last executing test programs: 8m10.895161044s ago: executing program 32 (id=1663): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000180)='./file1\x00', 0x4) 7m59.169242036s ago: executing program 33 (id=1737): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x12, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x7ff}, {0xffffffff, 0x0, 0x9, 0xa, 0xffffffffffffffff}]}) 2m36.575713647s ago: executing program 34 (id=2880): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002280)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2m35.548313081s ago: executing program 4 (id=2888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000680)={0x4, 0x0, [{0xb, 0x8, 0x6, 0x8, 0x7, 0x9, 0x7}, {0x80000008, 0x10000, 0x5, 0x8, 0x5a, 0x6, 0x840}, {0x80000000, 0x4, 0x5, 0x8, 0x8, 0x1, 0x10000}, {0x80000008, 0x1, 0x3, 0x6, 0x7, 0x3, 0xfffffc01}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m34.61233657s ago: executing program 4 (id=2895): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m34.367243253s ago: executing program 4 (id=2896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x40) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040810) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb, 0xffff}}}, 0x24}}, 0x0) 2m33.511897528s ago: executing program 4 (id=2900): close(0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80cf50, &(0x7f00000002c0)={[{@resgid}, {@mblk_io_submit}, {@grpid}, {@oldalloc}, {@init_itable_val}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@dioread_lock}, {@noauto_da_alloc}]}, 0xf7, 0x485, &(0x7f0000001040)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3200009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)='system.posix_acl_default\x00', 0x0, 0x4c, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x840, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x200, 0x3f8, 0x118, 0x118, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4, 0x8, 0x542, 0x0, 0x0, "97fcfcca374c1885f415711db7b9783687c1006f6fdb8a93d150164fb95d594c6250237a6fdc2f54c3e503baf7e59a72a995aef51e7e01a35a3b6762fa9cb2f2"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x401]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 2m33.384221095s ago: executing program 4 (id=2902): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x268882, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002240)=@bpf_ext={0x1c, 0x8, &(0x7f0000002080)=ANY=[@ANYBLOB="950000000000000085000065060000000000000001000000186300001000000000000000c80e00001865000007000000000000000200000085000000ac000000"], &(0x7f00000020c0)='GPL\x00', 0x40, 0x22, &(0x7f0000002100)=""/34, 0x41100, 0x49, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000002140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002180)={0x4, 0x5, 0x92e, 0x1}, 0x10, 0x121fd, r2, 0x3, &(0x7f00000021c0)=[r2, r2, r2, r2, r2], &(0x7f0000002200)=[{0x3, 0x2, 0x1, 0x6}, {0x3, 0x4, 0x6, 0x6}, {0x3, 0x4, 0x2, 0x5}], 0x10, 0x1}, 0x94) (async) mknodat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r3, &(0x7f0000000000)=""/49, 0x31) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) fsmount(r0, 0x1, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0x96) (async) read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x210) 2m33.035919023s ago: executing program 4 (id=2905): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m32.988515986s ago: executing program 35 (id=2905): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m20.236771267s ago: executing program 2 (id=3007): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m20.065241096s ago: executing program 2 (id=3011): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000680)={0x4, 0x0, [{0xb, 0x8, 0x6, 0x8, 0x7, 0x9, 0x7}, {0x80000008, 0x10000, 0x5, 0x8, 0x5a, 0x6, 0x840}, {0x80000000, 0x4, 0x5, 0x8, 0x8, 0x1, 0x10000}, {0x80000008, 0x1, 0x3, 0x6, 0x7, 0x3, 0xfffffc01}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m19.065309549s ago: executing program 2 (id=3018): mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m17.734081969s ago: executing program 2 (id=3024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002180)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in6=@mcast2, @in6=@loopback, 0x4e21, 0x10, 0x4e22, 0x0, 0xa, 0xe0, 0x20, 0x29}, {0xa, 0x800, 0x8, 0x0, 0x4, 0x6, 0x0, 0xf6e}, {0x5c8, 0x0, 0x1ff, 0xc}, 0x2, 0x0, 0x1, 0x1, 0x2, 0x2}, 0x6}, [@mark={0xc, 0x15, {0x35075d, 0x8000}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004004}, 0xc044) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2, &(0x7f0000000340)={[{@lazytime}, {@abort}, {@grpid}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@discard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@nomblk_io_submit}, {@acl}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f00000000c0)='./file0\x00', r4, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xd3}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0x3, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0xbc, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x0, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x0, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 2m17.476321053s ago: executing program 2 (id=3025): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m17.322279781s ago: executing program 2 (id=3026): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x46397aac6f821293, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40200000000000061118c0000000000019e07000000000300000000000000e2d807b9015cfb958a6fdeb79b18bdb8bd352c419f40cdc51d908d245a9ef6e04d0fb3a32fbbc5755c49f05ffd143117cdf3b21c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={r2, @multicast1, @broadcast}, 0xc) 2m17.237122975s ago: executing program 36 (id=3026): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x46397aac6f821293, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40200000000000061118c0000000000019e07000000000300000000000000e2d807b9015cfb958a6fdeb79b18bdb8bd352c419f40cdc51d908d245a9ef6e04d0fb3a32fbbc5755c49f05ffd143117cdf3b21c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={r2, @multicast1, @broadcast}, 0xc) 1m54.682878962s ago: executing program 7 (id=3203): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x2}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x11, r3, 0xd37c3000) fcntl$addseals(r3, 0x409, 0x8) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x200800, 0x88) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x4, 0x4, 0x0, 0x5ff2, 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x1c}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x379b, 0x8, 0x18, 0x200}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000020000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m53.77275119s ago: executing program 7 (id=3212): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m53.757366441s ago: executing program 7 (id=3213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000c00)={r0, &(0x7f0000000080)="57eae28097aae0a061ba5502e104b8f08ae8da5e6e2193229560dc1271fff3688d0100e5349ad2ab", &(0x7f0000000280)=""/195, 0x4}, 0x20) 1m53.675009946s ago: executing program 7 (id=3215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x1000}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000019380)="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", 0x2000, &(0x7f000001fec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001d600)={0x90, 0x0, 0x5, {0x3, 0x5, 0x0, 0x3, 0x7ffffffd, 0x3, {0x2, 0x800, 0x10000000b, 0x3, 0x5, 0x1, 0xff, 0x4, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x3117, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f0000000100)={0x58, 0x4, 0x7, 0x0, 0x7d6, 0x2, 0x0, &(0x7f0000000080)=[{0xa, 0x1ff}, {0x18, 0xfe}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@nobh}, {@errors_continue}, {@nodelalloc}, {@barrier}]}, 0x21, 0xbd4, &(0x7f0000001500)="$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") syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xc, 0x803, 0x0) write$tun(r4, &(0x7f0000000280)={@void, @val={0x3, 0x3, 0x8, 0x1007, 0x16, 0xc}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x7, 0x1, 0x0, @empty, @multicast1}, @redirect={0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x5, 0x4, 0x3, 0x37, 0x2, 0x64, 0x101, 0x8, 0x6, 0x401, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x3a) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000006411150000006110a4000f0000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r0}, 0x50) 1m53.22316651s ago: executing program 7 (id=3216): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000080)={[{@test_dummy_encryption}, {@usrquota}, {@nomblk_io_submit}]}, 0x2, 0xbe3, &(0x7f00000003c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @remote, @val={@val={0x88a8, 0x2, 0x0, 0xffe}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x3, 0x24, 0x68, 0x0, 0x4, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4, "f1ad33", 0x8, "4b8ef0"}}}}}}, 0x0) clock_gettime(0x0, &(0x7f0000006a00)) recvmmsg(r5, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000035c0)}, 0x5}], 0x2, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r9, &(0x7f0000000fc0)={0x2020, 0x0, 0x0}, 0x2020) r11 = getegid() write$FUSE_ENTRY(r8, &(0x7f0000003000)={0x90, 0xfffffffffffffffe, r10, {0x1, 0x1, 0x4, 0x1, 0x30d, 0x1, {0x4, 0x6, 0x2, 0x5, 0x74f0, 0x8001, 0x6, 0x0, 0x5, 0x2000, 0x515, 0xee00, r11, 0x7fffffff, 0x3}}}, 0x90) 1m53.000866791s ago: executing program 7 (id=3217): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m52.883749407s ago: executing program 37 (id=3217): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 37.152564484s ago: executing program 8 (id=3810): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 35.892470641s ago: executing program 8 (id=3818): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x101, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x24000000) 35.860952053s ago: executing program 8 (id=3819): syz_open_dev$loop(&(0x7f0000000000), 0x8001, 0x80000) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) 35.780161307s ago: executing program 8 (id=3820): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80400, 0x34) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/119, 0x77}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x4001) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)=""/210, 0xd2}, {&(0x7f0000000640)=""/231, 0xe7}, {&(0x7f0000000740)=""/147, 0x93}], 0x3, &(0x7f0000000840)=""/46, 0x2e}, 0x2) 35.232342066s ago: executing program 8 (id=3824): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000100feffff"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c000) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 35.207932607s ago: executing program 8 (id=3825): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x3fff, 0x3f, 0x8, 0x3f000000, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r7 = syz_io_uring_setup(0x469b, &(0x7f00000001c0)={0x0, 0x91c1, 0x0, 0x2, 0x3}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r7, 0x20, 0x20, 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 35.136644051s ago: executing program 38 (id=3825): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x3fff, 0x3f, 0x8, 0x3f000000, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r7 = syz_io_uring_setup(0x469b, &(0x7f00000001c0)={0x0, 0x91c1, 0x0, 0x2, 0x3}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r7, 0x20, 0x20, 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 8.479785824s ago: executing program 0 (id=4007): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x18b341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080103000000000000000000000007060002400a010000060002408035000014000480088bf82fdf0005400000000708000940000000080900010073797a30"], 0x44}, 0x1, 0x0, 0x0, 0x24000010}, 0x20018800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 8.410235617s ago: executing program 9 (id=4012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="c59a1b746cda", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x10, 0x2c, 0xff, @remote, @local, {[@dstopts={0x88, 0x0, '\x00', [@pad1]}]}}}}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x80432) setreuid(0x0, r4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@blksize}, {@default_permissions}], [{@audit}, {@uid_gt={'uid>', r4}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'GPL\x00'}}]}}) ppoll(&(0x7f0000010140)=[{0xffffffffffffffff, 0x2046}], 0x1, 0x0, 0x0, 0x0) r7 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 7.842924458s ago: executing program 0 (id=4017): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './bus\x00'}, 0x5f) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, 0xffffffffffffffff, 0x7}, 0x10) socket$netlink(0x10, 0x3, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x3}, 0x1c) eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000001c00)=[0x0]) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0x10000000}) 5.756010918s ago: executing program 0 (id=4029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82d03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000001100)="0f20c06635000000400f22c02e64660f38f85168baf80c66b894087d8366efbafc0ced0fc72f66b99002000066b84cfd454766ba7d44d6470f30660fe0e7ea00003201baa00066ed2e6c0fc76ad3", 0x4e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.643829923s ago: executing program 0 (id=4030): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x80}, 0x44004) r1 = fsopen(&(0x7f0000000380)='ufs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x3a0700b, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) getsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000600), &(0x7f0000000640)=0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x8814a0, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r6, 0x0, 0x0) getdents64(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6ef5e5c24c754afb, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) pwrite64(r7, &(0x7f0000000500)="d24e30aa435229f50c43c83d4d354a6ac1292eaceb607adbf4e5cdb1165859c4931ff1720cb3fba207165c09228cdad067dc6dd7752b91dc063b32711d80a9f29dcbfd5e4486eb05731af078ad3565dc507fbb8c60c573b071e30ac8da9ad725c6440efb069ac061591e77705223faecba2747182439ccdc2445d73bc5f491cc022ddee1d42f2fcf53a60c151d9ea122b80b1bb5c45a6996d204cadb0921b2be930f812c552fc61e3a8f88828297fc946552e0cbbcc09a4b7bd676ee3d9ca1965f2156846ddbabf798f8a1bd2d0390df518b18e7d016b9dfaacfe0d9736386f62c12e576aaf0ee59f5e81011cd6c80df7a3818a2b942fc", 0xf7, 0x9) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180300000000000000000000000001008510000006000000180000000000000000000000000000003f00000000000000180000000000000000000000000000009500000000000000370300000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0)={0x204000, 0x0, 0x25}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5.507276171s ago: executing program 0 (id=4034): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x3, 0xeee, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0xaa}}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) 5.348590899s ago: executing program 9 (id=4035): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.248540524s ago: executing program 3 (id=4036): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x3, 0xeee, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0xaa}}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x40}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x1, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000400)={0x3, 0x4, {0xc, @struct={0x5, 0x487}, 0x0, 0x2, 0x2, 0x1, 0x4, 0x1800, 0x408, @struct={0x7, 0xb319}, 0x4, 0x8, [0x5, 0x3, 0xa7, 0x543, 0x8000000000000001, 0x7]}, {0x8, @struct={0xf90, 0x8}, 0x0, 0x8, 0x8, 0xffffffff, 0x7, 0x1, 0x20, @usage=0x89e9, 0x63d6, 0x100, [0x1ff, 0xfffffffffffffbb2, 0x6e6f, 0x3, 0x1, 0x2]}, {0x8, @usage=0x8, 0x0, 0x8, 0x80000000, 0x3, 0x708c, 0x1ff, 0x4, @struct={0x1, 0x2c4cc000}, 0x80000000, 0x3ff, [0x7, 0x3, 0x6c3, 0x6, 0x3, 0x7]}, {0x0, 0xfffffffffffffffd, 0x8}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000800)={r7, 0x4, 0x7fffffff}) 5.155814269s ago: executing program 3 (id=4037): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, 0x1}, 0xc) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000008340)="90b70e8c198e3d550c5dd5e5ea85bc10e491ece4dd2adf6920b6c9924bd498131ef1318132ea60e54a0bc0b2f7dbf9be266bedb7995fb8528e1be1ccc340a28a90485e5ee4c4c6a9f452c6207d8aff0fb923b2428b54e6b196957f4dc1846886cf14dccb92ba7aabde1fdfffe886aa09d51a32febd13d50ee2cdb0ef76cd06753b8bbda79a866528abddf8c12ed442a8c989de4e15bfc4178e661deffbbf86c2c70d5f2597ab70917a42bb836b6418f506839eeb12ef89a9a321b11ebe696061016ff0b8f4cc2e8259aef760f4c4bd320e08b99950e0280b1cb82b91e55ed09d5c3b57c4401806455b58e3a6ade4bc70e03f06b5e700ccf4cfaf6cf54bb764aa9bfcb9b4eec271f3e02236737e79d2e16a1e364cd8d30d0369fb9746f58daa4ee418177654ca460e1ab2581a0bfa03151a1c052df1a4d299c7926795ec8ab2d4f12bde23ef79db7364252fe873791d5b45fd73f9665018123c53a65210f53e5713d8eb23840277b57843aad57ef0e54ce0fec0dbbb854331f44e24b0cd833a01d59ebbcdb55363d96f122d90aa238e0fb4a2b3041b5b37354805639db94ebc50c171e067661916665512874442eb1fd435253e3f98914a63b8c511f5d5fa77693355a2b5a4dcb605b9e012049d5d4590ed59ced7323f26b921fa59f5bcf14aabfa6dd9026e41cf896d898e3b2a0389b53a6b9cb8d19092b25fc6593eda84130d89f8c1227347417e9967cd59dda73c3143aa0265240e080cd7786af18c0061bb4f18d8492bab6435ab185de8ed9bc4e8dcbcd36281ee4a8f42aa5db53a945d46714f529888a743498bde29ff3a3e9632e743628e5f138c642f62f68a4dc872ae12548a8c87a3a5246f123990d8cd0522e800bcc84d636b986b42d6f6aa1703043d1280f2c51c6b8e3cb5001c8bc741606dc255552c6da6f1f451dff0d04dae1f57120197c9e1052c880f26e028b85d757473b36cbc4dcbacfbd45f48c8aa71efe912f1d0fa123d298398c4fa7c80034c83655460c87aeb98d369d088d2a3d3801caa01685e9767d2961abc87c9fe9a1434d8bceec132595eef8b788afbb0c650c29991336341220cf51b4ac4a3f3791a9027e4d312fdf1e5a04a858cc23e093ea03362f731539061baced85fb5493370c409b1292a53b781edd6aa4247bd3921233380137b8834a6e826500a9af7053d8577053998549b12f9f8d375b79fe9322ea0f85051d1066d8666d575041faadccc49a1635f94a70f2007582e1e821be93b007611939471864ac35ce2f1ad2c1d20423f719797b53220a34aeca63e9b338b4be645ce07e00b17243a536aeea8f41dcb0b67e8e2f442802f6136d66610714d5f97376e330244f0a6aadd39aef651eda9eead563e433277a748917db682d8eb3e3309b42b535bab01f97bac61b28823cfaf1cc495cdb0d7fab775d6854f5b8515402208d898af7076cfbb751b85fc7601d929c5aea5dbd207101fbe1a5cac6f33dc88b0c803aac6b24f23e907cef6986f0b9537580db25c14c49451fff52ddd9d0c206bfadc250a7c12d446d072738cbfec51a40d3b946c41642b8ead048e3646997881dad3357ac751b11cf4d02cdc31061d5f59dddde5f157627565dbfaf5a593cc0ec4ca52277def45cae26af8a60e62f8ffde23b430a87997764ef49d6d72dbc818dae141114aa2842b3d718276edda46585b6b106d0daf871cdc9cbb49a757930b8d076454b9c03904db89f8720a28e59bdacb6d86c69c54f53cb234636e9cb3c9c1cc80e778c3d458be16ef9b40945f765a1d48ac8bf1cac85a800a9b246778fecac255bffedbe02e34fbc3cf3981fc6fd3849484d0bf9766e70a6e0f67d2d33c03d8287396018c9fc267e012c393a4039c61d613963b22c6bd88eaa099d8692d9e2aa3cc189c8d93eb142906998bce52c458cbb083070e850c20350d1df35092c61a31afb606081f07c895b61b1aac7572c07380005313ef2532715f3f293770efbb98acbd510daba8d59f03a6cfbd20c546b829d2bf360303048e2c2622dd8033840bda80b2138e7c8c7a1473ac741db4ecdb39e5bf5a241470a0236f3e2b185fc8f2764382b3a7c6b96904eb0ab728b39c276bace8debc20c5c4f8e91bbb790c601630e3a88d02215ad377a3df334b7ef4ed2331656a13f4f1a13b828662675766346ce6de5cb8714f9dd5a68c4f5af30c42842135b1463ea648226671f0307218753b2eadf8465d39f817fd152811803650d0bc287e42219b521f45cc48d056f70dd70d11e7837946abb94fb69dfffa4f029e848e7312e247993e46bc94a6eb73c9427f3e7d290a089637e647b9ff37a1ec38bfd6c5227bb437c892a4ca74781c8626d0233d1bbd1bcbe16bd4608f7da117ad7052a20da1d6b33c10c73ab7fdeb51353ca706077677904e1877c6ebbcc7f04d3fac41c1930bc3c1aeeb2e4ff0ea67a28a96dc4ef4404cd12a8c9d85f53daee4cea5f81982c0ae0f97b7197cf305c4a45af2b2c127186bd35be11b999cc190bea97a1fdcf7bec845526bf80e2cc00537c6b690a88477688e15c8debed367d3421b6dfa38552c98452d3a98dd615760fb445a398dcf3718534b4b0ccbfbdf9e3bd783a235f8919d66b4b0deeade001dc89391813d58113693b3a543a2ed9fa398c9d7d9420384e1d021c8b467c1500e007964bda70ea616d3c0422c682b80f8990217a464347918fe09ba83bdd76015833a4c76888a5cc6fa5c37a766d64f301c61f2eafba3a8bc64b9d402feba216e3049fee68d21cadc4cc8de19fe10c89bd43c4a2d1227ab85ae41680a8c06ed77a75447cb498928c1dedb5a61a00f636a67f59e86028166a08cfa61fd8d408eea6c35db51a1ee21c455de55d8dfc2ab2f976491f5b6c5b54492f539624e1da89b1171bd099b6971d23bf2c788acfb07f9eaf720daa518249bd8cd41e03e87c6de17c5cf14c1f1be318350e4624b7a89c20de3221759539430026e06c5192b120f82e36586c490cb084046e8fb5ddecb234f2dfea4752ff94cb819150c9b09220c8a7625904b92a159885d7123a77404d52f362aaafc4e56c97d45b1729e80a0bb2646fb5d019d2d91151431cb04f32730d1abb88e9823dd7b0bc7a407fe5ee3273d2d497563414f620c1a56d4fd4ebcbff2bfbc11c8d4ba0922095d850572d90b1b12b973371bbee36bf6fb67422ef325367e1a6a47fdc0f05382a6cfdabd96893b8a33b9431e4c470b615af17a2f583b5abed8e8f277a15ed51c180dd5ca13e16b3f6a996b2e56035d09bb241e160ef6dabeb37e9ca62c3381272017789762aa8381d46ecfe565f6c5646bc7d67b35abacbcbde89782a0cdc93b696155513e2d1dff96e43e72bf678be389a061dbbcd1b9fd03427d8258115bab3ef6281de402ea05bea729ec97886281f8d4e002dc6428f7715ee6772ae687c2f54e84fed500198a6fb87a3367aa14c9527c6e7d1fdc93aae93155923b9445c5f21ca90411f0c4622df6e7a959712eb00b47f59d027bf115078c79e8222083d5cfbe954d5cbd39567c641f6feb8eca6535c5b1866a720e32b61ea7b133bdec267ab83fa243765f83f5a2f5a3c4bb4c8a290da52aedb2eb2d752e5decdbb001e06359ac9c9d898559a56609bd53ee26b336161d9e66e71db56c7dc017b30545c614482a0b8db64b2289fc07c4670b0edb89c127dc01caa02107d6ef3686f1f02661f8086565a1e1870e5ed7b947f5ab1e1349230180d692aef54ca9f4b7515cc446d8bd0a76ce4376069fabee5594042333ebf23016cffa0ae063c04d876f56a462365ba7e1f429f70c324fa5a9ae376c2541c80dc1e2e33ca1c90b0e6369191a8e6ba8818da1bff830aec1219b7bda2ec14ffa7528601ec307a225e1f6128a44bda65017a98cf217a6521e1b41ab7df4f876329a228cf3640178b2763869d37bd8d346514191b9098fb8bcd44249d11ef27eac67d2152218128dc5d21ed083f092286b89522be034a3d96fac4ee7cb58b460a7695c9048426a6d3bc4c676f784393b89f7a981fad728a4997ffa1ffb412d56771e31c435658dd1fac7b5bb8db5ab637fbd653c55d3db4bf43c7d91524b18dc2860a1c060b96f00d579171c11c42ce91437e2ec15fc47617afff7145b17e965eecc01518cf6f4a245d722d6bb243aac8254da9a50ce79b04825444cd4c16b39b290528db1e7e0a3b5f07272e9a0