen parameters not found [ 2192.242379][T28335] uclogic 0003:28BD:0094.0181: interface is invalid, ignoring [ 2193.371182][ T24] usb 5-1: USB disconnect, device number 14 [ 2194.409646][ T1412] 9pnet_fd: Insufficient options for proto=fd [ 2194.448887][ T1415] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2195.116374][ T1427] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2197.048036][ T1464] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2197.497844][ T1487] loop9: detected capacity change from 0 to 256 [ 2197.622948][ T1377] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2197.812942][ T1377] usb 4-1: device descriptor read/64, error -71 [ 2198.092985][ T1377] usb 4-1: device descriptor read/64, error -71 [ 2199.295219][ T1513] FAULT_INJECTION: forcing a failure. [ 2199.295219][ T1513] name failslab, interval 1, probability 0, space 0, times 0 [ 2199.307975][ T1513] CPU: 1 PID: 1513 Comm: syz.4.9603 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2199.318847][ T1513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2199.329031][ T1513] Call Trace: [ 2199.332320][ T1513] [ 2199.335269][ T1513] __dump_stack+0x21/0x24 [ 2199.339628][ T1513] dump_stack_lvl+0xee/0x150 [ 2199.344235][ T1513] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2199.349288][ T1513] ? do_syscall_64+0x4c/0xa0 [ 2199.353894][ T1513] dump_stack+0x15/0x24 [ 2199.358065][ T1513] should_fail_ex+0x3d4/0x520 [ 2199.362754][ T1513] __should_failslab+0xac/0xf0 [ 2199.367530][ T1513] should_failslab+0x9/0x20 [ 2199.372048][ T1513] kmem_cache_alloc_bulk+0x2d/0x3c0 [ 2199.377263][ T1513] ? mas_alloc_nodes+0x2d8/0x850 [ 2199.382198][ T1515] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2199.382219][ T1513] mas_alloc_nodes+0x423/0x850 [ 2199.394961][ T1513] mas_preallocate+0xdcf/0x1390 [ 2199.399837][ T1513] ? __cfi_mas_preallocate+0x10/0x10 [ 2199.405154][ T1513] ? memset+0x35/0x40 [ 2199.409164][ T1513] mmap_region+0x1099/0x2140 [ 2199.413777][ T1513] ? __cfi_mmap_region+0x10/0x10 [ 2199.418734][ T1513] ? kasan_set_track+0x60/0x70 [ 2199.423518][ T1513] ? cap_mmap_addr+0x165/0x2e0 [ 2199.428297][ T1513] ? __se_sys_memfd_create+0x339/0x3b0 [ 2199.433772][ T1513] ? __x64_sys_memfd_create+0x5b/0x70 [ 2199.439159][ T1513] ? x64_sys_call+0x235/0x9a0 [ 2199.443852][ T1513] ? get_unmapped_area+0x313/0x380 [ 2199.448977][ T1513] do_mmap+0x7ae/0xcf0 [ 2199.453071][ T1513] ? __cfi_do_mmap+0x10/0x10 [ 2199.457679][ T1513] vm_mmap_pgoff+0x1f5/0x3f0 [ 2199.462286][ T1513] ? ____kasan_slab_free+0x13d/0x180 [ 2199.467585][ T1513] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 2199.472720][ T1513] ? __se_sys_memfd_create+0x339/0x3b0 [ 2199.478200][ T1513] ? __kmem_cache_free+0xb7/0x1b0 [ 2199.483237][ T1513] ksys_mmap_pgoff+0xf6/0x1d0 [ 2199.487927][ T1513] __x64_sys_mmap+0xfa/0x110 [ 2199.492528][ T1513] x64_sys_call+0x8fd/0x9a0 [ 2199.497137][ T1513] do_syscall_64+0x4c/0xa0 [ 2199.501574][ T1513] ? clear_bhb_loop+0x15/0x70 [ 2199.506256][ T1513] ? clear_bhb_loop+0x15/0x70 [ 2199.510941][ T1513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2199.516860][ T1513] RIP: 0033:0x7f597158e9a3 [ 2199.521291][ T1513] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 2199.540925][ T1513] RSP: 002b:00007f59713fee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2199.549467][ T1513] RAX: ffffffffffffffda RBX: 00000000000005fb RCX: 00007f597158e9a3 [ 2199.557469][ T1513] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 2199.565465][ T1513] RBP: 0000200000000c02 R08: 00000000ffffffff R09: 0000000000000000 [ 2199.573462][ T1513] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000009 [ 2199.581468][ T1513] R13: 00007f59713feef0 R14: 00007f59713feeb0 R15: 00002000000002c0 [ 2199.589462][ T1513] [ 2199.626380][ T1377] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2199.787511][ T1377] usb 4-1: device descriptor read/64, error -71 [ 2200.107157][ T1542] 9pnet_fd: Insufficient options for proto=fd [ 2200.274271][ T1377] usb 4-1: device descriptor read/64, error -71 [ 2200.418823][ T1377] usb usb4-port1: attempt power cycle [ 2201.411848][ T1571] 9pnet_fd: Insufficient options for proto=fd [ 2201.528802][ T1581] FAULT_INJECTION: forcing a failure. [ 2201.528802][ T1581] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.541559][ T1581] CPU: 0 PID: 1581 Comm: syz.2.9624 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2201.551371][ T1581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2201.561412][ T1581] Call Trace: [ 2201.564680][ T1581] [ 2201.567597][ T1581] __dump_stack+0x21/0x24 [ 2201.571917][ T1581] dump_stack_lvl+0xee/0x150 [ 2201.576494][ T1581] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2201.581505][ T1581] ? stack_trace_save+0x98/0xe0 [ 2201.586342][ T1581] dump_stack+0x15/0x24 [ 2201.590486][ T1581] should_fail_ex+0x3d4/0x520 [ 2201.595149][ T1581] __should_failslab+0xac/0xf0 [ 2201.599898][ T1581] ? p9_fid_create+0x53/0x350 [ 2201.604558][ T1581] should_failslab+0x9/0x20 [ 2201.609053][ T1581] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2201.614412][ T1581] ? __kasan_check_write+0x14/0x20 [ 2201.619511][ T1581] ? p9_fid_create+0x53/0x350 [ 2201.624175][ T1581] kmalloc_trace+0x29/0xb0 [ 2201.628580][ T1581] p9_fid_create+0x53/0x350 [ 2201.633071][ T1581] p9_client_walk+0xc1/0x500 [ 2201.637650][ T1581] ? __cfi_p9_client_walk+0x10/0x10 [ 2201.642836][ T1581] v9fs_file_open+0x239/0x9a0 [ 2201.647501][ T1581] ? __cfi_selinux_file_open+0x10/0x10 [ 2201.653032][ T1581] ? __cfi_v9fs_file_open+0x10/0x10 [ 2201.658216][ T1581] do_dentry_open+0x88e/0x1260 [ 2201.662964][ T1581] ? __cfi_v9fs_file_open+0x10/0x10 [ 2201.668152][ T1581] vfs_open+0x73/0x80 [ 2201.672120][ T1581] path_openat+0x2681/0x2f50 [ 2201.676698][ T1581] ? kasan_set_track+0x4b/0x70 [ 2201.681470][ T1581] ? getname_flags+0xb9/0x500 [ 2201.686148][ T1581] ? getname+0x19/0x20 [ 2201.690224][ T1581] ? x64_sys_call+0x783/0x9a0 [ 2201.694902][ T1581] ? do_syscall_64+0x4c/0xa0 [ 2201.699517][ T1581] ? do_filp_open+0x3c0/0x3c0 [ 2201.704182][ T1581] do_filp_open+0x1c1/0x3c0 [ 2201.708688][ T1581] ? __cfi_do_filp_open+0x10/0x10 [ 2201.713723][ T1581] ? alloc_fd+0x4e6/0x590 [ 2201.718046][ T1581] do_sys_openat2+0x185/0x7e0 [ 2201.722716][ T1581] ? __kasan_check_write+0x14/0x20 [ 2201.727815][ T1581] ? do_sys_open+0xe0/0xe0 [ 2201.732224][ T1581] ? ksys_write+0x1eb/0x240 [ 2201.736716][ T1581] ? __cfi_ksys_write+0x10/0x10 [ 2201.741556][ T1581] __x64_sys_openat+0x136/0x160 [ 2201.746393][ T1581] x64_sys_call+0x783/0x9a0 [ 2201.750880][ T1581] do_syscall_64+0x4c/0xa0 [ 2201.755286][ T1581] ? clear_bhb_loop+0x15/0x70 [ 2201.759946][ T1581] ? clear_bhb_loop+0x15/0x70 [ 2201.764637][ T1581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2201.770519][ T1581] RIP: 0033:0x7f1cb8d8e969 [ 2201.774921][ T1581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2201.794605][ T1581] RSP: 002b:00007f1cb9cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2201.803040][ T1581] RAX: ffffffffffffffda RBX: 00007f1cb8fb5fa0 RCX: 00007f1cb8d8e969 [ 2201.811096][ T1581] RDX: 0000000000000100 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 2201.819064][ T1581] RBP: 00007f1cb9cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2201.827037][ T1581] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 2201.835001][ T1581] R13: 0000000000000000 R14: 00007f1cb8fb5fa0 R15: 00007fffa8980898 [ 2201.842967][ T1581] [ 2201.885689][ T1586] incfs: iterate_incfs_dir / -22 [ 2201.912996][ T634] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 2202.038355][ T1601] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 2202.604001][ T634] usb 10-1: config 0 has an invalid interface number: 20 but max is 0 [ 2202.611895][ T28] audit: type=1400 audit(1747140796.018:2181): avc: denied { create } for pid=1597 comm="syz.4.9630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2202.615378][ T634] usb 10-1: config 0 has no interface number 0 [ 2202.638023][ T634] usb 10-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2202.651751][ T634] usb 10-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2202.662070][ T634] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.676456][ T634] usb 10-1: Product: syz [ 2202.682912][ T634] usb 10-1: Manufacturer: syz [ 2202.690737][ T634] usb 10-1: SerialNumber: syz [ 2202.724645][ T634] usb 10-1: config 0 descriptor?? [ 2202.735242][ T1568] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2202.744161][ T1613] 9pnet_fd: Insufficient options for proto=fd [ 2202.761626][ T634] usb-storage 10-1:0.20: USB Mass Storage device detected [ 2202.784779][ T634] usb-storage 10-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2202.812524][ T1621] FAULT_INJECTION: forcing a failure. [ 2202.812524][ T1621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2202.825642][ T1621] CPU: 1 PID: 1621 Comm: syz.2.9637 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2202.835466][ T1621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2202.845545][ T1621] Call Trace: [ 2202.848842][ T1621] [ 2202.851789][ T1621] __dump_stack+0x21/0x24 [ 2202.856146][ T1621] dump_stack_lvl+0xee/0x150 [ 2202.860757][ T1621] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2202.865807][ T1621] dump_stack+0x15/0x24 [ 2202.869997][ T1621] should_fail_ex+0x3d4/0x520 [ 2202.874700][ T1621] should_fail+0xb/0x10 [ 2202.878873][ T1621] should_fail_usercopy+0x1a/0x20 [ 2202.883909][ T1621] _copy_from_user+0x1e/0xc0 [ 2202.888514][ T1621] iovec_from_user+0x1aa/0x2e0 [ 2202.893290][ T1621] ? _parse_integer+0x2a/0x40 [ 2202.898155][ T1621] __import_iovec+0x71/0x470 [ 2202.902758][ T1621] import_iovec+0x7c/0xb0 [ 2202.907115][ T1621] ___sys_sendmsg+0x1e4/0x290 [ 2202.911813][ T1621] ? __sys_sendmsg+0x270/0x270 [ 2202.916598][ T1621] ? __kasan_check_write+0x14/0x20 [ 2202.921734][ T1621] ? proc_fail_nth_write+0x17a/0x1f0 [ 2202.927041][ T1621] ? vfs_write+0x9d6/0xca0 [ 2202.931481][ T1621] ? __fdget+0x19c/0x220 [ 2202.935741][ T1621] __x64_sys_sendmsg+0x1f0/0x2c0 [ 2202.940711][ T1621] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2202.946192][ T1621] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2202.952279][ T1621] x64_sys_call+0x171/0x9a0 [ 2202.956802][ T1621] do_syscall_64+0x4c/0xa0 [ 2202.961240][ T1621] ? clear_bhb_loop+0x15/0x70 [ 2202.965924][ T1621] ? clear_bhb_loop+0x15/0x70 [ 2202.970616][ T1621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2202.976523][ T1621] RIP: 0033:0x7f1cb8d8e969 [ 2202.981044][ T1621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2203.000760][ T1621] RSP: 002b:00007f1cb9cbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2203.009534][ T1621] RAX: ffffffffffffffda RBX: 00007f1cb8fb5fa0 RCX: 00007f1cb8d8e969 [ 2203.017519][ T1621] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 2203.025497][ T1621] RBP: 00007f1cb9cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2203.033476][ T1621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.041452][ T1621] R13: 0000000000000000 R14: 00007f1cb8fb5fa0 R15: 00007fffa8980898 [ 2203.042879][ T5358] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2203.049434][ T1621] [ 2203.091176][ T634] scsi host1: usb-storage 10-1:0.20 [ 2203.112998][ T634] usb 10-1: USB disconnect, device number 18 [ 2203.611146][ T5358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 2203.623516][ T5358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 2203.634928][ T5358] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2203.644142][ T5358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.656011][ T5358] usb 1-1: config 0 descriptor?? [ 2203.672911][ T5182] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2203.795521][ T1638] loop9: detected capacity change from 0 to 256 [ 2203.818645][ T103] udevd[103]: worker [30381] terminated by signal 33 (Unknown signal 33) [ 2203.833271][ T103] udevd[103]: worker [30381] failed while handling '/devices/virtual/block/loop9' [ 2203.862881][ T5182] usb 4-1: Using ep0 maxpacket: 32 [ 2203.869753][ T5182] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2203.878935][ T1640] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9644'. [ 2203.886481][ T5182] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 2203.889409][ T1640] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9644'. [ 2203.905710][ T1640] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9644'. [ 2203.906442][ T5182] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.915729][ T1640] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 2203.945621][ T5182] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2203.950755][ T1641] device bridge0 entered promiscuous mode [ 2203.961249][ T1641] bridge0: port 3(macsec1) entered blocking state [ 2203.964999][ T5182] usb 4-1: config 128 has no interface number 0 [ 2203.967784][ T1641] bridge0: port 3(macsec1) entered disabled state [ 2203.981972][ T5182] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2203.993918][ T5182] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2204.023159][ T5182] usb 4-1: config 128 interface 127 has no altsetting 0 [ 2204.030941][ T1641] device bridge0 left promiscuous mode [ 2204.038627][ T5182] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2204.052885][ T5182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.061136][ T5182] usb 4-1: Product: syz [ 2204.066517][ T5182] usb 4-1: Manufacturer: syz [ 2204.071272][ T5182] usb 4-1: SerialNumber: syz [ 2204.126231][ T1647] input: syz0 as /devices/virtual/input/input407 [ 2204.271306][ T5358] usbhid 1-1:0.0: can't add hid device: -71 [ 2204.281792][ T5358] usbhid: probe of 1-1:0.0 failed with error -71 [ 2204.321490][T30351] udevd[30351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2204.348084][ T5182] usb 4-1: USB disconnect, device number 22 [ 2204.358392][ T5358] usb 1-1: USB disconnect, device number 45 [ 2204.673029][T17453] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2204.840664][ T1668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9654'. [ 2204.864103][T17453] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 2204.880100][T17453] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 2204.908327][T17453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.933020][T17453] usb 3-1: config 0 descriptor?? [ 2205.060659][ T1682] loop9: detected capacity change from 0 to 512 [ 2205.067569][ T1682] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2205.079302][ T1682] EXT4-fs (loop9): 1 truncate cleaned up [ 2205.085078][ T1682] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2205.165906][ T1664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2205.175052][ T1664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2205.383262][ T1693] FAULT_INJECTION: forcing a failure. [ 2205.383262][ T1693] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.395987][ T28] audit: type=1326 audit(1747140798.798:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2205.396024][ T28] audit: type=1326 audit(1747140798.798:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2205.396050][ T28] audit: type=1326 audit(1747140798.798:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2205.396075][ T28] audit: type=1326 audit(1747140798.798:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2205.396099][ T28] audit: type=1326 audit(1747140798.798:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2205.396124][ T28] audit: type=1326 audit(1747140798.798:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2205.396148][ T28] audit: type=1326 audit(1747140798.798:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2205.396173][ T28] audit: type=1326 audit(1747140798.798:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2205.396196][ T28] audit: type=1326 audit(1747140798.798:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1cb8d8e969 code=0x7ffc0000 [ 2205.420969][ T1693] CPU: 1 PID: 1693 Comm: syz.4.9662 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2205.616202][ T1693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2205.626266][ T1693] Call Trace: [ 2205.629545][ T1693] [ 2205.632486][ T1693] __dump_stack+0x21/0x24 [ 2205.636819][ T1693] dump_stack_lvl+0xee/0x150 [ 2205.641418][ T1693] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2205.646470][ T1693] dump_stack+0x15/0x24 [ 2205.650625][ T1693] should_fail_ex+0x3d4/0x520 [ 2205.655295][ T1693] __should_failslab+0xac/0xf0 [ 2205.660051][ T1693] should_failslab+0x9/0x20 [ 2205.664565][ T1693] kmem_cache_alloc_node+0x42/0x340 [ 2205.669759][ T1693] ? __alloc_skb+0xdf/0x7e0 [ 2205.674265][ T1693] __alloc_skb+0xdf/0x7e0 [ 2205.678601][ T1693] inet6_netconf_notify_devconf+0x107/0x1c0 [ 2205.684516][ T1693] addrconf_ifdown+0x1603/0x1910 [ 2205.689472][ T1693] ? addrconf_cleanup+0x130/0x130 [ 2205.694505][ T1693] ? __kasan_check_write+0x14/0x20 [ 2205.699610][ T1693] ? mutex_unlock+0x89/0x220 [ 2205.704195][ T1693] ? __cfi_mutex_unlock+0x10/0x10 [ 2205.709227][ T1693] ? _raw_spin_lock+0x8e/0xe0 [ 2205.713897][ T1693] ? __cfi__raw_spin_lock+0x10/0x10 [ 2205.719096][ T1693] addrconf_notify+0x39f/0xe40 [ 2205.723865][ T1693] ? ip6mr_device_event+0x1e7/0x200 [ 2205.729064][ T1693] raw_notifier_call_chain+0xa1/0x110 [ 2205.734441][ T1693] unregister_netdevice_many+0xf8f/0x1820 [ 2205.740157][ T1693] ? add_timer+0x68/0x80 [ 2205.744397][ T1693] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 2205.750544][ T1693] ? __queue_delayed_work+0x173/0x200 [ 2205.755914][ T1693] ? queue_delayed_work_on+0x101/0x150 [ 2205.761371][ T1693] ? linkwatch_fire_event+0x1d2/0x240 [ 2205.766740][ T1693] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 2205.772547][ T1693] ? exit_to_user_mode_loop+0x9b/0xb0 [ 2205.777915][ T1693] ? __kasan_check_read+0x11/0x20 [ 2205.782941][ T1693] unregister_netdevice_queue+0x31c/0x360 [ 2205.788659][ T1693] ? linkwatch_schedule_work+0x161/0x190 [ 2205.794285][ T1693] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 2205.800519][ T1693] ? linkwatch_fire_event+0x1ed/0x240 [ 2205.805886][ T1693] __tun_detach+0xca6/0x1460 [ 2205.810476][ T1693] ? __cfi_mutex_lock+0x10/0x10 [ 2205.815332][ T1693] tun_chr_close+0x92/0x140 [ 2205.819834][ T1693] ? __cfi_tun_chr_close+0x10/0x10 [ 2205.824944][ T1693] __fput+0x1fc/0x8f0 [ 2205.828936][ T1693] ____fput+0x15/0x20 [ 2205.832919][ T1693] task_work_run+0x1db/0x240 [ 2205.837512][ T1693] ? __cfi_task_work_run+0x10/0x10 [ 2205.842622][ T1693] ? filp_close+0x111/0x160 [ 2205.847122][ T1693] exit_to_user_mode_loop+0x9b/0xb0 [ 2205.852315][ T1693] exit_to_user_mode_prepare+0x5a/0xa0 [ 2205.857770][ T1693] syscall_exit_to_user_mode+0x1a/0x30 [ 2205.863245][ T1693] do_syscall_64+0x58/0xa0 [ 2205.867660][ T1693] ? clear_bhb_loop+0x15/0x70 [ 2205.872329][ T1693] ? clear_bhb_loop+0x15/0x70 [ 2205.876998][ T1693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2205.882892][ T1693] RIP: 0033:0x7f597158e969 [ 2205.887302][ T1693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2205.906903][ T1693] RSP: 002b:00007f597231b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2205.915314][ T1693] RAX: 0000000000000000 RBX: 00007f59717b5fa0 RCX: 00007f597158e969 [ 2205.923280][ T1693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2205.931248][ T1693] RBP: 00007f597231b090 R08: 0000000000000000 R09: 0000000000000000 [ 2205.939213][ T1693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2205.947182][ T1693] R13: 0000000000000000 R14: 00007f59717b5fa0 R15: 00007ffe88b4fa48 [ 2205.955154][ T1693] [ 2205.974474][ T1694] device wireguard0 entered promiscuous mode [ 2206.036348][T28240] EXT4-fs (loop9): unmounting filesystem. [ 2206.052561][ T1704] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2206.203966][T17453] usbhid 3-1:0.0: can't add hid device: -71 [ 2206.210038][T17453] usbhid: probe of 3-1:0.0 failed with error -71 [ 2206.231023][T17453] usb 3-1: USB disconnect, device number 71 [ 2206.332957][ T6780] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2206.355995][ T1714] loop9: detected capacity change from 0 to 40427 [ 2206.363059][ T1714] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 2206.370906][ T1714] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2206.486238][ T1714] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2206.523127][ T1714] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 2206.530362][ T1714] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2206.542893][ T6780] usb 1-1: Using ep0 maxpacket: 32 [ 2206.549266][ T6780] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 2206.566685][ T6780] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2206.582647][ T6780] usb 1-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.40 [ 2206.593126][ T6780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.601171][ T6780] usb 1-1: Product: syz [ 2206.605529][ T6780] usb 1-1: Manufacturer: syz [ 2206.610170][ T6780] usb 1-1: SerialNumber: syz [ 2206.729426][ T1731] FAULT_INJECTION: forcing a failure. [ 2206.729426][ T1731] name failslab, interval 1, probability 0, space 0, times 0 [ 2206.743977][ T1731] CPU: 0 PID: 1731 Comm: syz.2.9674 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2206.753810][ T1731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2206.763876][ T1731] Call Trace: [ 2206.767167][ T1731] [ 2206.770105][ T1731] __dump_stack+0x21/0x24 [ 2206.774455][ T1731] dump_stack_lvl+0xee/0x150 [ 2206.779062][ T1731] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2206.784105][ T1731] dump_stack+0x15/0x24 [ 2206.788281][ T1731] should_fail_ex+0x3d4/0x520 [ 2206.792982][ T1731] __should_failslab+0xac/0xf0 [ 2206.797755][ T1731] ? ethnl_default_doit+0x1c2/0xc10 [ 2206.802974][ T1731] should_failslab+0x9/0x20 [ 2206.807498][ T1731] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2206.812891][ T1731] ? ethnl_default_doit+0x1c2/0xc10 [ 2206.818111][ T1731] __kmalloc+0xa1/0x1e0 [ 2206.822284][ T1731] ethnl_default_doit+0x1c2/0xc10 [ 2206.827326][ T1731] ? genl_family_rcv_msg_attrs_parse+0x214/0x2a0 [ 2206.833676][ T1731] genl_family_rcv_msg_doit+0x250/0x350 [ 2206.839249][ T1731] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2206.845175][ T1731] ? memcpy+0x56/0x70 [ 2206.849184][ T1731] genl_rcv_msg+0x5ea/0x770 [ 2206.853709][ T1731] ? __kasan_kmalloc+0x95/0xb0 [ 2206.858479][ T1731] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 2206.864379][ T1731] ? __alloc_skb+0x224/0x7e0 [ 2206.869055][ T1731] ? __cfi_genl_rcv_msg+0x10/0x10 [ 2206.874116][ T1731] ? __cfi_ethnl_default_doit+0x10/0x10 [ 2206.879686][ T1731] ? __cfi_ethnl_default_start+0x10/0x10 [ 2206.885326][ T1731] ? __cfi_ethnl_default_dumpit+0x10/0x10 [ 2206.891058][ T1731] ? __cfi_ethnl_default_done+0x10/0x10 [ 2206.896609][ T1731] ? selinux_nlmsg_lookup+0x33c/0x4c0 [ 2206.901983][ T1731] netlink_rcv_skb+0x1f2/0x440 [ 2206.906758][ T1731] ? __cfi_genl_rcv_msg+0x10/0x10 [ 2206.911819][ T1731] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 2206.917123][ T1731] ? down_read+0xa0/0xf0 [ 2206.921374][ T1731] ? __cfi_down_read+0x10/0x10 [ 2206.926160][ T1731] ? __netlink_lookup+0x387/0x3b0 [ 2206.931193][ T1731] genl_rcv+0x28/0x40 [ 2206.935177][ T1731] netlink_unicast+0x8b1/0xa30 [ 2206.939931][ T1731] netlink_sendmsg+0x8aa/0xbc0 [ 2206.944709][ T1731] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2206.949997][ T1731] ? security_socket_sendmsg+0x93/0xb0 [ 2206.955478][ T1731] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2206.960756][ T1731] ____sys_sendmsg+0x5a9/0x990 [ 2206.965534][ T1731] ? __sys_sendmsg_sock+0x40/0x40 [ 2206.970567][ T1731] ? import_iovec+0x7c/0xb0 [ 2206.975067][ T1731] ___sys_sendmsg+0x21c/0x290 [ 2206.979757][ T1731] ? __sys_sendmsg+0x270/0x270 [ 2206.984523][ T1731] ? __kasan_check_write+0x14/0x20 [ 2206.989631][ T1731] ? proc_fail_nth_write+0x17a/0x1f0 [ 2206.994929][ T1731] ? vfs_write+0x9d6/0xca0 [ 2206.999357][ T1731] ? __fdget+0x19c/0x220 [ 2207.003614][ T1731] __x64_sys_sendmsg+0x1f0/0x2c0 [ 2207.008561][ T1731] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2207.014037][ T1731] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2207.020106][ T1731] x64_sys_call+0x171/0x9a0 [ 2207.024606][ T1731] do_syscall_64+0x4c/0xa0 [ 2207.029043][ T1731] ? clear_bhb_loop+0x15/0x70 [ 2207.033716][ T1731] ? clear_bhb_loop+0x15/0x70 [ 2207.038386][ T1731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2207.044283][ T1731] RIP: 0033:0x7f1cb8d8e969 [ 2207.048700][ T1731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2207.068304][ T1731] RSP: 002b:00007f1cb9cbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2207.076725][ T1731] RAX: ffffffffffffffda RBX: 00007f1cb8fb5fa0 RCX: 00007f1cb8d8e969 [ 2207.084710][ T1731] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 2207.092679][ T1731] RBP: 00007f1cb9cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2207.100646][ T1731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2207.108611][ T1731] R13: 0000000000000000 R14: 00007f1cb8fb5fa0 R15: 00007fffa8980898 [ 2207.116585][ T1731] [ 2207.167234][ T1738] loop9: detected capacity change from 0 to 1024 [ 2207.188828][ T1738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2207.199484][ T1741] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9678'. [ 2207.199797][ T1738] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2207.279140][ T6780] usbhid 1-1:1.0: can't add hid device: -71 [ 2207.286520][ T6780] usbhid: probe of 1-1:1.0 failed with error -71 [ 2207.294541][ T6780] usb 1-1: USB disconnect, device number 46 [ 2207.351544][ T1758] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 2207.765299][ T1780] FAULT_INJECTION: forcing a failure. [ 2207.765299][ T1780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2207.803623][ T1780] CPU: 1 PID: 1780 Comm: syz.2.9691 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2207.813478][ T1780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2207.823565][ T1780] Call Trace: [ 2207.826850][ T1780] [ 2207.829786][ T1780] __dump_stack+0x21/0x24 [ 2207.834134][ T1780] dump_stack_lvl+0xee/0x150 [ 2207.838730][ T1780] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2207.843759][ T1780] ? _parse_integer+0x2a/0x40 [ 2207.848435][ T1780] dump_stack+0x15/0x24 [ 2207.852591][ T1780] should_fail_ex+0x3d4/0x520 [ 2207.857271][ T1780] should_fail+0xb/0x10 [ 2207.861421][ T1780] should_fail_usercopy+0x1a/0x20 [ 2207.866442][ T1780] _copy_from_user+0x1e/0xc0 [ 2207.871028][ T1780] ___sys_sendmsg+0x155/0x290 [ 2207.875710][ T1780] ? __sys_sendmsg+0x270/0x270 [ 2207.880479][ T1780] ? __kasan_check_write+0x14/0x20 [ 2207.885604][ T1780] ? proc_fail_nth_write+0x17a/0x1f0 [ 2207.890897][ T1780] ? vfs_write+0x9d6/0xca0 [ 2207.895315][ T1780] ? __fdget+0x19c/0x220 [ 2207.899558][ T1780] __x64_sys_sendmsg+0x1f0/0x2c0 [ 2207.904499][ T1780] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2207.909962][ T1780] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2207.916031][ T1780] x64_sys_call+0x171/0x9a0 [ 2207.920531][ T1780] do_syscall_64+0x4c/0xa0 [ 2207.924946][ T1780] ? clear_bhb_loop+0x15/0x70 [ 2207.929624][ T1780] ? clear_bhb_loop+0x15/0x70 [ 2207.934297][ T1780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2207.940191][ T1780] RIP: 0033:0x7f1cb8d8e969 [ 2207.944602][ T1780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2207.964207][ T1780] RSP: 002b:00007f1cb9cbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2207.972619][ T1780] RAX: ffffffffffffffda RBX: 00007f1cb8fb5fa0 RCX: 00007f1cb8d8e969 [ 2207.980589][ T1780] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 2207.988558][ T1780] RBP: 00007f1cb9cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2207.996528][ T1780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2208.004499][ T1780] R13: 0000000000000000 R14: 00007f1cb8fb5fa0 R15: 00007fffa8980898 [ 2208.012485][ T1780] [ 2208.119483][T28240] EXT4-fs (loop9): unmounting filesystem. [ 2208.181258][ T1797] netlink: 204 bytes leftover after parsing attributes in process `syz.9.9698'. [ 2208.647030][ T1816] FAULT_INJECTION: forcing a failure. [ 2208.647030][ T1816] name failslab, interval 1, probability 0, space 0, times 0 [ 2208.660015][ T1816] CPU: 1 PID: 1816 Comm: syz.9.9703 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2208.669846][ T1816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2208.679898][ T1816] Call Trace: [ 2208.683183][ T1816] [ 2208.686151][ T1816] __dump_stack+0x21/0x24 [ 2208.690490][ T1816] dump_stack_lvl+0xee/0x150 [ 2208.695076][ T1816] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2208.700100][ T1816] ? __se_sys_ioctl+0x12f/0x1b0 [ 2208.704981][ T1816] ? x64_sys_call+0x58b/0x9a0 [ 2208.709654][ T1816] ? do_syscall_64+0x4c/0xa0 [ 2208.714239][ T1816] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2208.720309][ T1816] dump_stack+0x15/0x24 [ 2208.724464][ T1816] should_fail_ex+0x3d4/0x520 [ 2208.729139][ T1816] __should_failslab+0xac/0xf0 [ 2208.733903][ T1816] ? kvm_io_bus_register_dev+0x134/0x530 [ 2208.739532][ T1816] should_failslab+0x9/0x20 [ 2208.744035][ T1816] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2208.749403][ T1816] ? kvm_io_bus_register_dev+0x134/0x530 [ 2208.755040][ T1816] __kmalloc+0xa1/0x1e0 [ 2208.759215][ T1816] kvm_io_bus_register_dev+0x134/0x530 [ 2208.764675][ T1816] ? __kasan_check_write+0x14/0x20 [ 2208.769884][ T1816] ? mutex_lock+0x8d/0x1a0 [ 2208.774416][ T1816] ? __cfi_mutex_lock+0x10/0x10 [ 2208.779286][ T1816] kvm_pic_init+0x19a/0x2f0 [ 2208.783797][ T1816] kvm_arch_vm_ioctl+0xeaa/0x13a0 [ 2208.788827][ T1816] ? avc_has_perm+0x158/0x240 [ 2208.793501][ T1816] ? __cfi_kvm_arch_vm_ioctl+0x10/0x10 [ 2208.798963][ T1816] ? 0xffffffffa0004440 [ 2208.803108][ T1816] ? is_bpf_text_address+0x177/0x190 [ 2208.808391][ T1816] ? kernel_text_address+0xa0/0xd0 [ 2208.813511][ T1816] ? __kernel_text_address+0xd/0x30 [ 2208.818737][ T1816] ? unwind_get_return_address+0x4d/0x90 [ 2208.824395][ T1816] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2208.830569][ T1816] ? arch_stack_walk+0xfc/0x150 [ 2208.835432][ T1816] ? stack_trace_save+0x98/0xe0 [ 2208.840290][ T1816] ? __stack_depot_save+0x36/0x480 [ 2208.845404][ T1816] ? _parse_integer_limit+0x18a/0x1d0 [ 2208.850781][ T1816] ? do_vfs_ioctl+0xc36/0x1c80 [ 2208.855544][ T1816] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 2208.861178][ T1816] kvm_vm_ioctl+0x70b/0xa80 [ 2208.865682][ T1816] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 2208.870728][ T1816] ? memcpy+0x56/0x70 [ 2208.874736][ T1816] ? ioctl_has_perm+0x3e8/0x4c0 [ 2208.879605][ T1816] ? has_cap_mac_admin+0x330/0x330 [ 2208.884735][ T1816] ? security_file_permission+0x94/0xb0 [ 2208.890280][ T1816] ? vfs_write+0x9d6/0xca0 [ 2208.894698][ T1816] ? slab_free_freelist_hook+0xc2/0x190 [ 2208.900262][ T1816] ? selinux_file_ioctl+0x377/0x480 [ 2208.905456][ T1816] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 2208.910993][ T1816] ? mutex_unlock+0x89/0x220 [ 2208.915672][ T1816] ? __cfi_mutex_unlock+0x10/0x10 [ 2208.920694][ T1816] ? __fget_files+0x2d5/0x330 [ 2208.925371][ T1816] ? security_file_ioctl+0x95/0xc0 [ 2208.930477][ T1816] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 2208.935512][ T1816] __se_sys_ioctl+0x12f/0x1b0 [ 2208.940194][ T1816] __x64_sys_ioctl+0x7b/0x90 [ 2208.944783][ T1816] x64_sys_call+0x58b/0x9a0 [ 2208.949285][ T1816] do_syscall_64+0x4c/0xa0 [ 2208.953702][ T1816] ? clear_bhb_loop+0x15/0x70 [ 2208.958371][ T1816] ? clear_bhb_loop+0x15/0x70 [ 2208.963043][ T1816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2208.968950][ T1816] RIP: 0033:0x7f875418e969 [ 2208.973370][ T1816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2208.992971][ T1816] RSP: 002b:00007f8755033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2209.001379][ T1816] RAX: ffffffffffffffda RBX: 00007f87543b5fa0 RCX: 00007f875418e969 [ 2209.009349][ T1816] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 2209.017321][ T1816] RBP: 00007f8755033090 R08: 0000000000000000 R09: 0000000000000000 [ 2209.025285][ T1816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2209.033251][ T1816] R13: 0000000000000000 R14: 