cd7b92073bdee27a21e03bca75ef4da3bbf0476453479ec33aad301a32f7271924e96dde781266dc6a308fbd69589483189ea92d7cd18463758cca4802c86e73437d75079a3c16631c7bab19204c3225f74751652dd43ba33ae54bf768870ec43a9c83bd5797774f0efa371e434d808e3887c56d044340e7c01dc192cdd1bd9a174aae042695e6c4a689dd265290db2d49eac1f36ab8b3b1f5d055cd3de74575f96df9bb9491472a078274be830246b7c2518e6c6f516aca013837cfed7f71b6a5c479c5e92619051f78bd29673ed047db4a877a1f00a1817a08782e043dda6f6014717c834c7416f2fc67ade230b245e66188841e7abc58a569e6cf17357336ba739e17323314bf46b75cfce51e91fdeaf17d13ddcd8dd7c6cad4f31bd1b4947b79fbbd3396bea562e59c85af361a5b05171984ae721c463f2a7e172dc0fcf6b974458a21a5c99096c53173f7393593b50b8b36ea7e79b82c278a0f833967c0919fc8de07edcd6b51fc06e67243b5cf143511ab1d755a7ef234db2d31ce913e35889f6ff9f75ae63ade38033d4bc6b51149e4d0901af9e83d59001590260bb400903c038423c14369b2a597160f0537f4a6d4ccd0b7a95ab8cc55938e06f3d8df2edae0984f850da371e585b7b8d726164d2dd555316884735a3d849f5fc20983644131fb19d8ca251488734dff7e08c6d732a240b8b101e7edc41c6970e65da8651eeec1734e97a499a564606a808c13e2d340d893ed84c01b307419f6e3bde7fe285ffff3cad43941cacc0776e99df96a45fc0fbf8db247a8bdbe5b6b5b5507876bf41efe4195f78850c2640181682f6b059718d28da9344cb5a4e6e1da020f4813c615cdf89a9968f2ffffd0dc22b1d9041b26a6b10818811639de9a5cdab8811489bd8452c4af81f14586c551aadcdfb51b417d5bcf7304273accabbe093286517e0da67d1664e8722062c24c03fb51f669d8c0c7fc29b5a90d1f25d340d377632b634706b854efeb99e10f952b60a59bdf24d836462b6403b2577452ee70c451546a3cf60f0e508190147b8c0cf34458abe9aecbce9a7be1c65b92757876bf92c73488e2b9835cab471eaf28a8af37d28e3f2b3e4fd0dc6992e3d22026508ca8bd67f2990dfd7d4598b2e93ebe076e784860a17545ddb16fce09e2e649b26ae6c84983d67fafae569fef0eb042b68f0c8a6fdb57e6ffdd5768f7d7383bdbce8337cb2d91d36090499ac377dec4f38c5bf194a2a5bf656d5b0dd1b364589bac9637b2e44b13eeb507c56ff8f561f1d205c2fcdacb92ef2d991e0583bc0b1e216ad6c10a0ef195a4781e74013f7414bebd3cfc875faa3deef8f65ac983dea3c430fd57a62b18f8309c1c50d5f4e775e52281a1bdc6f9ed2f1d1c67724ecbb3001495d67ebf7025636841fd1d2a63385495e16f642433680e6611b6202f8d9c2f48ddcfabf235803f12f8d560ca691e4a8c627edee29a85d8f03a4d118807d689176addc439e1c0b561214bbbf937737e61feefd0760c683a02e4f775f3c12349a07362386b9b596625bdce87ebad21e40d2681fb84bd6d73cbbf10d56c58a7d57dcdfebd73fb80a441b8d278644b1eaf0e5ccbb8b151ef90056291a635c5c21bec5be45f77de012f3a6384ba515ec2e1a9a6f73f9793bbab736330cb4dfce95dc624c13d70c21b3feffd2087ebec7623b982a84eb4423e4a485eff4e034ebc2884d209f422f81230edf7c636ec34b7a8e056a408ae449a0e697ab6adb0ad698a6ee005f382757bde75a4e2b91d2aaa681b5613314e32754c9e34edbc265cea8ad3a388ec7a891cdb2ec8d403242bde9299209d96a71bea294d321da9a19ee08276efaa8597368a7171d14ae33ce9ad72683b43140b6446c468b9969daa69fcc5d3cc3ae5df855de9ca17608481e7067bf589222d0606163b2c804f4400616cb3ac42af63b4081a19baea6f387d1b8f7a63bdf93d0c43d7ea37258bf39eb4d7c66c754e64c6afcf3429b84ccf653c343b644cfc59a4559070fe43456b0403c8a8aaf229cdbf4642124b6271e00d048cf6e835ff18246f9f72a7e7d558c2c6bafa5b84af3a2114d387e40cd6de13f7db17191975aeb488666d3dbeab2b8e88e14ee0923af01c9cf9a2d4d972ac0fa27f6f4c6bbbd18571a314fd7a279ec43c4b153edc602123e3d6ed6b13352d303b1ba8c7cf2be896b87714d1889257e2c8ef0f90f1c6c9af9f4b86469e0712911783030318ad717e8466a78dd94498aef0e9c2073fba028530c8ae0666d6c001e2be92a742305f194793c3fb813790111e174e59c43415628746293402e11aae1eabf9162a2091fe3ae10a5308fcf84054a4a7e54181331ecdf9390b82e0842a123339c45c46c5712eead119202d40918886d4aec68568f4febbb52dcdcb311825e8d6cf2bedae8b2cb90ed15c38de39b5da0ac4e7f27214a514e12b7a5f39a3e076c956273d618b10a5d8ea76b20ca4d612c773fd78ec8db5b7a0d1c279fc89516a8af4d8d2d284d8486d0505a4c0a8f90046930da82b93a0b192111e01138a3b5f0597e72a1464612e1f4c6b61397cec639f7bd0c44de0a9e8650c98bf7f8c9970cf6635fa750e4aadb500fc4cb8bffaa1f2e4090b30e6fa63db4c709261c2595804181b700934fb7c67e3f422fd1dec6d9136302eabe83523c28ccf855cbbf0b0b16ff65bdb304db0945b51ab82b98ea122e8c1afb7c888ab52dc9eeb39e1edc70de228568d98659261f3a1208aed26d70605ff41254ace17b5e879a5af2798047b5ed1f38c6f0a3ae8367d11cc9285d994187e8ea2b6a54573f84194b6f9c9303dc7bd24ffb6ec8f4b06b76dfeee7ba7e23fa58b03115b45ce9136461849d81177146f571d411d26b6e4172d7e0052fa147d1ea69118c6ea94d077e6b2c435efe87c9325cd9b3313597ae776c4d94535bb8947214c2938e9132b2349753057047cb9f07f79d546172624b7c44e076de85161a025171208ec828e73a85b5a3f6aed5d9fdb91a18a0e6055730e569d0e6e97e1793c94ed0be8e87a18215339389434606118c563604af54b1f276724aaff41a336c00a7b7cd4f73263633d9a3c92a43a96322e3b2e30392c20369a29caafce4c9d2bdbbd601498c7ca62216dabb97e49365f5b6dde921336200ab6ce3fe75d3f93e65613b6346eea1798bfea3e7ef0bf39108ddd97b0997cf439d40a9e71157f49f043ccaf269bcde73b971021b46b3f856afc31fb2c5eefbf77d7a0cfadc03d9ad84c1cfdd25383b04846a3e929c93f6bcc31bed1d4bcf008551f679f3fb3cf6f063a72af143fd3d92019a54f0e8ce2c7a9ad5dcf11d389de2fee4b431e777a32dd0c2e8de6e8e99db44e9f72f7dc293472a9ef5a75f287333351545a86fefb06cb6e32531c207f57869991fd14067f0c8da1f61b2b3553dc529d409cd8100525aff86f4cc5578d0a9eb300957965769dabce552832d4f37e1c23373b2f76ae46c619289e097ca9be82f9f382cfc8e9bda65fd63ac8f88ceac87f0eda3defae78e1479090a01fe2bb7dc5a77ff056549b6f17a3c44a8fc0969a514e8b6067b16ff0d81688ea8c37672d1ac2d1ab543dd5d688a95e10193ded7129bee828ba6b81aab4cb49b015d8946e9e6fa44a0c913026485756e509d1957cdacb7d7d4248ce0d83d70445cdfd84bf4fe998dd0671f46ebc2702fb1bf641d80e954c324e316ecbba08a29ea20acff678c75cba32e7d2501f295444cbff171bb4a1998674facfc68b70d9ef466a6de6f8864443029121d466a246ac9607f51b60dec7b99d4ea058b7d9df2e57589d5182f445199101849e853f8672e90e5259a620e8e6db069cb4bdd642abc1489cda7663a2298d168ad768a337ff5ff0b8151f086219b0412651936bbf224310ae3d01b7a20f9e50c73d45a8da85ec3e0922a170a7c0938d14a5ea9477bb7cf323d3348ee1309afee49d2c0747c116ac6e0257e572a0f8f168b193e9bdf7d8e49f0fdfd5786771f0cadc18935d5ce736e24b3cde56018a9f78863afe8bc4d020695567184a6d3d7b595cea1b879ec2c13659caed5bad5c4f61373b6b4d9ec80232d9e83049b871d39b6bfdb635018e6181a69748741cf7cdc01e6c1cfca8c87b485dbf9dca63c5e0c701845d4595df4fbf8d4e97c5f71371985b4716b7868070280fc1b0ec549c65f84db587eab3b835888b9dc513bc94c4de91cd13266f5c87c3a0f81818c510107946a4184c3432f47cee2fd1e9a02494e1f80abbc0577eb77751a71d1c6998bccfc747af96f57620634c7d9e8fb314c300bfad916d3113f6dcbd2337ea0d373138e3fb13c64caffb0f470b70bd58dfe0c4fdc6cb11c46bd52e68f6d9b43a8ab697c888ceb2b584c2ac1e1dba136716e9d2126ca9337c3fa3b3a8f3bccead55250f8f2aff481b8466bbbaa4f378b11fac6c3272730514d629ef511b9c99afeb3226eae09a7c67dbb6745c98d1580323f27e503646664bd923d020163b9281ae27f30875c201067a5ef722283d1b0dab94ed4ad889a31292640e0f77e674cc6807e054824911d27dc24836a40de33a850b30b35658258dbd872c0152f97f46a46614fdbb2257f16e73a37741919e8dc0dfd605b67d07939ea0db74747314ec314568489b5168575f74d2d82f6ed7bab8391586a127dded4e1372e541c2b821b4996285ff33045640655083de0c1ec514d3e6f6b93dbe87944cd586aaad9a4b6e69b82ca0fdca70b423ea4e7058f2657cb1082b3448f0f5c63200add6c0c9b1b8dd2718ba472f1fbb49c655189a7c623a6acbf923a2bbc50ea83af048862413af034a9839b9351cc0442c46368e3c92a054e3bad39e92554b7ac554321038caf4edcf96e394a34d81bc6f0dfe6c3d1c2026ae2e070087d227e3b35f3b73ab598905f0d8655f2765d3c9bdd8fcd293d11cca3f1cc0d0e7dad5b09b3166eec5540e21762d698b59b4ee3f2ec449c716761365858119b7ca1f6db6d063150bf4646d87e05b62fb13e7e25e2d290c3a6b275dc9a0b05f52d7e9c8878394881cc2731fb087cb0e8cda9523d69e0faa547f4ce5922a309825a260de0405489bf6d22ed68e198a0f0672f07c103a0457944ebee05062c3e8615549282c74916c8cc28b224b7850daca3d6716297e7e4b6573de75b89dd5a9277943169706e98d02a7b393734dc60ce9ee6bc01ef0466106de03f4740110634a7da0f1efac221febc9c748381c6c8886541618f799e30e45774eb4c7ff3b401710e3f0356462c9cd1a92422fb5d82e4f1b0b39e29e5852b324cb05f537624b6b74fd8fc31ad97495817e0342b41fb73d37c3904a0c3302bff2e9478c72ac74cfd633d7be6044ffdb48c49e076efa431bbe447d65d9f9a03119a0f95bd2b9e4050da54bf16da40f8107d42f3e1e23f9702454ab10be28a16b56487e5063dd233419971d50d8f0092a9b24b3fa90e552ef1711d3817c47da3a84920eac93d007169911915785af786c807f034999fd1451b8b5befb04a30043477ac537d21a77b8b88b7a880fc04103872777d73d9c08ae7ebaa8661be5f6abc8bc8779690704cb7183b796a59af4fb524d6daca1a10d2ebb32c4dc3e1d7a12514578516451b4797c1b4918a46fa3d8f72f2cdcdfb9836f37cc2db78b7cfc452f54fd0d29d97ae9152ab473d3e7de76c7d4ce4f8e701c80873442bb095168b12722d3e7fd88be4992823d569e3f433b89e6d616235640181d58ef46cb5fb13df869eb4d3675facbede52831c4146c4c8aa2a6e93337190c6be16f09ca6a77a353239f6e5bdef3e14afa044742241667c0656af57ecc697ce807d74b1421b81fa1ae89387baa9d1c0f84c8a4e49152ce9ff11aef07f6cc1afd7c70be8192eae394de49a4f9f850eb3a803c428f8dc0c3b7662a4c02e0a6524edc621898ba14c1506dbaa107d6c2ab0f5cbeaeafb6dbc9d99e4aa104790d76bced93f29bfd2f42b9329ed07089036378e35e386eaaaa3c9e7390f1a13e1bf2e09245c897f0d516b66ce8c9b188e1fcb24d6334a0187fa4f9c3c84ad436c26955d549a4ba34eebd7abb49cf60f1bb99217924efdd283d3179705bf054850f1360ab7ad739ad85bb8a3eaed652636d51fb0e8d53a8952cccd03a99a12664c516d727c7c78916c891179097dd4c7fa38d0afaa48ae23f00f8225766548e121c2aa4db44117a45e4095008f1dca1f39c40afc0c6379014fd00e440b6f733bfc55b618ce9a29d85c36b6f984deca8ebfcdac0496dde639014f1b8c31c68c8f2687540e691fb6a30f9160b36b78e2a2614bfea6b2c3a09a1e5b0e504674a875ac5d9bde3de3af589f1605be84add720b8fa7874d4519a21369afc2bd7b37ce84dbbb1836de63dc6eedf1b763ab620b19f6d47e5a1b5488d8f45c3e2e432666b9375fb75bb47f1997c34760813d3251d80134ec0d6cee3fae30400ae768ea716d2076cbe556620c573b8e76f1c2bf4108ff8b2ea9c41e46dc857cebb61a8d8fd6d3a41d29c519d0a5db5c20cd48c27aa04eda418b9a9bae688c8f66e5df254e69002bc24cb5aedc4af0271bf53e63dd4c5bafade231e350be816ef0271f1532e10bba989f0692964251f569cf8dec6d2e8ab3408abeadb70ad14d0d15828024c1f867bb30523748da33671557317747bbd4b36f442dd4208198b97c762b365b93a2fdc7c1b7415cc2c0865f6f3ce3f52476d55d8687c2cb4858905276d751d33e268d23f70bc6ab8df7fd8d0c62742f1e70163c55796df09c32a558e2b0ae43b26b44b0e173b30f9d9944c9f8cf4bfc286546bc750a6336f5609de5aa2341ab5e4ebd21800007ec6ef0e972a8b7d87474d0995a2a1ec50db694d90207e263fd5cfadf1d74715b0f1bf33ce8d380cb1670d286f2815d66314f4ad51fe9171cf83d0aa3b08b3055cf9d25064bafb53f17090221a4e63c92d7197c699876e592e9ec60bb5a27b96a90d6790bac9efd7179a03307c926f2af27c30e21300271b351324461da085247c47f9be8dda5f3cfffc74e026160ba347748d355be7babbf8a63e6798eb455a819048ae8c26e52cc29f7d352bd8df9475559c2a5c715666fa2ba80d861462925478fb4c7299f627f3dcf18e7d691d56f56bf7fafc0aa742a679893b0fccd50e39ee9b33edb0f70dbd4577156b0dd1c7d54f44d7e48314356a6c201232a9aafffed2755bc853088954c3a06d50a6799a21a551eb3a7eedf865c4f30e9d0388dfb34fba84c3dad69ee7df431793a38c9fa330377316a2cf9e7854dd089e1a70076fef597aa565c1b68f4f971f6b11c7a6f03ffdd30eeb39927ad3780ce07fb4948ea12a8f25b5a35269be8778f651e460046165264c2c62b8c474c4450308f3fc355021f", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.931773101s ago: executing program 3 (id=4039): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './bus\x00'}, 0x5f) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, 0xffffffffffffffff, 0x7}, 0x10) socket$netlink(0x10, 0x3, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x3}, 0x1c) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000080)=0x0) io_submit(r6, 0x1, &(0x7f0000001c00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = epoll_create1(0x80000) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0x10000000}) 4.806075987s ago: executing program 0 (id=4042): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x891a, 0x0) 4.737424871s ago: executing program 39 (id=4042): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x891a, 0x0) 3.911869884s ago: executing program 9 (id=4046): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x1}, 0x1c) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x7, 0x42}) 3.189438433s ago: executing program 3 (id=4048): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500299d9a0aa6a05610040000102030109022400d17148208001013150f909040008020301010009214700380122cb0509058103400008f5069c5c9ca5"], &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000e80)=@string={0x2}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0xd8f5}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x40, 0xc, 0x51, {0x51, 0x6, "a8d50f700fc98cdb3b286c3f02c42fcb27dff0c057c91f8d1664d1fd4d569b67137bd181cde7ed96d8e2a0a63c389a8c7bf938b6da6a22c907e455c160b56c4b4c733fd8aa0f73c7f0103c2a45c09b"}}, &(0x7f0000000080)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "0b6c4d36a01e431ee5e9671da8d6bb222967ca16f9f39c7e3f7d4f01db7af369b573ef17ffd3046b91379279332a44a725c7d57439befbe6ca1341ffa2e0ecebb3b376a6b35e6e51"}}, &(0x7f0000000400)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0x9, "c2b7f6b5"}, @local=@item_012={0x2, 0x2, 0x7, "a95e"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd70d, 0xe, 0x1, {0x22, 0x20a}}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x40, 0xc, 0xef, "e0fb24cb2e07763a518a40917580da7234d8f52b93c0e8eea74e11c1e66c8757f92c7af09eeb6f2534d38b17fde971dc97f2b72a6f0417a7a422d7f6e51a19319fe9af99d1c09557bd507cbcb96ab4fe9e1ddaabab2737fd0f2d91bfb879f323e2d563163ad10c62b942180f7e327e593bac87ee295a51dd630f167c80267274177fc9367d9b7c37169b4c73595d2d1c07ac4eac348b23b289b47715db9afd591553abe50864d217f849ec10fe4b4700c1d040c5876b6f2a119513ab4d222a54e061a969236e103739652df90fa01f27023bdba86ee3052c9002bec0bb658e64e1ced5aa3c26b612414a69940bb2ff"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x64}, &(0x7f0000000340)={0x20, 0x1, 0x30, "1eed6c059b308ff1e51725e410e792a957fa4c1013703c7e713260322f986f02d633b9d5f06c7629ea95a6bf5ff2bdc8"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x4}}) 3.017325342s ago: executing program 6 (id=4052): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000000)) (fail_nth: 1) 2.444137682s ago: executing program 1 (id=4060): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@mblk_io_submit}, {}, {@nojournal_checksum}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf4, 0x572, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xb}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20040804) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000940)={0x2, 0x1, 0xa, 0x2, 0x7e, &(0x7f0000000540)="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"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 2.327320338s ago: executing program 1 (id=4061): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x2, 0x2, 0x4, 0x2, 0x0, 0x0, 0xa, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x3, 0xc002004c4, 0x4000001004, 0x4, 0xa, 0x4000000000000000, 0x1, 0x0, 0x2000000000000000, 0x5, 0xd30], 0xeeee8000, 0x3003d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000580)) 2.084319281s ago: executing program 1 (id=4062): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.084020601s ago: executing program 1 (id=4063): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (fail_nth: 1) 1.865492192s ago: executing program 1 (id=4064): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x3, 0x7a, 0x6, 0x8000000000000000, 0x2, 0x3, 0xd, 0x385, 0x38, 0x214, 0x6, 0x7f, 0x20, 0x1, 0x7ff, 0x5, 0xfffd}, [{0x4, 0xfffff800, 0xc8, 0x7, 0x24, 0x2f86, 0xc1, 0x80000001}], "b56be3809ea85c16da2ca1095a305da85bc046ecaba5", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x56e) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000580)={0x5, 0x1000, 0x8000, 0x7, 0x9e2, 0x10, 0xa}) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000005c0)) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000600)={0x2, 0x2, 0x1, 0x6, 0xfffffc66, 0x7}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000640)={{0x7000, 0x10000, 0x0, 0x5, 0x5, 0x4, 0x3, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x9000, 0xd000, 0x9, 0x93, 0x1, 0xf6, 0x6, 0xdc, 0xbd, 0x2, 0x81, 0x9}, {0xf000, 0x4000, 0x0, 0xfb, 0x65, 0x7, 0x8, 0x5, 0x8, 0x7, 0x1, 0x3}, {0x3000, 0x4, 0xc, 0x0, 0xca, 0x1f, 0x4a, 0xff, 0xff, 0x3, 0x3, 0x81}, {0xb000, 0xffff1000, 0xf, 0x3, 0x39, 0x6, 0x1, 0x2, 0x18, 0x3, 0x9, 0x3}, {0x100000, 0xeeee8000, 0xd, 0x6, 0x2, 0x46, 0x4, 0x0, 0x0, 0x0, 0x1, 0xad}, {0xf000, 0x26000, 0xd, 0x5, 0x81, 0x5, 0x2, 0x3, 0x4, 0xa, 0x3, 0xfd}, {0x4000, 0xb000, 0x9, 0x6, 0x3, 0x5, 0x7f, 0x7, 0x10, 0x6, 0xc4, 0x9}, {0x40000, 0x808}, {0x54000, 0x56}, 0x19, 0x0, 0x50000, 0x10, 0x5, 0x5a00, 0x26000, [0x7, 0x9, 0x2a134915, 0x300000000]}) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000780)) r1 = dup3(r0, r0, 0x0) r2 = geteuid() ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000007c0)={{0x2, 0x1, 0x76, 0x0, 0x3ff}, 0x100000000, 0x3ff}) r3 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) getresgid(&(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00)) r7 = getegid() r8 = getegid() fsetxattr$system_posix_acl(r1, &(0x7f0000000840)='system.posix_acl_default\x00', &(0x7f0000000a40)={{}, {0x1, 0x2}, [{0x2, 0x0, r2}, {0x2, 0x0, r2}], {}, [{0x8, 0x3, r3}, {0x8, 0x0, r4}, {0x8, 0xc, r5}, {0x8, 0x4, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x7, 0xee00}], {0x10, 0x2}, {0x20, 0x4}}, 0x6c, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) read$FUSE(r9, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000002b40)='./file0\x00', 0xdcb) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002bc0)={0x0, @loopback, @initdev}, &(0x7f0000002c00)=0xc) sendmsg$nl_route_sched(r11, &(0x7f0000003140)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003100)={&(0x7f0000002c40)=@newtclass={0x4bc, 0x28, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x7, 0x6}, {0xfff3, 0xf}, {0xb, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x80, 0xd}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x80}}}, @tclass_kind_options=@c_htb={{0x8}, {0x464, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x32d, 0xffffffff, 0x9, 0x10000, 0xe4b7, 0x7, 0x3ff, 0xd5, 0x7, 0x5, 0x7, 0x0, 0x3, 0x3, 0x5, 0xf6d, 0x1, 0x800, 0xfffffffd, 0x9, 0x0, 0xa5, 0x1, 0x0, 0xfffffff8, 0x8, 0x1, 0x5e, 0x45, 0xf2c3, 0x81, 0x5, 0xfffffff6, 0x3, 0x6, 0xfff, 0x7fff, 0x6, 0x8, 0x1, 0x3, 0xf, 0x6, 0x5, 0x0, 0x7, 0xfffff800, 0x8001, 0xfc8, 0x200, 0x1, 0x8, 0x80000000, 0x8b, 0x3, 0x6, 0x2, 0x4, 0x80, 0xfff, 0x6d46, 0x4, 0xa, 0x2, 0x3, 0x7, 0x1, 0xfffff0e6, 0x3, 0x230, 0x2, 0x2, 0xcabb, 0x9, 0x401, 0xffffffff, 0x2411, 0x2, 0x1, 0x2, 0x8, 0xfff, 0x9, 0x10000, 0x33be3336, 0x5, 0x1, 0x6, 0xd8, 0x9, 0x9, 0xf, 0xc2, 0x0, 0x6, 0x0, 0x800000, 0x7, 0x3, 0x8000000, 0x1, 0x7f, 0x2, 0xcb5f, 0x8, 0xfffffffc, 0x8, 0x40b, 0x0, 0x4, 0x2, 0x7ff, 0x75, 0x8, 0x7, 0x80000000, 0x4, 0x4, 0xfffffff9, 0x9, 0x49ff, 0x6dd7, 0x0, 0x2408, 0x363, 0xd, 0x4, 0x10000, 0xe, 0x10000, 0x2800, 0x9, 0x3, 0x0, 0x0, 0xffff, 0x6, 0xfffffffc, 0x9, 0x7f, 0x9, 0x8, 0x2a1a, 0x80000001, 0x7f, 0x9, 0x2, 0xa0b, 0xc, 0x9b, 0xaa, 0xb042, 0x7, 0x0, 0x2, 0x4, 0xb2e, 0x7f, 0x4, 0x550, 0x7, 0x8, 0x4, 0x7, 0x5, 0x9, 0x3, 0xaa26, 0x4, 0x33, 0x2, 0x924, 0x9, 0x8, 0x8, 0x5, 0x0, 0x400, 0x5, 0x1, 0x4, 0x8, 0x368decf8, 0x9, 0x9, 0x8000, 0xe1, 0xfc, 0x7, 0x8, 0x6, 0xa, 0x5, 0xfffffffb, 0x0, 0x7, 0x641, 0x5, 0x3, 0x3, 0x4b8, 0xf, 0x7fffffff, 0x100, 0x6, 0x3, 0x10001, 0xffffffff, 0x7fffffff, 0x3, 0x9, 0x3, 0xffff, 0x80, 0x62, 0x8, 0x10, 0x6, 0x2a05, 0x7, 0xf, 0x2, 0x2, 0x7, 0x2, 0x0, 0x400, 0x7, 0x7fff, 0x4, 0x9, 0x0, 0x200, 0xffffff80, 0xe, 0x8, 0x49, 0xffff0c32, 0x5, 0x7, 0xffffb774, 0x4, 0x7, 0x2, 0x80, 0xc, 0x3, 0x4, 0xfffffffe, 0x7, 0xc0, 0xbfe8, 0xcd, 0xa0, 0x9, 0x7]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x2, 0x0, 0xd80, 0x3, 0x88, 0x8}, {0x4, 0x0, 0x5, 0x9, 0x8, 0x8}, 0xfffffffd, 0x5, 0xf64, 0x81, 0x1}}, @TCA_HTB_RATE64={0xc, 0x6, 0x100000000}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0xfffffffffffffffa}, @TCA_HTB_RATE64={0xc, 0x6, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x4a, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x404c840}, 0x805) mount$9p_fd(0x0, &(0x7f0000003180)='./file0\x00', &(0x7f00000031c0), 0x2, &(0x7f0000003200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize}, {@uname={'uname', 0x3d, 'system.posix_acl_default\x00'}}, {@cache_none}], [{@smackfsroot={'smackfsroot', 0x3d, '+!%}^\x00.#}+@'}}, {@euid_eq={'euid', 0x3d, r10}}]}}) ioctl$BTRFS_IOC_DEFRAG(r11, 0x50009402, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r9, 0x80306e85, &(0x7f00000032c0)) r13 = add_key$keyring(&(0x7f0000003300), &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r13, &(0x7f0000003380)=""/162, 0xa2) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000003500)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000003580)=&(0x7f0000003540)) 1.827365494s ago: executing program 1 (id=4065): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffff0a01010000000000000000000a00200033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000008dc50000000000000000000000000000000000000000000000000000000000000000007f000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000010100"/112], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newpolicy={0xc4, 0x13, 0x818, 0x70bd29, 0x25dfdbfd, {{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4e24, 0x0, 0x4e24, 0x7f, 0xa, 0x20, 0x0, 0x93}, {0x2, 0xec, 0xfffffffffffffffc, 0x85, 0x6, 0x101, 0x3, 0x3}, {0xffff, 0xfffffffffffff000}, 0xfff, 0x6e6bb7, 0x2, 0x1, 0x3, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x4}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x10000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x63a840, 0x1ff) mkdir(&(0x7f0000000080)='./file2\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400df0400a00009040000010301b200093700086ce82201000905815f44"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0) write$UHID_CREATE(r3, &(0x7f00000010c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001080)=""/14, 0xe, 0x9, 0x401, 0x4, 0x7, 0x101}}, 0x120) write$UHID_INPUT(r3, &(0x7f0000001200)={0xe, {"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", 0x1000}}, 0x1006) close(0xffffffffffffffff) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x80000000000000) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f30ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x80000001, 0x0, 0x5, 0x19, 0x1000, 0x5, 0x1}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.483547683s ago: executing program 5 (id=4067): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000680)={0x3, 0x0, [{0xb, 0x8, 0x6, 0x8, 0x7, 0x9, 0x7}, {0x80000008, 0x10000, 0x5, 0x8, 0x5a, 0x6, 0x840}, {0x80000000, 0x4, 0x5, 0x8, 0x8, 0x1, 0x10000}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.396662637s ago: executing program 5 (id=4068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000900)={@val={0x0, 0xd}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x4, 0x20, 0x66, 0x0, 0x20, 0x2, 0x0, @private=0xa010101, @local}, {0x11, 0xa0, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, "23e00000"}}}}}}, 0x36) (fail_nth: 1) 1.028526796s ago: executing program 5 (id=4069): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x3, 0xeee, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0xaa}}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x40}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x1, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) 968.08851ms ago: executing program 5 (id=4070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000181100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000e0000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa1c3, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) write$FUSE_OPEN(r3, &(0x7f0000002d80)={0x20, 0x0, 0x0, {0x0, 0x28}}, 0x20) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x20000000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) mount$bpf(0x0, 0x0, 0x0, 0x58c5044, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=', @ANYRESHEX]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0)={0x0}, &(0x7f0000000800)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000120000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20) r6 = syz_open_procfs(r5, &(0x7f0000000840)='net/sockstat6\x00') writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)='4', 0x1}], 0x1) recvmsg$can_bcm(r6, &(0x7f0000000680)={&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)=""/39, 0x27}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/150, 0x96}, {&(0x7f00000004c0)=""/91, 0x5b}], 0x5, &(0x7f00000005c0)=""/187, 0xbb}, 0x120) mkdir(&(0x7f0000000080)='./file0\x00', 0x48b58abef8460ed8) unshare(0x8000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r7, 0x0, 0x28, 0x0, &(0x7f00000001c0)="c9188e9bb95d02ff4284860186dd9c6bf2285befc8efd74787268084fae3e65014997f634a290000", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1\x00', 0x1210010, &(0x7f0000000340)=ANY=[], 0x1, 0x379, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r8, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 967.39015ms ago: executing program 6 (id=4071): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e00050300000001fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00\r'], 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) (fail_nth: 1) 708.199464ms ago: executing program 9 (id=4072): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 701.417003ms ago: executing program 6 (id=4073): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x9, 0x4) r2 = fcntl$dupfd(r1, 0x406, r1) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x440c0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x438082, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) renameat2(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000840)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/202, 0xca, 0x1, &(0x7f0000000740)=""/226, 0xe2}, &(0x7f0000000880)=0x40) socket$inet6(0xa, 0x3, 0x3) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x400) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x371283, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000b80)={'filter\x00', 0x4, "25cf96f2"}, &(0x7f0000000bc0)=0x2c) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 606.363929ms ago: executing program 6 (id=4074): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000680)={0x3, 0x0, [{0xb, 0x8, 0x6, 0x8, 0x7, 0x9, 0x7}, {0x80000008, 0x10000, 0x5, 0x8, 0x5a, 0x6, 0x840}, {0x80000000, 0x4, 0x5, 0x8, 0x8, 0x1, 0x10000}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 524.295433ms ago: executing program 9 (id=4075): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x18b341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', '', [], 0xa, "513cc999077fe912f78efd4b2dcaca2ff9781d243f2cd9e38376120a4b0745c9dda2260fd5af2dfb1db21ae106136ecb2d2eefab1df48afb1d6e83154f41a7174d4ee163340e2a5e6c"}, 0x4d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mincore(&(0x7f0000886000/0x1000)=nil, 0x1000, &(0x7f0000000380)=""/189) 373.965861ms ago: executing program 5 (id=4076): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000680)={0x4, 0x0, [{0xb, 0x8, 0x6, 0x8, 0x7, 0x9, 0x7}, {0x80000008, 0x10000, 0x5, 0x8, 0x5a, 0x6, 0x840}, {0x80000000, 0x4, 0x5, 0x8, 0x8, 0x1, 0x10000}, {0x80000008, 0x1, 0x3, 0x6, 0x7, 0x3, 0xfffffc01}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 273.134846ms ago: executing program 6 (id=4077): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) ptrace(0x10, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) waitid(0x0, r0, 0x0, 0x61000006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 176.357751ms ago: executing program 3 (id=4078): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x6, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x4, 0x603, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x81}}}, &(0x7f00000003c0)) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0xfffd, 0x4}}}, &(0x7f0000000300)) 175.334891ms ago: executing program 3 (id=4079): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000680)={0x3, 0x0, [{0x80000008, 0x10000, 0x5, 0x8, 0x5a, 0x6, 0x840}, {0x80000000, 0x4, 0x5, 0x8, 0x8, 0x1, 0x10000}, {0x80000008, 0x1, 0x3, 0x6, 0x7, 0x3, 0xfffffc01}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 54.871198ms ago: executing program 5 (id=4080): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x1}, 0x1c) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x7, 0x42}) 1.069491ms ago: executing program 6 (id=4081): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r4, 0x0, 0x0, 0x1, 0xe3d0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 9 (id=4082): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x22000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x8, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x10000491, 0x8d3, 0x200006, 0x800008, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e58, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x5, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0xff, 0xf45, 0x3, 0x7fff, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x81, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0/0x80 [ 1015.622445][T14362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.628540][T14362] RIP: 0033:0x7f4b7b59cdd9 [ 1015.633148][T14362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.653032][T14362] RSP: 002b:00007f4b7c403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1015.661771][T14362] RAX: ffffffffffffffda RBX: 00007f4b7b815fa0 RCX: 00007f4b7b59cdd9 [ 1015.669941][T14362] RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000004 [ 1015.678021][T14362] RBP: 00007f4b7c403090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.686099][T14362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.694083][T14362] R13: 00007f4b7b816038 R14: 00007f4b7b815fa0 R15: 00007ffe3ed1c4e8 [ 1015.702087][T14362] [ 1015.742007][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1015.970594][T14377] FAULT_INJECTION: forcing a failure. [ 1015.970594][T14377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.993797][T14379] FAULT_INJECTION: forcing a failure. [ 1015.993797][T14379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.996583][T14377] CPU: 1 PID: 14377 Comm: syz.1.3870 Not tainted syzkaller #0 [ 1016.014503][T14377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1016.024849][T14377] Call Trace: [ 1016.028229][T14377] [ 1016.031243][T14377] __dump_stack+0x21/0x24 [ 1016.035670][T14377] dump_stack_lvl+0x110/0x170 [ 1016.040545][T14377] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1016.045759][T14377] dump_stack+0x15/0x24 [ 1016.050026][T14377] should_fail_ex+0x3d4/0x520 [ 1016.054902][T14377] should_fail+0xb/0x10 [ 1016.059192][T14377] should_fail_usercopy+0x1a/0x20 [ 1016.064248][T14377] _copy_from_user+0x1e/0xc0 [ 1016.068957][T14377] __sys_sendto+0x30b/0x660 [ 1016.073486][T14377] ? __cfi___sys_sendto+0x10/0x10 [ 1016.078528][T14377] ? ksys_write+0x1f4/0x250 [ 1016.083037][T14377] ? __cfi_ksys_write+0x10/0x10 [ 1016.088026][T14377] __x64_sys_sendto+0xe5/0x100 [ 1016.092812][T14377] x64_sys_call+0x83/0x9a0 [ 1016.097530][T14377] do_syscall_64+0x4c/0xa0 [ 1016.101979][T14377] ? clear_bhb_loop+0x30/0x80 [ 1016.106755][T14377] ? clear_bhb_loop+0x30/0x80 [ 1016.111532][T14377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.117465][T14377] RIP: 0033:0x7f4b7b59cdd9 [ 1016.121925][T14377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.141648][T14377] RSP: 002b:00007f4b7c403028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1016.150193][T14377] RAX: ffffffffffffffda RBX: 00007f4b7b815fa0 RCX: 00007f4b7b59cdd9 [ 1016.158185][T14377] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000005 [ 1016.166171][T14377] RBP: 00007f4b7c403090 R08: 00002000000000c0 R09: 0000000000000014 [ 1016.174163][T14377] R10: 00000000100400d1 R11: 0000000000000246 R12: 0000000000000001 [ 1016.182158][T14377] R13: 00007f4b7b816038 R14: 00007f4b7b815fa0 R15: 00007ffe3ed1c4e8 [ 1016.190239][T14377] [ 1016.193553][ T1455] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1016.202650][T14379] CPU: 0 PID: 14379 Comm: syz.3.3872 Not tainted syzkaller #0 [ 1016.210408][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1016.220654][T14379] Call Trace: [ 1016.223956][T14379] [ 1016.226912][T14379] __dump_stack+0x21/0x24 [ 1016.231306][T14379] dump_stack_lvl+0x110/0x170 [ 1016.236152][T14379] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1016.241222][T14379] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1016.246976][T14379] dump_stack+0x15/0x24 [ 1016.251251][T14379] should_fail_ex+0x3d4/0x520 [ 1016.255976][T14379] should_fail+0xb/0x10 [ 1016.260187][T14379] should_fail_usercopy+0x1a/0x20 [ 1016.265253][T14379] _copy_from_user+0x1e/0xc0 [ 1016.270054][T14379] sk_setsockopt+0x2cd/0x2730 [ 1016.274934][T14379] ? __cfi_sk_setsockopt+0x10/0x10 [ 1016.280313][T14379] ? proc_fail_nth_write+0x180/0x200 [ 1016.285781][T14379] ? selinux_socket_setsockopt+0x282/0x360 [ 1016.291853][T14379] ? __fget_files+0x2d5/0x330 [ 1016.296618][T14379] sock_setsockopt+0x5a/0x70 [ 1016.301293][T14379] __sys_setsockopt+0x269/0x4e0 [ 1016.306318][T14379] ? __cfi___sys_setsockopt+0x10/0x10 [ 1016.311948][T14379] ? ksys_write+0x1f4/0x250 [ 1016.316540][T14379] ? __cfi_ksys_write+0x10/0x10 [ 1016.321393][T14379] __x64_sys_setsockopt+0xbf/0xd0 [ 1016.326419][T14379] x64_sys_call+0x124/0x9a0 [ 1016.331100][T14379] do_syscall_64+0x4c/0xa0 [ 1016.335608][T14379] ? clear_bhb_loop+0x30/0x80 [ 1016.340527][T14379] ? clear_bhb_loop+0x30/0x80 [ 1016.345207][T14379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.351198][T14379] RIP: 0033:0x7f83de59cdd9 [ 1016.355635][T14379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.375331][T14379] RSP: 002b:00007f83df43a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1016.383746][T14379] RAX: ffffffffffffffda RBX: 00007f83de815fa0 RCX: 00007f83de59cdd9 [ 1016.391718][T14379] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000003 [ 1016.399686][T14379] RBP: 00007f83df43a090 R08: 0000000000000004 R09: 0000000000000000 [ 1016.407845][T14379] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.415902][T14379] R13: 00007f83de816038 R14: 00007f83de815fa0 R15: 00007ffefcacf7f8 [ 1016.423963][T14379] [ 1016.451494][T14383] loop1: detected capacity change from 0 to 512 [ 1016.463953][T14383] EXT4-fs: Ignoring removed mblk_io_submit option [ 1016.475778][T14383] EXT4-fs: Ignoring removed oldalloc option [ 1016.482170][T14383] EXT4-fs: quotafile must be on filesystem root [ 1016.573407][ T1956] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1016.605391][ T1455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.623422][ T1455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.644172][ T1455] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1016.663391][ T1455] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1016.681863][ T1455] usb 6-1: Manufacturer: syz [ 1016.692726][ T1455] usb 6-1: config 0 descriptor?? [ 1016.723596][T14385] loop3: detected capacity change from 0 to 40427 [ 1016.742439][T14385] F2FS-fs (loop3): invalid crc value [ 1016.759148][T14385] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1016.766021][ T1956] usb 10-1: Using ep0 maxpacket: 8 [ 1016.772715][ T1956] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1016.792447][T14387] loop0: detected capacity change from 0 to 40427 [ 1016.793920][ T1956] usb 10-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 1016.810196][T14387] F2FS-fs (loop0): invalid crc value [ 1016.819174][T14387] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1016.825798][ T1956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.843428][ T1956] usb 10-1: Product: syz [ 1016.852070][ T1956] usb 10-1: Manufacturer: syz [ 1016.857976][ T1956] usb 10-1: SerialNumber: syz [ 1016.876049][T14385] F2FS-fs (loop3): Start checkpoint disabled! [ 1016.889825][T14385] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1016.897401][T14387] F2FS-fs (loop0): Start checkpoint disabled! [ 1016.903295][T14385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1016.905338][T14387] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1016.933722][T14387] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1016.965522][T14390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.981754][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.987262][T14385] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1016.989718][T14390] device bridge_slave_0 entered promiscuous mode [ 1017.018836][T14385] syz.3.3875: attempt to access beyond end of device [ 1017.018836][T14385] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1017.028318][T14387] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1017.046473][T14390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.053964][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.076082][ T1956] usb 10-1: 1:1 : bogus bTerminalLink 6 [ 1017.083750][T14387] syz.0.3876: attempt to access beyond end of device [ 1017.083750][T14387] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1017.098762][T14390] device bridge_slave_1 entered promiscuous mode [ 1017.107419][ T43] kworker/u4:2: attempt to access beyond end of device [ 1017.107419][ T43] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1017.132693][ T2885] kworker/u4:6: attempt to access beyond end of device [ 1017.132693][ T2885] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1017.133648][ T43] kworker/u4:2: attempt to access beyond end of device [ 1017.133648][ T43] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1017.148685][ T2885] kworker/u4:6: attempt to access beyond end of device [ 1017.148685][ T2885] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1017.172965][ T1956] snd-usb-audio: probe of 10-1:1.0 failed with error -71 [ 1017.225397][ T1956] usb 10-1: USB disconnect, device number 26 [ 1017.226525][ T7876] udevd[7876]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1017.288869][ T8] device bridge_slave_1 left promiscuous mode [ 1017.298461][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.314033][ T8] device bridge_slave_0 left promiscuous mode [ 1017.322214][ T1455] uclogic 0003:256C:006D.0039: failed retrieving Huion firmware version: -71 [ 1017.341818][ T1455] uclogic 0003:256C:006D.0039: failed probing parameters: -71 [ 1017.344890][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.353608][T14405] FAULT_INJECTION: forcing a failure. [ 1017.353608][T14405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.369831][ T1455] uclogic: probe of 0003:256C:006D.0039 failed with error -71 [ 1017.371256][T14405] CPU: 1 PID: 14405 Comm: syz.0.3880 Not tainted syzkaller #0 [ 1017.384952][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1017.390262][ T1455] usb 6-1: USB disconnect, device number 63 [ 1017.395027][T14405] Call Trace: [ 1017.395038][T14405] [ 1017.395045][T14405] __dump_stack+0x21/0x24 [ 1017.411615][T14405] dump_stack_lvl+0x110/0x170 [ 1017.416393][T14405] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1017.421617][T14405] ? kstrtoull+0x137/0x1d0 [ 1017.426043][T14405] dump_stack+0x15/0x24 [ 1017.430246][T14405] should_fail_ex+0x3d4/0x520 [ 1017.435022][T14405] should_fail+0xb/0x10 [ 1017.439187][T14405] should_fail_usercopy+0x1a/0x20 [ 1017.444204][T14405] _copy_from_user+0x1e/0xc0 [ 1017.448796][T14405] vga_arb_write+0x113/0x1c80 [ 1017.453482][T14405] ? __cfi_vga_arb_write+0x10/0x10 [ 1017.458606][T14405] ? fsnotify_perm+0x67/0x5b0 [ 1017.463284][T14405] ? security_file_permission+0x8a/0xb0 [ 1017.468844][T14405] ? security_file_permission+0x94/0xb0 [ 1017.474647][T14405] ? __cfi_vga_arb_write+0x10/0x10 [ 1017.479751][T14405] vfs_write+0x40e/0xce0 [ 1017.484161][T14405] ? __cfi_vfs_write+0x10/0x10 [ 1017.489007][T14405] ? __fget_files+0x2d5/0x330 [ 1017.493693][T14405] ? __fdget_pos+0x1f2/0x380 [ 1017.498292][T14405] ? ksys_write+0x71/0x250 [ 1017.502720][T14405] ksys_write+0x149/0x250 [ 1017.507049][T14405] ? __cfi_ksys_write+0x10/0x10 [ 1017.511979][T14405] ? debug_smp_processor_id+0x17/0x20 [ 1017.517435][T14405] __x64_sys_write+0x7b/0x90 [ 1017.522206][T14405] x64_sys_call+0x27b/0x9a0 [ 1017.526724][T14405] do_syscall_64+0x4c/0xa0 [ 1017.531266][T14405] ? clear_bhb_loop+0x30/0x80 [ 1017.536026][T14405] ? clear_bhb_loop+0x30/0x80 [ 1017.540732][T14405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.546634][T14405] RIP: 0033:0x7f260759cdd9 [ 1017.551125][T14405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.570985][T14405] RSP: 002b:00007f2608436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1017.579517][T14405] RAX: ffffffffffffffda RBX: 00007f2607815fa0 RCX: 00007f260759cdd9 [ 1017.587490][T14405] RDX: 0000000000000016 RSI: 0000200000000000 RDI: 0000000000000003 [ 1017.595982][T14405] RBP: 00007f2608436090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.604042][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.612405][T14405] R13: 00007f2607816038 R14: 00007f2607815fa0 R15: 00007fffc3829648 [ 1017.620664][T14405] [ 1017.626067][ T8] device veth1_macvtap left promiscuous mode [ 1017.632508][ T8] device veth0_vlan left promiscuous mode [ 1017.658751][T14410] FAULT_INJECTION: forcing a failure. [ 1017.658751][T14410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.672577][T14410] CPU: 0 PID: 14410 Comm: syz.0.3883 Not tainted syzkaller #0 [ 1017.680161][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1017.690248][T14410] Call Trace: [ 1017.693548][T14410] [ 1017.696590][T14410] __dump_stack+0x21/0x24 [ 1017.700957][T14410] dump_stack_lvl+0x110/0x170 [ 1017.705841][T14410] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1017.710887][T14410] dump_stack+0x15/0x24 [ 1017.715048][T14410] should_fail_ex+0x3d4/0x520 [ 1017.719747][T14410] should_fail+0xb/0x10 [ 1017.723946][T14410] should_fail_usercopy+0x1a/0x20 [ 1017.729074][T14410] _copy_to_user+0x1e/0x90 [ 1017.733511][T14410] simple_read_from_buffer+0xe9/0x160 [ 1017.738889][T14410] proc_fail_nth_read+0x1a6/0x220 [ 1017.743917][T14410] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1017.749553][T14410] ? security_file_permission+0x94/0xb0 [ 1017.755376][T14410] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1017.761025][T14410] vfs_read+0x27a/0x910 [ 1017.765361][T14410] ? __cfi_vfs_read+0x10/0x10 [ 1017.770287][T14410] ? __kasan_check_write+0x14/0x20 [ 1017.775491][T14410] ? mutex_lock+0x93/0x1b0 [ 1017.780006][T14410] ? __cfi_mutex_lock+0x10/0x10 [ 1017.785031][T14410] ? __fdget_pos+0x2cd/0x380 [ 1017.789731][T14410] ? ksys_read+0x71/0x250 [ 1017.794073][T14410] ksys_read+0x149/0x250 [ 1017.798332][T14410] ? __cfi_ksys_read+0x10/0x10 [ 1017.803118][T14410] ? debug_smp_processor_id+0x17/0x20 [ 1017.808547][T14410] __x64_sys_read+0x7b/0x90 [ 1017.813150][T14410] x64_sys_call+0x2f/0x9a0 [ 1017.817585][T14410] do_syscall_64+0x4c/0xa0 [ 1017.822000][T14410] ? clear_bhb_loop+0x30/0x80 [ 1017.826684][T14410] ? clear_bhb_loop+0x30/0x80 [ 1017.831454][T14410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.837351][T14410] RIP: 0033:0x7f260755d60e [ 1017.842037][T14410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1017.862176][T14410] RSP: 002b:00007f2608435fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1017.870601][T14410] RAX: ffffffffffffffda RBX: 00007f26084366c0 RCX: 00007f260755d60e [ 1017.878757][T14410] RDX: 000000000000000f RSI: 00007f26084360a0 RDI: 0000000000000003 [ 1017.886831][T14410] RBP: 00007f2608436090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.895259][T14410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.903314][T14410] R13: 00007f2607816038 R14: 00007f2607815fa0 R15: 00007fffc3829648 [ 1017.911288][T14410] [ 1017.928183][T14412] loop0: detected capacity change from 0 to 256 [ 1017.937312][T14412] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1017.952118][T14412] FAULT_INJECTION: forcing a failure. [ 1017.952118][T14412] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.965363][T14412] CPU: 1 PID: 14412 Comm: syz.0.3884 Not tainted syzkaller #0 [ 1017.972970][T14412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1017.983208][T14412] Call Trace: [ 1017.986669][T14412] [ 1017.989613][T14412] __dump_stack+0x21/0x24 [ 1017.994030][T14412] dump_stack_lvl+0x110/0x170 [ 1017.998708][T14412] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1018.003808][T14412] dump_stack+0x15/0x24 [ 1018.008099][T14412] should_fail_ex+0x3d4/0x520 [ 1018.012780][T14412] ? __blockdev_direct_IO+0x2b1/0x3df0 [ 1018.018245][T14412] __should_failslab+0xac/0xf0 [ 1018.023136][T14412] should_failslab+0x9/0x20 [ 1018.027680][T14412] kmem_cache_alloc+0x3b/0x330 [ 1018.031618][T14414] loop9: detected capacity change from 0 to 512 [ 1018.032474][T14412] __blockdev_direct_IO+0x2b1/0x3df0 [ 1018.044273][T14412] ? timer_update_keys+0xb0/0xb0 [ 1018.049261][T14412] ? get_nohz_timer_target+0x7a/0x560 [ 1018.054679][T14412] ? __cfi_invalidate_inode_pages2_range+0x10/0x10 [ 1018.061295][T14412] ? __cfi_exfat_get_block+0x10/0x10 [ 1018.066603][T14412] ? __mod_timer+0x858/0xc00 [ 1018.071214][T14412] ? __cfi___blockdev_direct_IO+0x10/0x10 [ 1018.077261][T14412] ? filemap_check_errors+0xd2/0x120 [ 1018.082725][T14412] ? kiocb_invalidate_pages+0x476/0x500 [ 1018.088358][T14412] ? _raw_spin_unlock_irq+0x4d/0x70 [ 1018.093560][T14412] ? __mark_inode_dirty+0x616/0x9d0 [ 1018.099368][T14412] ? __mnt_drop_write_file+0xc1/0x100 [ 1018.104740][T14412] exfat_direct_IO+0x19c/0x310 [ 1018.109509][T14412] generic_file_direct_write+0x130/0x350 [ 1018.115148][T14412] ? generic_write_checks_count+0x3c6/0x4a0 [ 1018.121046][T14412] __generic_file_write_iter+0x18b/0x230 [ 1018.126689][T14412] generic_file_write_iter+0xae/0x310 [ 1018.132145][T14412] vfs_write+0x603/0xce0 [ 1018.136647][T14412] ? __cfi_vfs_write+0x10/0x10 [ 1018.141498][T14412] ? __cfi_mutex_lock+0x10/0x10 [ 1018.146530][T14412] ? __fdget_pos+0x2cd/0x380 [ 1018.151122][T14412] ? ksys_write+0x71/0x250 [ 1018.155538][T14412] ksys_write+0x149/0x250 [ 1018.160212][T14412] ? __cfi_ksys_write+0x10/0x10 [ 1018.165068][T14412] ? debug_smp_processor_id+0x17/0x20 [ 1018.170549][T14412] __x64_sys_write+0x7b/0x90 [ 1018.175251][T14412] x64_sys_call+0x27b/0x9a0 [ 1018.179769][T14412] do_syscall_64+0x4c/0xa0 [ 1018.184254][T14412] ? clear_bhb_loop+0x30/0x80 [ 1018.188954][T14412] ? clear_bhb_loop+0x30/0x80 [ 1018.193727][T14412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1018.199630][T14412] RIP: 0033:0x7f260759cdd9 [ 1018.204052][T14412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.223752][T14412] RSP: 002b:00007f2608436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1018.232322][T14412] RAX: ffffffffffffffda RBX: 00007f2607815fa0 RCX: 00007f260759cdd9 [ 1018.240384][T14412] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000004 [ 1018.248457][T14412] RBP: 00007f2608436090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.256687][T14412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.264746][T14412] R13: 00007f2607816038 R14: 00007f2607815fa0 R15: 00007fffc3829648 [ 1018.272730][T14412] [ 1018.278716][T14414] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1018.328045][T14420] loop0: detected capacity change from 0 to 256 [ 1018.365779][T14420] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 1018.378385][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1018.388125][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1018.395794][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1018.404822][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1018.413182][ T2885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.420276][ T2885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.428285][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1018.436989][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1018.445567][ T2885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.452739][ T2885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.469158][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1018.489205][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1018.514066][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1018.522306][ T28] audit: type=1326 audit(1777000990.363:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14426 comm="syz.5.