00007f87543b5fa0 R15: 00007ffd6bc49418 [ 2209.041221][ T1816] [ 2209.494360][ T1834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9708'. [ 2209.504159][ T1834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9708'. [ 2209.514604][ T1834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9708'. [ 2209.524010][ T1834] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 2209.594880][ T1834] device bridge0 entered promiscuous mode [ 2209.624648][ T1834] bridge0: port 3(macsec1) entered blocking state [ 2209.639364][ T1834] bridge0: port 3(macsec1) entered disabled state [ 2209.655294][ T1834] device bridge0 left promiscuous mode [ 2210.002089][ T1853] loop9: detected capacity change from 0 to 8192 [ 2210.999616][ T1864] FAULT_INJECTION: forcing a failure. [ 2210.999616][ T1864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2211.012771][ T1864] CPU: 1 PID: 1864 Comm: syz.0.9719 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2211.022565][ T1864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2211.032607][ T1864] Call Trace: [ 2211.035874][ T1864] [ 2211.038794][ T1864] __dump_stack+0x21/0x24 [ 2211.043146][ T1864] dump_stack_lvl+0xee/0x150 [ 2211.047735][ T1864] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2211.052747][ T1864] dump_stack+0x15/0x24 [ 2211.052904][ T5182] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2211.056894][ T1864] should_fail_ex+0x3d4/0x520 [ 2211.056921][ T1864] should_fail+0xb/0x10 [ 2211.073259][ T1864] should_fail_usercopy+0x1a/0x20 [ 2211.078306][ T1864] _copy_to_user+0x1e/0x90 [ 2211.082709][ T1864] simple_read_from_buffer+0xe9/0x160 [ 2211.088167][ T1864] proc_fail_nth_read+0x19a/0x210 [ 2211.093279][ T1864] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2211.098860][ T1864] ? security_file_permission+0x94/0xb0 [ 2211.104422][ T1864] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2211.109969][ T1864] vfs_read+0x26e/0x8c0 [ 2211.114116][ T1864] ? __cfi_vfs_read+0x10/0x10 [ 2211.118874][ T1864] ? __kasan_check_write+0x14/0x20 [ 2211.124090][ T1864] ? mutex_lock+0x8d/0x1a0 [ 2211.128509][ T1864] ? __cfi_mutex_lock+0x10/0x10 [ 2211.133357][ T1864] ? __fdget_pos+0x2cd/0x380 [ 2211.137989][ T1864] ? ksys_read+0x71/0x240 [ 2211.142329][ T1864] ksys_read+0x140/0x240 [ 2211.146585][ T1864] ? __cfi_ksys_read+0x10/0x10 [ 2211.151355][ T1864] ? fpregs_restore_userregs+0x128/0x260 [ 2211.157007][ T1864] __x64_sys_read+0x7b/0x90 [ 2211.161521][ T1864] x64_sys_call+0x2f/0x9a0 [ 2211.165948][ T1864] do_syscall_64+0x4c/0xa0 [ 2211.170373][ T1864] ? clear_bhb_loop+0x15/0x70 [ 2211.175052][ T1864] ? clear_bhb_loop+0x15/0x70 [ 2211.179753][ T1864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2211.185653][ T1864] RIP: 0033:0x7fed8118d37c [ 2211.190090][ T1864] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2211.209717][ T1864] RSP: 002b:00007fed81f7d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2211.218149][ T1864] RAX: ffffffffffffffda RBX: 00007fed813b5fa0 RCX: 00007fed8118d37c [ 2211.226134][ T1864] RDX: 000000000000000f RSI: 00007fed81f7d0a0 RDI: 0000000000000005 [ 2211.234108][ T1864] RBP: 00007fed81f7d090 R08: 0000000000000000 R09: 0000000000000000 [ 2211.242083][ T1864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2211.250068][ T1864] R13: 0000000000000000 R14: 00007fed813b5fa0 R15: 00007ffd30b18a28 [ 2211.258048][ T1864] [ 2211.294105][ T5182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2211.305539][ T5182] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2211.318505][ T5182] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 2211.328016][ T5182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.337151][ T5182] usb 4-1: config 0 descriptor?? [ 2211.391901][ T1887] FAULT_INJECTION: forcing a failure. [ 2211.391901][ T1887] name failslab, interval 1, probability 0, space 0, times 0 [ 2211.404578][ T1887] CPU: 1 PID: 1887 Comm: syz.0.9725 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2211.414396][ T1887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2211.424458][ T1887] Call Trace: [ 2211.427746][ T1887] [ 2211.430689][ T1887] __dump_stack+0x21/0x24 [ 2211.435050][ T1887] dump_stack_lvl+0xee/0x150 [ 2211.439666][ T1887] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2211.444720][ T1887] dump_stack+0x15/0x24 [ 2211.448902][ T1887] should_fail_ex+0x3d4/0x520 [ 2211.453598][ T1887] ? dst_alloc+0x16a/0x1e0 [ 2211.458032][ T1887] __should_failslab+0xac/0xf0 [ 2211.462821][ T1887] should_failslab+0x9/0x20 [ 2211.467353][ T1887] kmem_cache_alloc+0x3b/0x330 [ 2211.472168][ T1887] dst_alloc+0x16a/0x1e0 [ 2211.476444][ T1887] ip_route_input_rcu+0xc79/0x2580 [ 2211.481597][ T1887] ? ip_route_input_noref+0x110/0x110 [ 2211.487014][ T1887] ? __local_bh_enable_ip+0x58/0x80 [ 2211.492232][ T1887] ? ipt_do_table+0x13b7/0x15d0 [ 2211.497114][ T1887] ip_route_input_noref+0xbb/0x110 [ 2211.502245][ T1887] ? __cfi_ip_route_input_noref+0x10/0x10 [ 2211.507996][ T1887] ? nf_nat_ipv4_pre_routing+0x235/0x390 [ 2211.513660][ T1887] ip_rcv_finish_core+0x4b0/0x1490 [ 2211.518802][ T1887] ip_rcv+0xe0/0x270 [ 2211.522723][ T1887] ? __cfi_ip_rcv+0x10/0x10 [ 2211.527269][ T1887] ? __cfi_ip_rcv_finish+0x10/0x10 [ 2211.532405][ T1887] ? __cfi_ip_rcv+0x10/0x10 [ 2211.537107][ T1887] __netif_receive_skb+0xd7/0x2a0 [ 2211.542166][ T1887] ? tun_rx_batched+0x158/0x770 [ 2211.547040][ T1887] netif_receive_skb+0x98/0x3d0 [ 2211.551912][ T1887] ? __cfi_netif_receive_skb+0x10/0x10 [ 2211.557389][ T1887] ? __kasan_slab_alloc+0x72/0x80 [ 2211.557945][ T1889] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2211.562431][ T1887] ? slab_post_alloc_hook+0x6d/0x2d0 [ 2211.562461][ T1887] ? __build_skb+0x2d/0x410 [ 2211.579339][ T1887] ? tun_rx_batched+0x158/0x770 [ 2211.584215][ T1887] tun_rx_batched+0x1b6/0x770 [ 2211.588918][ T1887] ? pskb_may_pull+0x100/0x100 [ 2211.593704][ T1887] ? tun_get_user+0x1e17/0x31a0 [ 2211.598566][ T1887] tun_get_user+0x238a/0x31a0 [ 2211.603246][ T1887] ? tun_do_read+0x1c20/0x1c20 [ 2211.608026][ T1887] ? __kasan_check_write+0x14/0x20 [ 2211.613176][ T1887] ? ref_tracker_alloc+0x30f/0x430 [ 2211.618317][ T1887] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 2211.623794][ T1887] ? avc_policy_seqno+0x1b/0x70 [ 2211.628738][ T1887] ? selinux_file_permission+0x2a5/0x510 [ 2211.634386][ T1887] tun_chr_write_iter+0x1fb/0x300 [ 2211.639419][ T1887] vfs_write+0x5db/0xca0 [ 2211.643663][ T1887] ? slab_free_freelist_hook+0xc2/0x190 [ 2211.649242][ T1887] ? __cfi_vfs_write+0x10/0x10 [ 2211.654032][ T1887] ? __fget_files+0x2d5/0x330 [ 2211.658748][ T1887] ? __fdget_pos+0x1f2/0x380 [ 2211.663358][ T1887] ? ksys_write+0x71/0x240 [ 2211.667807][ T1887] ksys_write+0x140/0x240 [ 2211.672161][ T1887] ? __cfi_ksys_write+0x10/0x10 [ 2211.677034][ T1887] ? debug_smp_processor_id+0x17/0x20 [ 2211.682516][ T1887] __x64_sys_write+0x7b/0x90 [ 2211.687137][ T1887] x64_sys_call+0x27b/0x9a0 [ 2211.691664][ T1887] do_syscall_64+0x4c/0xa0 [ 2211.696102][ T1887] ? clear_bhb_loop+0x15/0x70 [ 2211.700888][ T1887] ? clear_bhb_loop+0x15/0x70 [ 2211.705589][ T1887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2211.711507][ T1887] RIP: 0033:0x7fed8118d41f [ 2211.715932][ T1887] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2211.735538][ T1887] RSP: 002b:00007fed81f7d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2211.743969][ T1887] RAX: ffffffffffffffda RBX: 00007fed813b5fa0 RCX: 00007fed8118d41f [ 2211.751945][ T1887] RDX: 0000000000000066 RSI: 00002000000004c0 RDI: 00000000000000c8 [ 2211.759916][ T1887] RBP: 00007fed81f7d090 R08: 0000000000000000 R09: 0000000000000000 [ 2211.767892][ T1887] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 2211.775869][ T1887] R13: 0000000000000000 R14: 00007fed813b5fa0 R15: 00007ffd30b18a28 [ 2211.783841][ T1887] [ 2211.836895][ T5182] elecom 0003:056E:011C.0182: item fetching failed at offset 3/7 [ 2211.846173][ T5182] elecom: probe of 0003:056E:011C.0182 failed with error -22 [ 2212.048407][ T5182] usb 4-1: USB disconnect, device number 23 [ 2212.282884][ T8414] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2212.476836][ T8414] usb 10-1: config index 0 descriptor too short (expected 52, got 36) [ 2212.489827][ T8414] usb 10-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 2212.501784][ T8414] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.521813][ T8414] usb 10-1: config 0 descriptor?? [ 2212.630523][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 2212.630543][ T28] audit: type=1400 audit(1747140806.038:2194): avc: denied { append } for pid=1912 comm="syz.3.9734" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2212.735347][ T1901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.750926][ T1901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2212.776704][ T1916] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.784017][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.794880][ T1916] device bridge_slave_1 left promiscuous mode [ 2212.801269][ T1916] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.809461][ T1916] device bridge_slave_0 left promiscuous mode [ 2212.815844][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.974231][ T28] audit: type=1326 audit(1747140806.378:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.9.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875418e969 code=0x7ffc0000 [ 2212.998799][ T28] audit: type=1326 audit(1747140806.378:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.9.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875418e969 code=0x7ffc0000 [ 2213.023394][ T28] audit: type=1326 audit(1747140806.378:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.9.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f875418e969 code=0x7ffc0000 [ 2213.047686][ T28] audit: type=1326 audit(1747140806.378:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.9.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875418e969 code=0x7ffc0000 [ 2213.071241][ T28] audit: type=1326 audit(1747140806.378:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.9.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875418e969 code=0x7ffc0000 [ 2213.095997][ T28] audit: type=1326 audit(1747140806.378:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.9.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f875418e969 code=0x7ffc0000 [ 2213.439871][ T1931] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2213.457629][ T28] audit: type=1326 audit(1747140806.378:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.9.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875418e969 code=0x7ffc0000 [ 2213.490018][ T1901] device wireguard0 entered promiscuous mode [ 2213.523811][ T28] audit: type=1326 audit(1747140806.378:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.9.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875418e969 code=0x7ffc0000 [ 2213.548656][ T28] audit: type=1326 audit(1747140806.378:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1899 comm="syz.9.9731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f875418e969 code=0x7ffc0000 [ 2213.685925][ T8414] usbhid 10-1:0.0: can't add hid device: -71 [ 2213.692022][ T8414] usbhid: probe of 10-1:0.0 failed with error -71 [ 2213.699351][ T8414] usb 10-1: USB disconnect, device number 19 [ 2213.862023][ T1943] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2215.855332][ T1950] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2215.936573][ T1960] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9747'. [ 2216.791247][ T1984] tmpfs: Unknown parameter 'fowner>00000000000000060929' [ 2216.939886][ T8414] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2218.043021][ T1377] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2218.232986][ T1377] usb 1-1: Using ep0 maxpacket: 8 [ 2218.239328][ T1377] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2218.269159][ T1377] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2218.298722][ T1377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2218.353302][ T1377] usb 1-1: config 0 descriptor?? [ 2218.452880][ T8414] usb 3-1: Using ep0 maxpacket: 32 [ 2218.473634][ T8414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2218.492883][ T8414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2218.502653][ T8414] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2218.512014][ T8414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2218.533120][ T8414] usb 3-1: config 0 descriptor?? [ 2218.540581][ T8414] hub 3-1:0.0: USB hub found [ 2218.563233][ T1377] usb 1-1: USB disconnect, device number 47 [ 2218.743900][ T8414] hub 3-1:0.0: 1 port detected [ 2218.857159][ T2014] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2219.131169][ T2019] loop9: detected capacity change from 0 to 8192 [ 2219.145050][ T1980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.213059][ T1980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.265933][ T2024] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2219.444620][ T8414] usb 3-1: USB disconnect, device number 72 [ 2221.283135][ T2053] FAULT_INJECTION: forcing a failure. [ 2221.283135][ T2053] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.295774][ T2053] CPU: 0 PID: 2053 Comm: syz.0.9772 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2221.305590][ T2053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2221.315745][ T2053] Call Trace: [ 2221.319037][ T2053] [ 2221.321982][ T2053] __dump_stack+0x21/0x24 [ 2221.326332][ T2053] dump_stack_lvl+0xee/0x150 [ 2221.330944][ T2053] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2221.335982][ T2053] dump_stack+0x15/0x24 [ 2221.340153][ T2053] should_fail_ex+0x3d4/0x520 [ 2221.344847][ T2053] __should_failslab+0xac/0xf0 [ 2221.349622][ T2053] ? netlink_realloc_groups+0x12c/0x290 [ 2221.355187][ T2053] should_failslab+0x9/0x20 [ 2221.359707][ T2053] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2221.365092][ T2053] ? netlink_realloc_groups+0x12c/0x290 [ 2221.370656][ T2053] __kmalloc_node_track_caller+0xa0/0x1e0 [ 2221.376387][ T2053] ? cap_capable+0x1aa/0x230 [ 2221.380987][ T2053] krealloc+0x6f/0x110 [ 2221.385074][ T2053] netlink_realloc_groups+0x12c/0x290 [ 2221.390464][ T2053] netlink_bind+0x22d/0xf50 [ 2221.394983][ T2053] ? __cfi_netlink_bind+0x10/0x10 [ 2221.400026][ T2053] ? security_socket_bind+0x93/0xb0 [ 2221.405252][ T2053] __sys_bind+0x311/0x420 [ 2221.409597][ T2053] ? __cfi___sys_bind+0x10/0x10 [ 2221.414466][ T2053] ? __kasan_check_write+0x14/0x20 [ 2221.419615][ T2053] __x64_sys_bind+0x7a/0x90 [ 2221.424143][ T2053] x64_sys_call+0x70c/0x9a0 [ 2221.428667][ T2053] do_syscall_64+0x4c/0xa0 [ 2221.433106][ T2053] ? clear_bhb_loop+0x15/0x70 [ 2221.437794][ T2053] ? clear_bhb_loop+0x15/0x70 [ 2221.442481][ T2053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2221.448395][ T2053] RIP: 0033:0x7fed8118e969 [ 2221.452821][ T2053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2221.472520][ T2053] RSP: 002b:00007fed81f3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2221.480951][ T2053] RAX: ffffffffffffffda RBX: 00007fed813b6160 RCX: 00007fed8118e969 [ 2221.489018][ T2053] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000006 [ 2221.497006][ T2053] RBP: 00007fed81f3a090 R08: 0000000000000000 R09: 0000000000000000 [ 2221.504990][ T2053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2221.513057][ T2053] R13: 0000000000000000 R14: 00007fed813b6160 R15: 00007ffd30b18a28 [ 2221.521053][ T2053] [ 2222.063928][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 2222.063947][ T28] audit: type=1400 audit(1747140815.478:2245): avc: denied { append } for pid=2062 comm="syz.4.9775" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2222.356538][ T2066] loop9: detected capacity change from 0 to 512 [ 2222.391131][ T2066] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2222.433699][ T2066] EXT4-fs (loop9): 1 truncate cleaned up [ 2222.441030][ T2066] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2222.561631][ T2078] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2222.580381][T28240] EXT4-fs (loop9): unmounting filesystem. [ 2222.703746][ T2085] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2222.959808][ T28] audit: type=1326 audit(1747140816.368:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.4.9786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f597158e969 code=0x0 [ 2223.042921][T32629] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2223.242921][T32629] usb 4-1: Using ep0 maxpacket: 8 [ 2223.249145][T32629] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 2223.257287][T32629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.267411][T32629] usb 4-1: config 0 has no interface number 0 [ 2223.275279][T32629] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2223.284447][T32629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.292490][T32629] usb 4-1: Product: syz [ 2223.296714][T32629] usb 4-1: Manufacturer: syz [ 2223.301337][T32629] usb 4-1: SerialNumber: syz [ 2223.307265][T32629] usb 4-1: config 0 descriptor?? [ 2223.323625][T32629] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 2223.330010][T32629] usb 4-1: No valid video chain found. [ 2223.519621][ T5182] usb 4-1: USB disconnect, device number 24 [ 2223.712916][T32629] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 2223.894024][T32629] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.905928][T32629] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 2223.915289][T32629] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.923483][T32629] usb 10-1: Product: syz [ 2223.927981][T32629] usb 10-1: Manufacturer: syz [ 2223.932703][T32629] usb 10-1: SerialNumber: syz [ 2223.938427][T32629] usb 10-1: config 0 descriptor?? [ 2223.944820][T32629] hub 10-1:0.0: bad descriptor, ignoring hub [ 2223.950849][T32629] hub: probe of 10-1:0.0 failed with error -5 [ 2223.958568][T32629] snd-usb-audio: probe of 10-1:0.0 failed with error -2 [ 2223.970939][T30330] udevd[30330]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2224.004994][ T2115] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2224.098650][ T2127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9796'. [ 2224.151361][ T2124] overlayfs: failed to resolve './file0': -2 [ 2224.263553][ T5182] usb 10-1: USB disconnect, device number 20 [ 2224.282470][ T2135] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2224.337013][ T2138] FAULT_INJECTION: forcing a failure. [ 2224.337013][ T2138] name failslab, interval 1, probability 0, space 0, times 0 [ 2224.349948][ T2138] CPU: 0 PID: 2138 Comm: syz.2.9799 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2224.359778][ T2138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2224.369858][ T2138] Call Trace: [ 2224.373149][ T2138] [ 2224.376086][ T2138] __dump_stack+0x21/0x24 [ 2224.380440][ T2138] dump_stack_lvl+0xee/0x150 [ 2224.385044][ T2138] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2224.390088][ T2138] ? ____fput+0x15/0x20 [ 2224.394252][ T2138] ? exit_to_user_mode_loop+0x9b/0xb0 [ 2224.399635][ T2138] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 2224.405281][ T2138] ? syscall_exit_to_user_mode+0x1a/0x30 [ 2224.410934][ T2138] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2224.417028][ T2138] dump_stack+0x15/0x24 [ 2224.421208][ T2138] should_fail_ex+0x3d4/0x520 [ 2224.425900][ T2138] __should_failslab+0xac/0xf0 [ 2224.430700][ T2138] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 2224.436670][ T2138] should_failslab+0x9/0x20 [ 2224.441166][ T2138] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2224.446524][ T2138] ? __cfi_mutex_lock+0x10/0x10 [ 2224.451366][ T2138] ? delete_node+0x2f4/0xa60 [ 2224.455945][ T2138] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 2224.461919][ T2138] __kmalloc+0xa1/0x1e0 [ 2224.466067][ T2138] ? __cfi___bpf_trace_tlb_flush+0x10/0x10 [ 2224.471859][ T2138] tracepoint_probe_unregister+0x1e6/0x8b0 [ 2224.477653][ T2138] bpf_probe_unregister+0x61/0x70 [ 2224.482680][ T2138] bpf_raw_tp_link_release+0x63/0x90 [ 2224.487952][ T2138] bpf_link_free+0x13a/0x390 [ 2224.492532][ T2138] ? bpf_link_put_deferred+0x20/0x20 [ 2224.497808][ T2138] ? security_file_free+0xd8/0xf0 [ 2224.502924][ T2138] bpf_link_release+0x15f/0x170 [ 2224.507788][ T2138] ? __cfi_bpf_link_release+0x10/0x10 [ 2224.513153][ T2138] __fput+0x1fc/0x8f0 [ 2224.517131][ T2138] ? _raw_spin_unlock+0x4c/0x70 [ 2224.521972][ T2138] ____fput+0x15/0x20 [ 2224.525940][ T2138] task_work_run+0x1db/0x240 [ 2224.530528][ T2138] ? __cfi_task_work_run+0x10/0x10 [ 2224.535639][ T2138] ? __cfi___close_range+0x10/0x10 [ 2224.540741][ T2138] exit_to_user_mode_loop+0x9b/0xb0 [ 2224.545923][ T2138] exit_to_user_mode_prepare+0x5a/0xa0 [ 2224.551377][ T2138] syscall_exit_to_user_mode+0x1a/0x30 [ 2224.556848][ T2138] do_syscall_64+0x58/0xa0 [ 2224.561265][ T2138] ? clear_bhb_loop+0x15/0x70 [ 2224.565948][ T2138] ? clear_bhb_loop+0x15/0x70 [ 2224.570613][ T2138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2224.576505][ T2138] RIP: 0033:0x7f1cb8d8e969 [ 2224.580910][ T2138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2224.600506][ T2138] RSP: 002b:00007f1cb9cbc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2224.608912][ T2138] RAX: 0000000000000000 RBX: 00007f1cb8fb5fa0 RCX: 00007f1cb8d8e969 [ 2224.616877][ T2138] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 2224.624932][ T2138] RBP: 00007f1cb9cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2224.632899][ T2138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2224.640889][ T2138] R13: 0000000000000000 R14: 00007f1cb8fb5fa0 R15: 00007fffa8980898 [ 2224.648857][ T2138] [ 2224.654624][ T2138] CFI failure at __traceiter_tlb_flush+0x80/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0x205553a5) [ 2224.654989][ T1584] CFI failure at __traceiter_tlb_flush+0x80/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0x205553a5) [ 2224.666138][ T2138] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 2224.683630][ T2138] CPU: 0 PID: 2138 Comm: syz.2.9799 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2224.693413][ T2138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2224.703450][ T2138] RIP: 0010:__traceiter_tlb_flush+0x80/0xd0 [ 2224.709414][ T2138] Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 38 60 07 00 49 8b 7c 24 08 44 89 f6 48 8b 55 d0 41 ba 5b ac aa df 44 03 53 fc 74 02 <0f> 0b ff d3 49 83 c7 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 2224.729028][ T2138] RSP: 0018:ffffc900023b7888 EFLAGS: 00010093 [ 2224.735076][ T2138] RAX: 1ffff1102201d606 RBX: ffffffff81710320 RCX: ffff8881305ebcc0 [ 2224.743044][ T2138] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffc90002c0f000 [ 2224.751012][ T2138] RBP: ffffc900023b78b8 R08: ffff8881305ebcc0 R09: 000000000000000c [ 2224.758983][ T2138] R10: 0000000084eb1367 R11: 0000000040000000 R12: ffff8881100eb028 [ 2224.766939][ T2138] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881100eb028 [ 2224.774895][ T2138] FS: 00007f1cb9cbc6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2224.783839][ T2138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2224.790493][ T2138] CR2: 0000000000000000 CR3: 000000011045f000 CR4: 00000000003506b0 [ 2224.798451][ T2138] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2224.806405][ T2138] DR3: 000000000000004c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2224.814445][ T2138] Call Trace: [ 2224.817708][ T2138] [ 2224.820623][ T2138] switch_mm_irqs_off+0x61f/0x980 [ 2224.825647][ T2138] __schedule+0x9eb/0x14e0 [ 2224.830050][ T2138] ? release_firmware_map_entry+0x194/0x194 [ 2224.835928][ T2138] ? ____fput+0x15/0x20 [ 2224.840069][ T2138] ? exit_to_user_mode_loop+0x9b/0xb0 [ 2224.845422][ T2138] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 2224.851046][ T2138] ? syscall_exit_to_user_mode+0x1a/0x30 [ 2224.856658][ T2138] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2224.862906][ T2138] preempt_schedule_irq+0x9b/0x110 [ 2224.868089][ T2138] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 2224.873793][ T2138] raw_irqentry_exit_cond_resched+0x29/0x30 [ 2224.879671][ T2138] irqentry_exit+0x37/0x40 [ 2224.884096][ T2138] sysvec_reschedule_ipi+0x78/0x80 [ 2224.889194][ T2138] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2224.894636][ T2138] RIP: 0010:memcg_slab_free_hook+0x6/0x1d0 [ 2224.900438][ T2138] Code: 00 00 e8 4d b2 97 ff f0 49 0f ba 2e 00 0f 83 49 ff ff ff eb ca 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 28 48 89 75 d0 e9 a5 01 00 00 49 89 [ 2224.920028][ T2138] RSP: 0018:ffffc900023b7bb8 EFLAGS: 00000286 [ 2224.926089][ T2138] RAX: ffffea0004403ac0 RBX: ffff8881100eb280 RCX: 0000000000000001 [ 2224.934045][ T2138] RDX: ffffc900023b7bd0 RSI: ffffea0004403ac0 RDI: ffff888100042900 [ 2224.941998][ T2138] RBP: ffffc900023b7bc0 R08: dffffc0000000000 R09: ffffed10275e3c01 [ 2224.949951][ T2138] R10: 0000000000000000 R11: ffffffff8180d9e0 R12: ffffea0004403ac0 [ 2224.957906][ T2138] R13: dffffc0000000000 R14: ffffffff8180d9f5 R15: ffff888100042900 [ 2224.965860][ T2138] ? bpf_raw_tp_link_dealloc+0x15/0x20 [ 2224.971301][ T2138] ? __cfi_bpf_raw_tp_link_dealloc+0x10/0x10 [ 2224.977266][ T2138] __kmem_cache_free+0xa3/0x1b0 [ 2224.982113][ T2138] kfree+0x6f/0xf0 [ 2224.985817][ T2138] bpf_raw_tp_link_dealloc+0x15/0x20 [ 2224.991090][ T2138] bpf_link_free+0x321/0x390 [ 2224.995662][ T2138] ? bpf_link_put_deferred+0x20/0x20 [ 2225.000949][ T2138] ? security_file_free+0xd8/0xf0 [ 2225.005959][ T2138] bpf_link_release+0x15f/0x170 [ 2225.010792][ T2138] ? __cfi_bpf_link_release+0x10/0x10 [ 2225.016150][ T2138] __fput+0x1fc/0x8f0 [ 2225.020115][ T2138] ? _raw_spin_unlock+0x4c/0x70 [ 2225.024996][ T2138] ____fput+0x15/0x20 [ 2225.028962][ T2138] task_work_run+0x1db/0x240 [ 2225.033534][ T2138] ? __cfi_task_work_run+0x10/0x10 [ 2225.038629][ T2138] ? __cfi___close_range+0x10/0x10 [ 2225.043732][ T2138] exit_to_user_mode_loop+0x9b/0xb0 [ 2225.048918][ T2138] exit_to_user_mode_prepare+0x5a/0xa0 [ 2225.054356][ T2138] syscall_exit_to_user_mode+0x1a/0x30 [ 2225.059818][ T2138] do_syscall_64+0x58/0xa0 [ 2225.064245][ T2138] ? clear_bhb_loop+0x15/0x70 [ 2225.068900][ T2138] ? clear_bhb_loop+0x15/0x70 [ 2225.073555][ T2138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2225.079518][ T2138] RIP: 0033:0x7f1cb8d8e969 [ 2225.083929][ T2138] Code: Unable to access opcode bytes at 0x7f1cb8d8e93f. [ 2225.090955][ T2138] RSP: 002b:00007f1cb9cbc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2225.099347][ T2138] RAX: 0000000000000000 RBX: 00007f1cb8fb5fa0 RCX: 00007f1cb8d8e969 [ 2225.107299][ T2138] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 2225.115269][ T2138] RBP: 00007f1cb9cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2225.123234][ T2138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2225.131184][ T2138] R13: 0000000000000000 R14: 00007f1cb8fb5fa0 R15: 00007fffa8980898 [ 2225.139141][ T2138] [ 2225.142165][ T2138] Modules linked in: [ 2225.146064][ T2138] ---[ end trace 0000000000000000 ]--- [ 2225.146101][ T1584] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 2225.151526][ T2138] RIP: 0010:__traceiter_tlb_flush+0x80/0xd0 [ 2225.157587][ T1584] CPU: 1 PID: 1584 Comm: kworker/1:9 Tainted: G D 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 2225.163466][ T2138] Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 38 60 07 00 49 8b 7c 24 08 44 89 f6 48 8b 55 d0 41 ba 5b ac aa df 44 03 53 fc 74 02 <0f> 0b ff d3 49 83 c7 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 2225.174809][ T1584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2225.174823][ T1584] Workqueue: 0x0 [ 2225.194408][ T2138] RSP: 0018:ffffc900023b7888 EFLAGS: 00010093 [ 2225.204467][ T1584] (wg-crypt-wg1) [ 2225.208088][ T2138] [ 2225.208096][ T2138] RAX: 1ffff1102201d606 RBX: ffffffff81710320 RCX: ffff8881305ebcc0 [ 2225.214156][ T1584] [ 2225.214163][ T1584] RIP: 0010:__traceiter_tlb_flush+0x80/0xd0 [ 2225.217777][ T2138] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffc90002c0f000 [ 2225.220182][ T1584] Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 38 60 07 00 49 8b 7c 24 08 44 89 f6 48 8b 55 d0 41 ba 5b ac aa df 44 03 53 fc 74 02 <0f> 0b ff d3 49 83 c7 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 2225.228139][ T2138] RBP: ffffc900023b78b8 R08: ffff8881305ebcc0 R09: 000000000000000c [ 2225.230467][ T1584] RSP: 0018:ffffc90000bb7be8 EFLAGS: 00010093 [ 2225.236340][ T2138] R10: 0000000084eb1367 R11: 0000000040000000 R12: ffff8881100eb028 [ 2225.244294][ T1584] [ 2225.244300][ T1584] RAX: 1ffff1102201d606 RBX: ffffffff81710320 RCX: ffff888114da3cc0 [ 2225.263889][ T2138] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881100eb028 [ 2225.271845][ T1584] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffc90002c0f000 [ 2225.277894][ T2138] FS: 00007f1cb9cbc6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2225.285848][ T1584] RBP: ffffc90000bb7c18 R08: ffff888114da3cc0 R09: 000000000000000c [ 2225.288161][ T2138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2225.296122][ T1584] R10: 0000000084eb1367 R11: 0000000040000000 R12: ffff8881100eb028 [ 2225.304076][ T2138] CR2: 0000000000000000 CR3: 000000011045f000 CR4: 00000000003506b0 [ 2225.312044][ T1584] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881100eb028 [ 2225.320979][ T2138] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2225.328965][ T1584] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2225.335572][ T2138] DR3: 000000000000004c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2225.343535][ T1584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2225.351493][ T2138] Kernel panic - not syncing: Fatal exception [ 2225.359455][ T1584] CR2: 0000000000000000 CR3: 0000000131cdd000 CR4: 00000000003506a0 [ 2225.359481][ T1584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2225.359492][ T1584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2225.359504][ T1584] Call Trace: [ 2225.359511][ T1584] [ 2225.359520][ T1584] switch_mm_irqs_off+0x61f/0x980 [ 2225.359545][ T1584] __schedule+0x9eb/0x14e0 [ 2225.359567][ T1584] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 2225.359589][ T1584] ? release_firmware_map_entry+0x194/0x194 [ 2225.359608][ T1584] ? process_one_work+0x88f/0xc40 [ 2225.359624][ T1584] ? wq_worker_sleeping+0x64/0x280 [ 2225.359644][ T1584] schedule+0xbd/0x170 [ 2225.359679][ T1584] worker_thread+0xea5/0x11f0 [ 2225.359699][ T1584] kthread+0x281/0x320 [ 2225.359715][ T1584] ? __cfi_worker_thread+0x10/0x10 [ 2225.359729][ T1584] ? __cfi_kthread+0x10/0x10 [ 2225.359746][ T1584] ret_from_fork+0x1f/0x30 [ 2225.359766][ T1584] [ 2225.359772][ T1584] Modules linked in: [ 2225.367756][ T1584] ---[ end trace 0000000000000000 ]--- [ 2225.367773][ T1584] RIP: 0010:__traceiter_tlb_flush+0x80/0xd0 [ 2225.367795][ T1584] Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 38 60 07 00 49 8b 7c 24 08 44 89 f6 48 8b 55 d0 41 ba 5b ac aa df 44 03 53 fc 74 02 <0f> 0b ff d3 49 83 c7 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 2225.367809][ T1584] RSP: 0018:ffffc900023b7888 EFLAGS: 00010093 [ 2225.367825][ T1584] RAX: 1ffff1102201d606 RBX: ffffffff81710320 RCX: ffff8881305ebcc0 [ 2225.367837][ T1584] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffc90002c0f000 [ 2225.367849][ T1584] RBP: ffffc900023b78b8 R08: ffff8881305ebcc0 R09: 000000000000000c [ 2225.367861][ T1584] R10: 0000000084eb1367 R11: 0000000040000000 R12: ffff8881100eb028 [ 2225.367873][ T1584] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881100eb028 [ 2225.367885][ T1584] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2225.367899][ T1584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2225.367912][ T1584] CR2: 0000000000000000 CR3: 0000000131cdd000 CR4: 00000000003506a0 [ 2225.367927][ T1584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2225.367937][ T1584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2226.478279][ T2138] Shutting down cpus with NMI [ 2226.723359][ T2138] Kernel Offset: disabled [ 2226.727758][ T2138] Rebooting in 86400 seconds..