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a19cdd9 code=0x7ffc0000 [ 1018.523274][T14425] loop0: detected capacity change from 0 to 512 [ 1018.553798][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1018.581917][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1018.590720][ T28] audit: type=1326 audit(1777000990.363:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14426 comm="syz.5.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f362a19cdd9 code=0x7ffc0000 [ 1018.632280][T14390] device veth0_vlan entered promiscuous mode [ 1018.638904][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1018.641583][T14425] EXT4-fs: Ignoring removed mblk_io_submit option [ 1018.657005][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1018.664976][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1018.672391][ T28] audit: type=1326 audit(1777000990.363:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14426 comm="syz.5.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a19cdd9 code=0x7ffc0000 [ 1018.696609][T14425] EXT4-fs: Ignoring removed oldalloc option [ 1018.702632][T14425] EXT4-fs: quotafile must be on filesystem root [ 1018.704062][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1018.718382][T14390] device veth1_macvtap entered promiscuous mode [ 1018.728363][ T28] audit: type=1326 audit(1777000990.363:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14426 comm="syz.5.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f362a19cdd9 code=0x7ffc0000 [ 1018.766201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1018.781896][T14437] loop9: detected capacity change from 0 to 1024 [ 1018.789698][T14437] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1018.799897][ T28] audit: type=1326 audit(1777000990.363:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14426 comm="syz.5.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a19cdd9 code=0x7ffc0000 [ 1018.805012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1018.824740][T14437] EXT4-fs error (device loop9): ext4_get_journal_inode:5743: inode #8: comm syz.9.3893: inode has both inline data and extents flags [ 1018.849452][ T28] audit: type=1326 audit(1777000990.363:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14426 comm="syz.5.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f362a19cdd9 code=0x7ffc0000 [ 1018.863743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1018.873914][T14437] EXT4-fs (loop9): no journal found [ 1018.886959][ T28] audit: type=1326 audit(1777000990.363:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14426 comm="syz.5.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a19cdd9 code=0x7ffc0000 [ 1018.892648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1018.910878][ T28] audit: type=1326 audit(1777000990.363:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14426 comm="syz.5.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f362a19cdd9 code=0x7ffc0000 [ 1018.936058][T14423] loop3: detected capacity change from 0 to 40427 [ 1018.968174][ T28] audit: type=1326 audit(1777000990.363:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14426 comm="syz.5.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a19cdd9 code=0x7ffc0000 [ 1018.993962][T14423] F2FS-fs (loop3): invalid crc value [ 1019.036086][T14423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1019.064391][T14442] loop9: detected capacity change from 0 to 1024 [ 1019.073821][T14444] FAULT_INJECTION: forcing a failure. [ 1019.073821][T14444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.083893][T14442] EXT4-fs: Ignoring removed mblk_io_submit option [ 1019.090676][T14444] CPU: 0 PID: 14444 Comm: syz.5.3897 Not tainted syzkaller #0 [ 1019.100901][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1019.111254][T14444] Call Trace: [ 1019.114624][T14444] [ 1019.117673][T14444] __dump_stack+0x21/0x24 [ 1019.122302][T14444] dump_stack_lvl+0x110/0x170 [ 1019.127004][T14444] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1019.132144][T14444] ? _parse_integer+0x2a/0x40 [ 1019.136306][T14423] F2FS-fs (loop3): Start checkpoint disabled! [ 1019.137050][T14444] dump_stack+0x15/0x24 [ 1019.143750][T14423] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1019.147817][T14444] should_fail_ex+0x3d4/0x520 [ 1019.159982][T14444] should_fail+0xb/0x10 [ 1019.164440][T14444] should_fail_usercopy+0x1a/0x20 [ 1019.169494][T14444] _copy_from_user+0x1e/0xc0 [ 1019.174130][T14444] ___sys_sendmsg+0x1c3/0x360 [ 1019.178928][T14444] ? __sys_sendmsg+0x290/0x290 [ 1019.183733][T14444] ? __kasan_check_write+0x14/0x20 [ 1019.189318][T14444] ? proc_fail_nth_write+0x180/0x200 [ 1019.194642][T14444] ? vfs_write+0xa2c/0xce0 [ 1019.199207][T14444] ? __fdget+0x19c/0x220 [ 1019.203493][T14444] __x64_sys_sendmsg+0x205/0x2d0 [ 1019.208640][T14444] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1019.214227][T14444] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1019.220326][T14444] x64_sys_call+0x171/0x9a0 [ 1019.224884][T14444] do_syscall_64+0x4c/0xa0 [ 1019.229370][T14444] ? clear_bhb_loop+0x30/0x80 [ 1019.234091][T14444] ? clear_bhb_loop+0x30/0x80 [ 1019.238805][T14444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1019.244926][T14444] RIP: 0033:0x7f362a19cdd9 [ 1019.249353][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.269153][T14444] RSP: 002b:00007f362b0cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1019.277670][T14444] RAX: ffffffffffffffda RBX: 00007f362a415fa0 RCX: 00007f362a19cdd9 [ 1019.285648][T14444] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 000000000000000c [ 1019.293621][T14444] RBP: 00007f362b0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.301689][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.309757][T14444] R13: 00007f362a416038 R14: 00007f362a415fa0 R15: 00007ffc5985c2c8 [ 1019.317832][T14444] [ 1019.324849][T14423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1019.373853][T14442] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1019.404447][T14455] loop5: detected capacity change from 0 to 16 [ 1019.410273][T14423] bio_check_eod: 2 callbacks suppressed [ 1019.410289][T14423] syz.3.3889: attempt to access beyond end of device [ 1019.410289][T14423] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1019.411219][T14455] erofs: (device loop5): mounted with root inode @ nid 36. [ 1019.437097][T13731] EXT4-fs (loop9): unmounting filesystem. [ 1019.467928][ T8] kworker/u4:0: attempt to access beyond end of device [ 1019.467928][ T8] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1019.479646][T14446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.484187][ T8] kworker/u4:0: attempt to access beyond end of device [ 1019.484187][ T8] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1019.489595][T14446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.512346][T14446] device bridge_slave_0 entered promiscuous mode [ 1019.520024][T14446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.527494][T14446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.535193][T14446] device bridge_slave_1 entered promiscuous mode [ 1019.542134][ T8] kworker/u4:0: attempt to access beyond end of device [ 1019.542134][ T8] loop3: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 1019.558368][T14461] FAULT_INJECTION: forcing a failure. [ 1019.558368][T14461] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.583081][T14461] CPU: 0 PID: 14461 Comm: syz.9.3900 Not tainted syzkaller #0 [ 1019.590866][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1019.601389][T14461] Call Trace: [ 1019.604692][T14461] [ 1019.607731][T14461] __dump_stack+0x21/0x24 [ 1019.612095][T14461] dump_stack_lvl+0x110/0x170 [ 1019.616810][T14461] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1019.622385][T14461] ? mutex_unlock+0x8f/0x230 [ 1019.627013][T14461] ? __cfi_mutex_unlock+0x10/0x10 [ 1019.629055][T14464] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1019.632069][T14461] ? flush_workqueue_prep_pwqs+0x408/0x480 [ 1019.632101][T14461] dump_stack+0x15/0x24 [ 1019.652233][T14461] should_fail_ex+0x3d4/0x520 [ 1019.657039][T14461] __should_failslab+0xac/0xf0 [ 1019.661844][T14461] ? kvm_uevent_notify_change+0xcb/0x3b0 [ 1019.667779][T14461] should_failslab+0x9/0x20 [ 1019.672307][T14461] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1019.678024][T14461] ? __kasan_check_read+0x11/0x20 [ 1019.678366][T14464] EXT4-fs (loop5): 1 truncate cleaned up [ 1019.683242][T14461] ? kvm_uevent_notify_change+0xcb/0x3b0 [ 1019.683272][T14461] kmalloc_trace+0x29/0xb0 [ 1019.698967][T14461] kvm_uevent_notify_change+0xcb/0x3b0 [ 1019.704493][T14461] kvm_put_kvm+0x9c/0x1450 [ 1019.708361][T14464] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1019.709025][T14461] ? kvm_irqfd_release+0x1ac/0x1d0 [ 1019.722550][T14461] ? percpu_counter_add_batch+0x13c/0x160 [ 1019.728484][T14461] kvm_vm_release+0x46/0x50 [ 1019.733373][T14461] ? __cfi_kvm_vm_release+0x10/0x10 [ 1019.738694][T14461] __fput+0x1fc/0x8f0 [ 1019.742712][T14461] ____fput+0x15/0x20 [ 1019.746759][T14461] task_work_run+0x1e1/0x250 [ 1019.751466][T14461] ? __cfi_task_work_run+0x10/0x10 [ 1019.756620][T14461] ? __cfi___close_range+0x10/0x10 [ 1019.761938][T14461] exit_to_user_mode_loop+0x9b/0xb0 [ 1019.767201][T14461] exit_to_user_mode_prepare+0x87/0xd0 [ 1019.768208][T14446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.772691][T14461] syscall_exit_to_user_mode+0x1a/0x30 [ 1019.780124][T14446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.785539][T14461] do_syscall_64+0x58/0xa0 [ 1019.785560][T14461] ? clear_bhb_loop+0x30/0x80 [ 1019.793080][T14446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.797413][T14461] ? clear_bhb_loop+0x30/0x80 [ 1019.797440][T14461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1019.802236][T14446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.809560][T14461] RIP: 0033:0x7f20be39cdd9 [ 1019.809587][T14461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.809603][T14461] RSP: 002b:00007f20bf2f4028 EFLAGS: 00000246 [ 1019.833766][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1019.852605][T14461] ORIG_RAX: 00000000000001b4 [ 1019.852620][T14461] RAX: 0000000000000000 RBX: 00007f20be615fa0 RCX: 00007f20be39cdd9 [ 1019.852635][T14461] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1019.852647][T14461] RBP: 00007f20bf2f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.852659][T14461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.852670][T14461] R13: 00007f20be616038 R14: 00007f20be615fa0 R15: 00007ffc95927b48 [ 1019.852688][T14461] [ 1019.878781][T14467] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1019.911392][ T6733] EXT4-fs (loop5): unmounting filesystem. [ 1019.916510][T14467] EXT4-fs (loop3): 1 truncate cleaned up [ 1019.935945][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.946592][T14467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1019.946688][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.963943][T14467] FAULT_INJECTION: forcing a failure. [ 1019.963943][T14467] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.977157][T14467] CPU: 0 PID: 14467 Comm: syz.3.3901 Not tainted syzkaller #0 [ 1019.984838][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1019.995002][T14467] Call Trace: [ 1019.998380][T14467] [ 1020.001331][T14467] __dump_stack+0x21/0x24 [ 1020.005672][T14467] dump_stack_lvl+0x110/0x170 [ 1020.010442][T14467] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1020.015648][T14467] ? security_file_permission+0x8a/0xb0 [ 1020.021466][T14467] dump_stack+0x15/0x24 [ 1020.025632][T14467] should_fail_ex+0x3d4/0x520 [ 1020.030338][T14467] ? getname_flags+0xb9/0x500 [ 1020.035136][T14467] __should_failslab+0xac/0xf0 [ 1020.040152][T14467] should_failslab+0x9/0x20 [ 1020.044929][T14467] kmem_cache_alloc+0x3b/0x330 [ 1020.049705][T14467] getname_flags+0xb9/0x500 [ 1020.054380][T14467] user_path_at_empty+0x30/0x1c0 [ 1020.059538][T14467] path_listxattr+0xac/0x1b0 [ 1020.064144][T14467] ? path_getxattr+0x4d0/0x4d0 [ 1020.069297][T14467] ? debug_smp_processor_id+0x17/0x20 [ 1020.074717][T14467] __x64_sys_llistxattr+0x7d/0x90 [ 1020.079778][T14467] x64_sys_call+0x473/0x9a0 [ 1020.084381][T14467] do_syscall_64+0x4c/0xa0 [ 1020.088903][T14467] ? clear_bhb_loop+0x30/0x80 [ 1020.093617][T14467] ? clear_bhb_loop+0x30/0x80 [ 1020.098306][T14467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.104305][T14467] RIP: 0033:0x7f83de59cdd9 [ 1020.108727][T14467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.128591][T14467] RSP: 002b:00007f83df43a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 1020.137117][T14467] RAX: ffffffffffffffda RBX: 00007f83de815fa0 RCX: 00007f83de59cdd9 [ 1020.145521][T14467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 1020.153493][T14467] RBP: 00007f83df43a090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.161573][T14467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.169654][T14467] R13: 00007f83de816038 R14: 00007f83de815fa0 R15: 00007ffefcacf7f8 [ 1020.177959][T14467] [ 1020.218266][T14230] EXT4-fs (loop3): unmounting filesystem. [ 1020.224890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1020.239104][T14474] EXT4-fs: Ignoring removed mblk_io_submit option [ 1020.251270][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.258377][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.263520][T14474] EXT4-fs: Ignoring removed oldalloc option [ 1020.287003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1020.294938][T14474] EXT4-fs: quotafile must be on filesystem root [ 1020.302612][T14483] EXT4-fs (loop3): 1 truncate cleaned up [ 1020.306428][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.308878][T14483] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1020.315695][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.327140][T14483] EXT4-fs (loop3): shut down requested (2) [ 1020.338516][T14483] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 1020.347704][T14483] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 1020.369352][T14230] EXT4-fs (loop3): unmounting filesystem. [ 1020.376370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1020.388511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1020.419742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1020.428273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1020.428283][T14493] incfs: Options parsing error. -22 [ 1020.428319][T14493] incfs: mount failed -22 [ 1020.465369][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1020.474007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1020.483231][T14496] FAULT_INJECTION: forcing a failure. [ 1020.483231][T14496] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.486439][T14446] device veth0_vlan entered promiscuous mode [ 1020.502517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1020.513022][T14496] CPU: 0 PID: 14496 Comm: syz.1.3912 Not tainted syzkaller #0 [ 1020.514120][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1020.520525][T14496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1020.535695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1020.538378][T14496] Call Trace: [ 1020.538386][T14496] [ 1020.546047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1020.548867][T14496] __dump_stack+0x21/0x24 [ 1020.552011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1020.559073][T14496] dump_stack_lvl+0x110/0x170 [ 1020.559095][T14496] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1020.559113][T14496] ? __kasan_check_write+0x14/0x20 [ 1020.564695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1020.571422][T14496] dump_stack+0x15/0x24 [ 1020.577511][T14446] device veth1_macvtap entered promiscuous mode [ 1020.581231][T14496] should_fail_ex+0x3d4/0x520 [ 1020.590656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1020.594341][T14496] __should_failslab+0xac/0xf0 [ 1020.594374][T14496] should_failslab+0x9/0x20 [ 1020.594390][T14496] kmem_cache_alloc_node+0x42/0x340 [ 1020.599073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1020.604827][T14496] ? __alloc_skb+0xea/0x4b0 [ 1020.604859][T14496] __alloc_skb+0xea/0x4b0 [ 1020.604882][T14496] alloc_skb_with_frags+0xa8/0x620 [ 1020.604909][T14496] ? 0xffffffffa000096c [ 1020.604923][T14496] sock_alloc_send_pskb+0x87f/0x9a0 [ 1020.610794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1020.617499][T14496] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 1020.617534][T14496] ? stack_trace_save+0xa6/0xf0 [ 1020.617558][T14496] ? __stack_depot_save+0x36/0x480 [ 1020.688132][T14496] tun_get_user+0xa63/0x3470 [ 1020.692727][T14496] ? _parse_integer+0x2a/0x40 [ 1020.697417][T14496] ? tun_do_read+0x1cf0/0x1cf0 [ 1020.702276][T14496] ? __kasan_check_write+0x14/0x20 [ 1020.707500][T14496] ? ref_tracker_alloc+0x31d/0x4a0 [ 1020.712727][T14496] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 1020.718211][T14496] ? avc_policy_seqno+0x1b/0x70 [ 1020.723071][T14496] ? selinux_file_permission+0x2a5/0x510 [ 1020.728806][T14496] tun_chr_write_iter+0x1fb/0x300 [ 1020.734127][T14496] vfs_write+0x603/0xce0 [ 1020.738401][T14496] ? __cfi_vfs_write+0x10/0x10 [ 1020.743200][T14496] ? __fget_files+0x2d5/0x330 [ 1020.747880][T14496] ? __fdget_pos+0x1f2/0x380 [ 1020.752462][T14496] ? ksys_write+0x71/0x250 [ 1020.756894][T14496] ksys_write+0x149/0x250 [ 1020.761237][T14496] ? __cfi_ksys_write+0x10/0x10 [ 1020.766096][T14496] ? debug_smp_processor_id+0x17/0x20 [ 1020.771468][T14496] __x64_sys_write+0x7b/0x90 [ 1020.776047][T14496] x64_sys_call+0x27b/0x9a0 [ 1020.780544][T14496] do_syscall_64+0x4c/0xa0 [ 1020.784958][T14496] ? clear_bhb_loop+0x30/0x80 [ 1020.789654][T14496] ? clear_bhb_loop+0x30/0x80 [ 1020.794337][T14496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.800754][T14496] RIP: 0033:0x7f8b0e95d60e [ 1020.805247][T14496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1020.825643][T14496] RSP: 002b:00007f8b0f7fefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.834375][T14496] RAX: ffffffffffffffda RBX: 00007f8b0f7ff6c0 RCX: 00007f8b0e95d60e [ 1020.842509][T14496] RDX: 000000000000fdef RSI: 0000200000001200 RDI: 00000000000000c8 [ 1020.850589][T14496] RBP: 00007f8b0f7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.858590][T14496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.866656][T14496] R13: 00007f8b0ec16038 R14: 00007f8b0ec15fa0 R15: 00007fffbfd02a78 [ 1020.874722][T14496] [ 1020.882578][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1020.894775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1020.971222][T14504] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1020.994563][T14506] EXT4-fs: Ignoring removed nobh option [ 1021.016805][T14506] EXT4-fs error (device loop3): ext4_iget_extra_inode:4758: inode #15: comm syz.3.3915: corrupted in-inode xattr [ 1021.030729][T14506] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3915: couldn't read orphan inode 15 (err -117) [ 1021.054109][T14506] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1021.064136][ T2885] device bridge_slave_1 left promiscuous mode [ 1021.070397][ T2885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.075879][T14511] EXT4-fs: Ignoring removed nobh option [ 1021.091901][ T2885] device bridge_slave_0 left promiscuous mode [ 1021.097505][T14511] EXT4-fs error (device loop0): ext4_iget_extra_inode:4758: inode #15: comm syz.0.3916: corrupted in-inode xattr [ 1021.098732][ T2885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.110879][T14511] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3916: couldn't read orphan inode 15 (err -117) [ 1021.118638][T14230] EXT4-fs (loop3): unmounting filesystem. [ 1021.130624][T14511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1021.152995][ T2885] device veth1_macvtap left promiscuous mode [ 1021.161705][T14511] FAULT_INJECTION: forcing a failure. [ 1021.161705][T14511] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.167537][T14515] EXT4-fs: Ignoring removed mblk_io_submit option [ 1021.178344][T14511] CPU: 1 PID: 14511 Comm: syz.0.3916 Not tainted syzkaller #0 [ 1021.181346][ T2885] device veth0_vlan left promiscuous mode [ 1021.188420][T14511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1021.188432][T14511] Call Trace: [ 1021.188445][T14511] [ 1021.188452][T14511] __dump_stack+0x21/0x24 [ 1021.194449][T14515] ext4: Unknown parameter 'func' [ 1021.204303][T14511] dump_stack_lvl+0x110/0x170 [ 1021.204337][T14511] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1021.204355][T14511] ? security_file_permission+0x8a/0xb0 [ 1021.204382][T14511] dump_stack+0x15/0x24 [ 1021.239875][T14511] should_fail_ex+0x3d4/0x520 [ 1021.244725][T14511] ? getname_flags+0xb9/0x500 [ 1021.249530][T14511] __should_failslab+0xac/0xf0 [ 1021.254399][T14511] should_failslab+0x9/0x20 [ 1021.259012][T14511] kmem_cache_alloc+0x3b/0x330 [ 1021.264145][T14511] getname_flags+0xb9/0x500 [ 1021.268653][T14511] user_path_at_empty+0x30/0x1c0 [ 1021.273683][T14511] path_listxattr+0xac/0x1b0 [ 1021.278290][T14511] ? path_getxattr+0x4d0/0x4d0 [ 1021.283214][T14511] ? debug_smp_processor_id+0x17/0x20 [ 1021.288590][T14511] __x64_sys_listxattr+0x80/0x90 [ 1021.293542][T14511] x64_sys_call+0xd7/0x9a0 [ 1021.297961][T14511] do_syscall_64+0x4c/0xa0 [ 1021.302551][T14511] ? clear_bhb_loop+0x30/0x80 [ 1021.307240][T14511] ? clear_bhb_loop+0x30/0x80 [ 1021.311934][T14511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1021.317915][T14511] RIP: 0033:0x7fcb2b79cdd9 [ 1021.322705][T14511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.343197][T14511] RSP: 002b:00007fcb2c578028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 1021.351715][T14511] RAX: ffffffffffffffda RBX: 00007fcb2ba15fa0 RCX: 00007fcb2b79cdd9 [ 1021.359787][T14511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000006440 [ 1021.367874][T14511] RBP: 00007fcb2c578090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.375867][T14511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.384119][T14511] R13: 00007fcb2ba16038 R14: 00007fcb2ba15fa0 R15: 00007ffdad42f9f8 [ 1021.392465][T14511] [ 1021.418591][T14446] EXT4-fs (loop0): unmounting filesystem. [ 1021.463598][ T294] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1021.593157][T14512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.600356][T14512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.608209][T14512] device bridge_slave_0 entered promiscuous mode [ 1021.615630][T14512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.622751][T14512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.630730][T14512] device bridge_slave_1 entered promiscuous mode [ 1021.644271][T14535] FAULT_INJECTION: forcing a failure. [ 1021.644271][T14535] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1021.664046][T14535] CPU: 1 PID: 14535 Comm: syz.3.3922 Not tainted syzkaller #0 [ 1021.664670][ T294] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1021.671559][T14535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1021.671575][T14535] Call Trace: [ 1021.671582][T14535] [ 1021.671588][T14535] __dump_stack+0x21/0x24 [ 1021.694228][ T294] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1021.695089][T14535] dump_stack_lvl+0x110/0x170 [ 1021.700195][ T294] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1021.703047][T14535] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1021.703076][T14535] ? next_uptodate_page+0x863/0x890 [ 1021.725446][ T294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.726823][T14535] dump_stack+0x15/0x24 [ 1021.733392][ T294] usb 2-1: Product: syz [ 1021.737203][T14535] should_fail_ex+0x3d4/0x520 [ 1021.748977][T14512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.749791][T14535] should_fail_alloc_page+0x61/0x90 [ 1021.753973][T14512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.758704][T14535] prepare_alloc_pages+0x148/0x600 [ 1021.758731][T14535] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 1021.765831][T14512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.771086][T14535] ? __cfi_filemap_map_pages+0x10/0x10 [ 1021.778390][T14512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.783473][T14535] __alloc_pages+0x15b/0x610 [ 1021.788909][ T294] usb 2-1: Manufacturer: syz [ 1021.795730][T14535] ? __cfi___alloc_pages+0x10/0x10 [ 1021.795766][T14535] ? do_fault+0x1c97/0x1ee0 [ 1021.795788][T14535] __folio_alloc+0x12/0x40 [ 1021.801379][ T294] usb 2-1: SerialNumber: syz [ 1021.808490][T14535] handle_mm_fault+0x1972/0x26c0 [ 1021.808530][T14535] ? __cfi_handle_mm_fault+0x10/0x10 [ 1021.813429][ T619] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1021.818044][T14535] ? lock_vma_under_rcu+0x400/0x4f0 [ 1021.818069][T14535] ? __kasan_check_write+0x14/0x20 [ 1021.824171][ T294] usb 2-1: config 0 descriptor?? [ 1021.827674][T14535] ? fput+0x154/0x1a0 [ 1021.832475][T14502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1021.836868][T14535] do_user_addr_fault+0x905/0x1050 [ 1021.845576][T14502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1021.847203][T14535] exc_page_fault+0x51/0xb0 [ 1021.899064][T14535] asm_exc_page_fault+0x27/0x30 [ 1021.901100][T14512] device veth0_vlan entered promiscuous mode [ 1021.904048][T14535] RIP: 0033:0x7f83de45e58b [ 1021.904070][T14535] Code: 00 00 00 48 8d 3d 35 a1 1a 00 48 89 c1 31 c0 e8 9b 2c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 69 a1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 1021.915006][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1021.934681][T14535] RSP: 002b:00007f83df438fa0 EFLAGS: 00010206 [ 1021.934705][T14535] RAX: 0000000000000000 RBX: 00007f83de815fa0 RCX: 0000000000000000 [ 1021.934717][T14535] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00002000000009c0 [ 1021.934730][T14535] RBP: 00007f83df43a090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.934741][T14535] R10: 00002000000009c0 R11: 0000000000000000 R12: 0000000000000001 [ 1021.943836][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1021.948244][T14535] R13: 00007f83de816038 R14: 00007f83de815fa0 R15: 00007ffefcacf7f8 [ 1021.948267][T14535] [ 1021.956040][T14535] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1021.981173][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1022.025504][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1022.037521][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1022.046188][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1022.055754][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1022.066075][ T619] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1022.081444][T14502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1022.090270][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1022.093548][T14502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1022.097662][ T619] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1022.118790][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1022.132383][T14512] device veth1_macvtap entered promiscuous mode [ 1022.148653][ T619] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1022.158697][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1022.167785][ T619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.196698][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1022.203391][ T619] usb 1-1: Product: syz [ 1022.205884][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1022.209154][ T619] usb 1-1: Manufacturer: syz [ 1022.224212][ T28] audit: type=1326 audit(1777000994.073:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.3.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7ffc0000 [ 1022.232148][ T619] usb 1-1: SerialNumber: syz [ 1022.253192][ T28] audit: type=1326 audit(1777000994.103:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.3.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7ffc0000 [ 1022.257352][T14526] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1022.279088][ T28] audit: type=1326 audit(1777000994.103:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.3.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7ffc0000 [ 1022.314135][T14540] netem: incorrect gi model size [ 1022.321573][T14540] netem: change failed [ 1022.322641][ T294] Error reading MAC address [ 1022.328564][ T28] audit: type=1326 audit(1777000994.103:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.3.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7ffc0000 [ 1022.344004][ T294] usb 2-1: USB disconnect, device number 66 [ 1022.357201][ T28] audit: type=1326 audit(1777000994.103:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.3.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f83de59cdd9 code=0x7ffc0000 [ 1022.389649][ T28] audit: type=1326 audit(1777000994.103:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.3.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7ffc0000 [ 1022.413674][ T28] audit: type=1326 audit(1777000994.103:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.3.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7ffc0000 [ 1022.447701][ T28] audit: type=1326 audit(1777000994.103:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.3.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7ffc0000 [ 1022.477158][ T28] audit: type=1326 audit(1777000994.103:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.3.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7ffc0000 [ 1022.509913][ T28] audit: type=1326 audit(1777000994.103:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.3.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f83de59cdd9 code=0x7ffc0000 [ 1022.894475][ T2885] device bridge_slave_1 left promiscuous mode [ 1022.903071][ T2885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.921275][ T2885] device bridge_slave_0 left promiscuous mode [ 1022.930879][ T2885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.955601][T14551] set_capacity_and_notify: 7 callbacks suppressed [ 1022.955621][T14551] loop3: detected capacity change from 0 to 256 [ 1022.969632][ T2885] device veth1_macvtap left promiscuous mode [ 1022.982513][T14551] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1022.983468][ T2885] device veth0_vlan left promiscuous mode [ 1023.005675][T14549] loop1: detected capacity change from 0 to 4096 [ 1023.015598][T14551] FAULT_INJECTION: forcing a failure. [ 1023.015598][T14551] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.026704][T14549] EXT4-fs: Ignoring removed orlov option [ 1023.030952][T14551] CPU: 0 PID: 14551 Comm: syz.3.3926 Not tainted syzkaller #0 [ 1023.042151][T14551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1023.052414][T14551] Call Trace: [ 1023.055728][T14551] [ 1023.058675][T14551] __dump_stack+0x21/0x24 [ 1023.063075][T14551] dump_stack_lvl+0x110/0x170 [ 1023.067773][T14551] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1023.072907][T14551] ? __cfi_vfs_write+0x10/0x10 [ 1023.077786][T14551] dump_stack+0x15/0x24 [ 1023.082043][T14551] should_fail_ex+0x3d4/0x520 [ 1023.086752][T14551] ? getname_flags+0xb9/0x500 [ 1023.091438][T14551] __should_failslab+0xac/0xf0 [ 1023.096219][T14551] should_failslab+0x9/0x20 [ 1023.100815][T14551] kmem_cache_alloc+0x3b/0x330 [ 1023.105598][T14551] getname_flags+0xb9/0x500 [ 1023.110183][T14551] __x64_sys_renameat2+0xb4/0xf0 [ 1023.115260][T14551] x64_sys_call+0x6b8/0x9a0 [ 1023.119877][T14551] do_syscall_64+0x4c/0xa0 [ 1023.124340][T14551] ? clear_bhb_loop+0x30/0x80 [ 1023.129262][T14551] ? clear_bhb_loop+0x30/0x80 [ 1023.133951][T14551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.139859][T14551] RIP: 0033:0x7f83de59cdd9 [ 1023.144359][T14551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.164139][T14551] RSP: 002b:00007f83df43a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1023.172565][T14551] RAX: ffffffffffffffda RBX: 00007f83de815fa0 RCX: 00007f83de59cdd9 [ 1023.180541][T14551] RDX: ffffffffffffff9c RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1023.188515][T14551] RBP: 00007f83df43a090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.196487][T14551] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1023.204455][T14551] R13: 00007f83de816038 R14: 00007f83de815fa0 R15: 00007ffefcacf7f8 [ 1023.212440][T14551] [ 1023.233862][T14549] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1023.257879][T14549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1023.278401][T14554] loop3: detected capacity change from 0 to 256 [ 1023.317971][T14554] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1023.382589][T14390] EXT4-fs (loop1): unmounting filesystem. [ 1023.461724][T14562] FAULT_INJECTION: forcing a failure. [ 1023.461724][T14562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.475071][T14562] CPU: 0 PID: 14562 Comm: syz.9.3930 Not tainted syzkaller #0 [ 1023.482651][T14562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1023.492731][T14562] Call Trace: [ 1023.496023][T14562] [ 1023.498984][T14562] __dump_stack+0x21/0x24 [ 1023.503328][T14562] dump_stack_lvl+0x110/0x170 [ 1023.508211][T14562] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1023.513257][T14562] dump_stack+0x15/0x24 [ 1023.517429][T14562] should_fail_ex+0x3d4/0x520 [ 1023.522148][T14562] should_fail+0xb/0x10 [ 1023.526418][T14562] should_fail_usercopy+0x1a/0x20 [ 1023.531557][T14562] _copy_from_user+0x1e/0xc0 [ 1023.536184][T14562] __sys_sendto+0x30b/0x660 [ 1023.540703][T14562] ? __cfi___sys_sendto+0x10/0x10 [ 1023.545731][T14562] ? ksys_write+0x1f4/0x250 [ 1023.550241][T14562] ? __cfi_ksys_write+0x10/0x10 [ 1023.555094][T14562] __x64_sys_sendto+0xe5/0x100 [ 1023.559861][T14562] x64_sys_call+0x83/0x9a0 [ 1023.564284][T14562] do_syscall_64+0x4c/0xa0 [ 1023.568966][T14562] ? clear_bhb_loop+0x30/0x80 [ 1023.573648][T14562] ? clear_bhb_loop+0x30/0x80 [ 1023.578337][T14562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.584239][T14562] RIP: 0033:0x7fb327d9cdd9 [ 1023.588740][T14562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.608362][T14562] RSP: 002b:00007fb328ba8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1023.616794][T14562] RAX: ffffffffffffffda RBX: 00007fb328015fa0 RCX: 00007fb327d9cdd9 [ 1023.624770][T14562] RDX: 0000000000000014 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1023.632745][T14562] RBP: 00007fb328ba8090 R08: 0000200000000040 R09: 0000000000000014 [ 1023.640724][T14562] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000001 [ 1023.649041][T14562] R13: 00007fb328016038 R14: 00007fb328015fa0 R15: 00007ffe6e0b60f8 [ 1023.657016][T14562] [ 1023.684452][T14567] loop1: detected capacity change from 0 to 512 [ 1023.707811][T14567] EXT4-fs: Ignoring removed oldalloc option [ 1023.717497][T14567] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1023.745819][T14567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1023.762109][T14567] FAULT_INJECTION: forcing a failure. [ 1023.762109][T14567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.775373][T14567] CPU: 1 PID: 14567 Comm: syz.1.3932 Not tainted syzkaller #0 [ 1023.782948][T14567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1023.793647][T14567] Call Trace: [ 1023.797018][T14567] [ 1023.800140][T14567] __dump_stack+0x21/0x24 [ 1023.804715][T14567] dump_stack_lvl+0x110/0x170 [ 1023.809494][T14567] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1023.814707][T14567] ? is_bpf_text_address+0x177/0x190 [ 1023.820016][T14567] dump_stack+0x15/0x24 [ 1023.824215][T14567] should_fail_ex+0x3d4/0x520 [ 1023.828981][T14567] should_fail+0xb/0x10 [ 1023.833155][T14567] should_fail_usercopy+0x1a/0x20 [ 1023.833409][ T1455] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1023.838374][T14567] _copy_from_user+0x1e/0xc0 [ 1023.838403][T14567] ext4_ioctl+0x1795/0x3ee0 [ 1023.855318][T14567] ? memcpy+0x56/0x70 [ 1023.859375][T14567] ? __cfi_ext4_ioctl+0x10/0x10 [ 1023.864250][T14567] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 1023.870339][T14567] ? __asan_set_shadow_00+0xe/0x10 [ 1023.875485][T14567] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 1023.880497][T14567] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 1023.886250][T14567] ? kstrtouint+0x74/0xe0 [ 1023.890696][T14567] ? ioctl_has_perm+0x1b8/0x4f0 [ 1023.895577][T14567] ? ioctl_has_perm+0x3a6/0x4f0 [ 1023.900450][T14567] ? has_cap_mac_admin+0x370/0x370 [ 1023.905650][T14567] ? vfs_write+0xa2c/0xce0 [ 1023.910201][T14567] ? selinux_file_ioctl+0x3a0/0x4d0 [ 1023.915505][T14567] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 1023.921339][T14567] ? mutex_unlock+0x8f/0x230 [ 1023.925955][T14567] ? __fget_files+0x2d5/0x330 [ 1023.930730][T14567] ? security_file_ioctl+0x95/0xc0 [ 1023.935960][T14567] ? __cfi_ext4_ioctl+0x10/0x10 [ 1023.940916][T14567] __se_sys_ioctl+0x12f/0x1b0 [ 1023.945804][T14567] __x64_sys_ioctl+0x7b/0x90 [ 1023.950431][T14567] x64_sys_call+0x58b/0x9a0 [ 1023.955077][T14567] do_syscall_64+0x4c/0xa0 [ 1023.959596][T14567] ? clear_bhb_loop+0x30/0x80 [ 1023.964395][T14567] ? clear_bhb_loop+0x30/0x80 [ 1023.969217][T14567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.975140][T14567] RIP: 0033:0x7f8b0e99cdd9 [ 1023.979583][T14567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.999303][T14567] RSP: 002b:00007f8b0f7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1024.007757][T14567] RAX: ffffffffffffffda RBX: 00007f8b0ec15fa0 RCX: 00007f8b0e99cdd9 [ 1024.015843][T14567] RDX: 00002000000000c0 RSI: 0000000040286608 RDI: 0000000000000004 [ 1024.023435][ T1455] usb 4-1: Using ep0 maxpacket: 8 [ 1024.023829][T14567] RBP: 00007f8b0f7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.023846][T14567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.030122][ T1455] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1024.036845][T14567] R13: 00007f8b0ec16038 R14: 00007f8b0ec15fa0 R15: 00007fffbfd02a78 [ 1024.036870][T14567] [ 1024.066744][T14390] EXT4-fs (loop1): unmounting filesystem. [ 1024.068344][ T1455] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1024.082338][ T1455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.108712][ T1455] usb 4-1: Product: syz [ 1024.118870][ T1455] usb 4-1: Manufacturer: syz [ 1024.143166][ T1455] usb 4-1: SerialNumber: syz [ 1024.150908][T14585] serio: Serial port ttyS3 [ 1024.244467][T14592] fuse: Bad value for 'fd' [ 1024.364721][T14556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3929'. [ 1024.480942][ T619] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1024.505789][ T619] usb 1-1: USB disconnect, device number 100 [ 1024.910109][ T1455] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1024.935017][ T1455] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1024.966801][ T7384] udevd[7384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1024.995075][ T1455] usb 4-1: USB disconnect, device number 49 [ 1025.251933][T14608] 9pnet_fd: Insufficient options for proto=fd [ 1025.466246][ T1455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1025.520404][T14622] serio: Serial port ttyS3 [ 1025.591775][T14629] loop5: detected capacity change from 0 to 256 [ 1025.624167][T14629] exFAT-fs (loop5): failed to read boot sector [ 1025.635918][T14629] exFAT-fs (loop5): failed to recognize exfat type [ 1025.728342][T14633] loop0: detected capacity change from 0 to 2048 [ 1025.815523][T14633] loop0: p1 < > p4 [ 1025.827885][T14633] loop0: p4 size 722688 extends beyond EOD, truncated [ 1025.893466][ T2720] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1026.114587][ T2720] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1026.134315][ T2720] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1026.143536][ T619] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1026.157273][ T2720] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1026.186573][ T2720] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1026.203432][ T2720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.221243][ T2720] usb 2-1: Product: syz [ 1026.226383][ T2720] usb 2-1: Manufacturer: syz [ 1026.231020][ T2720] usb 2-1: SerialNumber: syz [ 1026.333412][ T619] usb 1-1: Using ep0 maxpacket: 8 [ 1026.340889][ T619] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1026.357805][ T619] usb 1-1: config 0 has no interface number 0 [ 1026.371052][ T619] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1026.388961][ T619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.403374][ T619] usb 1-1: Product: syz [ 1026.414165][ T619] usb 1-1: Manufacturer: syz [ 1026.423173][ T619] usb 1-1: SerialNumber: syz [ 1026.437641][T14631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1026.442394][ T619] usb 1-1: config 0 descriptor?? [ 1026.448657][T14631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1026.651246][ T619] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1026.663437][ T619] usb 1-1: Failed to initialize entity for entity 6 [ 1026.675349][ T619] usb 1-1: Failed to register entities (-22). [ 1026.762836][T14644] 9pnet_fd: Insufficient options for proto=fd [ 1026.994331][T14650] loop3: detected capacity change from 0 to 8192 [ 1027.031633][T14650] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1027.069604][T14631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1027.083553][T14631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1027.305389][ T2720] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1027.314534][ T2720] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1027.334727][ T2720] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1027.507725][ T2720] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 1027.519621][ T2720] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1027.530803][ T1956] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1027.554271][ T2720] usb 2-1: USB disconnect, device number 67 [ 1027.569333][ T2720] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1027.716120][ T1956] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1027.729932][ T1956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.743508][ T1956] usb 10-1: Product: syz [ 1027.747887][ T1956] usb 10-1: Manufacturer: syz [ 1027.753024][ T1956] usb 10-1: SerialNumber: syz [ 1027.837297][ T28] kauditd_printk_skb: 773 callbacks suppressed [ 1027.837348][ T28] audit: type=1400 audit(1777000999.683:1300): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1027.973976][ T28] audit: type=1400 audit(1777000999.813:1301): avc: denied { map } for pid=14659 comm="syz.9.3965" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1028.022968][ T1956] rtl8150 10-1:1.0: couldn't reset the device [ 1028.035194][ T1956] rtl8150: probe of 10-1:1.0 failed with error -5 [ 1028.063602][ T1956] usb 10-1: USB disconnect, device number 27 [ 1028.495468][T14682] loop9: detected capacity change from 0 to 16 [ 1028.793478][ T771] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1028.893574][T14687] loop1: detected capacity change from 0 to 256 [ 1028.900142][T14687] exfat: Deprecated parameter 'utf8' [ 1028.905656][T14687] exfat: Deprecated parameter 'utf8' [ 1028.914240][T14687] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 1028.993429][ T771] usb 10-1: Using ep0 maxpacket: 32 [ 1029.000216][ T771] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1029.014220][ T771] usb 10-1: config 6 has an invalid interface number: 35 but max is 1 [ 1029.024358][ T771] usb 10-1: config 6 has an invalid descriptor of length 163, skipping remainder of the config [ 1029.036141][ T28] audit: type=1400 audit(1777001000.883:1302): avc: denied { write } for pid=14692 comm="syz.1.3975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1029.036899][ T771] usb 10-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 1029.066330][ T771] usb 10-1: config 6 has no interface number 0 [ 1029.072660][ T771] usb 10-1: too many endpoints for config 6 interface 35 altsetting 230: 86, using maximum allowed: 30 [ 1029.083918][ T771] usb 10-1: config 6 interface 35 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 1029.097821][ T771] usb 10-1: config 6 interface 35 has no altsetting 0 [ 1029.098045][T14694] FAULT_INJECTION: forcing a failure. [ 1029.098045][T14694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.106410][ T771] usb 10-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1029.118090][T14694] CPU: 0 PID: 14694 Comm: syz.1.3975 Not tainted syzkaller #0 [ 1029.127541][ T771] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.134780][T14694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1029.134796][T14694] Call Trace: [ 1029.134803][T14694] [ 1029.134811][T14694] __dump_stack+0x21/0x24 [ 1029.134837][T14694] dump_stack_lvl+0x110/0x170 [ 1029.143520][ T771] usb 10-1: Product: syz [ 1029.153131][T14694] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1029.153158][T14694] ? unwind_get_return_address+0x4d/0x90 [ 1029.157125][ T771] usb 10-1: Manufacturer: syz [ 1029.159468][T14694] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1029.164003][ T771] usb 10-1: SerialNumber: syz [ 1029.168653][T14694] dump_stack+0x15/0x24 [ 1029.168678][T14694] should_fail_ex+0x3d4/0x520 [ 1029.208152][T14694] should_fail+0xb/0x10 [ 1029.212346][T14694] should_fail_usercopy+0x1a/0x20 [ 1029.217415][T14694] _copy_from_user+0x1e/0xc0 [ 1029.222122][T14694] userfaultfd_ioctl+0x3a4/0x4860 [ 1029.227168][T14694] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 1029.233175][T14694] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 1029.238646][T14694] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 1029.243737][T14694] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 1029.249490][T14694] ? kstrtouint+0x74/0xe0 [ 1029.253849][T14694] ? ioctl_has_perm+0x1b8/0x4f0 [ 1029.258735][T14694] ? ioctl_has_perm+0x3a6/0x4f0 [ 1029.263624][T14694] ? has_cap_mac_admin+0x370/0x370 [ 1029.268766][T14694] ? vfs_write+0xa2c/0xce0 [ 1029.273209][T14694] ? selinux_file_ioctl+0x3a0/0x4d0 [ 1029.278509][T14694] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 1029.284167][T14694] ? mutex_unlock+0x8f/0x230 [ 1029.288865][T14694] ? __cfi_mutex_unlock+0x10/0x10 [ 1029.293891][T14694] ? __fget_files+0x2d5/0x330 [ 1029.298607][T14694] ? security_file_ioctl+0x95/0xc0 [ 1029.303759][T14694] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 1029.309411][T14694] __se_sys_ioctl+0x12f/0x1b0 [ 1029.314300][T14694] __x64_sys_ioctl+0x7b/0x90 [ 1029.318908][T14694] x64_sys_call+0x58b/0x9a0 [ 1029.323530][T14694] do_syscall_64+0x4c/0xa0 [ 1029.328006][T14694] ? clear_bhb_loop+0x30/0x80 [ 1029.332874][T14694] ? clear_bhb_loop+0x30/0x80 [ 1029.337588][T14694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.343604][T14694] RIP: 0033:0x7f8b0e99cdd9 [ 1029.348206][T14694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.368119][T14694] RSP: 002b:00007f8b0f7de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1029.376567][T14694] RAX: ffffffffffffffda RBX: 00007f8b0ec16090 RCX: 00007f8b0e99cdd9 [ 1029.383497][ T771] ums-jumpshot 10-1:6.35: USB Mass Storage device detected [ 1029.384563][T14694] RDX: 0000200000000280 RSI: 00000000c020aa07 RDI: 0000000000000004 [ 1029.384583][T14694] RBP: 00007f8b0f7de090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.384596][T14694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.392550][ T771] ums-jumpshot 10-1:6.35: Quirks match for vid 05dc pid 0001: 2 [ 1029.399748][T14694] R13: 00007f8b0ec16128 R14: 00007f8b0ec16090 R15: 00007fffbfd02a78 [ 1029.399770][T14694] [ 1029.399957][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1029.463589][ T771] usb 10-1: USB disconnect, device number 28 [ 1029.593214][T14698] loop3: detected capacity change from 0 to 40427 [ 1029.593524][ T1455] usb 1-1: USB disconnect, device number 101 [ 1029.605950][T14698] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1029.615785][T14698] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1029.626175][T14698] F2FS-fs (loop3): invalid crc value [ 1029.633642][T14698] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1029.659784][T14698] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1029.667113][T14698] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1029.954972][T14709] loop0: detected capacity change from 0 to 40427 [ 1029.982299][T14709] F2FS-fs (loop0): invalid crc value [ 1030.011470][T14709] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1030.059295][T14709] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1030.343462][ T28] audit: type=1326 audit(1777001002.183:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7fc00000 [ 1030.527224][ T28] audit: type=1326 audit(1777001002.183:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83de59cdd9 code=0x7fc00000 [ 1030.561441][ T28] audit: type=1326 audit(1777001002.183:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7fc00000 [ 1030.593426][ T549] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1030.633521][T14446] syz-executor: attempt to access beyond end of device [ 1030.633521][T14446] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1030.657799][ T28] audit: type=1326 audit(1777001002.183:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7fc00000 [ 1030.739340][ T28] audit: type=1326 audit(1777001002.183:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7fc00000 [ 1030.799459][ T28] audit: type=1326 audit(1777001002.183:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7fc00000 [ 1030.864552][ T549] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1030.876001][ T549] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.894755][ T28] audit: type=1326 audit(1777001002.183:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14697 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de59cdd9 code=0x7fc00000 [ 1030.919282][ T549] usb 6-1: config 0 has no interface number 0 [ 1030.935791][ T549] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1030.953425][ T549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.971734][ T549] usb 6-1: Product: syz [ 1030.976123][ T549] usb 6-1: Manufacturer: syz [ 1030.980732][ T549] usb 6-1: SerialNumber: syz [ 1030.994730][ T549] usb 6-1: config 0 descriptor?? [ 1031.128152][T14738] loop0: detected capacity change from 0 to 40427 [ 1031.150147][T14738] F2FS-fs (loop0): fault_injection options not supported [ 1031.157551][T14738] F2FS-fs (loop0): fault_type options not supported [ 1031.165102][T14738] F2FS-fs (loop0): invalid crc value [ 1031.180693][T14738] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1031.228242][T14738] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1031.287357][T14738] overlayfs: failed to resolve './bus': -2 [ 1031.301613][T14446] syz-executor: attempt to access beyond end of device [ 1031.301613][T14446] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1031.305354][T14752] loop3: detected capacity change from 0 to 4096 [ 1031.332551][T14752] EXT4-fs: Ignoring removed nobh option [ 1031.343772][T14752] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1031.381067][T14752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1031.413221][ T549] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 1031.423056][ T549] usb 6-1: No valid video chain found. [ 1031.441896][ T549] usb 6-1: USB disconnect, device number 64 [ 1031.491117][T14768] loop0: detected capacity change from 0 to 2048 [ 1031.500450][T14768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1031.509780][T14768] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.520886][T14768] EXT4-fs (loop0): unmounting filesystem. [ 1031.570636][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3993'. [ 1031.588043][T14762] FAULT_INJECTION: forcing a failure. [ 1031.588043][T14762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.601308][T14762] CPU: 0 PID: 14762 Comm: syz.9.3992 Not tainted syzkaller #0 [ 1031.608791][T14762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1031.618859][T14762] Call Trace: [ 1031.622144][T14762] [ 1031.625171][T14762] __dump_stack+0x21/0x24 [ 1031.629599][T14762] dump_stack_lvl+0x110/0x170 [ 1031.634375][T14762] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1031.639393][T14762] dump_stack+0x15/0x24 [ 1031.643638][T14762] should_fail_ex+0x3d4/0x520 [ 1031.648318][T14762] should_fail+0xb/0x10 [ 1031.652754][T14762] should_fail_usercopy+0x1a/0x20 [ 1031.657927][T14762] _copy_to_user+0x1e/0x90 [ 1031.662342][T14762] simple_read_from_buffer+0xe9/0x160 [ 1031.667807][T14762] proc_fail_nth_read+0x1a6/0x220 [ 1031.672828][T14762] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1031.678473][T14762] ? security_file_permission+0x94/0xb0 [ 1031.684107][T14762] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1031.689648][T14762] vfs_read+0x27a/0x910 [ 1031.693803][T14762] ? __cfi_vfs_read+0x10/0x10 [ 1031.698474][T14762] ? __kasan_check_write+0x14/0x20 [ 1031.703763][T14762] ? mutex_lock+0x93/0x1b0 [ 1031.708205][T14762] ? __cfi_mutex_lock+0x10/0x10 [ 1031.713331][T14762] ? __fdget_pos+0x2cd/0x380 [ 1031.717934][T14762] ? ksys_read+0x71/0x250 [ 1031.722279][T14762] ksys_read+0x149/0x250 [ 1031.726614][T14762] ? __cfi_ksys_read+0x10/0x10 [ 1031.731570][T14762] ? fpregs_restore_userregs+0x128/0x260 [ 1031.737305][T14762] __x64_sys_read+0x7b/0x90 [ 1031.741882][T14762] x64_sys_call+0x2f/0x9a0 [ 1031.746473][T14762] do_syscall_64+0x4c/0xa0 [ 1031.750897][T14762] ? clear_bhb_loop+0x30/0x80 [ 1031.755584][T14762] ? clear_bhb_loop+0x30/0x80 [ 1031.760436][T14762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1031.766413][T14762] RIP: 0033:0x7fb327d5d60e [ 1031.770823][T14762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1031.790422][T14762] RSP: 002b:00007fb328ba7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1031.799008][T14762] RAX: ffffffffffffffda RBX: 00007fb328ba86c0 RCX: 00007fb327d5d60e [ 1031.807059][T14762] RDX: 000000000000000f RSI: 00007fb328ba80a0 RDI: 0000000000000006 [ 1031.815029][T14762] RBP: 00007fb328ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.823180][T14762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.831338][T14762] R13: 00007fb328016038 R14: 00007fb328015fa0 R15: 00007ffe6e0b60f8 [ 1031.839326][T14762] [ 1031.843806][ T1455] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 1031.993483][ T1455] usb 4-1: device descriptor read/64, error -71 [ 1032.043436][ T549] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1032.211792][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3998'. [ 1032.234938][ T549] usb 6-1: not running at top speed; connect to a high speed hub [ 1032.253328][ T549] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1032.266682][ T549] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1032.273532][ T1455] usb 4-1: device descriptor read/64, error -71 [ 1032.295239][ T549] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.40 [ 1032.304845][ T549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.313173][ T549] usb 6-1: Product: ы [ 1032.320294][ T549] usb 6-1: Manufacturer: Я [ 1032.325222][ T549] usb 6-1: SerialNumber: ᐌ [ 1032.543463][ T1455] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 1032.703408][ T1455] usb 4-1: device descriptor read/64, error -71 [ 1032.973419][ T1455] usb 4-1: device descriptor read/64, error -71 [ 1033.093543][ T1455] usb usb4-port1: attempt power cycle [ 1033.280482][ T549] usbhid 6-1:1.0: can't add hid device: -71 [ 1033.289405][ T549] usbhid: probe of 6-1:1.0 failed with error -71 [ 1033.316353][ T549] usb 6-1: USB disconnect, device number 65 [ 1033.503424][ T1455] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 1033.548001][ T1455] usb 4-1: device descriptor read/8, error -71 [ 1033.705278][ T1455] usb 4-1: device descriptor read/8, error -71 [ 1033.973518][ T1455] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 1034.044274][ T1455] usb 4-1: device descriptor read/8, error -71 [ 1034.057593][T14821] loop0: detected capacity change from 0 to 40427 [ 1034.065659][T14821] F2FS-fs (loop0): invalid crc value [ 1034.078824][T14821] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1034.141875][T14821] F2FS-fs (loop0): Start checkpoint disabled! [ 1034.154269][T14821] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1034.255411][T14821] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1034.404013][ T1455] usb 4-1: device descriptor read/8, error -71 [ 1034.439600][T14821] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1034.465379][T14230] EXT4-fs (loop3): unmounting filesystem. [ 1034.493414][ T24] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1034.524171][ T1455] usb usb4-port1: unable to enumerate USB device [ 1034.526384][ T2885] kworker/u4:6: attempt to access beyond end of device [ 1034.526384][ T2885] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1034.544905][ T2885] kworker/u4:6: attempt to access beyond end of device [ 1034.544905][ T2885] loop0: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 1034.738738][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1034.755531][ T24] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1034.773428][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.781685][ T24] usb 10-1: Product: syz [ 1034.786081][ T24] usb 10-1: Manufacturer: syz [ 1034.791046][ T24] usb 10-1: SerialNumber: syz [ 1034.808029][T14860] loop5: detected capacity change from 0 to 512 [ 1034.855731][T14860] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1034.869345][T14860] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.145287][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 1035.145305][ T28] audit: type=1400 audit(1777001006.993:1342): avc: denied { connect } for pid=14859 comm="syz.5.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1035.270193][ T6733] EXT4-fs (loop5): unmounting filesystem. [ 1035.372110][T14870] loop5: detected capacity change from 0 to 16 [ 1035.400575][T14870] erofs: Unknown parameter 'mangle' [ 1035.461743][ T24] usb 10-1: clock source 0 is not valid, cannot use [ 1035.504122][T14876] FAULT_INJECTION: forcing a failure. [ 1035.504122][T14876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.517342][T14876] CPU: 0 PID: 14876 Comm: syz.5.4022 Not tainted syzkaller #0 [ 1035.524835][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.534923][T14876] Call Trace: [ 1035.538332][T14876] [ 1035.541363][T14876] __dump_stack+0x21/0x24 [ 1035.545718][T14876] dump_stack_lvl+0x110/0x170 [ 1035.550502][T14876] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1035.555546][T14876] ? lock_sock_nested+0x217/0x2a0 [ 1035.560686][T14876] dump_stack+0x15/0x24 [ 1035.564883][T14876] should_fail_ex+0x3d4/0x520 [ 1035.569680][T14876] should_fail+0xb/0x10 [ 1035.574008][T14876] should_fail_usercopy+0x1a/0x20 [ 1035.579232][T14876] _copy_from_user+0x1e/0xc0 [ 1035.583858][T14876] sco_sock_setsockopt+0x403/0xd50 [ 1035.589004][T14876] ? __cfi_sco_sock_setsockopt+0x10/0x10 [ 1035.594758][T14876] ? proc_fail_nth_write+0x180/0x200 [ 1035.600078][T14876] ? security_socket_setsockopt+0x93/0xb0 [ 1035.606047][T14876] ? __cfi_sco_sock_setsockopt+0x10/0x10 [ 1035.611701][T14876] __sys_setsockopt+0x2ff/0x4e0 [ 1035.616571][T14876] ? __cfi___sys_setsockopt+0x10/0x10 [ 1035.621959][T14876] ? ksys_write+0x1f4/0x250 [ 1035.626479][T14876] ? __cfi_ksys_write+0x10/0x10 [ 1035.631528][T14876] __x64_sys_setsockopt+0xbf/0xd0 [ 1035.636570][T14876] x64_sys_call+0x124/0x9a0 [ 1035.641098][T14876] do_syscall_64+0x4c/0xa0 [ 1035.645537][T14876] ? clear_bhb_loop+0x30/0x80 [ 1035.650241][T14876] ? clear_bhb_loop+0x30/0x80 [ 1035.655013][T14876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1035.660969][T14876] RIP: 0033:0x7f362a19cdd9 [ 1035.665400][T14876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.685197][T14876] RSP: 002b:00007f362b0cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1035.693729][T14876] RAX: ffffffffffffffda RBX: 00007f362a415fa0 RCX: 00007f362a19cdd9 [ 1035.701912][T14876] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004 [ 1035.709911][T14876] RBP: 00007f362b0cf090 R08: 0000000000000004 R09: 0000000000000000 [ 1035.717994][T14876] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1035.725984][T14876] R13: 00007f362a416038 R14: 00007f362a415fa0 R15: 00007ffc5985c2c8 [ 1035.734072][T14876] [ 1035.786444][T14881] FAULT_INJECTION: forcing a failure. [ 1035.786444][T14881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.805612][T14881] CPU: 0 PID: 14881 Comm: syz.1.4024 Not tainted syzkaller #0 [ 1035.813131][T14881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.823299][T14881] Call Trace: [ 1035.826598][T14881] [ 1035.829540][T14881] __dump_stack+0x21/0x24 [ 1035.834090][T14881] dump_stack_lvl+0x110/0x170 [ 1035.838810][T14881] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1035.843869][T14881] ? __kasan_check_write+0x14/0x20 [ 1035.849018][T14881] ? kvm_arch_vcpu_load+0x58d/0x770 [ 1035.854346][T14881] dump_stack+0x15/0x24 [ 1035.858540][T14881] should_fail_ex+0x3d4/0x520 [ 1035.863260][T14881] should_fail+0xb/0x10 [ 1035.866949][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1035.867455][T14881] should_fail_usercopy+0x1a/0x20 [ 1035.879712][T14881] _copy_from_user+0x1e/0xc0 [ 1035.884327][T14881] kvm_arch_vcpu_ioctl+0xb2b/0x23a0 [ 1035.889552][T14881] ? __cfi_avc_has_perm+0x10/0x10 [ 1035.894613][T14881] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1035.900277][T14881] ? 0xffffffffa0000968 [ 1035.901595][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 1035.904443][T14881] ? is_bpf_text_address+0x177/0x190 [ 1035.904473][T14881] ? kernel_text_address+0xa0/0xd0 [ 1035.922165][T14881] ? __kernel_text_address+0xd/0x30 [ 1035.927402][T14881] ? unwind_get_return_address+0x4d/0x90 [ 1035.932590][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 1035.933063][T14881] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1035.946529][T14881] ? arch_stack_walk+0xfc/0x150 [ 1035.951511][T14881] ? stack_trace_save+0xa6/0xf0 [ 1035.952320][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready [ 1035.956724][T14881] ? __stack_depot_save+0x36/0x480 [ 1035.956753][T14881] ? _parse_integer_limit+0x18a/0x1d0 [ 1035.956772][T14881] ? __asan_set_shadow_00+0xe/0x10 [ 1035.980175][T14881] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 1035.985163][T14881] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 1035.990828][T14881] ? kstrtouint+0x74/0xe0 [ 1035.993050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1035.995283][T14881] ? kstrtouint_from_user+0x113/0x170 [ 1035.995312][T14881] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 1035.995335][T14881] ? ioctl_has_perm+0x1b8/0x4f0 [ 1036.014202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1036.014522][T14881] ? memcpy+0x56/0x70 [ 1036.014550][T14881] ? __kasan_check_write+0x14/0x20 [ 1036.028931][T14893] loop5: detected capacity change from 0 to 2048 [ 1036.031360][T14881] ? mutex_lock_killable+0x93/0x1b0 [ 1036.031393][T14881] ? __cfi_mutex_lock_killable+0x10/0x10 [ 1036.038165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1036.042936][T14881] kvm_vcpu_ioctl+0x6fb/0xc00 [ 1036.064589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1036.066648][T14881] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 1036.079850][T14881] ? selinux_file_ioctl+0x3a0/0x4d0 [ 1036.085176][T14881] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 1036.087014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1036.091009][T14881] ? mutex_unlock+0x8f/0x230 [ 1036.091037][T14881] ? __cfi_mutex_unlock+0x10/0x10 [ 1036.108458][T14881] ? __fget_files+0x2d5/0x330 [ 1036.113244][T14881] ? security_file_ioctl+0x95/0xc0 [ 1036.113268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1036.118374][T14881] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 1036.118399][T14881] __se_sys_ioctl+0x12f/0x1b0 [ 1036.118420][T14881] __x64_sys_ioctl+0x7b/0x90 [ 1036.118438][T14881] x64_sys_call+0x58b/0x9a0 [ 1036.118459][T14881] do_syscall_64+0x4c/0xa0 [ 1036.143620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1036.145876][T14881] ? clear_bhb_loop+0x30/0x80 [ 1036.158385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1036.162812][T14881] ? clear_bhb_loop+0x30/0x80 [ 1036.162842][T14881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1036.181376][T14881] RIP: 0033:0x7f8b0e99cdd9 [ 1036.185803][T14881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.205704][T14881] RSP: 002b:00007f8b0f7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.214150][T14881] RAX: ffffffffffffffda RBX: 00007f8b0ec15fa0 RCX: 00007f8b0e99cdd9 [ 1036.222131][T14881] RDX: 0000200000000040 RSI: 000000004040ae9e RDI: 0000000000000005 [ 1036.230111][T14881] RBP: 00007f8b0f7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.238134][T14881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.246196][T14881] R13: 00007f8b0ec16038 R14: 00007f8b0ec15fa0 R15: 00007fffbfd02a78 [ 1036.254397][T14881] [ 1036.282266][T14893] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1036.327114][T14887] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1036.344372][T14887] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 1036.378741][T14887] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1036.378741][T14887] [ 1036.398744][T14887] EXT4-fs (loop5): Total free blocks count 0 [ 1036.408729][T14887] EXT4-fs (loop5): Free/Dirty block details [ 1036.415830][T14887] EXT4-fs (loop5): free_blocks=4096 [ 1036.421167][T14887] EXT4-fs (loop5): dirty_blocks=48 [ 1036.438296][T14887] EXT4-fs (loop5): Block reservation details [ 1036.453482][T14887] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 1036.463195][T14891] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1036.479695][T14897] loop1: detected capacity change from 0 to 4096 [ 1036.495237][T14897] EXT4-fs: Ignoring removed nobh option [ 1036.510401][T14897] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1036.519217][T14897] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1036.545063][ T28] audit: type=1400 audit(1777001008.393:1343): avc: denied { write } for pid=14900 comm="syz.5.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1036.565890][ T28] audit: type=1400 audit(1777001008.413:1344): avc: denied { read } for pid=14900 comm="syz.5.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1036.665964][ T28] audit: type=1400 audit(1777001008.513:1345): avc: denied { nlmsg_write } for pid=14906 comm="syz.0.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1036.687349][T14907] loop0: detected capacity change from 0 to 1024 [ 1036.703745][T14907] EXT4-fs: Ignoring removed bh option [ 1036.726275][T14907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1036.747227][T14907] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.0.4030: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1036.768153][T14907] EXT4-fs (loop0): Remounting filesystem read-only [ 1036.774851][T14907] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.0.4030: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1036.795819][ T1455] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1036.796061][T14907] EXT4-fs (loop0): Remounting filesystem read-only [ 1036.838200][T14446] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1036.861396][T14446] EXT4-fs (loop0): Remounting filesystem read-only [ 1036.871070][T14446] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1036.895560][T14446] EXT4-fs (loop0): Remounting filesystem read-only [ 1036.903756][T14446] EXT4-fs error (device loop0): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1036.924226][T14446] EXT4-fs (loop0): Remounting filesystem read-only [ 1036.930960][T14446] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1036.945758][T14446] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1036.969910][ T24] usb 10-1: 1:1: cannot get freq (v2/v3): err -71 [ 1036.978014][ T1455] usb 2-1: device descriptor read/64, error -71 [ 1036.985583][ T24] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1036.998167][T14446] EXT4-fs (loop0): Remounting filesystem read-only [ 1037.004999][T14446] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1037.013914][ T24] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1037.036078][ T24] usb 10-1: clock source 0 is not valid, cannot use [ 1037.043731][ T24] usb 10-1: 2:1: cannot get freq (v2/v3): err -71 [ 1037.051048][T14446] EXT4-fs (loop0): Remounting filesystem read-only [ 1037.057876][ T24] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1037.058846][T14446] EXT4-fs error (device loop0): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1037.072536][ T24] usb 10-1: USB disconnect, device number 29 [ 1037.125081][T14446] EXT4-fs (loop0): Remounting filesystem read-only [ 1037.131733][T14446] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1037.154357][T14446] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1037.177745][T14446] EXT4-fs (loop0): Remounting filesystem read-only [ 1037.185573][T14446] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1037.208681][T14446] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1037.223830][T14446] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1037.239279][T14446] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1037.253788][ T1455] usb 2-1: device descriptor read/64, error -71 [ 1037.260860][T14446] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1037.275798][T14446] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1037.290677][T14446] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1037.305640][T14446] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1037.320871][T14446] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1037.499295][T14941] loop5: detected capacity change from 0 to 7 [ 1037.505642][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1037.553422][ T1455] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 1037.656949][T14945] FAULT_INJECTION: forcing a failure. [ 1037.656949][T14945] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.713438][ T1455] usb 2-1: device descriptor read/64, error -71 [ 1037.719824][T14945] CPU: 0 PID: 14945 Comm: syz.5.4044 Not tainted syzkaller #0 [ 1037.727338][T14945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1037.737421][T14945] Call Trace: [ 1037.740739][T14945] [ 1037.743690][T14945] __dump_stack+0x21/0x24 [ 1037.748161][T14945] dump_stack_lvl+0x110/0x170 [ 1037.752979][T14945] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1037.758056][T14945] ? 0xffffffffa00024e0 [ 1037.762324][T14945] dump_stack+0x15/0x24 [ 1037.766581][T14945] should_fail_ex+0x3d4/0x520 [ 1037.771995][T14945] __should_failslab+0xac/0xf0 [ 1037.776851][T14945] ? kvmalloc_node+0x28a/0x460 [ 1037.781829][T14945] should_failslab+0x9/0x20 [ 1037.786339][T14945] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1037.791802][T14945] ? calc_wheel_index+0xc8/0x8d0 [ 1037.796846][T14945] ? kvmalloc_node+0x28a/0x460 [ 1037.801609][T14945] __kmalloc_node+0xa1/0x1e0 [ 1037.806197][T14945] kvmalloc_node+0x28a/0x460 [ 1037.810783][T14945] ? __cfi_kvmalloc_node+0x10/0x10 [ 1037.815991][T14945] ? enqueue_timer+0x1a0/0x480 [ 1037.820759][T14945] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1037.826747][T14945] __kvm_mmu_topup_memory_cache+0x35e/0x500 [ 1037.832736][T14945] ? __kasan_check_write+0x14/0x20 [ 1037.837864][T14945] ? mutex_unlock+0x8f/0x230 [ 1037.842552][T14945] kvm_mmu_topup_memory_cache+0x20/0x30 [ 1037.848104][T14945] kvm_mmu_load+0x9c/0x25a0 [ 1037.852630][T14945] ? kvm_hv_setup_tsc_page+0x5f0/0xa80 [ 1037.858222][T14945] ? queue_delayed_work_on+0x10d/0x160 [ 1037.863686][T14945] ? kvm_apic_has_interrupt+0x78f/0x7a0 [ 1037.869324][T14945] vcpu_enter_guest+0x4c9b/0x6f80 [ 1037.874354][T14945] ? __cfi_avc_has_perm+0x10/0x10 [ 1037.879465][T14945] ? pvclock_gtod_update_fn+0x280/0x280 [ 1037.885068][T14945] ? 0xffffffffa00024e0 [ 1037.889398][T14945] ? is_bpf_text_address+0x177/0x190 [ 1037.894871][T14945] ? kernel_text_address+0xa0/0xd0 [ 1037.899984][T14945] ? __kernel_text_address+0xd/0x30 [ 1037.905189][T14945] ? unwind_get_return_address+0x4d/0x90 [ 1037.910862][T14945] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1037.917109][T14945] ? arch_stack_walk+0xfc/0x150 [ 1037.921973][T14945] ? vmx_vcpu_pi_load+0x144/0x880 [ 1037.927097][T14945] ? __stack_depot_save+0x36/0x480 [ 1037.932430][T14945] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 1037.937890][T14945] ? _parse_integer_limit+0x18a/0x1d0 [ 1037.943385][T14945] ? __asan_set_shadow_00+0xe/0x10 [ 1037.948504][T14945] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 1037.953358][T14945] ? __this_cpu_preempt_check+0x13/0x20 [ 1037.958996][T14945] ? xfd_validate_state+0x70/0x150 [ 1037.964124][T14945] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 1037.969508][T14945] ? __local_bh_enable_ip+0x58/0x80 [ 1037.975051][T14945] ? fpu_swap_kvm_fpstate+0x4ef/0x5d0 [ 1037.980606][T14945] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 1037.985891][T14945] kvm_arch_vcpu_ioctl_run+0xec4/0x1fa0 [ 1037.991438][T14945] kvm_vcpu_ioctl+0x8f2/0xc00 [ 1037.996206][T14945] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 1038.001406][T14945] ? selinux_file_ioctl+0x3a0/0x4d0 [ 1038.006617][T14945] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 1038.012184][T14945] ? mutex_unlock+0x8f/0x230 [ 1038.016788][T14945] ? __cfi_mutex_unlock+0x10/0x10 [ 1038.021859][T14945] ? __fget_files+0x2d5/0x330 [ 1038.026545][T14945] ? security_file_ioctl+0x95/0xc0 [ 1038.031668][T14945] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 1038.037002][T14945] __se_sys_ioctl+0x12f/0x1b0 [ 1038.041774][T14945] __x64_sys_ioctl+0x7b/0x90 [ 1038.046648][T14945] x64_sys_call+0x58b/0x9a0 [ 1038.051160][T14945] do_syscall_64+0x4c/0xa0 [ 1038.055585][T14945] ? clear_bhb_loop+0x30/0x80 [ 1038.060456][T14945] ? clear_bhb_loop+0x30/0x80 [ 1038.065223][T14945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1038.071291][T14945] RIP: 0033:0x7f362a19cdd9 [ 1038.075794][T14945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.095696][T14945] RSP: 002b:00007f362b0cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.104324][T14945] RAX: ffffffffffffffda RBX: 00007f362a415fa0 RCX: 00007f362a19cdd9 [ 1038.112504][T14945] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1038.120477][T14945] RBP: 00007f362b0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.128541][T14945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.136603][T14945] R13: 00007f362a416038 R14: 00007f362a415fa0 R15: 00007ffc5985c2c8 [ 1038.144755][T14945] [ 1038.206899][T14948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.230813][T14948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.260584][T14948] device bridge_slave_0 entered promiscuous mode [ 1038.303422][ T1455] usb 2-1: device descriptor read/64, error -71 [ 1038.338368][T14948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.356310][T14948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.364379][T14948] device bridge_slave_1 entered promiscuous mode [ 1038.423477][ T1455] usb usb2-port1: attempt power cycle [ 1038.505656][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1038.520812][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1038.537130][ T2885] device bridge_slave_1 left promiscuous mode [ 1038.545250][ T2885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.553010][ T2885] device bridge_slave_0 left promiscuous mode [ 1038.559233][ T2885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.567763][ T2885] device veth1_macvtap left promiscuous mode [ 1038.573985][ T2885] device veth0_vlan left promiscuous mode [ 1038.701187][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1038.713393][ T8999] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1038.713695][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.750488][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.757600][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.781329][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1038.793575][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1038.808176][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.815624][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.833463][ T1455] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1038.841476][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1038.849858][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1038.858761][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1038.868340][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1038.877371][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1038.885978][ T1455] usb 2-1: device descriptor read/8, error -71 [ 1038.902142][T14948] device veth0_vlan entered promiscuous mode [ 1038.909604][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1038.918502][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1038.919336][ T8999] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.926994][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1038.946244][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1038.951852][ T8999] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1038.960930][T14948] device veth1_macvtap entered promiscuous mode [ 1038.973429][ T8999] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1038.974272][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1038.982721][ T8999] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.991019][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.001776][ T8999] usb 10-1: config 0 descriptor?? [ 1039.006165][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.012743][ T8999] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1039.019321][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.034332][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1039.045273][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1039.053740][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1039.065354][ T1455] usb 2-1: device descriptor read/8, error -71 [ 1039.071957][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1039.082347][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1039.127355][T14966] loop6: detected capacity change from 0 to 1024 [ 1039.135445][T14966] EXT4-fs: Ignoring removed mblk_io_submit option [ 1039.146345][T14966] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1039.166317][T14948] EXT4-fs (loop6): unmounting filesystem. [ 1039.236427][ T28] audit: type=1400 audit(1777001011.083:1346): avc: denied { create } for pid=14972 comm="syz.6.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1039.333406][ T1455] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 1039.336838][T14978] FAULT_INJECTION: forcing a failure. [ 1039.336838][T14978] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.341145][ T2885] Bluetooth: hci0: Frame reassembly failed (-84) [ 1039.353849][T14978] CPU: 1 PID: 14978 Comm: syz.6.4052 Not tainted syzkaller #0 [ 1039.367867][T14978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1039.378205][T14978] Call Trace: [ 1039.381487][T14978] [ 1039.384418][T14978] __dump_stack+0x21/0x24 [ 1039.388755][T14978] dump_stack_lvl+0x110/0x170 [ 1039.393429][T14978] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1039.393979][ T1455] usb 2-1: device descriptor read/8, error -71 [ 1039.398562][T14978] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1039.398595][T14978] dump_stack+0x15/0x24 [ 1039.414740][T14978] should_fail_ex+0x3d4/0x520 [ 1039.419442][T14978] __should_failslab+0xac/0xf0 [ 1039.424730][T14978] should_failslab+0x9/0x20 [ 1039.429235][T14978] kmem_cache_alloc_node+0x42/0x340 [ 1039.434605][T14978] ? __alloc_skb+0xea/0x4b0 [ 1039.439119][T14978] __alloc_skb+0xea/0x4b0 [ 1039.443656][T14978] create_monitor_ctrl_open+0x159/0x8b0 [ 1039.449298][T14978] ? hci_sock_gen_cookie+0x100/0x100 [ 1039.454776][T14978] ? ns_capable+0x8c/0xf0 [ 1039.459208][T14978] hci_sock_ioctl+0x289/0x7f0 [ 1039.464066][T14978] sock_do_ioctl+0x114/0x330 [ 1039.468766][T14978] ? sock_show_fdinfo+0xb0/0xb0 [ 1039.473715][T14978] ? selinux_file_ioctl+0x3a0/0x4d0 [ 1039.479301][T14978] sock_ioctl+0x4bd/0x710 [ 1039.483720][T14978] ? __cfi_sock_ioctl+0x10/0x10 [ 1039.488668][T14978] ? __fget_files+0x2d5/0x330 [ 1039.493435][T14978] ? security_file_ioctl+0x95/0xc0 [ 1039.498543][T14978] ? __cfi_sock_ioctl+0x10/0x10 [ 1039.503403][T14978] __se_sys_ioctl+0x12f/0x1b0 [ 1039.508266][T14978] __x64_sys_ioctl+0x7b/0x90 [ 1039.512948][T14978] x64_sys_call+0x58b/0x9a0 [ 1039.517483][T14978] do_syscall_64+0x4c/0xa0 [ 1039.521923][T14978] ? clear_bhb_loop+0x30/0x80 [ 1039.526717][T14978] ? clear_bhb_loop+0x30/0x80 [ 1039.531735][T14978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1039.537655][T14978] RIP: 0033:0x7f1448d9cdd9 [ 1039.542534][T14978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.561195][ T1455] usb 2-1: device descriptor read/8, error -71 [ 1039.562743][T14978] RSP: 002b:00007f1449d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.577338][T14978] RAX: ffffffffffffffda RBX: 00007f1449015fa0 RCX: 00007f1448d9cdd9 [ 1039.585426][T14978] RDX: 0000200000000000 RSI: 00000000400448de RDI: 0000000000000005 [ 1039.593418][T14978] RBP: 00007f1449d10090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.601413][T14978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.609412][T14978] R13: 00007f1449016038 R14: 00007f1449015fa0 R15: 00007ffdd3791be8 [ 1039.617417][T14978] [ 1039.621691][ T8999] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1039.659379][T14390] EXT4-fs (loop1): unmounting filesystem. [ 1039.693862][ T1455] usb usb2-port1: unable to enumerate USB device [ 1039.694917][T14994] loop1: detected capacity change from 0 to 256 [ 1039.754243][ T7384] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1039.759566][T14994] tipc: Enabling of bearer rejected, failed to enable media [ 1039.783437][ T8999] usb 4-1: device descriptor read/64, error -71 [ 1039.917001][T15001] loop1: detected capacity change from 0 to 1024 [ 1039.927276][T15001] EXT4-fs: Ignoring removed mblk_io_submit option [ 1039.986605][T15001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1040.020007][T14390] EXT4-fs (loop1): unmounting filesystem. [ 1040.073636][ T8999] usb 4-1: device descriptor read/64, error -71 [ 1040.252537][T15012] FAULT_INJECTION: forcing a failure. [ 1040.252537][T15012] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.266026][T15012] CPU: 0 PID: 15012 Comm: syz.1.4063 Not tainted syzkaller #0 [ 1040.273515][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1040.283587][T15012] Call Trace: [ 1040.286883][T15012] [ 1040.289829][T15012] __dump_stack+0x21/0x24 [ 1040.294191][T15012] dump_stack_lvl+0x110/0x170 [ 1040.298898][T15012] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1040.303938][T15012] ? __cfi_vfs_write+0x10/0x10 [ 1040.308794][T15012] dump_stack+0x15/0x24 [ 1040.312979][T15012] should_fail_ex+0x3d4/0x520 [ 1040.317860][T15012] ? getname_flags+0xb9/0x500 [ 1040.322788][T15012] __should_failslab+0xac/0xf0 [ 1040.327680][T15012] should_failslab+0x9/0x20 [ 1040.332217][T15012] kmem_cache_alloc+0x3b/0x330 [ 1040.337172][T15012] getname_flags+0xb9/0x500 [ 1040.341788][T15012] getname_uflags+0x26/0x30 [ 1040.346340][T15012] __x64_sys_execveat+0xb6/0xf0 [ 1040.351217][T15012] x64_sys_call+0x5d8/0x9a0 [ 1040.355744][T15012] do_syscall_64+0x4c/0xa0 [ 1040.360185][T15012] ? clear_bhb_loop+0x30/0x80 [ 1040.364885][T15012] ? clear_bhb_loop+0x30/0x80 [ 1040.369769][T15012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1040.375722][T15012] RIP: 0033:0x7f8b0e99cdd9 [ 1040.380165][T15012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.399797][T15012] RSP: 002b:00007f8b0f7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1040.408454][T15012] RAX: ffffffffffffffda RBX: 00007f8b0ec15fa0 RCX: 00007f8b0e99cdd9 [ 1040.416624][T15012] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1040.423408][ T8999] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1040.424640][T15012] RBP: 00007f8b0f7ff090 R08: 0000000000001000 R09: 0000000000000000 [ 1040.424658][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.424669][T15012] R13: 00007f8b0ec16038 R14: 00007f8b0ec15fa0 R15: 00007fffbfd02a78 [ 1040.456233][T15012] [ 1040.526186][ T28] audit: type=1400 audit(1777001012.373:1347): avc: denied { nlmsg_read } for pid=15015 comm="syz.1.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1040.573488][ T8999] usb 4-1: device descriptor read/64, error -71 [ 1040.813539][ T294] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1040.843423][ T8999] usb 4-1: device descriptor read/64, error -71 [ 1040.955014][T15024] device syzkaller1 entered promiscuous mode [ 1040.961921][T15024] FAULT_INJECTION: forcing a failure. [ 1040.961921][T15024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.975425][T15024] CPU: 0 PID: 15024 Comm: syz.5.4068 Not tainted syzkaller #0 [ 1040.975534][ T8999] usb usb4-port1: attempt power cycle [ 1040.983007][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1040.998700][T15024] Call Trace: [ 1041.001998][T15024] [ 1041.005098][T15024] __dump_stack+0x21/0x24 [ 1041.009513][T15024] dump_stack_lvl+0x110/0x170 [ 1041.014215][T15024] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1041.019347][T15024] dump_stack+0x15/0x24 [ 1041.023513][T15024] should_fail_ex+0x3d4/0x520 [ 1041.028384][T15024] should_fail+0xb/0x10 [ 1041.032567][T15024] should_fail_usercopy+0x1a/0x20 [ 1041.037602][T15024] _copy_from_iter+0x196/0x1010 [ 1041.042464][T15024] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1041.048635][T15024] ? __cfi__copy_from_iter+0x10/0x10 [ 1041.054229][T15024] ? stack_trace_save+0xa6/0xf0 [ 1041.059238][T15024] ? __stack_depot_save+0x36/0x480 [ 1041.064499][T15024] tun_get_user+0x201/0x3470 [ 1041.069103][T15024] ? _parse_integer+0x2a/0x40 [ 1041.073953][T15024] ? tun_do_read+0x1cf0/0x1cf0 [ 1041.078957][T15024] ? __kasan_check_write+0x14/0x20 [ 1041.084280][T15024] ? ref_tracker_alloc+0x31d/0x4a0 [ 1041.089493][T15024] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 1041.095146][T15024] ? avc_policy_seqno+0x1b/0x70 [ 1041.100016][T15024] ? selinux_file_permission+0x2a5/0x510 [ 1041.105661][T15024] tun_chr_write_iter+0x1fb/0x300 [ 1041.110697][T15024] vfs_write+0x603/0xce0 [ 1041.114937][T15024] ? __cfi_vfs_write+0x10/0x10 [ 1041.119693][T15024] ? __fget_files+0x2d5/0x330 [ 1041.124371][T15024] ? __fdget_pos+0x1f2/0x380 [ 1041.128968][T15024] ? ksys_write+0x71/0x250 [ 1041.133385][T15024] ksys_write+0x149/0x250 [ 1041.137814][T15024] ? __cfi_ksys_write+0x10/0x10 [ 1041.142681][T15024] ? debug_smp_processor_id+0x17/0x20 [ 1041.148154][T15024] __x64_sys_write+0x7b/0x90 [ 1041.152752][T15024] x64_sys_call+0x27b/0x9a0 [ 1041.157316][T15024] do_syscall_64+0x4c/0xa0 [ 1041.162123][T15024] ? clear_bhb_loop+0x30/0x80 [ 1041.166948][T15024] ? clear_bhb_loop+0x30/0x80 [ 1041.172066][T15024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1041.177977][T15024] RIP: 0033:0x7f362a19cdd9 [ 1041.182413][T15024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.202114][T15024] RSP: 002b:00007f362b0cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1041.210794][T15024] RAX: ffffffffffffffda RBX: 00007f362a415fa0 RCX: 00007f362a19cdd9 [ 1041.219024][T15024] RDX: 0000000000000036 RSI: 0000200000000900 RDI: 0000000000000003 [ 1041.227011][T15024] RBP: 00007f362b0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.235071][T15024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.243216][T15024] R13: 00007f362a416038 R14: 00007f362a415fa0 R15: 00007ffc5985c2c8 [ 1041.251194][T15024] [ 1041.283494][ T294] usb 2-1: Using ep0 maxpacket: 32 [ 1041.290045][ T294] usb 2-1: config 4 has too many interfaces: 223, using maximum allowed: 32 [ 1041.299061][ T294] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 223 [ 1041.308383][ T294] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.326411][ T294] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1041.337389][ T294] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1041.343598][ T4500] Bluetooth: hci0: command 0x1003 tx timeout [ 1041.346217][T15028] loop5: detected capacity change from 0 to 512 [ 1041.352143][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1041.359824][T14978] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1041.365138][ T294] usb 2-1: Product: syz [ 1041.375734][ T294] usb 2-1: Manufacturer: syz [ 1041.387258][T15030] FAULT_INJECTION: forcing a failure. [ 1041.387258][T15030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1041.388867][ T294] hub 2-1:4.0: USB hub found [ 1041.401048][ T8999] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1041.414098][T15030] CPU: 1 PID: 15030 Comm: syz.6.4071 Not tainted syzkaller #0 [ 1041.421599][T15030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1041.431753][T15030] Call Trace: [ 1041.435048][T15030] [ 1041.437983][T15030] __dump_stack+0x21/0x24 [ 1041.442448][T15030] dump_stack_lvl+0x110/0x170 [ 1041.447262][T15030] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1041.452287][T15030] ? _parse_integer+0x2a/0x40 [ 1041.456972][T15030] dump_stack+0x15/0x24 [ 1041.461215][T15030] should_fail_ex+0x3d4/0x520 [ 1041.465903][T15030] should_fail+0xb/0x10 [ 1041.470067][T15030] should_fail_usercopy+0x1a/0x20 [ 1041.475106][T15030] _copy_from_user+0x1e/0xc0 [ 1041.479804][T15030] ___sys_sendmsg+0x1c3/0x360 [ 1041.484571][T15030] ? __sys_sendmsg+0x290/0x290 [ 1041.489430][T15030] ? __kasan_check_write+0x14/0x20 [ 1041.494548][T15030] ? proc_fail_nth_write+0x180/0x200 [ 1041.499904][T15030] ? vfs_write+0xa2c/0xce0 [ 1041.504507][T15030] ? __fdget+0x19c/0x220 [ 1041.508927][T15030] __x64_sys_sendmsg+0x205/0x2d0 [ 1041.513870][T15030] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1041.519337][T15030] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1041.525407][T15030] x64_sys_call+0x171/0x9a0 [ 1041.529920][T15030] do_syscall_64+0x4c/0xa0 [ 1041.534343][T15030] ? clear_bhb_loop+0x30/0x80 [ 1041.539027][T15030] ? clear_bhb_loop+0x30/0x80 [ 1041.543785][T15030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1041.549706][T15030] RIP: 0033:0x7f1448d9cdd9 [ 1041.554146][T15030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.573951][T15030] RSP: 002b:00007f1449d10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.582644][T15030] RAX: ffffffffffffffda RBX: 00007f1449015fa0 RCX: 00007f1448d9cdd9 [ 1041.590734][T15030] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1041.598791][T15030] RBP: 00007f1449d10090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.606852][T15030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.614943][T15030] R13: 00007f1449016038 R14: 00007f1449015fa0 R15: 00007ffdd3791be8 [ 1041.622949][T15030] [ 1041.627198][ T294] hub 2-1:4.0: 2 ports detected [ 1041.636295][ T1956] usb 10-1: USB disconnect, device number 30 [ 1041.657326][T15028] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1041.669161][T15028] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.674415][ T8999] usb 4-1: device descriptor read/8, error -71 [ 1041.713827][T15028] EXT4-fs error (device loop5): ext4_do_update_inode:5274: inode #18: comm syz.5.4070: corrupted inode contents [ 1041.725990][T15028] EXT4-fs error (device loop5): ext4_dirty_inode:6139: inode #18: comm syz.5.4070: mark_inode_dirty error [ 1041.746933][T15028] EXT4-fs error (device loop5): ext4_do_update_inode:5274: inode #18: comm syz.5.4070: corrupted inode contents [ 1041.759835][T15028] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2945: inode #18: comm syz.5.4070: mark_inode_dirty error [ 1041.772317][T15028] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2948: inode #18: comm syz.5.4070: mark inode dirty (error -117) [ 1041.773828][T15042] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.4070: iget: bad i_size value: 2533274857506816 [ 1041.785278][T15028] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 1041.824453][T15042] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.4070: iget: bad i_size value: 2533274857506816 [ 1041.844551][ T8999] usb 4-1: device descriptor read/8, error -71 [ 1041.845530][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.869948][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.887802][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.895551][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.903609][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.911351][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.919357][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.927010][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.935240][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.942916][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.960395][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.969732][ T6733] EXT4-fs (loop5): unmounting filesystem. [ 1041.975568][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.983198][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1041.991207][ T619] hid-generic 0009:0401:0004.003A: unknown main item tag 0x0 [ 1042.007807][ T619] hid-generic 0009:0401:0004.003A: hidraw0: HID v0.07 Device [syz1] on syz0 [ 1042.096433][T15044] loop9: detected capacity change from 0 to 40427 [ 1042.113414][ T8999] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1042.125938][T15044] F2FS-fs (loop9): invalid crc value [ 1042.155570][ T8999] usb 4-1: device descriptor read/8, error -71 [ 1042.162447][T15044] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1042.233436][ T294] hub 2-1:4.0: set hub depth failed [ 1042.245668][ T294] usb 2-1: USB disconnect, device number 72 [ 1042.253190][T15044] F2FS-fs (loop9): Start checkpoint disabled! [ 1042.262932][T15044] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1042.271618][T15044] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1042.304224][ T8999] usb 4-1: device descriptor read/8, error -71 [ 1042.322567][T15044] syz.9.4075: attempt to access beyond end of device [ 1042.322567][T15044] loop9: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1042.372141][ T8] kworker/u4:0: attempt to access beyond end of device [ 1042.372141][ T8] loop9: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1042.383622][ T24] ================================================================== [ 1042.394248][ T24] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 1042.401312][ T24] Write of size 8 at addr ffff88811ea58a00 by task kworker/1:0/24 [ 1042.403414][ T8] kworker/u4:0: attempt to access beyond end of device [ 1042.403414][ T8] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1042.409212][ T24] [ 1042.409220][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 [ 1042.409240][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1042.423421][ T8] kworker/u4:0: attempt to access beyond end of device [ 1042.423421][ T8] loop9: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 1042.425610][ T24] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1042.463325][ T24] Call Trace: [ 1042.466608][ T24] [ 1042.469632][ T24] __dump_stack+0x21/0x24 [ 1042.474050][ T24] dump_stack_lvl+0x110/0x170 [ 1042.478732][ T24] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1042.483879][ T24] ? __cfi__printk+0x8/0x8 [ 1042.488394][ T24] ? enqueue_timer+0xae/0x480 [ 1042.493084][ T24] print_address_description+0x71/0x200 [ 1042.498726][ T24] print_report+0x4a/0x60 [ 1042.503063][ T24] kasan_report+0x122/0x150 [ 1042.507658][ T24] ? enqueue_timer+0xae/0x480 [ 1042.512944][ T24] __asan_report_store8_noabort+0x17/0x20 [ 1042.518836][ T24] enqueue_timer+0xae/0x480 [ 1042.523431][ T24] __mod_timer+0x84c/0xc00 [ 1042.527848][ T24] ? kthread_data+0x50/0xc0 [ 1042.532350][ T24] mod_timer+0x1f/0x30 [ 1042.536420][ T24] ? wg_timers_any_authenticated_packet_traversal+0x81/0x1a0 [ 1042.543798][ T24] wg_timers_any_authenticated_packet_traversal+0x133/0x1a0 [ 1042.551086][ T24] wg_packet_tx_worker+0x15e/0x4e0 [ 1042.556288][ T24] process_one_work+0x71f/0xc40 [ 1042.561141][ T24] worker_thread+0xa29/0x11e0 [ 1042.565830][ T24] kthread+0x281/0x320 [ 1042.569914][ T24] ? __cfi_worker_thread+0x10/0x10 [ 1042.575025][ T24] ? __cfi_kthread+0x10/0x10 [ 1042.579614][ T24] ret_from_fork+0x1f/0x30 [ 1042.584039][ T24] [ 1042.587057][ T24] [ 1042.589377][ T24] Allocated by task 14978: [ 1042.593788][ T24] kasan_set_track+0x4b/0x70 [ 1042.598389][ T24] kasan_save_alloc_info+0x25/0x30 [ 1042.603504][ T24] __kasan_kmalloc+0x95/0xb0 [ 1042.608095][ T24] __kmalloc+0xb1/0x1e0 [ 1042.612247][ T24] hci_alloc_dev_priv+0x27/0x1bd0 [ 1042.617283][ T24] hci_uart_tty_ioctl+0x3c8/0xa20 [ 1042.622314][ T24] tty_ioctl+0x8ef/0xc60 [ 1042.626570][ T24] __se_sys_ioctl+0x12f/0x1b0 [ 1042.631682][ T24] __x64_sys_ioctl+0x7b/0x90 [ 1042.636356][ T24] x64_sys_call+0x58b/0x9a0 [ 1042.640955][ T24] do_syscall_64+0x4c/0xa0 [ 1042.645609][ T24] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.651589][ T24] [ 1042.654084][ T24] Freed by task 14978: [ 1042.658154][ T24] kasan_set_track+0x4b/0x70 [ 1042.662741][ T24] kasan_save_free_info+0x31/0x50 [ 1042.667940][ T24] ____kasan_slab_free+0x132/0x180 [ 1042.673137][ T24] __kasan_slab_free+0x11/0x20 [ 1042.677904][ T24] slab_free_freelist_hook+0xc2/0x190 [ 1042.683445][ T24] __kmem_cache_free+0xb7/0x1b0 [ 1042.688385][ T24] kfree+0x6f/0xf0 [ 1042.692100][ T24] hci_release_dev+0x12a3/0x13b0 [ 1042.697052][ T24] bt_host_release+0x82/0x90 [ 1042.701644][ T24] device_release+0xa4/0x1d0 [ 1042.706259][ T24] kobject_put+0x19d/0x280 [ 1042.710683][ T24] put_device+0x1f/0x30 [ 1042.714843][ T24] hci_dev_cmd+0x279/0x740 [ 1042.719264][ T24] hci_sock_ioctl+0x41e/0x7f0 [ 1042.724026][ T24] sock_do_ioctl+0x114/0x330 [ 1042.728712][ T24] sock_ioctl+0x4bd/0x710 [ 1042.733305][ T24] __se_sys_ioctl+0x12f/0x1b0 [ 1042.737983][ T24] __x64_sys_ioctl+0x7b/0x90 [ 1042.742578][ T24] x64_sys_call+0x58b/0x9a0 [ 1042.747136][ T24] do_syscall_64+0x4c/0xa0 [ 1042.751616][ T24] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.757695][ T24] [ 1042.760019][ T24] Last potentially related work creation: [ 1042.765815][ T24] kasan_save_stack+0x3a/0x60 [ 1042.770519][ T24] __kasan_record_aux_stack+0xb6/0xc0 [ 1042.775899][ T24] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1042.782106][ T24] insert_work+0x51/0x300 [ 1042.786521][ T24] __queue_work+0x9b1/0xd30 [ 1042.791030][ T24] queue_work_on+0xde/0x150 [ 1042.795539][ T24] __hci_cmd_sync_sk+0xa7f/0xd30 [ 1042.800597][ T24] hci_cmd_sync_status+0x53/0x120 [ 1042.805651][ T24] hci_dev_cmd+0x648/0x740 [ 1042.810072][ T24] hci_sock_ioctl+0x41e/0x7f0 [ 1042.814774][ T24] sock_do_ioctl+0x114/0x330 [ 1042.819395][ T24] sock_ioctl+0x4bd/0x710 [ 1042.823744][ T24] __se_sys_ioctl+0x12f/0x1b0 [ 1042.828512][ T24] __x64_sys_ioctl+0x7b/0x90 [ 1042.833103][ T24] x64_sys_call+0x58b/0x9a0 [ 1042.837612][ T24] do_syscall_64+0x4c/0xa0 [ 1042.842068][ T24] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.847970][ T24] [ 1042.850384][ T24] Second to last potentially related work creation: [ 1042.856984][ T24] kasan_save_stack+0x3a/0x60 [ 1042.861674][ T24] __kasan_record_aux_stack+0xb6/0xc0 [ 1042.867054][ T24] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1042.872872][ T24] insert_work+0x51/0x300 [ 1042.877207][ T24] __queue_work+0x9b1/0xd30 [ 1042.881798][ T24] queue_work_on+0xde/0x150 [ 1042.886305][ T24] hci_cmd_timeout+0x191/0x200 [ 1042.891134][ T24] process_one_work+0x71f/0xc40 [ 1042.896078][ T24] worker_thread+0xa29/0x11e0 [ 1042.900753][ T24] kthread+0x281/0x320 [ 1042.904831][ T24] ret_from_fork+0x1f/0x30 [ 1042.909253][ T24] [ 1042.911576][ T24] The buggy address belongs to the object at ffff88811ea58000 [ 1042.911576][ T24] which belongs to the cache kmalloc-8k of size 8192 [ 1042.925625][ T24] The buggy address is located 2560 bytes inside of [ 1042.925625][ T24] 8192-byte region [ffff88811ea58000, ffff88811ea5a000) [ 1042.939081][ T24] [ 1042.941406][ T24] The buggy address belongs to the physical page: [ 1042.947810][ T24] page:ffffea00047a9600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ea58 [ 1042.958225][ T24] head:ffffea00047a9600 order:3 compound_mapcount:0 compound_pincount:0 [ 1042.966562][ T24] flags: 0x4000000000010200(slab|head|zone=1) [ 1042.972735][ T24] raw: 4000000000010200 ffffea00047e4a00 dead000000000006 ffff888100043500 [ 1042.981491][ T24] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 1042.990336][ T24] page dumped because: kasan: bad access detected [ 1042.996828][ T24] page_owner tracks the page as allocated [ 1043.002544][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 14638, tgid 14638 (syz.3.3956), ts 1026398259019, free_ts 1025862699194 [ 1043.025664][ T24] post_alloc_hook+0x1f5/0x210 [ 1043.030645][ T24] prep_new_page+0x1c/0x110 [ 1043.035239][ T24] get_page_from_freelist+0x2d12/0x2d80 [ 1043.040789][ T24] __alloc_pages+0x1fa/0x610 [ 1043.045395][ T24] alloc_slab_page+0x6e/0xf0 [ 1043.050002][ T24] new_slab+0x98/0x3d0 [ 1043.054085][ T24] ___slab_alloc+0x6bd/0xb20 [ 1043.058723][ T24] __slab_alloc+0x5e/0xa0 [ 1043.063154][ T24] __kmem_cache_alloc_node+0x203/0x2c0 [ 1043.068789][ T24] kmalloc_trace+0x29/0xb0 [ 1043.073215][ T24] audit_log_d_path+0xc6/0x240 [ 1043.077985][ T24] audit_log_d_path_exe+0x42/0x70 [ 1043.083021][ T24] audit_log_task+0x214/0x300 [ 1043.088421][ T24] audit_seccomp+0x7f/0x160 [ 1043.092928][ T24] __seccomp_filter+0xb74/0x1af0 [ 1043.097879][ T24] __secure_computing+0xea/0x290 [ 1043.102844][ T24] page last free stack trace: [ 1043.107600][ T24] free_unref_page_prepare+0x7f8/0x800 [ 1043.113063][ T24] free_unref_page+0x95/0x540 [ 1043.117746][ T24] __free_pages+0x67/0x100 [ 1043.122200][ T24] __free_slab+0xca/0x1a0 [ 1043.126543][ T24] __unfreeze_partials+0x160/0x190 [ 1043.131659][ T24] put_cpu_partial+0xa9/0x100 [ 1043.136338][ T24] __slab_free+0x1c4/0x280 [ 1043.140846][ T24] ___cache_free+0xbf/0xd0 [ 1043.145263][ T24] qlist_free_all+0xc6/0x140 [ 1043.150108][ T24] kasan_quarantine_reduce+0x14a/0x170 [ 1043.155664][ T24] __kasan_slab_alloc+0x24/0x80 [ 1043.160610][ T24] slab_post_alloc_hook+0x4f/0x2d0 [ 1043.165730][ T24] kmem_cache_alloc+0x16e/0x330 [ 1043.170890][ T24] mas_alloc_nodes+0x2d8/0x850 [ 1043.175675][ T24] mas_preallocate+0xe13/0x1440 [ 1043.180708][ T24] __vma_adjust+0x604/0x1eb0 [ 1043.185303][ T24] [ 1043.187628][ T24] Memory state around the buggy address: [ 1043.193267][ T24] ffff88811ea58900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1043.201346][ T24] ffff88811ea58980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1043.209416][ T24] >ffff88811ea58a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1043.217930][ T24] ^ [ 1043.221994][ T24] ffff88811ea58a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1043.230063][ T24] ffff88811ea58b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1043.238119][ T24] ================================================================== [ 1043.246170][ T24] Disabling lock debugging due to kernel taint [ 1043.265912][ T8999] usb usb4-port1: unable to enumerate USB device [ 1043.413406][ T1956] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1043.423431][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1043.435274][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1043.443708][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0 [ 1043.452231][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1043.462430][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 1043.467752][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 48 4a 29 00 4c 89 ff e8 e0 8a b9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 0c da 6e 00 49 8b 7d 00 e8 73 86 [ 1043.487474][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 1043.494095][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100331440 [ 1043.502349][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1043.510435][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 1043.518512][ C1] R10: dffffc0000000000 R11: ffffed1023d4b139 R12: dffffc0000000000 [ 1043.526500][ C1] R13: 0000000000000000 R14: ffff88811ea589c8 R15: 0000000000000008 [ 1043.534856][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1043.543806][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1043.550415][ C1] CR2: 0000000000000000 CR3: 000000012c1c4000 CR4: 00000000003526a0 [ 1043.558496][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1043.566487][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1043.574560][ C1] Call Trace: [ 1043.577860][ C1] [ 1043.580721][ C1] delayed_work_timer_fn+0x61/0x80 [ 1043.585902][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 1043.591737][ C1] call_timer_fn+0x46/0x2a0 [ 1043.596284][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 1043.602125][ C1] __run_timers+0x689/0x9f0 [ 1043.606744][ C1] ? calc_index+0x200/0x200 [ 1043.611270][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1043.616583][ C1] run_timer_softirq+0x6a/0xf0 [ 1043.621372][ C1] handle_softirqs+0x1d7/0x600 [ 1043.626156][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1043.631389][ C1] __irq_exit_rcu+0x52/0xf0 [ 1043.635994][ C1] irq_exit_rcu+0x9/0x10 [ 1043.640604][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1043.646283][ C1] [ 1043.649405][ C1] [ 1043.652351][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1043.658358][ C1] RIP: 0010:default_idle+0xf/0x20 [ 1043.663400][ C1] Code: 47 7b b5 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d f3 a6 64 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 1043.683112][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 1043.689201][ C1] RAX: ffff8881f6f00000 RBX: ffff888100331440 RCX: 77531edf78f71500 [ 1043.697290][ C1] RDX: 0000000000000001 RSI: ffffffff85ca8a80 RDI: ffffffff85ca8a40 [ 1043.705459][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 1043.713710][ C1] R10: 0000000000000000 R11: ffffffff85018c00 R12: 0000000000000000 [ 1043.721919][ C1] R13: 0000000000000000 R14: ffff888100331440 R15: dffffc0000000000 [ 1043.729909][ C1] ? __cfi_default_idle+0x10/0x10 [ 1043.735063][ C1] arch_cpu_idle+0x1c/0x20 [ 1043.739586][ C1] default_idle_call+0x71/0x1d0 [ 1043.744468][ C1] do_idle+0x1a7/0x560 [ 1043.748569][ C1] ? ct_irq_exit+0x9/0x10 [ 1043.753019][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1043.758246][ C1] cpu_startup_entry+0x43/0x60 [ 1043.763052][ C1] start_secondary+0x119/0x120 [ 1043.767913][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 1043.774015][ C1] [ 1043.777150][ C1] Modules linked in: [ 1043.781160][ C1] ---[ end trace 0000000000000000 ]--- [ 1043.786623][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 1043.792011][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 48 4a 29 00 4c 89 ff e8 e0 8a b9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 0c da 6e 00 49 8b 7d 00 e8 73 86 [ 1043.811801][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 1043.817958][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100331440 [ 1043.826015][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1043.834247][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 1043.842396][ C1] R10: dffffc0000000000 R11: ffffed1023d4b139 R12: dffffc0000000000 [ 1043.850456][ C1] R13: 0000000000000000 R14: ffff88811ea589c8 R15: 0000000000000008 [ 1043.858455][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1043.867432][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1043.874022][ C1] CR2: 0000000000000000 CR3: 000000012c1c4000 CR4: 00000000003526a0 [ 1043.882091][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1043.890328][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1043.898410][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1043.906304][ C1] Kernel Offset: disabled [ 1043.910629][ C1] Rebooting in 86400 seconds..